------------[ cut here ]------------ WARNING: fs/btrfs/inode.c:7996 at btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7996, CPU#1: syz-executor/7333 Modules linked in: CPU: 1 UID: 0 PID: 7333 Comm: syz-executor Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7996 lr : btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7996 sp : ffff8000a40278e0 x29: ffff8000a4027900 x28: dfff800000000000 x27: 1fffe0001eebe2b7 x26: ffff0000ccca6000 x25: dfff800000000000 x24: 1fffe0001eebe228 x23: ffff0000ca078000 x22: 0000000000010000 x21: ffff0000f75f13b0 x20: ffff0000f75f14e8 x19: ffff0000f75f1140 x18: 1fffe00033781890 x17: ffff0001fea8d870 x16: ffff800082e5e714 x15: 0000000000000001 x14: 1fffe0001eebe2e0 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000001254 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d5e69c80 x7 : ffff800080ed43c8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f3fb98 x2 : 0000000000000000 x1 : 0000000000010000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7996 (P) destroy_inode fs/inode.c:396 [inline] evict+0x7cc/0xa74 fs/inode.c:861 dispose_list fs/inode.c:879 [inline] evict_inodes+0x774/0x80c fs/inode.c:933 generic_shutdown_super+0xa0/0x2b8 fs/super.c:628 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 482966 hardirqs last enabled at (482965): [] __call_rcu_common kernel/rcu/tree.c:3144 [inline] hardirqs last enabled at (482965): [] call_rcu+0x65c/0x978 kernel/rcu/tree.c:3239 hardirqs last disabled at (482966): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (472346): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (472344): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: fs/btrfs/inode.c:7997 at btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7997, CPU#1: syz-executor/7333 Modules linked in: CPU: 1 UID: 0 PID: 7333 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7997 lr : btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7997 sp : ffff8000a40278e0 x29: ffff8000a4027900 x28: dfff800000000000 x27: 1fffe0001eebe2b7 x26: ffff0000ccca6000 x25: dfff800000000000 x24: 1fffe0001eebe228 x23: ffff0000ca078000 x22: 0000000000010000 x21: 0000000000010000 x20: ffff0000f75f14e8 x19: ffff0000f75f1140 x18: 1fffe00033781890 x17: ffff0001fea8d870 x16: ffff800082e5e714 x15: 0000000000000001 x14: 1fffe0001eebe2e0 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000001254 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d5e69c80 x7 : ffff800080ed43c8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f3fb98 x2 : 0000000000000000 x1 : 0000000000010000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7997 (P) destroy_inode fs/inode.c:396 [inline] evict+0x7cc/0xa74 fs/inode.c:861 dispose_list fs/inode.c:879 [inline] evict_inodes+0x774/0x80c fs/inode.c:933 generic_shutdown_super+0xa0/0x2b8 fs/super.c:628 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 483174 hardirqs last enabled at (483173): [] irqentry_exit+0x1b4/0x308 kernel/entry/common.c:219 hardirqs last disabled at (483174): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (483168): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (483168): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (482969): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: fs/btrfs/inode.c:8002 at btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:8002, CPU#1: syz-executor/7333 Modules linked in: CPU: 1 UID: 0 PID: 7333 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:8002 lr : btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:8002 sp : ffff8000a40278e0 x29: ffff8000a4027900 x28: dfff800000000000 x27: 1fffe0001eebe2b7 x26: ffff0000ccca6000 x25: dfff800000000000 x24: 1fffe0001eebe228 x23: ffff0000ca078000 x22: 0000000000010000 x21: 000000000000d000 x20: ffff0000f75f14e8 x19: ffff0000f75f1140 x18: 1fffe00033781890 x17: ffff0001fea8d870 x16: ffff800082e5e714 x15: 0000000000000001 x14: 1fffe0001eebe2e0 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000001254 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d5e69c80 x7 : ffff800080ed43c8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f3fb98 x2 : 0000000000000000 x1 : 000000000000d000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:8002 (P) destroy_inode fs/inode.c:396 [inline] evict+0x7cc/0xa74 fs/inode.c:861 dispose_list fs/inode.c:879 [inline] evict_inodes+0x774/0x80c fs/inode.c:933 generic_shutdown_super+0xa0/0x2b8 fs/super.c:628 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 483354 hardirqs last enabled at (483353): [] irqentry_exit+0x1b4/0x308 kernel/entry/common.c:219 hardirqs last disabled at (483354): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (483348): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (483348): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (483177): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf ------------[ cut here ]------------ WARNING: fs/btrfs/block-group.c:4467 at check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468, CPU#0: syz-executor/7333 Modules linked in: CPU: 0 UID: 0 PID: 7333 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468 lr : check_removing_space_info+0x258/0x278 fs/btrfs/block-group.c:4467 sp : ffff8000a4027900 x29: ffff8000a4027900 x28: dfff800000000000 x27: dead000000000100 x26: 0000000000000001 x25: ffff0000da7989a8 x24: 1fffe0001b4f3502 x23: ffff0000d3450000 x22: dfff800000000000 x21: 0000000000000000 x20: 0000000000010000 x19: ffff0000da79a800 x18: 0000000000000000 x17: ffff80010c42d000 x16: ffff800080544d7c x15: 0000000000000001 x14: 1fffe0001b4f3504 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b4f3505 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d5e69c80 x7 : ffff8000825f1f7c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080544e84 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000da79a800 Call trace: check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468 (P) btrfs_free_block_groups+0xadc/0xd5c fs/btrfs/block-group.c:4585 close_ctree+0x64c/0x1138 fs/btrfs/disk-io.c:4410 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 484914 hardirqs last enabled at (484913): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (484914): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (483428): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (483428): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (483357): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop5): space_info DATA+METADATA (sub-group id 0) has 3022848 free, is full BTRFS info (device loop5): space_info total=11534336, used=8445952, pinned=0, reserved=0, may_use=65536, readonly=0 zone_unusable=0 BTRFS info (device loop5): global_block_rsv: size 0 reserved 0 BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop5): delayed_refs_rsv: size 0 reserved 0