------------[ cut here ]------------ WARNING: CPU: 0 PID: 7202 at fs/btrfs/extent-tree.c:3198 __btrfs_free_extent+0x1cac/0x2b74 fs/btrfs/extent-tree.c:-1 Modules linked in: CPU: 0 UID: 0 PID: 7202 Comm: syz.1.129 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __btrfs_free_extent+0x1cac/0x2b74 fs/btrfs/extent-tree.c:-1 lr : __btrfs_free_extent+0x424/0x2b74 fs/btrfs/extent-tree.c:3101 sp : ffff80009f016a80 x29: ffff80009f016be0 x28: 1fffe00019a65eb9 x27: ffff0000cd32f5c8 x26: dfff800000000000 x25: ffff0000cd32f5c0 x24: ffff0000dbb59b90 x23: 1fffe00019a65eb8 x22: 00000000fffffffe x21: 0000000000000000 x20: 000000000000000a x19: 00000000fffffffe x18: 00000000ffffffff x17: ffff800092f39000 x16: ffff80008adbeaf4 x15: ffff700013e02cea x14: 0000000000000002 x13: 00000000fffffffe x12: 0000000000ff0100 x11: ffff0000d0253d00 x10: ffff80008fa844c0 x9 : 0000000000000005 x8 : 0000000000000000 x7 : ffff8000822735a8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000002 x1 : ffff80008fa844a0 x0 : 00000000fffffffe Call trace: __btrfs_free_extent+0x1cac/0x2b74 fs/btrfs/extent-tree.c:-1 (P) run_delayed_tree_ref fs/btrfs/extent-tree.c:1747 [inline] run_one_delayed_ref fs/btrfs/extent-tree.c:1773 [inline] btrfs_run_delayed_refs_for_head fs/btrfs/extent-tree.c:1970 [inline] __btrfs_run_delayed_refs+0xb94/0x31c8 fs/btrfs/extent-tree.c:2040 btrfs_run_delayed_refs+0xc4/0x2e8 fs/btrfs/extent-tree.c:2152 btrfs_start_dirty_block_groups+0xa94/0xd1c fs/btrfs/block-group.c:3518 btrfs_commit_transaction+0x2a0/0x2a50 fs/btrfs/transaction.c:2239 btrfs_rebuild_free_space_tree+0x208/0x54c fs/btrfs/free-space-tree.c:1356 btrfs_start_pre_rw_mount+0xa78/0xe10 fs/btrfs/disk-io.c:3074 open_ctree+0x1b7c/0x229c fs/btrfs/disk-io.c:3614 btrfs_fill_super+0x184/0x2c0 fs/btrfs/super.c:976 btrfs_get_tree_super fs/btrfs/super.c:1901 [inline] btrfs_get_tree+0xc4c/0x1038 fs/btrfs/super.c:2096 vfs_get_tree+0x90/0x28c fs/super.c:1759 fc_mount+0x24/0xac fs/namespace.c:1289 btrfs_get_tree_subvol fs/btrfs/super.c:2054 [inline] btrfs_get_tree+0x4d4/0x1038 fs/btrfs/super.c:2097 vfs_get_tree+0x90/0x28c fs/super.c:1759 do_new_mount+0x228/0x814 fs/namespace.c:3881 path_mount+0x5b4/0xde0 fs/namespace.c:4208 do_mount fs/namespace.c:4221 [inline] __do_sys_mount fs/namespace.c:4432 [inline] __se_sys_mount fs/namespace.c:4409 [inline] __arm64_sys_mount+0x3e8/0x468 fs/namespace.c:4409 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 194890 hardirqs last enabled at (194889): [] put_cpu_partial+0x148/0x1c0 mm/slub.c:3257 hardirqs last disabled at (194890): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (192568): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (192568): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (183405): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ BTRFS: Transaction aborted (error -117)