BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 8, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 9, rd 0, flush 0, corrupt 0, gen 0 BTRFS error (device loop0): bdev /dev/loop0 errs: wr 10, rd 0, flush 0, corrupt 0, gen 0 page: refcount:4 mapcount:0 mapping:ffff88804519b108 index:0x15d pfn:0x54b8f memcg:ffff888043172000 aops:btrfs_aops ino:102 flags: 0x4fff20000004038(uptodate|dirty|lru|private|node=1|zone=1|lastcpupid=0x7ff) raw: 04fff20000004038 ffffea000152e408 ffffea000152e388 ffff88804519b108 raw: 000000000000015d 0000000000000001 00000004ffffffff ffff888043172000 page dumped because: VM_BUG_ON_FOLIO(!folio_test_locked(folio)) page_owner tracks the page as allocated page last allocated via order 0, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5328, tgid 5327 (syz.0.0), ts 77365991006, free_ts 77354031109 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f4/0x240 mm/page_alloc.c:1717 prep_new_page mm/page_alloc.c:1725 [inline] get_page_from_freelist+0x352b/0x36c0 mm/page_alloc.c:3652 __alloc_frozen_pages_noprof+0x211/0x5b0 mm/page_alloc.c:4934 alloc_pages_mpol+0x339/0x690 mm/mempolicy.c:2301 alloc_frozen_pages_noprof mm/mempolicy.c:2372 [inline] alloc_pages_noprof+0x121/0x190 mm/mempolicy.c:2392 folio_alloc_noprof+0x1e/0x30 mm/mempolicy.c:2402 filemap_alloc_folio_noprof+0xe4/0x550 mm/filemap.c:1007 ractl_alloc_folio mm/readahead.c:186 [inline] page_cache_ra_unbounded+0x36b/0x820 mm/readahead.c:270 page_cache_sync_readahead include/linux/pagemap.h:1373 [inline] relocate_one_folio fs/btrfs/relocation.c:2842 [inline] relocate_file_extent_cluster+0x71f/0x1750 fs/btrfs/relocation.c:2998 relocate_data_extent+0x1b0/0x6b0 fs/btrfs/relocation.c:3015 relocate_block_group+0x892/0xd50 fs/btrfs/relocation.c:3628 btrfs_relocate_block_group+0x777/0xd80 fs/btrfs/relocation.c:4011 btrfs_relocate_chunk+0x12c/0x3b0 fs/btrfs/volumes.c:3511 __btrfs_balance+0x1a93/0x25e0 fs/btrfs/volumes.c:4292 btrfs_balance+0xbde/0x10c0 fs/btrfs/volumes.c:4669 btrfs_ioctl_balance+0x3f5/0x660 fs/btrfs/ioctl.c:3586 page last free pid 5329 tgid 5327 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1262 [inline] free_unref_folios+0xe0e/0x17f0 mm/page_alloc.c:2737 folios_put_refs+0x70a/0x800 mm/swap.c:992 folio_batch_release include/linux/pagevec.h:101 [inline] shmem_undo_range+0x595/0x1820 mm/shmem.c:1125 shmem_truncate_range mm/shmem.c:1237 [inline] shmem_evict_inode+0x29d/0xa80 mm/shmem.c:1365 evict+0x4f9/0x9b0 fs/inode.c:810 __dentry_kill+0x20d/0x630 fs/dcache.c:660 dput+0x19f/0x2b0 fs/dcache.c:902 __fput+0x60b/0x9f0 fs/file_table.c:473 fput_close_sync+0x1ef/0x270 fs/file_table.c:570 __do_sys_close fs/open.c:1581 [inline] __se_sys_close fs/open.c:1566 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1566 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at mm/page-writeback.c:2955! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 132 Comm: kworker/u4:5 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:folio_clear_dirty_for_io+0x94d/0x9b0 mm/page-writeback.c:2955 Code: 84 c2 ff 4c 89 ff 48 c7 c6 80 44 54 8c e8 5b cc 0e 00 90 0f 0b e8 c3 84 c2 ff 4c 89 ff 48 c7 c6 60 40 54 8c e8 44 cc 0e 00 90 <0f> 0b e8 7c d0 2f 0a e8 a7 84 c2 ff 4c 89 ff 48 c7 c6 80 44 54 8c RSP: 0018:ffffc900019fe780 EFLAGS: 00010246 RAX: 542211dbd1302400 RBX: 04fff20000004038 RCX: ffffffff9368a020 RDX: dffffc0000000000 RSI: ffffffff8e69c715 RDI: 0000000000000001 RBP: ffffc900019fe870 R08: ffffffff905fe077 R09: 1ffffffff20bfc0e R10: dffffc0000000000 R11: fffffbfff20bfc0f R12: ffff88804519b108 R13: ffffea000152e3c8 R14: ffffffff9368a020 R15: ffffea000152e3c0 FS: 0000000000000000(0000) GS:ffff88808c596000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055e610634078 CR3: 0000000036522000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: process_one_folio fs/btrfs/extent_io.c:186 [inline] __process_folios_contig+0x2ff/0x540 fs/btrfs/extent_io.c:215 run_delalloc_nocow+0x1583/0x1a60 fs/btrfs/inode.c:2299 writepage_delalloc+0xc7e/0x1430 fs/btrfs/extent_io.c:1426 extent_writepage fs/btrfs/extent_io.c:1757 [inline] extent_write_cache_pages fs/btrfs/extent_io.c:2422 [inline] btrfs_writepages+0x1555/0x25f0 fs/btrfs/extent_io.c:2555 do_writepages+0x364/0x890 mm/page-writeback.c:2656 filemap_fdatawrite_wbc+0xde/0x140 mm/filemap.c:386 start_delalloc_inodes+0x7d5/0xc80 fs/btrfs/inode.c:8576 btrfs_start_delalloc_roots+0x72c/0xab0 fs/btrfs/inode.c:8653 shrink_delalloc fs/btrfs/space-info.c:680 [inline] flush_space+0x69e/0xd30 fs/btrfs/space-info.c:790 btrfs_async_reclaim_metadata_space+0x178/0x3b0 fs/btrfs/space-info.c:1120 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xac3/0x18e0 kernel/workqueue.c:3319 worker_thread+0x870/0xd50 kernel/workqueue.c:3400 kthread+0x7b7/0x940 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:folio_clear_dirty_for_io+0x94d/0x9b0 mm/page-writeback.c:2955 Code: 84 c2 ff 4c 89 ff 48 c7 c6 80 44 54 8c e8 5b cc 0e 00 90 0f 0b e8 c3 84 c2 ff 4c 89 ff 48 c7 c6 60 40 54 8c e8 44 cc 0e 00 90 <0f> 0b e8 7c d0 2f 0a e8 a7 84 c2 ff 4c 89 ff 48 c7 c6 80 44 54 8c RSP: 0018:ffffc900019fe780 EFLAGS: 00010246 RAX: 542211dbd1302400 RBX: 04fff20000004038 RCX: ffffffff9368a020 RDX: dffffc0000000000 RSI: ffffffff8e69c715 RDI: 0000000000000001 RBP: ffffc900019fe870 R08: ffffffff905fe077 R09: 1ffffffff20bfc0e R10: dffffc0000000000 R11: fffffbfff20bfc0f R12: ffff88804519b108 R13: ffffea000152e3c8 R14: ffffffff9368a020 R15: ffffea000152e3c0 FS: 0000000000000000(0000) GS:ffff88808c596000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055e610634078 CR3: 0000000013206000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400