------------[ cut here ]------------ WARNING: CPU: 0 PID: 1039 at fs/btrfs/extent-tree.c:3230 __btrfs_free_extent+0x28a4/0x4250 fs/btrfs/extent-tree.c:3230 Modules linked in: CPU: 0 UID: 0 PID: 1039 Comm: kworker/u4:5 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:__btrfs_free_extent+0x28a4/0x4250 fs/btrfs/extent-tree.c:3230 Code: 0b 01 0f 85 a6 01 00 00 e8 99 0f fc fd e9 c0 01 00 00 80 3d 3c bc c9 0b 01 0f 85 29 02 00 00 e8 82 0f fc fd e9 43 02 00 00 90 <0f> 0b 90 48 8b 44 24 20 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 RSP: 0018:ffffc900024af280 EFLAGS: 00010246 RAX: 0000000000000002 RBX: ffff88805208e880 RCX: 0000000000000005 RDX: ffffffff83c38829 RSI: ffffffff8e6cabc0 RDI: 00000000fffffffe RBP: ffffc900024af430 R08: ffff888032f3c880 R09: 0000000000000002 R10: 00000000fffffffe R11: 0000000000000000 R12: 00000000fffffffe R13: 0000000000000345 R14: ffff888043d7c4d0 R15: 00000000fffffffe FS: 0000000000000000(0000) GS:ffff88808d211000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3787fd8fc8 CR3: 000000003f58e000 CR4: 0000000000352ef0 Call Trace: run_delayed_data_ref fs/btrfs/extent-tree.c:1599 [inline] run_one_delayed_ref fs/btrfs/extent-tree.c:1779 [inline] btrfs_run_delayed_refs_for_head fs/btrfs/extent-tree.c:1972 [inline] __btrfs_run_delayed_refs+0xc39/0x4130 fs/btrfs/extent-tree.c:2047 btrfs_run_delayed_refs+0xe6/0x3b0 fs/btrfs/extent-tree.c:2159 flush_space+0x24b/0xcd0 fs/btrfs/space-info.c:-1 do_async_reclaim_metadata_space+0x144/0x390 fs/btrfs/space-info.c:1158 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1226 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245