el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
------------[ cut here ]------------
kernel BUG at fs/btrfs/extent-tree.c:3299!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 6201 Comm: syz.3.514 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : btrfs_free_tree_block+0xa04/0xa38 fs/btrfs/extent-tree.c:3299
lr : btrfs_free_tree_block+0xa04/0xa38 fs/btrfs/extent-tree.c:3299
sp : ffff800021096ac0
x29: ffff800021096bc0 x28: dfff800000000000 x27: ffff700004212d60
x26: ffff000000000002 x25: ffff800021096b20 x24: 00000000fffffff4
x23: 0000000000000001 x22: ffff000000000100 x21: ffff0000d877dd18
x20: ffff0000e17a51f8 x19: ffff0000d877dd10 x18: 1fffe00033e7697e
x17: 0000000000000000 x16: ffff800011b8ee98 x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00002ac6f8e x12: 0000000000000000
x11: ff00800009fba550 x10: 0000000000000000 x9 : ffff800009fba550
x8 : ffff0000cf82d400 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021096198 x4 : 00000000ffffffff x3 : 0000000000000c40
x2 : ffff0000cabdbc80 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 btrfs_free_tree_block+0xa04/0xa38 fs/btrfs/extent-tree.c:3299
 btrfs_force_cow_block+0xc38/0x18c0 fs/btrfs/ctree.c:505
 btrfs_cow_block+0x2e0/0x71c fs/btrfs/ctree.c:623
 btrfs_search_slot+0xa48/0x2380 fs/btrfs/ctree.c:-1
 lookup_inline_extent_backref+0x284/0xeb8 fs/btrfs/extent-tree.c:847
 lookup_extent_backref fs/btrfs/extent-tree.c:1074 [inline]
 __btrfs_free_extent+0x22c/0x2254 fs/btrfs/extent-tree.c:2984
 run_delayed_tree_ref fs/btrfs/extent-tree.c:1696 [inline]
 run_one_delayed_ref fs/btrfs/extent-tree.c:1720 [inline]
 btrfs_run_delayed_refs_for_head fs/btrfs/extent-tree.c:1969 [inline]
 __btrfs_run_delayed_refs+0xbb8/0x3368 fs/btrfs/extent-tree.c:2032
 btrfs_run_delayed_refs+0x11c/0x474 fs/btrfs/extent-tree.c:2163
 btrfs_commit_transaction+0x1e4/0x28e4 fs/btrfs/transaction.c:2191
 btrfs_sync_fs+0x25c/0xa30 fs/btrfs/super.c:1535
 sync_filesystem+0x1a0/0x218 fs/sync.c:66
 btrfs_remount+0x188/0x11b8 fs/btrfs/super.c:2006
 legacy_reconfigure+0xfc/0x114 fs/fs_context.c:655
 reconfigure_super+0x1d4/0x7cc fs/super.c:977
 do_remount fs/namespace.c:2741 [inline]
 path_mount+0xc98/0xe6c fs/namespace.c:3400
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x4a0/0x5a0 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 17fffe9d 9793e041 d4210000 9793e03f (d4210000) 
---[ end trace 0000000000000000 ]---