kworker/u4:6: attempt to access beyond end of device loop0: rw=67112961, sector=10480, nr_sectors = 8 limit=64 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 kworker/u4:6: attempt to access beyond end of device loop0: rw=67112961, sector=10488, nr_sectors = 8 limit=64 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 kworker/u4:6: attempt to access beyond end of device loop0: rw=67112961, sector=10496, nr_sectors = 8 limit=64 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 assertion failed: block_start != EXTENT_MAP_HOLE, in fs/btrfs/extent_io.c:1721 ------------[ cut here ]------------ kernel BUG at fs/btrfs/extent_io.c:1721! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 161 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: writeback wb_workfn (flush-btrfs-1) RIP: 0010:submit_one_sector fs/btrfs/extent_io.c:1721 [inline] RIP: 0010:extent_writepage_io+0x1070/0x11a0 fs/btrfs/extent_io.c:1826 Code: 27 fd 90 0f 0b e8 d0 6f c6 fd 48 c7 c7 20 c6 17 8c 48 c7 c6 40 dd 17 8c 48 c7 c2 a0 c6 17 8c b9 b9 06 00 00 e8 a1 ad 27 fd 90 <0f> 0b e8 a9 6f c6 fd 48 89 ef 48 c7 c6 00 ce 17 8c e8 aa 0c 28 fd RSP: 0000:ffffc900016eed40 EFLAGS: 00010246 RAX: 000000000000004e RBX: ffffea00014ea808 RCX: 682b31df1f43f500 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffea00014ea800 R08: ffffc900016eeac7 R09: 1ffff920002ddd58 R10: dffffc0000000000 R11: fffff520002ddd59 R12: 0000000000001000 R13: dffffc0000000000 R14: ffff88801f706398 R15: fffffffffffffffd FS: 0000000000000000(0000) GS:ffff88808c815000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f347c85a000 CR3: 000000001bfeb000 CR4: 0000000000352ef0 Call Trace: extent_writepage fs/btrfs/extent_io.c:1936 [inline] extent_write_cache_pages fs/btrfs/extent_io.c:2593 [inline] btrfs_writepages+0x17a1/0x28b0 fs/btrfs/extent_io.c:2725 do_writepages+0x338/0x560 mm/page-writeback.c:2571 __writeback_single_inode+0x12e/0xf90 fs/fs-writeback.c:1787 writeback_sb_inodes+0x9de/0x1b00 fs/fs-writeback.c:2079 __writeback_inodes_wb+0x114/0x240 fs/fs-writeback.c:2155 wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2266 wb_check_start_all fs/fs-writeback.c:2392 [inline] wb_do_writeback fs/fs-writeback.c:2439 [inline] wb_workfn+0x980/0x10f0 fs/fs-writeback.c:2477 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:submit_one_sector fs/btrfs/extent_io.c:1721 [inline] RIP: 0010:extent_writepage_io+0x1070/0x11a0 fs/btrfs/extent_io.c:1826 Code: 27 fd 90 0f 0b e8 d0 6f c6 fd 48 c7 c7 20 c6 17 8c 48 c7 c6 40 dd 17 8c 48 c7 c2 a0 c6 17 8c b9 b9 06 00 00 e8 a1 ad 27 fd 90 <0f> 0b e8 a9 6f c6 fd 48 89 ef 48 c7 c6 00 ce 17 8c e8 aa 0c 28 fd RSP: 0000:ffffc900016eed40 EFLAGS: 00010246 RAX: 000000000000004e RBX: ffffea00014ea808 RCX: 682b31df1f43f500 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffea00014ea800 R08: ffffc900016eeac7 R09: 1ffff920002ddd58 R10: dffffc0000000000 R11: fffff520002ddd59 R12: 0000000000001000 R13: dffffc0000000000 R14: ffff88801f706398 R15: fffffffffffffffd FS: 0000000000000000(0000) GS:ffff88808c815000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7ef055efb3 CR3: 000000001bfeb000 CR4: 0000000000352ef0