__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x140 arch/arm64/kernel/syscall.c:197 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584 ------------[ cut here ]------------ kernel BUG at fs/btrfs/file.c:786! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 2040 Comm: syz-executor.5 Not tainted 6.1.0-rc8-syzkaller-33330-ga5541c0811a0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_drop_extents+0x11e8/0x12a0 fs/btrfs/file.c:786 lr : btrfs_drop_extents+0x11e8/0x12a0 fs/btrfs/file.c:786 sp : ffff80001433b070 x29: ffff80001433b190 x28: 0000000000001000 x27: ffff80001433b200 x26: 0000000000001000 x25: 0000000000000000 x24: 0000000000000107 x23: 0000000000000001 x22: 0000000000000000 x21: ffff00010ed8d290 x20: ffff0000c6c70d90 x19: 00000000fffffff4 x18: 00000000000003f3 x17: 6e69676e45206574 x16: ffff80000dbe6158 x15: ffff0000c2711a40 x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000 x11: 000000000001824a x10: ffff800012f2d000 x9 : ffff800009143d58 x8 : 000000000001824b x7 : ffff80000852d5a4 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff00010e3e6dc8 x2 : ffff00010e3e6dc8 x1 : 00000000fffffff4 x0 : 0000000000000000 Call trace: btrfs_drop_extents+0x11e8/0x12a0 fs/btrfs/file.c:786 cow_file_range_inline+0x188/0x568 fs/btrfs/inode.c:434 cow_file_range+0x1d4/0x7ac fs/btrfs/inode.c:1219 fallback_to_cow+0x234/0x27c fs/btrfs/inode.c:1754 run_delalloc_nocow+0x840/0x99c fs/btrfs/inode.c:2161 btrfs_run_delalloc_range+0x204/0x410 fs/btrfs/inode.c:2221 writepage_delalloc+0xbc/0x200 fs/btrfs/extent_io.c:1968 __extent_writepage+0x2b8/0x9d0 fs/btrfs/extent_io.c:2272 extent_write_cache_pages+0x490/0x9fc fs/btrfs/extent_io.c:3186 extent_writepages+0xd4/0x1e0 fs/btrfs/extent_io.c:3308 btrfs_writepages+0x28/0x38 fs/btrfs/inode.c:8132 do_writepages+0x144/0x27c mm/page-writeback.c:2469 filemap_fdatawrite_wbc+0xac/0xd0 mm/filemap.c:388 __filemap_fdatawrite_range mm/filemap.c:421 [inline] filemap_fdatawrite_range+0x70/0xa0 mm/filemap.c:439 btrfs_fdatawrite_range fs/btrfs/file.c:4155 [inline] start_ordered_ops+0x64/0x14c fs/btrfs/file.c:2041 btrfs_sync_file+0xd4/0x688 fs/btrfs/file.c:2117 vfs_fsync_range+0xb0/0xcc fs/sync.c:188 generic_write_sync include/linux/fs.h:2891 [inline] btrfs_do_write_iter+0x584/0x860 fs/btrfs/file.c:1990 btrfs_file_write_iter+0x2c/0x3c fs/btrfs/file.c:2004 do_iter_write+0x318/0x560 fs/read_write.c:861 vfs_writev fs/read_write.c:934 [inline] do_pwritev+0x130/0x1e8 fs/read_write.c:1031 __do_sys_pwritev2 fs/read_write.c:1090 [inline] __se_sys_pwritev2 fs/read_write.c:1081 [inline] __arm64_sys_pwritev2+0x5c/0x90 fs/read_write.c:1081 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x140 arch/arm64/kernel/syscall.c:197 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584 Code: d4210000 97c58b36 d4210000 97c58b34 (d4210000) ---[ end trace 0000000000000000 ]---