------------[ cut here ]------------ WARNING: fs/btrfs/inode.c:7996 at btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7996, CPU#0: syz-executor/10065 Modules linked in: CPU: 0 UID: 0 PID: 10065 Comm: syz-executor Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7996 lr : btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7996 sp : ffff80009f8678e0 x29: ffff80009f867900 x28: dfff800000000000 x27: 1fffe0001e835707 x26: ffff0000fbe82000 x25: dfff800000000000 x24: 1fffe0001e835678 x23: ffff0000dc6b0000 x22: 0000000000010000 x21: ffff0000f41ab630 x20: ffff0000f41ab768 x19: ffff0000f41ab3c0 x18: 1fffe0003377d090 x17: ffff0001fea8d870 x16: ffff800082e5e714 x15: 0000000000000001 x14: 1fffe0001e835730 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000001b1f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cfff5580 x7 : ffff800080ed43c8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f3fb98 x2 : 0000000000000000 x1 : 0000000000010000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x258/0x798 fs/btrfs/inode.c:7996 (P) destroy_inode fs/inode.c:396 [inline] evict+0x7cc/0xa74 fs/inode.c:861 dispose_list fs/inode.c:879 [inline] evict_inodes+0x774/0x80c fs/inode.c:933 generic_shutdown_super+0xa0/0x2b8 fs/super.c:628 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 264516 hardirqs last enabled at (264515): [] __call_rcu_common kernel/rcu/tree.c:3144 [inline] hardirqs last enabled at (264515): [] call_rcu+0x65c/0x978 kernel/rcu/tree.c:3239 hardirqs last disabled at (264516): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (258198): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (258198): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (258055): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: fs/btrfs/inode.c:7997 at btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7997, CPU#1: syz-executor/10065 Modules linked in: CPU: 1 UID: 0 PID: 10065 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7997 lr : btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7997 sp : ffff80009f8678e0 x29: ffff80009f867900 x28: dfff800000000000 x27: 1fffe0001e835707 x26: ffff0000fbe82000 x25: dfff800000000000 x24: 1fffe0001e835678 x23: ffff0000dc6b0000 x22: 0000000000010000 x21: 0000000000010000 x20: ffff0000f41ab768 x19: ffff0000f41ab3c0 x18: 1fffe0003377d090 x17: ffff0001fea8d870 x16: ffff800082e5e714 x15: 0000000000000001 x14: 1fffe0001e835730 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000001b1f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cfff5580 x7 : ffff800080ed43c8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f3fb98 x2 : 0000000000000000 x1 : 0000000000010000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x264/0x798 fs/btrfs/inode.c:7997 (P) destroy_inode fs/inode.c:396 [inline] evict+0x7cc/0xa74 fs/inode.c:861 dispose_list fs/inode.c:879 [inline] evict_inodes+0x774/0x80c fs/inode.c:933 generic_shutdown_super+0xa0/0x2b8 fs/super.c:628 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 264736 hardirqs last enabled at (264735): [] irqentry_exit+0x1b4/0x308 kernel/entry/common.c:219 hardirqs last disabled at (264736): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (264730): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (264730): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (264519): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: fs/btrfs/inode.c:8002 at btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:8002, CPU#1: syz-executor/10065 Modules linked in: CPU: 1 UID: 0 PID: 10065 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:8002 lr : btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:8002 sp : ffff80009f8678e0 x29: ffff80009f867900 x28: dfff800000000000 x27: 1fffe0001e835707 x26: ffff0000fbe82000 x25: dfff800000000000 x24: 1fffe0001e835678 x23: ffff0000dc6b0000 x22: 0000000000010000 x21: 000000000000d000 x20: ffff0000f41ab768 x19: ffff0000f41ab3c0 x18: 1fffe0003377d090 x17: ffff0001fea8d870 x16: ffff800082e5e714 x15: 0000000000000001 x14: 1fffe0001e835730 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000001b1f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cfff5580 x7 : ffff800080ed43c8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080f3fb98 x2 : 0000000000000000 x1 : 000000000000d000 x0 : 0000000000000000 Call trace: btrfs_destroy_inode+0x294/0x798 fs/btrfs/inode.c:8002 (P) destroy_inode fs/inode.c:396 [inline] evict+0x7cc/0xa74 fs/inode.c:861 dispose_list fs/inode.c:879 [inline] evict_inodes+0x774/0x80c fs/inode.c:933 generic_shutdown_super+0xa0/0x2b8 fs/super.c:628 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 264772 hardirqs last enabled at (264771): [] irqentry_exit+0x1b4/0x308 kernel/entry/common.c:219 hardirqs last disabled at (264772): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (264766): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (264766): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (264739): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop5): last unmount of filesystem 7d582f16-0265-4af4-a037-04c36fe7fc0e ------------[ cut here ]------------ WARNING: fs/btrfs/block-group.c:4467 at check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468, CPU#0: syz-executor/10065 Modules linked in: CPU: 0 UID: 0 PID: 10065 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468 lr : check_removing_space_info+0x258/0x278 fs/btrfs/block-group.c:4467 sp : ffff80009f867900 x29: ffff80009f867900 x28: dfff800000000000 x27: dead000000000100 x26: 0000000000000001 x25: ffff0000f46241a8 x24: 1fffe0001e8c4702 x23: ffff0000ceb5c000 x22: dfff800000000000 x21: 0000000000000000 x20: 0000000000010000 x19: ffff0000f4623800 x18: 1fffe0003377d090 x17: ffff80008f86e000 x16: ffff800080544d7c x15: 0000000000000001 x14: 1fffe0001e8c4704 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001e8c4705 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cfff5580 x7 : ffff8000825f1f7c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080544e84 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000f4623800 Call trace: check_removing_space_info+0x108/0x278 fs/btrfs/block-group.c:4468 (P) btrfs_free_block_groups+0xadc/0xd5c fs/btrfs/block-group.c:4585 close_ctree+0x64c/0x1138 fs/btrfs/disk-io.c:4410 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1289 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2129 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 266890 hardirqs last enabled at (266889): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (266890): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (266848): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (266848): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (266519): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop5): space_info DATA+METADATA (sub-group id 0) has 3022848 free, is full BTRFS info (device loop5): space_info total=11534336, used=8445952, pinned=0, reserved=0, may_use=65536, readonly=0 zone_unusable=0 BTRFS info (device loop5): global_block_rsv: size 0 reserved 0 BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop5): delayed_refs_rsv: size 0 reserved 0 EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.