el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:131 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:150 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 ------------[ cut here ]------------ kernel BUG at fs/btrfs/extent-tree.c:3452! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 8645 Comm: syz.0.584 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_free_tree_block+0xbf4/0xc00 fs/btrfs/extent-tree.c:3452 lr : btrfs_free_tree_block+0xbf4/0xc00 fs/btrfs/extent-tree.c:3452 sp : ffff800099dc6940 x29: ffff800099dc6a40 x28: ffff7000133b8d30 x27: ffff0000daaf4000 x26: ffff0000e0539a40 x25: ffff0000daaf4064 x24: 00000000fffffff4 x23: 0000000000000001 x22: 0000000000000005 x21: ffff80008ea8e298 x20: ffff0000ec021378 x19: dfff800000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800082f8f174 x15: 0000000000000001 x14: 1ffff00011e7a636 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700011e7a637 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d4008000 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800099dc5bf8 x4 : 00000000ffffffff x3 : 0000000000000c40 x2 : ffff0000d67e3c80 x1 : 00000000fffffff4 x0 : 0000000000000000 Call trace: btrfs_free_tree_block+0xbf4/0xc00 fs/btrfs/extent-tree.c:3452 btrfs_force_cow_block+0xd08/0x1a58 fs/btrfs/ctree.c:651 btrfs_cow_block+0x318/0xa28 fs/btrfs/ctree.c:746 btrfs_search_slot+0xba0/0x2a08 btrfs_insert_empty_items+0xa4/0x17c fs/btrfs/ctree.c:4295 btrfs_insert_empty_item fs/btrfs/ctree.h:650 [inline] insert_with_overflow+0x138/0x398 fs/btrfs/dir-item.c:35 btrfs_insert_dir_item+0x1d4/0x544 fs/btrfs/dir-item.c:135 btrfs_add_link+0x21c/0xa68 fs/btrfs/inode.c:6498 btrfs_create_new_inode+0x16a0/0x2334 fs/btrfs/inode.c:6439 btrfs_create_common+0x1a0/0x29c fs/btrfs/inode.c:6572 btrfs_create+0x104/0x128 fs/btrfs/inode.c:6612 lookup_open fs/namei.c:3552 [inline] open_last_lookups fs/namei.c:3621 [inline] path_openat+0xfb8/0x2ae8 fs/namei.c:3857 do_filp_open+0x1bc/0x3cc fs/namei.c:3887 do_sys_openat2+0x124/0x1b8 fs/open.c:1413 do_sys_open fs/open.c:1428 [inline] __do_sys_openat fs/open.c:1444 [inline] __se_sys_openat fs/open.c:1439 [inline] __arm64_sys_openat+0x1f0/0x240 fs/open.c:1439 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:131 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:150 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Code: 5281aee3 957545d8 d4210000 978ee28a (d4210000) ---[ end trace 0000000000000000 ]---