------------[ cut here ]------------ kernel BUG at fs/btrfs/extent-tree.c:3284! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 5690 Comm: syz.3.251 Not tainted 6.1.128-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_free_tree_block+0xb18/0xb50 fs/btrfs/extent-tree.c:3284 lr : btrfs_free_tree_block+0xb18/0xb50 fs/btrfs/extent-tree.c:3284 sp : ffff800021ac6ba0 x29: ffff800021ac6ca0 x28: ffff700004358d7c x27: ffff000000000002 x26: ffff800021ac6c00 x25: 00000000fffffff4 x24: ffff0000f5f12ad0 x23: 0000000000000001 x22: dfff800000000000 x21: ffff0000f5f129b8 x20: ffff0000f3e53930 x19: ffff0000f5f129b0 x18: ffff800021ac5ea0 x17: 0000000000000000 x16: ffff8000123313e4 x15: 0000000000000000 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000000001 x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff80000a15771c x8 : ffff0000d8fab780 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800021ac6078 x4 : 00000000ffffffff x3 : 0000000000000c40 x2 : ffff0000d6428a80 x1 : 00000000fffffff4 x0 : 0000000000000000 Call trace: btrfs_free_tree_block+0xb18/0xb50 fs/btrfs/extent-tree.c:3284 btrfs_force_cow_block+0xc7c/0x1b48 fs/btrfs/ctree.c:498 btrfs_cow_block+0x2e8/0x71c fs/btrfs/ctree.c:616 btrfs_search_slot+0xb64/0x2928 fs/btrfs/ctree.c:2080 lookup_inline_extent_backref+0x30c/0x10dc fs/btrfs/extent-tree.c:832 lookup_extent_backref fs/btrfs/extent-tree.c:1059 [inline] __btrfs_free_extent+0x254/0x28c8 fs/btrfs/extent-tree.c:2969 run_delayed_tree_ref fs/btrfs/extent-tree.c:1681 [inline] run_one_delayed_ref fs/btrfs/extent-tree.c:1705 [inline] btrfs_run_delayed_refs_for_head fs/btrfs/extent-tree.c:1954 [inline] __btrfs_run_delayed_refs+0xe14/0x3a90 fs/btrfs/extent-tree.c:2017 btrfs_run_delayed_refs+0x13c/0x4c0 fs/btrfs/extent-tree.c:2148 btrfs_commit_transaction+0x308/0x2cd4 fs/btrfs/transaction.c:2172 btrfs_sync_fs+0x55c/0xb6c fs/btrfs/super.c:1535 sync_fs_one_sb+0xd8/0x120 fs/sync.c:84 iterate_supers+0x124/0x1dc fs/super.c:757 ksys_sync+0xd4/0x1cc fs/sync.c:104 __arm64_sys_sync+0x14/0x24 fs/sync.c:113 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: 957744c5 978e6e63 d4210000 978e6e61 (d4210000) ---[ end trace 0000000000000000 ]---