syzbot

 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
------------[ cut here ]------------
kernel BUG at fs/btrfs/extent-io-tree.c:381!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor896 Not tainted 6.1.135-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : set_state_bits+0x1b0/0x1b4 fs/btrfs/extent-io-tree.c:381
lr : set_state_bits+0x1b0/0x1b4 fs/btrfs/extent-io-tree.c:381
sp : ffff800020ce6b40
x29: ffff800020ce6b40 x28: ffff0000df190a60 x27: 0000000000000000
x26: ffff0000d8f83d80 x25: 0000000000002000 x24: 0000000000002000
x23: dfff800000000000 x22: 0000000000002fff x21: 00000000fffffff4
x20: 0000000000001000 x19: ffff0000d5c21240 x18: 0000000000000000
x17: 0000000000000000 x16: ffff8000082d1c08 x15: 0000000000000000
x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100
x11: ff0080000a143ab4 x10: 0000000000000000 x9 : ffff80000a143ab4
x8 : ffff0000d5d05340 x7 : 0000000000000001 x6 : 0000000000000001
x5 : 00000000ffffffff x4 : 0000000000000a20 x3 : 0000000000000a20
x2 : 0000000000000038 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 set_state_bits+0x1b0/0x1b4 fs/btrfs/extent-io-tree.c:381
 __set_extent_bit+0x1570/0x18f8 fs/btrfs/extent-io-tree.c:1144
 set_record_extent_bits+0x68/0x98 fs/btrfs/extent-io-tree.c:1607
 qgroup_reserve_data+0x20c/0x8a4 fs/btrfs/qgroup.c:3795
 btrfs_qgroup_reserve_data+0x40/0xec fs/btrfs/qgroup.c:3838
 btrfs_check_data_free_space+0x12c/0x208 fs/btrfs/delalloc-space.c:152
 btrfs_delalloc_reserve_space+0x4c/0x1ec fs/btrfs/delalloc-space.c:470
 btrfs_page_mkwrite+0x32c/0xb78 fs/btrfs/inode.c:8596
 do_page_mkwrite+0x13c/0x358 mm/memory.c:3011
 do_shared_fault mm/memory.c:4696 [inline]
 do_fault mm/memory.c:4764 [inline]
 handle_pte_fault mm/memory.c:5031 [inline]
 __handle_mm_fault mm/memory.c:5173 [inline]
 handle_mm_fault+0x121c/0x2fd4 mm/memory.c:5294
 __do_page_fault arch/arm64/mm/fault.c:499 [inline]
 do_page_fault+0x310/0x99c arch/arm64/mm/fault.c:583
 do_translation_fault+0x94/0xc8 arch/arm64/mm/fault.c:667
 do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:803
 el1_abort+0x3c/0x5c arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0x80/0xcc arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:580
 __arch_copy_to_user+0x190/0x234 arch/arm64/lib/copy_template.S:158
 copy_page_to_iter+0x228/0x354 lib/iov_iter.c:725
 copy_folio_to_iter include/linux/uio.h:172 [inline]
 filemap_read+0x17b0/0x1fd8 mm/filemap.c:2819
 btrfs_file_read_iter+0x240/0x5d0 fs/btrfs/file.c:3835
 call_read_iter include/linux/fs.h:2259 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x5ac/0x7c4 fs/read_write.c:470
 ksys_read+0x120/0x210 fs/read_write.c:613
 __do_sys_read fs/read_write.c:623 [inline]
 __se_sys_read fs/read_write.c:621 [inline]
 __arm64_sys_read+0x7c/0x90 fs/read_write.c:621
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: aa1603e0 979e47da 17ffffb8 978d7787 (d4210000) 
---[ end trace 0000000000000000 ]---