------------[ cut here ]------------
kernel BUG at fs/btrfs/extent-tree.c:3462!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 15988 Comm: syz-executor.2 Tainted: G    B              6.8.0-rc5-syzkaller-ge6ac7c55d3ec #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : btrfs_free_tree_block+0xc38/0xe30 fs/btrfs/extent-tree.c:3462
lr : btrfs_free_tree_block+0xc38/0xe30 fs/btrfs/extent-tree.c:3462
sp : ffff8000989f6a20
x29: ffff8000989f6b40 x28: ffff0000c60c0000 x27: ffff8000989f6aa2
x26: 0000000000000001 x25: 00000000fffffff4 x24: ffff0000dc735480
x23: 0000000000000001 x22: dfff800000000000 x21: ffff00011a1f0ea0
x20: 1ffff0001313ed54 x19: ffff0000dc735360 x18: 1fffe00036804796
x17: 0000000000000000 x16: ffff80008ad5a610 x15: 0000000000000001
x14: 1ffff00011ea5a4b x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000040000 x10: 000000000001d4ce x9 : ffff80009e90a000
x8 : 000000000001d4cf x7 : ffff80008005eb94 x6 : ffff80008005ed90
x5 : ffff0000d1b6f1d0 x4 : ffff8000989f6680 x3 : 0000000000000000
x2 : ffff0000d530bc00 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 btrfs_free_tree_block+0xc38/0xe30 fs/btrfs/extent-tree.c:3462
 btrfs_force_cow_block+0xea8/0x1a58 fs/btrfs/ctree.c:626
 btrfs_cow_block+0x314/0xa0c fs/btrfs/ctree.c:749
 btrfs_search_slot+0xba0/0x2a00
 btrfs_update_root+0xec/0xa90 fs/btrfs/root-tree.c:138
 commit_fs_roots+0x428/0x69c fs/btrfs/transaction.c:1518
 btrfs_commit_transaction+0x10ec/0x2dd0 fs/btrfs/transaction.c:2434
 btrfs_sync_file+0xbdc/0x10c4 fs/btrfs/file.c:2007
 vfs_fsync_range+0x168/0x188 fs/sync.c:188
 generic_write_sync include/linux/fs.h:2732 [inline]
 btrfs_do_write_iter+0x938/0xd40 fs/btrfs/file.c:1697
 btrfs_file_write_iter+0x2c/0x3c fs/btrfs/file.c:1707
 do_iter_readv_writev+0x38c/0x540
 vfs_writev+0x410/0xb58 fs/read_write.c:971
 do_pwritev fs/read_write.c:1072 [inline]
 __do_sys_pwritev2 fs/read_write.c:1131 [inline]
 __se_sys_pwritev2 fs/read_write.c:1122 [inline]
 __arm64_sys_pwritev2+0x1dc/0x2f0 fs/read_write.c:1122
 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598
Code: 17ffff63 978ce6d4 d4210000 978ce6d2 (d4210000) 
---[ end trace 0000000000000000 ]---