el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
------------[ cut here ]------------
kernel BUG at fs/btrfs/extent-io-tree.c:381!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 5895 Comm: syz.1.247 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : set_state_bits+0x1b4/0x1b8 fs/btrfs/extent-io-tree.c:381
lr : set_state_bits+0x1b4/0x1b8 fs/btrfs/extent-io-tree.c:381
sp : ffff800021d06c00
x29: ffff800021d06c00 x28: 0000000000048000 x27: 0000000000000000
x26: ffff0000d5e763c0 x25: ffff0000d5e760c0 x24: 0000000000048000
x23: dfff800000000000 x22: 0000000000048fff x21: 00000000fffffff4
x20: 0000000000001000 x19: ffff0000d5e763c0 x18: 0000000000000000
x17: 0000000000000000 x16: ffff800011b3e320 x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00002abcf8e x12: 0000000000000000
x11: ff0080000a1c2d70 x10: 0000000000000000 x9 : ffff80000a1c2d70
x8 : ffff0000d4743800 x7 : 0000000000000001 x6 : 0000000000000001
x5 : 00000000ffffffff x4 : 0000000000000a20 x3 : 0000000000000a20
x2 : 0000000000000038 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 set_state_bits+0x1b4/0x1b8 fs/btrfs/extent-io-tree.c:381
 __set_extent_bit+0x151c/0x189c fs/btrfs/extent-io-tree.c:1144
 set_record_extent_bits+0x68/0x98 fs/btrfs/extent-io-tree.c:1607
 qgroup_reserve_data+0x214/0x8c0 fs/btrfs/qgroup.c:3817
 btrfs_qgroup_reserve_data+0x40/0xd8 fs/btrfs/qgroup.c:3860
 btrfs_check_data_free_space+0x12c/0x208 fs/btrfs/delalloc-space.c:152
 btrfs_delalloc_reserve_space+0x4c/0x1ec fs/btrfs/delalloc-space.c:470
 btrfs_page_mkwrite+0x340/0xbb8 fs/btrfs/inode.c:8628
 do_page_mkwrite+0x140/0x35c mm/memory.c:3009
 wp_page_shared+0x14c/0x544 mm/memory.c:3358
 do_wp_page+0xc88/0xed4 mm/memory.c:3508
 handle_pte_fault mm/memory.c:5047 [inline]
 __handle_mm_fault mm/memory.c:5171 [inline]
 handle_mm_fault+0x1520/0x3018 mm/memory.c:5292
 faultin_page mm/gup.c:1026 [inline]
 __get_user_pages+0x340/0x770 mm/gup.c:1250
 __get_user_pages_locked mm/gup.c:1454 [inline]
 get_user_pages_unlocked+0x1b4/0x62c mm/gup.c:2371
 __gup_longterm_unlocked mm/gup.c:2982 [inline]
 internal_get_user_pages_fast+0x1694/0x1a4c mm/gup.c:3072
 get_user_pages_fast+0x60/0x94 mm/gup.c:3164
 get_futex_key+0x1b4/0xfb0 kernel/futex/core.c:271
 futex_wait_requeue_pi+0x248/0x87c kernel/futex/requeue.c:799
 do_futex+0x178/0x340 kernel/futex/syscalls.c:157
 __do_sys_futex kernel/futex/syscalls.c:211 [inline]
 __se_sys_futex kernel/futex/syscalls.c:192 [inline]
 __arm64_sys_futex+0x390/0x414 kernel/futex/syscalls.c:192
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 9101f260 979cc424 17ffffb7 978bbe2c (d4210000) 
---[ end trace 0000000000000000 ]---