el0_svc_common+0xbc/0x180 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x110 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x14c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 ------------[ cut here ]------------ kernel BUG at fs/btrfs/file-item.c:871! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 17141 Comm: syz-executor.3 Not tainted 6.2.0-rc7-syzkaller-17907-g2d3827b3f393 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_csum_one_bio+0x5b8/0x5bc fs/btrfs/file-item.c:871 lr : btrfs_csum_one_bio+0x5b8/0x5bc fs/btrfs/file-item.c:871 sp : ffff80002170b3d0 x29: ffff80002170b5a0 x28: ffff0000c7ae32c8 x27: ffff00011c734e00 x26: 0000000000111000 x25: 0000000000000000 x24: 0000000000000000 x23: 0000000000001000 x22: 000000000001c000 x21: ffff00011c54c000 x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 x17: 6e69676e45206574 x16: ffff00011c7357f8 x15: ffff80000dbd2118 x14: ffff00011c734e00 x13: 00000000ffffffff x12: 0000000000040000 x11: 000000000003fc39 x10: ffff80001d275000 x9 : ffff80000909def0 x8 : 000000000003fc3a x7 : ffff80000bf650d4 x6 : 0000000000000000 x5 : 00000000ffffffff x4 : 0000000000000dc0 x3 : 0000000000000100 x2 : 0000000000000090 x1 : 0000000000000090 x0 : 0000000000000000 Call trace: btrfs_csum_one_bio+0x5b8/0x5bc fs/btrfs/file-item.c:871 btrfs_submit_data_write_bio+0x194/0x1d8 fs/btrfs/inode.c:2755 submit_one_bio+0x1e8/0x25c fs/btrfs/extent_io.c:158 submit_write_bio fs/btrfs/extent_io.c:184 [inline] extent_writepages+0xa34/0xb70 fs/btrfs/extent_io.c:3212 btrfs_writepages+0x28/0x38 fs/btrfs/inode.c:8215 do_writepages+0x134/0x26c mm/page-writeback.c:2581 filemap_fdatawrite_wbc+0xac/0xd0 mm/filemap.c:388 __filemap_fdatawrite_range mm/filemap.c:421 [inline] filemap_fdatawrite_range+0x6c/0x9c mm/filemap.c:439 btrfs_fdatawrite_range fs/btrfs/file.c:3857 [inline] start_ordered_ops+0x64/0x14c fs/btrfs/file.c:1737 btrfs_sync_file+0x208/0x900 fs/btrfs/file.c:1813 vfs_fsync_range+0xb0/0xcc fs/sync.c:188 generic_write_sync include/linux/fs.h:2885 [inline] btrfs_do_write_iter+0x59c/0x884 fs/btrfs/file.c:1684 btrfs_file_write_iter+0x2c/0x3c fs/btrfs/file.c:1698 do_iter_write+0x2ac/0x4ec fs/read_write.c:861 vfs_writev fs/read_write.c:934 [inline] do_pwritev+0x12c/0x1e4 fs/read_write.c:1031 __do_sys_pwritev2 fs/read_write.c:1090 [inline] __se_sys_pwritev2 fs/read_write.c:1081 [inline] __arm64_sys_pwritev2+0x5c/0x90 fs/read_write.c:1081 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x64/0x178 arch/arm64/kernel/syscall.c:52 el0_svc_common+0xbc/0x180 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x110 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x14c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 Code: 94bae64f 97c7f15f d4210000 97c7f15d (d4210000) ---[ end trace 0000000000000000 ]---