el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 ------------[ cut here ]------------ kernel BUG at fs/btrfs/extent-io-tree.c:517! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4716 Comm: syz.0.66 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : clear_state_bit+0x2cc/0x2d0 fs/btrfs/extent-io-tree.c:517 lr : clear_state_bit+0x2cc/0x2d0 fs/btrfs/extent-io-tree.c:517 sp : ffff800021d57110 x29: ffff800021d57110 x28: ffff0000f264d900 x27: 0000000008000fff x26: 0000000008000000 x25: dfff800000000000 x24: 0000000000001000 x23: 0000000008000fff x22: 00000000fffffff4 x21: 0000000000000000 x20: ffff0000f54230e0 x19: ffff0000f264d900 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000082d25ac x15: 0000000000000000 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 x11: ff0080000a14bb5c x10: 0000000000000000 x9 : ffff80000a14bb5c x8 : ffff0000f8200000 x7 : 0000000000000001 x6 : 0000000000000001 x5 : 00000000ffffffff x4 : 0000000000000a20 x3 : 0000000000000a20 x2 : 0000000000000038 x1 : 00000000fffffff4 x0 : 0000000000000000 Call trace: clear_state_bit+0x2cc/0x2d0 fs/btrfs/extent-io-tree.c:517 __clear_extent_bit+0x534/0xdc8 fs/btrfs/extent-io-tree.c:676 clear_record_extent_bits+0x64/0x98 fs/btrfs/extent-io-tree.c:1620 __btrfs_qgroup_release_data+0x324/0x90c fs/btrfs/qgroup.c:3939 btrfs_qgroup_free_data+0x4c/0x64 fs/btrfs/qgroup.c:3975 btrfs_invalidate_folio+0x60c/0x920 fs/btrfs/inode.c:8529 folio_invalidate mm/truncate.c:158 [inline] truncate_cleanup_folio+0x1b4/0x330 mm/truncate.c:178 truncate_inode_pages_range+0x1f8/0xd20 mm/truncate.c:368 truncate_inode_pages mm/truncate.c:451 [inline] truncate_pagecache mm/truncate.c:751 [inline] truncate_setsize+0xc4/0xf0 mm/truncate.c:776 btrfs_setsize fs/btrfs/inode.c:5295 [inline] btrfs_setattr+0x544/0xe78 fs/btrfs/inode.c:5334 notify_change+0xb0c/0xdcc fs/attr.c:499 do_truncate+0x178/0x1f0 fs/open.c:65 vfs_truncate+0x23c/0x2b0 fs/open.c:111 do_sys_truncate+0xe8/0x1b0 fs/open.c:134 __do_sys_truncate fs/open.c:146 [inline] __se_sys_truncate fs/open.c:144 [inline] __arm64_sys_truncate+0x5c/0x70 fs/open.c:144 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: aa1603e0 979e2e8d 17ffffb4 978d584a (d4210000) ---[ end trace 0000000000000000 ]---