------------[ cut here ]------------ WARNING: CPU: 1 PID: 6530 at fs/btrfs/block-group.c:172 btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 Modules linked in: CPU: 1 UID: 0 PID: 6530 Comm: syz-executor Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 lr : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 sp : ffff8000a2f17930 x29: ffff8000a2f17930 x28: 1fffe0001a13032c x27: dfff800000000000 x26: ffff0000d09829c0 x25: 0000000000000001 x24: ffff0000d09819a8 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000001 x20: 0000000000003000 x19: ffff0000d0981800 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000805371bc x15: 0000000000000001 x14: 1fffe0001a130335 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001a130336 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c62f5b80 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff8000825684d0 x2 : 0000000000000001 x1 : 0000000000003000 x0 : 0000000000000000 Call trace: btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 (P) btrfs_free_block_groups+0x9a0/0xd10 fs/btrfs/block-group.c:4568 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2131 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1375 __cleanup_mnt+0x20/0x30 fs/namespace.c:1382 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x168 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 247950 hardirqs last enabled at (247949): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (247950): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (247782): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (247782): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (247755): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6530 at fs/btrfs/block-group.c:4462 check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 Modules linked in: CPU: 0 UID: 0 PID: 6530 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 lr : check_removing_space_info+0x260/0x280 fs/btrfs/block-group.c:4462 sp : ffff8000a2f17930 x29: ffff8000a2f17930 x28: 1fffe0001a13022c x27: dfff800000000000 x26: ffff0000d0981058 x25: 0000000000000001 x24: 1fffe0001a130502 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000028000 x20: ffff0000f6d88000 x19: ffff0000d0982800 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000805371bc x15: 0000000000000001 x14: 1fffe0001a130504 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001a130505 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c62f5b80 x7 : ffff8000825632bc x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff0000d0982800 x0 : ffff0000f6d88000 Call trace: check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 (P) btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4580 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2131 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1375 __cleanup_mnt+0x20/0x30 fs/namespace.c:1382 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x168 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 248030 hardirqs last enabled at (248029): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (248030): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (248004): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (248004): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (247953): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 3026944 free, is not full BTRFS info (device loop1): space_info total=3276800, used=73728, pinned=0, reserved=12288, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop1): global_block_rsv: size 0 reserved 0 BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6530 at fs/btrfs/block-group.c:4473 check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 Modules linked in: CPU: 0 UID: 0 PID: 6530 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 lr : check_removing_space_info+0x238/0x280 fs/btrfs/block-group.c:4473 sp : ffff8000a2f17930 x29: ffff8000a2f17930 x28: 1fffe0001a13022c x27: dfff800000000000 x26: ffff0000d0981058 x25: 0000000000000001 x24: 1fffe0001a130502 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000003000 x20: ffff0000f6d88000 x19: ffff0000d0982800 x18: 0000000000000000 x17: ffff80009353a000 x16: ffff8000805371bc x15: 0000000000000001 x14: 1fffe0001a130504 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001a130505 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c62f5b80 x7 : ffff80008056536c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff0000d0982800 x0 : ffff0000f6d88000 Call trace: check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 (P) btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4580 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2131 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1375 __cleanup_mnt+0x20/0x30 fs/namespace.c:1382 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x168 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 248222 hardirqs last enabled at (248221): [] irqentry_exit+0xd8/0x108 kernel/entry/common.c:214 hardirqs last disabled at (248222): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (248174): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (248174): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (248033): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 3026944 free, is not full BTRFS info (device loop1): space_info total=3276800, used=73728, pinned=0, reserved=12288, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop1): global_block_rsv: size 0 reserved 0 BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 VFS: Busy inodes after unmount of loop1 (btrfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:653! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 6530 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 lr : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 sp : ffff8000a2f17bc0 x29: ffff8000a2f17bc0 x28: 00007dfeb31fc770 x27: ffff80008f7f2030 x26: ffffffffffffffff x25: dfff800000000000 x24: 1fffe0001fbfc4f1 x23: ffff80008b5161a0 x22: dfff800000000000 x21: 0000000000000000 x20: ffff80008ff56f80 x19: ffff0000fdfe2000 x18: 1fffe0003378f088 x17: ffff80009353a000 x16: ffff80008b020820 x15: 0000000000000001 x14: 1ffff000145e2ef0 x13: 0000000000000000 x12: 0000000000000000 x11: ffff7000145e2ef1 x10: 0000000000ff0100 x9 : 61d55e3fa8b8ea00 x8 : 61d55e3fa8b8ea00 x7 : ffff80008056536c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807e00b4 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002f Call trace: generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 (P) kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2131 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1375 __cleanup_mnt+0x20/0x30 fs/namespace.c:1382 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x168 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: f00522a0 91390000 9119c261 97ce37cf (d4210000) ---[ end trace 0000000000000000 ]---