el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 ------------[ cut here ]------------ kernel BUG at fs/btrfs/extent-io-tree.c:584! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 1 UID: 0 PID: 6936 Comm: syz-executor.0 Not tainted 6.15.0-rc4-syzkaller-00028-ge0f4c8dd9d2d #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : clear_state_bit+0x304/0x308 fs/btrfs/extent-io-tree.c:584 lr : clear_state_bit+0x304/0x308 fs/btrfs/extent-io-tree.c:584 sp : ffff8000a3376d10 x29: ffff8000a3376d10 x28: ffff0000d74edd80 x27: 000000000000dfff x26: 0000000000000000 x25: dfff800000000000 x24: 0000000000001000 x23: 000000000000dfff x22: 00000000fffffff4 x21: 0000000000000000 x20: ffff0000dc47a348 x19: ffff0000d74edd80 x18: 00000000ffffffff x17: ffff800092f13000 x16: ffff80008ada5d6c x15: 0000000000000001 x14: 1ffff00011ebefee x13: 0000000000000000 x12: 0000000000000000 x11: ffff700011ebefef x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cb9fbd00 x7 : ffff80008054d620 x6 : 0000000000000000 x5 : 00000000ffffffff x4 : 0000000000000820 x3 : 0000000000000820 x2 : 0000000000000038 x1 : 00000000fffffff4 x0 : 0000000000000000 Call trace: clear_state_bit+0x304/0x308 fs/btrfs/extent-io-tree.c:584 (P) __clear_extent_bit+0x550/0xd60 fs/btrfs/extent-io-tree.c:752 clear_record_extent_bits+0x64/0xa8 fs/btrfs/extent-io-tree.c:1829 __btrfs_qgroup_release_data+0x334/0x870 fs/btrfs/qgroup.c:4365 btrfs_qgroup_release_data+0x44/0x58 fs/btrfs/qgroup.c:4421 insert_prealloc_file_extent fs/btrfs/inode.c:8803 [inline] __btrfs_prealloc_file_range+0x2d0/0xa94 fs/btrfs/inode.c:8900 btrfs_prealloc_file_range+0x60/0x7c fs/btrfs/inode.c:8978 btrfs_zero_range+0x940/0xb84 fs/btrfs/file.c:2909 btrfs_fallocate+0x8d8/0x171c fs/btrfs/file.c:3019 vfs_fallocate+0x5cc/0x73c fs/open.c:338 ioctl_preallocate fs/ioctl.c:290 [inline] file_ioctl fs/ioctl.c:-1 [inline] do_vfs_ioctl+0x1d4c/0x2218 fs/ioctl.c:885 __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __arm64_sys_ioctl+0xe4/0x1c4 fs/ioctl.c:892 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Code: aa1803e0 979d59e3 17ffff57 97891c0a (d4210000) ---[ end trace 0000000000000000 ]---