kworker/u4:3: attempt to access beyond end of device loop0: rw=1, sector=10512, nr_sectors = 1872 limit=64 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): run_delalloc_nocow failed, root=5 inode=263 start=17735680 len=90112 cur_offset=17735680 oe_cleanup=17735680 oe_cleanup_len=0 untouched_start=17735680 untouched_len=90112: -5 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=263 folio=17735680 submit_bitmap=0 start=17735680 len=90112: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16777216 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16781312 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16785408 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16789504 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16793600 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16797696 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16801792 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16805888 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16809984 submit_bitmap=0: -5 BTRFS error (device loop0): failed to submit blocks, root=5 inode=263 folio=16814080 submit_bitmap=0: -5 assertion failed: block_start != EXTENT_MAP_HOLE, in fs/btrfs/extent_io.c:1721 ------------[ cut here ]------------ kernel BUG at fs/btrfs/extent_io.c:1721! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 41 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: writeback wb_workfn (flush-btrfs-1) RIP: 0010:submit_one_sector fs/btrfs/extent_io.c:1721 [inline] RIP: 0010:extent_writepage_io+0x1070/0x11a0 fs/btrfs/extent_io.c:1826 Code: 27 fd 90 0f 0b e8 d0 6f c6 fd 48 c7 c7 20 c6 17 8c 48 c7 c6 40 dd 17 8c 48 c7 c2 a0 c6 17 8c b9 b9 06 00 00 e8 a1 ad 27 fd 90 <0f> 0b e8 a9 6f c6 fd 48 89 ef 48 c7 c6 00 ce 17 8c e8 aa 0c 28 fd RSP: 0000:ffffc90000436d40 EFLAGS: 00010246 RAX: 000000000000004e RBX: ffffea00014f64c8 RCX: 4f84633cd8d23800 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffea00014f64c0 R08: ffffc90000436ac7 R09: 1ffff92000086d58 R10: dffffc0000000000 R11: fffff52000086d59 R12: 0000000000001000 R13: dffffc0000000000 R14: ffff888012206398 R15: fffffffffffffffd FS: 0000000000000000(0000) GS:ffff88808c815000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2b79ab8000 CR3: 0000000043b94000 CR4: 0000000000352ef0 Call Trace: extent_writepage fs/btrfs/extent_io.c:1936 [inline] extent_write_cache_pages fs/btrfs/extent_io.c:2593 [inline] btrfs_writepages+0x17a1/0x28b0 fs/btrfs/extent_io.c:2725 do_writepages+0x338/0x560 mm/page-writeback.c:2571 __writeback_single_inode+0x12e/0xf90 fs/fs-writeback.c:1787 writeback_sb_inodes+0x9de/0x1b00 fs/fs-writeback.c:2079 __writeback_inodes_wb+0x114/0x240 fs/fs-writeback.c:2155 wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2266 wb_check_start_all fs/fs-writeback.c:2392 [inline] wb_do_writeback fs/fs-writeback.c:2439 [inline] wb_workfn+0x980/0x10f0 fs/fs-writeback.c:2477 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:submit_one_sector fs/btrfs/extent_io.c:1721 [inline] RIP: 0010:extent_writepage_io+0x1070/0x11a0 fs/btrfs/extent_io.c:1826 Code: 27 fd 90 0f 0b e8 d0 6f c6 fd 48 c7 c7 20 c6 17 8c 48 c7 c6 40 dd 17 8c 48 c7 c2 a0 c6 17 8c b9 b9 06 00 00 e8 a1 ad 27 fd 90 <0f> 0b e8 a9 6f c6 fd 48 89 ef 48 c7 c6 00 ce 17 8c e8 aa 0c 28 fd RSP: 0000:ffffc90000436d40 EFLAGS: 00010246 RAX: 000000000000004e RBX: ffffea00014f64c8 RCX: 4f84633cd8d23800 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffea00014f64c0 R08: ffffc90000436ac7 R09: 1ffff92000086d58 R10: dffffc0000000000 R11: fffff52000086d59 R12: 0000000000001000 R13: dffffc0000000000 R14: ffff888012206398 R15: fffffffffffffffd FS: 0000000000000000(0000) GS:ffff88808c815000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe729417664 CR3: 0000000011d63000 CR4: 0000000000352ef0