__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x104 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584 ------------[ cut here ]------------ kernel BUG at fs/btrfs/extent-io-tree.c:379! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 21124 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : set_state_bits fs/btrfs/extent-io-tree.c:379 [inline] pc : insert_state+0x1cc/0x1d0 fs/btrfs/extent-io-tree.c:401 lr : set_state_bits fs/btrfs/extent-io-tree.c:379 [inline] lr : insert_state+0x1cc/0x1d0 fs/btrfs/extent-io-tree.c:401 sp : ffff800010fd3230 x29: ffff800010fd3230 x28: ffff000118c66ec0 x27: ffff00011a6c0c00 x26: 0000000000000800 x25: 00000000ffff2eff x24: 0000000000000000 x23: 0000000000000800 x22: 00000000fffffff4 x21: 0000000000000fff x20: ffff000118c66ea0 x19: ffff00011a6c0c00 x18: 00000000000000c0 x17: 6e69676e45206574 x16: ffff80000dd97118 x15: ffff00011bb79a00 x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000 x11: 000000000001935d x10: ffff80001c566000 x9 : ffff80000926ab14 x8 : 000000000001935e x7 : ffff80000c12c9f4 x6 : 0000000000000000 x5 : 00000000ffffffff x4 : 0000000000000a20 x3 : 0000000000000080 x2 : 0000000000000038 x1 : 00000000fffffff4 x0 : 0000000000000000 Call trace: set_state_bits fs/btrfs/extent-io-tree.c:379 [inline] insert_state+0x1cc/0x1d0 fs/btrfs/extent-io-tree.c:401 __set_extent_bit+0xb78/0x1174 fs/btrfs/extent-io-tree.c:1136 set_record_extent_bits+0x74/0xb0 fs/btrfs/extent-io-tree.c:1690 qgroup_reserve_data+0x134/0x374 fs/btrfs/qgroup.c:3777 btrfs_qgroup_reserve_data+0x40/0xd0 fs/btrfs/qgroup.c:3820 btrfs_check_data_free_space+0xbc/0x138 fs/btrfs/delalloc-space.c:154 btrfs_delalloc_reserve_space+0x44/0x120 fs/btrfs/delalloc-space.c:467 btrfs_page_mkwrite+0x194/0x6fc fs/btrfs/inode.c:8511 do_page_mkwrite+0x74/0x288 mm/memory.c:2947 wp_page_shared+0x8c/0x364 mm/memory.c:3295 do_wp_page+0xf8/0xba0 mm/memory.c:3377 handle_pte_fault mm/memory.c:4949 [inline] __handle_mm_fault mm/memory.c:5073 [inline] handle_mm_fault+0x910/0xb28 mm/memory.c:5219 __do_page_fault arch/arm64/mm/fault.c:512 [inline] do_page_fault+0x428/0x79c arch/arm64/mm/fault.c:612 do_mem_abort+0x54/0x130 arch/arm64/mm/fault.c:831 el1_abort+0x3c/0x5c arch/arm64/kernel/entry-common.c:367 el1h_64_sync_handler+0x60/0xac arch/arm64/kernel/entry-common.c:427 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:579 __arch_copy_to_user+0x190/0x234 arch/arm64/lib/copy_template.S:158 _copy_to_iter+0x2a8/0x790 lib/iov_iter.c:529 copy_page_to_iter+0x2b4/0x378 lib/iov_iter.c:727 copy_folio_to_iter include/linux/uio.h:172 [inline] filemap_read+0x350/0x6f4 mm/filemap.c:2745 btrfs_file_read_iter+0x110/0x304 fs/btrfs/file.c:3817 do_iter_read+0x318/0x55c fs/read_write.c:796 vfs_readv fs/read_write.c:916 [inline] do_preadv+0x128/0x1dc fs/read_write.c:1008 __do_sys_preadv fs/read_write.c:1058 [inline] __se_sys_preadv fs/read_write.c:1053 [inline] __arm64_sys_preadv+0x28/0x38 fs/read_write.c:1053 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x104 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584 Code: 94baab9a 12800200 17ffffef 97c12664 (d4210000) ---[ end trace 0000000000000000 ]---