BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
BTRFS info (device loop0): enabling ssd optimizations
Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4406 Comm: syz-executor.0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
pc : fault_in_readable+0x270/0x360 mm/gup.c:1801
lr : fault_in_readable+0x24c/0x360 mm/gup.c:1801
sp : ffff80001f3e75e0
x29: ffff80001f3e7610 x28: dfff800000000000 x27: 0000000000000000
x26: 0000000000001000 x25: 0000000000000000 x24: 0000000000400140
x23: 00000000fffffff2 x22: ffff80001143bfa0 x21: 0000000000000000
x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000001
x17: ffff800016e33000 x16: ffff80000873bbd8 x15: ffff800016913500
x14: 0000000000000001 x13: 1ffff0000285402b x12: 0000000000ff0100
x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000
x8 : 0000000000000000 x7 : ffff800008758eb0 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 fault_in_readable+0x270/0x360 mm/gup.c:1801
 fault_in_iov_iter_readable+0x1d4/0x248 lib/iov_iter.c:460
 btrfs_buffered_write+0x304/0xcec fs/btrfs/file.c:1719
 btrfs_file_write_iter+0x19c/0xbb8 fs/btrfs/file.c:2094
 do_iter_readv_writev+0x3a8/0x50c fs/read_write.c:-1
 do_iter_write+0x1c4/0x670 fs/read_write.c:855
 vfs_writev fs/read_write.c:928 [inline]
 do_pwritev+0x1e8/0x338 fs/read_write.c:1025
 __do_sys_pwritev2 fs/read_write.c:1084 [inline]
 __se_sys_pwritev2 fs/read_write.c:1075 [inline]
 __arm64_sys_pwritev2+0xd4/0x108 fs/read_write.c:1075
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: 381f43b5 2a1503f7 2a1503e0 38400909 (381f43a9) 
---[ end trace e67290a4a287c8e5 ]---
----------------
Code disassembly (best guess):
   0:	381f43b5 	sturb	w21, [x29, #-12]
   4:	2a1503f7 	mov	w23, w21
   8:	2a1503e0 	mov	w0, w21
   c:	38400909 	ldtrb	w9, [x8]
* 10:	381f43a9 	sturb	w9, [x29, #-12] <-- trapping instruction