entry_SYSCALL_64_after_hwframe+0x63/0xcd ------------[ cut here ]------------ WARNING: CPU: 1 PID: 14811 at fs/btrfs/extent-tree.c:871 lookup_inline_extent_backref+0xd1f/0x1210 fs/btrfs/extent-tree.c:871 Modules linked in: CPU: 1 PID: 14811 Comm: syz-executor.3 Not tainted 6.4.0-rc2-syzkaller-00330-g0dd2a6fb1e34 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 RIP: 0010:lookup_inline_extent_backref+0xd1f/0x1210 fs/btrfs/extent-tree.c:871 Code: f9 ff ff e8 33 ec 21 fe 8b b4 24 40 01 00 00 31 ff e8 45 e8 21 fe 8b b4 24 40 01 00 00 85 f6 0f 84 3d 03 00 00 e8 11 ec 21 fe <0f> 0b 41 bd fb ff ff ff e8 04 ec 21 fe 49 8d 7f 6a 48 b8 00 00 00 RSP: 0018:ffffc90007a5f090 EFLAGS: 00010246 RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90005631000 RDX: 0000000000040000 RSI: ffffffff836177df RDI: 0000000000000005 RBP: 000000000052d000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90007a5f120 R13: 0000000000000001 R14: 0000000000001000 R15: ffff88801e9b0b00 FS: 00007fe54fe60700(0000) GS:ffff88802c700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d749000 CR3: 0000000075824000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: insert_inline_extent_backref+0xb3/0x200 fs/btrfs/extent-tree.c:1158 __btrfs_inc_extent_ref.isra.0+0xdb/0x490 fs/btrfs/extent-tree.c:1461 run_delayed_tree_ref fs/btrfs/extent-tree.c:1678 [inline] run_one_delayed_ref fs/btrfs/extent-tree.c:1705 [inline] btrfs_run_delayed_refs_for_head fs/btrfs/extent-tree.c:1952 [inline] __btrfs_run_delayed_refs+0x159b/0x3770 fs/btrfs/extent-tree.c:2013 btrfs_run_delayed_refs+0x19a/0x540 fs/btrfs/extent-tree.c:2125 qgroup_account_snapshot fs/btrfs/transaction.c:1545 [inline] create_pending_snapshot+0x124b/0x2d30 fs/btrfs/transaction.c:1818 create_pending_snapshots+0x174/0x2c0 fs/btrfs/transaction.c:1888 btrfs_commit_transaction+0xf0e/0x3fa0 fs/btrfs/transaction.c:2358 create_snapshot fs/btrfs/ioctl.c:846 [inline] btrfs_mksubvol+0xa6f/0x1310 fs/btrfs/ioctl.c:996 btrfs_mksnapshot+0xaf/0xf0 fs/btrfs/ioctl.c:1042 __btrfs_ioctl_snap_create+0x42b/0x4d0 fs/btrfs/ioctl.c:1295 btrfs_ioctl_snap_create+0x15f/0x200 fs/btrfs/ioctl.c:1322 btrfs_ioctl+0x50e/0x5b30 fs/btrfs/ioctl.c:4559 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe54f08c169 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe54fe60168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe54f1abf80 RCX: 00007fe54f08c169 RDX: 00000000200000c0 RSI: 0000000050009401 RDI: 0000000000000009 RBP: 00007fe54f0e7ca1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe55b4c70f R14: 00007fe54fe60300 R15: 0000000000022000