BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6559 at fs/btrfs/inode.c:7942 btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7942 Modules linked in: CPU: 1 UID: 0 PID: 6559 Comm: syz-executor Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7942 lr : btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7942 sp : ffff8000a4e77700 x29: ffff8000a4e77720 x28: dfff800000000000 x27: 1fffe0001f27c3cb x26: ffff7000149ceef8 x25: dfff800000000000 x24: 1fffe0001f27c33c x23: ffff0000da20c000 x22: 0000000000010000 x21: ffff0000f93e1c50 x20: ffff0000f93e1d88 x19: ffff0000f93e19e0 x18: 00000000ffffffff x17: ffff800093305000 x16: ffff800082de95c8 x15: 0000000000000001 x14: 1fffe0001f27c3f4 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001f27c3f5 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c9bedc40 x7 : ffff800080e995c0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f03e80 x2 : 0000000000000000 x1 : 0000000000010000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7942 (P) destroy_inode fs/inode.c:396 [inline] evict+0x6e4/0x928 fs/inode.c:834 iput_final fs/inode.c:1914 [inline] iput+0x95c/0xad4 fs/inode.c:1966 run_delayed_iput_locked+0xfc/0x19c fs/btrfs/inode.c:3470 btrfs_run_delayed_iputs+0x74/0x120 fs/btrfs/inode.c:3501 close_ctree+0x35c/0x113c fs/btrfs/disk-io.c:4330 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:642 kill_anon_super+0x4c/0x7c fs/super.c:1281 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1327 __cleanup_mnt+0x20/0x30 fs/namespace.c:1334 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x178 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:747 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:765 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 238748 hardirqs last enabled at (238747): [] __call_rcu_common kernel/rcu/tree.c:3148 [inline] hardirqs last enabled at (238747): [] call_rcu+0x65c/0x978 kernel/rcu/tree.c:3243 hardirqs last disabled at (238748): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (238336): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (238336): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (238319): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6559 at fs/btrfs/inode.c:7943 btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7943 Modules linked in: CPU: 1 UID: 0 PID: 6559 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7943 lr : btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7943 sp : ffff8000a4e77700 x29: ffff8000a4e77720 x28: dfff800000000000 x27: 1fffe0001f27c3cb x26: ffff7000149ceef8 x25: dfff800000000000 x24: 1fffe0001f27c33c x23: ffff0000da20c000 x22: 0000000000010000 x21: 0000000000010000 x20: ffff0000f93e1d88 x19: ffff0000f93e19e0 x18: 00000000ffffffff x17: ffff800093305000 x16: ffff800082de95c8 x15: 0000000000000001 x14: 1fffe0001f27c3f4 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001f27c3f5 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c9bedc40 x7 : ffff800080e995c0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f03e80 x2 : 0000000000000000 x1 : 0000000000010000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7943 (P) destroy_inode fs/inode.c:396 [inline] evict+0x6e4/0x928 fs/inode.c:834 iput_final fs/inode.c:1914 [inline] iput+0x95c/0xad4 fs/inode.c:1966 run_delayed_iput_locked+0xfc/0x19c fs/btrfs/inode.c:3470 btrfs_run_delayed_iputs+0x74/0x120 fs/btrfs/inode.c:3501 close_ctree+0x35c/0x113c fs/btrfs/disk-io.c:4330 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:642 kill_anon_super+0x4c/0x7c fs/super.c:1281 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1327 __cleanup_mnt+0x20/0x30 fs/namespace.c:1334 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x178 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:747 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:765 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 238978 hardirqs last enabled at (238977): [] irqentry_exit+0xd8/0x108 kernel/entry/common.c:214 hardirqs last disabled at (238978): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (238972): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (238972): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (238751): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6559 at fs/btrfs/inode.c:7948 btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:7948 Modules linked in: CPU: 0 UID: 0 PID: 6559 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:7948 lr : btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:7948 sp : ffff8000a4e77700 x29: ffff8000a4e77720 x28: dfff800000000000 x27: 1fffe0001f27c3cb x26: ffff7000149ceef8 x25: dfff800000000000 x24: 1fffe0001f27c33c x23: ffff0000da20c000 x22: 0000000000010000 x21: 0000000000002000 x20: ffff0000f93e1d88 x19: ffff0000f93e19e0 x18: 00000000ffffffff x17: ffff800093305000 x16: ffff800082de95c8 x15: 0000000000000001 x14: 1fffe0001f27c3f4 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001f27c3f5 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c9bedc40 x7 : ffff800080e995c0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f03e80 x2 : 0000000000000000 x1 : 0000000000002000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:7948 (P) destroy_inode fs/inode.c:396 [inline] evict+0x6e4/0x928 fs/inode.c:834 iput_final fs/inode.c:1914 [inline] iput+0x95c/0xad4 fs/inode.c:1966 run_delayed_iput_locked+0xfc/0x19c fs/btrfs/inode.c:3470 btrfs_run_delayed_iputs+0x74/0x120 fs/btrfs/inode.c:3501 close_ctree+0x35c/0x113c fs/btrfs/disk-io.c:4330 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:642 kill_anon_super+0x4c/0x7c fs/super.c:1281 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1327 __cleanup_mnt+0x20/0x30 fs/namespace.c:1334 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x178 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:747 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:765 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 239286 hardirqs last enabled at (239285): [] irqentry_exit+0xd8/0x108 kernel/entry/common.c:214 hardirqs last disabled at (239286): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (239280): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (239280): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (238981): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6559 at fs/btrfs/block-group.c:4462 check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 Modules linked in: CPU: 0 UID: 0 PID: 6559 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 lr : check_removing_space_info+0x260/0x280 fs/btrfs/block-group.c:4462 sp : ffff8000a4e77930 x29: ffff8000a4e77930 x28: 1fffe0001b18c52c x27: dfff800000000000 x26: ffff0000d8c62858 x25: 0000000000000001 x24: 1fffe0001b18c302 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000010000 x20: ffff0000ca640000 x19: ffff0000d8c61800 x18: 1fffe000337db690 x17: ffff80008f57e000 x16: ffff800082de9540 x15: 0000000000000001 x14: 1fffe000337de118 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093104c88 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c9bedc40 x7 : ffff800080491734 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff0000d8c61800 x0 : ffff0000ca640000 Call trace: check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 (P) btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4580 close_ctree+0x650/0x113c fs/btrfs/disk-io.c:4426 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:642 kill_anon_super+0x4c/0x7c fs/super.c:1281 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1327 __cleanup_mnt+0x20/0x30 fs/namespace.c:1334 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x178 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:747 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:765 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 241332 hardirqs last enabled at (241331): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1558 [inline] hardirqs last enabled at (241331): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5073 hardirqs last disabled at (241332): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (239964): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (239964): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (239555): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 3145728 free, is not full BTRFS info (device loop1): space_info total=3276800, used=65536, pinned=0, reserved=0, may_use=65536, readonly=0 zone_unusable=0 BTRFS info (device loop1): global_block_rsv: size 0 reserved 0 BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0