__do_sys_exit_group kernel/exit.c:1034 [inline] __se_sys_exit_group kernel/exit.c:1032 [inline] __ia32_sys_exit_group+0x3e/0x50 kernel/exit.c:1032 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0x73/0x120 arch/x86/entry/common.c:386 do_fast_syscall_32+0x32/0x80 arch/x86/entry/common.c:411 entry_SYSENTER_compat_after_hwframe+0x84/0x8e ------------[ cut here ]------------ kernel BUG at mm/filemap.c:1507! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 1 PID: 1092 Comm: kworker/u32:7 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: writeback wb_workfn (flush-btrfs-98) RIP: 0010:folio_unlock mm/filemap.c:1507 [inline] RIP: 0010:folio_unlock+0xb3/0xd0 mm/filemap.c:1502 Code: 33 59 cd ff 48 89 ef 31 f6 e8 59 eb ff ff 5b 5d e9 22 59 cd ff e8 1d 59 cd ff 48 c7 c6 60 b6 37 8b 48 89 ef e8 4e 21 11 00 90 <0f> 0b 48 89 df e8 a3 8b 2a 00 e9 7b ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0018:ffffc900071971f8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff8880206d4880 RSI: ffffffff81c12662 RDI: ffff8880206d4cc4 RBP: ffffea0001816c00 R08: 0000000000000001 R09: fffffbfff283ee70 R10: ffffffff941f7387 R11: ffffffff8162d150 R12: ffff88804bc15f10 R13: ffffea0001816c00 R14: 00000000fffffffb R15: 00000000fffffffb FS: 0000000000000000(0000) GS:ffff88802c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000f5eac000 CR3: 0000000011594000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __extent_writepage fs/btrfs/extent_io.c:1519 [inline] extent_write_cache_pages+0x10fd/0x1ce0 fs/btrfs/extent_io.c:2173 btrfs_writepages+0x21b/0x4a0 fs/btrfs/extent_io.c:2294 do_writepages+0x1a3/0x7f0 mm/page-writeback.c:2634 __writeback_single_inode+0x163/0xf90 fs/fs-writeback.c:1651 writeback_sb_inodes+0x611/0x1150 fs/fs-writeback.c:1947 wb_writeback+0x199/0xb50 fs/fs-writeback.c:2127 wb_do_writeback fs/fs-writeback.c:2274 [inline] wb_workfn+0x28d/0xf40 fs/fs-writeback.c:2314 process_one_work+0x958/0x1ad0 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:folio_unlock mm/filemap.c:1507 [inline] RIP: 0010:folio_unlock+0xb3/0xd0 mm/filemap.c:1502 Code: 33 59 cd ff 48 89 ef 31 f6 e8 59 eb ff ff 5b 5d e9 22 59 cd ff e8 1d 59 cd ff 48 c7 c6 60 b6 37 8b 48 89 ef e8 4e 21 11 00 90 <0f> 0b 48 89 df e8 a3 8b 2a 00 e9 7b ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0018:ffffc900071971f8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff8880206d4880 RSI: ffffffff81c12662 RDI: ffff8880206d4cc4 RBP: ffffea0001816c00 R08: 0000000000000001 R09: fffffbfff283ee70 R10: ffffffff941f7387 R11: ffffffff8162d150 R12: ffff88804bc15f10 R13: ffffea0001816c00 R14: 00000000fffffffb R15: 00000000fffffffb FS: 0000000000000000(0000) GS:ffff88802c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000f5eac000 CR3: 0000000011594000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400