Backtrace

general protection fault, probably for non-canonical address 0xff970d07c7f80242: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 13447 Comm: pool-org.gnome. Not tainted 6.2.8-200.fc37.x86_64 #1
Hardware name: OEM OEM/G31MV/G31MV-K, BIOS 6.00 PG 04/15/2008
RIP: 0010:btrfs_check_data_free_space+0x22/0x1f0
Code: 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 57 41 56 41 55 49 89 fd 41 54 4c 8d 64 0a ff 55 53 48 83 ec 08 48 8b 07 48 89 34 24 <4c> 8b b8 08 02 00 00 41 8b 87 b4 0c 00 00 8d 58 ff 49 09 dc 48 f7
RSP: 0018:ffffaddbc538fa58 EFLAGS: 00010292
RAX: ff970d07c7f8003a RBX: ffff970d25bfbcf0 RCX: 0000000000000860
RDX: 0000000000000000 RSI: ffffaddbc538fb20 RDI: ffff970d25bfbae7
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffaddbc538fc08
R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000085f
R13: ffff970d25bfbae7 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f3321de96c0(0000) GS:ffff970dcbc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0d63f22490 CR3: 000000000fc9a000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 btrfs_buffered_write+0x23f/0x950
 ? preempt_count_add+0x47/0xa0
 btrfs_do_write_iter+0x3a6/0x5f0
 ? _raw_spin_lock+0x13/0x40
 ? inode_io_list_move_locked+0x76/0xd0
 do_iter_readv_writev+0xf3/0x150
 do_iter_write+0x81/0x1c0
 iter_file_splice_write+0x282/0x3d0
 do_splice+0x33f/0x700
 __do_splice+0xc1/0x170
 __x64_sys_splice+0xae/0x120
 do_syscall_64+0x5b/0x80
 ? _copy_to_user+0x21/0x30
 ? fpregs_restore_userregs+0x12/0xe0
 ? exit_to_user_mode_prepare+0x18f/0x1f0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? do_syscall_64+0x67/0x80
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f33530cc3bb
Code: e8 2a b2 f7 ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 4c 8b 54 24 18 8b 54 24 28 b8 13 01 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 35 89 ef 48 89 44 24 08 e8 71 b2 f7 ff 48 8b
RSP: 002b:00007f3321de8470 EFLAGS: 00000293 ORIG_RAX: 0000000000000113
RAX: ffffffffffffffda RBX: 0000000000000860 RCX: 00007f33530cc3bb
RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000021
RBP: 0000000000000000 R08: 0000000000000860 R09: 0000000000000004
R10: 00007f3321de85a0 R11: 0000000000000293 R12: 000000000000001f
R13: 0000000000000000 R14: 0000000000000021 R15: 00007f3321de85b0
 </TASK>
Modules linked in: ntfs3 uas usb_storage squashfs tls snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables rfkill nfnetlink qrtr sunrpc binfmt_misc snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core iTCO_wdt snd_hwdep intel_pmc_bxt snd_seq iTCO_vendor_support snd_seq_device joydev snd_pcm pcspkr snd_timer snd i2c_i801 lpc_ich i2c_smbus coretemp soundcore acpi_cpufreq loop zram i915 drm_buddy video wmi drm_display_helper cec r8169 sha512_ssse3 ttm serio_raw ata_generic pata_acpi ip6_tables ip_tables fuse