BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf BTRFS info (device loop0): at unmount dio bytes count 65536 ------------[ cut here ]------------ WARNING: fs/btrfs/block-group.c:172 at btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172, CPU#0: syz-executor/6571 Modules linked in: CPU: 0 UID: 0 PID: 6571 Comm: syz-executor Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 lr : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 sp : ffff8000a4b17900 x29: ffff8000a4b17900 x28: dfff800000000000 x27: dead000000000100 x26: 0000000000000001 x25: ffff0000db4551a8 x24: ffff0000db455000 x23: dfff800000000000 x22: ffff0000e0244188 x21: 0000000000000001 x20: 0000000000010000 x19: ffff0000db455000 x18: 1fffe0003377d090 x17: ffff80008f86e000 x16: ffff800080544d7c x15: 0000000000000001 x14: 1fffe0001b68aa35 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b68aa36 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cbb80000 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff8000825f7138 x2 : 0000000000000001 x1 : 0000000000010000 x0 : 0000000000000000 Call trace: btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 (P) btrfs_free_block_groups+0x9f0/0xd5c fs/btrfs/block-group.c:4573 close_ctree+0x64c/0x1138 fs/btrfs/disk-io.c:4410 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 1022892 hardirqs last enabled at (1022891): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (1022892): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (1021344): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (1021342): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: fs/btrfs/block-group.c:4467 at check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468, CPU#0: syz-executor/6571 Modules linked in: CPU: 0 UID: 0 PID: 6571 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468 lr : check_removing_space_info+0x258/0x278 fs/btrfs/block-group.c:4467 sp : ffff8000a4b17900 x29: ffff8000a4b17900 x28: dfff800000000000 x27: dead000000000100 x26: 0000000000000001 x25: ffff0000e198a1a8 x24: 1fffe0001c331c02 x23: ffff0000e0244000 x22: dfff800000000000 x21: 0000000000000000 x20: 0000000000028000 x19: ffff0000e198e000 x18: 1fffe0003377d090 x17: ffff80008f86e000 x16: ffff800080544d7c x15: 0000000000000001 x14: 1fffe0001c331c04 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001c331c05 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cbb80000 x7 : ffff8000825f1f7c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080544e84 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000e198e000 Call trace: check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468 (P) btrfs_free_block_groups+0xadc/0xd5c fs/btrfs/block-group.c:4585 close_ctree+0x64c/0x1138 fs/btrfs/disk-io.c:4410 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 1022942 hardirqs last enabled at (1022941): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (1022942): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (1022916): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (1022916): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (1022895): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 1945600 free, is not full BTRFS info (device loop0): space_info total=3276800, used=1101824, pinned=0, reserved=65536, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop0): global_block_rsv: size 0 reserved 0 BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 ------------[ cut here ]------------ WARNING: fs/btrfs/block-group.c:4478 at check_removing_space_info+0x240/0x278 fs/btrfs/block-group.c:4479, CPU#1: syz-executor/6571 Modules linked in: CPU: 1 UID: 0 PID: 6571 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x240/0x278 fs/btrfs/block-group.c:4479 lr : check_removing_space_info+0x234/0x278 fs/btrfs/block-group.c:4478 sp : ffff8000a4b17900 x29: ffff8000a4b17900 x28: dfff800000000000 x27: dead000000000100 x26: 0000000000000001 x25: ffff0000e198a1a8 x24: 1fffe0001c331c02 x23: ffff0000e0244000 x22: dfff800000000000 x21: 0000000000000000 x20: 0000000000010000 x19: ffff0000e198e000 x18: 1fffe00033781890 x17: ffff80008f86e000 x16: ffff800082e5e68c x15: 0000000000000001 x14: 1fffe00033784348 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093398d48 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cbb80000 x7 : ffff80008049ea88 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000e198e000 Call trace: check_removing_space_info+0x240/0x278 fs/btrfs/block-group.c:4479 (P) btrfs_free_block_groups+0xadc/0xd5c fs/btrfs/block-group.c:4585 close_ctree+0x64c/0x1138 fs/btrfs/disk-io.c:4410 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 1023190 hardirqs last enabled at (1023189): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1570 [inline] hardirqs last enabled at (1023189): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:4995 hardirqs last disabled at (1023190): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (1023140): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (1023140): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (1022945): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 1945600 free, is not full BTRFS info (device loop0): space_info total=3276800, used=1101824, pinned=0, reserved=65536, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop0): global_block_rsv: size 0 reserved 0 BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 VFS: Busy inodes after unmount of loop0 (btrfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:653! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 6571 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 lr : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 sp : ffff8000a4b17ba0 x29: ffff8000a4b17ba0 x28: 00007dfeb32fd3f0 x27: ffff80008f872008 x26: ffffffffffffffff x25: dfff800000000000 x24: 1fffe0001a73a8f0 x23: ffff80008b494e60 x22: dfff800000000000 x21: 0000000000000000 x20: ffff80008ffe7360 x19: ffff0000d39d4000 x18: 1fffe0003377d090 x17: ffff0001fea8d870 x16: ffff800082e5e714 x15: 0000000000000001 x14: 1ffff00014962ef0 x13: 0000000000000000 x12: 0000000000000000 x11: 00000000000015e2 x10: 0000000000ff0100 x9 : d91c44d9d63ed700 x8 : d91c44d9d63ed700 x7 : ffff8000805761f8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807f1260 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002f Call trace: generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 (P) kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: 90051ca0 91018000 9119a261 97cd5f86 (d4210000) ---[ end trace 0000000000000000 ]---