------------[ cut here ]------------ WARNING: CPU: 0 PID: 6537 at fs/btrfs/block-group.c:159 btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:159 Modules linked in: CPU: 0 UID: 0 PID: 6537 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:159 lr : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:159 sp : ffff8000a6247950 x29: ffff8000a6247950 x28: 1fffe0001f6c482c x27: dfff800000000000 x26: ffff0000fb6279c0 x25: 0000000000000001 x24: ffff0000fb6241a8 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000001 x20: 0000000000009000 x19: ffff0000fb624000 x18: 1fffe000337d4076 x17: ffff80008f66e000 x16: ffff80008052cb50 x15: 0000000000000001 x14: 1fffe0001f6c4835 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001f6c4836 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d063bd00 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff8000824eaefc x2 : 0000000000000001 x1 : 0000000000009000 x0 : 0000000000000000 Call trace: btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:159 (P) btrfs_free_block_groups+0x99c/0xd0c fs/btrfs/block-group.c:4551 close_ctree+0x64c/0xb48 fs/btrfs/disk-io.c:4426 btrfs_put_super+0x70/0x80 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2095 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1417 __cleanup_mnt+0x20/0x30 fs/namespace.c:1424 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x174/0x1f4 arch/arm64/kernel/entry-common.c:155 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:173 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:182 [inline] el0_svc+0xb8/0x180 arch/arm64/kernel/entry-common.c:880 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 685326 hardirqs last enabled at (685325): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (685326): [] el1_brk64+0x1c/0x48 arch/arm64/kernel/entry-common.c:574 softirqs last enabled at (684918): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (684918): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (684897): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6537 at fs/btrfs/block-group.c:4445 check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4446 Modules linked in: CPU: 0 UID: 0 PID: 6537 Comm: syz-executor Tainted: G W 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4446 lr : check_removing_space_info+0x260/0x280 fs/btrfs/block-group.c:4445 sp : ffff8000a6247950 x29: ffff8000a6247950 x28: 1fffe0001f6c412c x27: dfff800000000000 x26: ffff0000fb620858 x25: 0000000000000001 x24: 1fffe0001f6c4f02 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000028000 x20: ffff0000f32f0000 x19: ffff0000fb627800 x18: 1fffe000337d4076 x17: ffff80008f66e000 x16: ffff80008052cb50 x15: 0000000000000001 x14: 1fffe0001f6c4f04 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001f6c4f05 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d063bd00 x7 : ffff8000824e5ce8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff0000fb627800 x0 : ffff0000f32f0000 Call trace: check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4446 (P) btrfs_free_block_groups+0xa7c/0xd0c fs/btrfs/block-group.c:4563 close_ctree+0x64c/0xb48 fs/btrfs/disk-io.c:4426 btrfs_put_super+0x70/0x80 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2095 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1417 __cleanup_mnt+0x20/0x30 fs/namespace.c:1424 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x174/0x1f4 arch/arm64/kernel/entry-common.c:155 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:173 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:182 [inline] el0_svc+0xb8/0x180 arch/arm64/kernel/entry-common.c:880 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 685738 hardirqs last enabled at (685737): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (685738): [] el1_brk64+0x1c/0x48 arch/arm64/kernel/entry-common.c:574 softirqs last enabled at (685712): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (685712): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (685331): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 2965504 free, is not full BTRFS info (device loop0): space_info total=3276800, used=110592, pinned=0, reserved=36864, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop0): global_block_rsv: size 0 reserved 0 BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6537 at fs/btrfs/block-group.c:4456 check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4457 Modules linked in: CPU: 1 UID: 0 PID: 6537 Comm: syz-executor Tainted: G W 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4457 lr : check_removing_space_info+0x238/0x280 fs/btrfs/block-group.c:4456 sp : ffff8000a6247950 x29: ffff8000a6247950 x28: 1fffe0001f6c412c x27: dfff800000000000 x26: ffff0000fb620858 x25: 0000000000000001 x24: 1fffe0001f6c4f02 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000009000 x20: ffff0000f32f0000 x19: ffff0000fb627800 x18: 00000000ffffffff x17: 0000000000000000 x16: ffff80008052cb50 x15: 0000000000000001 x14: 1fffe0001f6c4f04 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001f6c4f05 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d063bd00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000a6247018 x4 : ffff80008f766be0 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff0000fb627800 x0 : ffff0000f32f0000 Call trace: check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4457 (P) btrfs_free_block_groups+0xa7c/0xd0c fs/btrfs/block-group.c:4563 close_ctree+0x64c/0xb48 fs/btrfs/disk-io.c:4426 btrfs_put_super+0x70/0x80 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2095 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1417 __cleanup_mnt+0x20/0x30 fs/namespace.c:1424 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x174/0x1f4 arch/arm64/kernel/entry-common.c:155 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:173 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:182 [inline] el0_svc+0xb8/0x180 arch/arm64/kernel/entry-common.c:880 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 686100 hardirqs last enabled at (686099): [] __up_console_sem kernel/printk/printk.c:344 [inline] hardirqs last enabled at (686099): [] __console_unlock+0x70/0xc4 kernel/printk/printk.c:2885 hardirqs last disabled at (686100): [] el1_brk64+0x1c/0x48 arch/arm64/kernel/entry-common.c:574 softirqs last enabled at (686022): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (686022): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (685743): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 2965504 free, is not full BTRFS info (device loop0): space_info total=3276800, used=110592, pinned=0, reserved=36864, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop0): global_block_rsv: size 0 reserved 0 BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 VFS: Busy inodes after unmount of loop0 (btrfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:653! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 6537 Comm: syz-executor Tainted: G W 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 lr : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 sp : ffff8000a6247ba0 x29: ffff8000a6247ba0 x28: 00007dfeb2ea87e8 x27: ffff80008f671ff8 x26: ffffffffffffffff x25: dfff800000000000 x24: 1fffe0001ad108f1 x23: ffff80008b3dcc40 x22: dfff800000000000 x21: 0000000000000000 x20: ffff80008fdd0140 x19: ffff0000d6884000 x18: 1fffe000337d4076 x17: ffff80008f66e000 x16: ffff80008aefc458 x15: 0000000000000001 x14: 1ffff00014c48eec x13: 0000000000000000 x12: 0000000000000000 x11: ffff700014c48eed x10: 0000000000ff0100 x9 : 6b461a12f4de1d00 x8 : 6b461a12f4de1d00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000a6247538 x4 : ffff80008f766be0 x3 : ffff8000807bd1d8 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002f Call trace: generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 (P) kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2095 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1417 __cleanup_mnt+0x20/0x30 fs/namespace.c:1424 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x174/0x1f4 arch/arm64/kernel/entry-common.c:155 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:173 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:182 [inline] el0_svc+0xb8/0x180 arch/arm64/kernel/entry-common.c:880 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: 90051ac0 912d0000 9119c261 97cf11aa (d4210000) ---[ end trace 0000000000000000 ]---