__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x140 arch/arm64/kernel/syscall.c:197 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584 ------------[ cut here ]------------ kernel BUG at fs/btrfs/extent-io-tree.c:379! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 4401 Comm: syz-executor309 Not tainted 6.2.0-rc2-syzkaller-16046-gae87308093bc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : set_state_bits fs/btrfs/extent-io-tree.c:379 [inline] pc : insert_state_fast+0x128/0x12c fs/btrfs/extent-io-tree.c:437 lr : set_state_bits fs/btrfs/extent-io-tree.c:379 [inline] lr : insert_state_fast+0x128/0x12c fs/btrfs/extent-io-tree.c:437 sp : ffff80000fdf3840 x29: ffff80000fdf3840 x28: ffff0000cadf1330 x27: ffff0000cd4d0300 x26: 00000000ffff2eff x25: 0000000000000000 x24: 00000000fffffff4 x23: 0000000000000800 x22: 0000000000000000 x21: ffff0000cadf1310 x20: ffff0000cadf1310 x19: ffff0000cd4d0300 x18: 00000000000000c0 x17: 6e69676e45206574 x16: ffff80000dd76118 x15: ffff0000c76f8000 x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000c76f8000 x11: ff8080000926570c x10: 0000000000000000 x9 : ffff80000926570c x8 : ffff0000c76f8000 x7 : ffff80000c121738 x6 : 0000000000000000 x5 : 00000000ffffffff x4 : 0000000000000a20 x3 : 0000000000000080 x2 : 0000000000000038 x1 : 00000000fffffff4 x0 : 0000000000000000 Call trace: set_state_bits fs/btrfs/extent-io-tree.c:379 [inline] insert_state_fast+0x128/0x12c fs/btrfs/extent-io-tree.c:437 __set_extent_bit+0xd74/0x1174 fs/btrfs/extent-io-tree.c:1019 set_record_extent_bits+0x74/0xb0 fs/btrfs/extent-io-tree.c:1690 qgroup_reserve_data+0x134/0x374 fs/btrfs/qgroup.c:3757 btrfs_qgroup_reserve_data+0x40/0xd0 fs/btrfs/qgroup.c:3800 btrfs_check_data_free_space+0xbc/0x138 fs/btrfs/delalloc-space.c:154 btrfs_buffered_write+0x240/0xe38 fs/btrfs/file.c:1253 btrfs_do_write_iter+0x12c/0x888 fs/btrfs/file.c:1677 btrfs_file_write_iter+0x2c/0x3c fs/btrfs/file.c:1698 call_write_iter include/linux/fs.h:2186 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x2dc/0x46c fs/read_write.c:584 ksys_write+0xb4/0x160 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __arm64_sys_write+0x24/0x34 fs/read_write.c:646 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x140 arch/arm64/kernel/syscall.c:197 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584 Code: a8c57bfd d50323bf d65f03c0 97c12544 (d4210000) ---[ end trace 0000000000000000 ]---