BTRFS warning (device loop4): qgroup 0/5 has unreleased space, type 0 rsv 20480 BTRFS error (device loop4): qgroup reserved space leaked BTRFS info (device loop4): at unmount dio bytes count 20480 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6547 at fs/btrfs/block-group.c:172 btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 Modules linked in: CPU: 1 UID: 0 PID: 6547 Comm: syz-executor Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 lr : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 sp : ffff8000a36a7930 x29: ffff8000a36a7930 x28: 1fffe0001abae82c x27: dfff800000000000 x26: ffff0000d8b769c0 x25: 0000000000000001 x24: ffff0000d5d741a8 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000001 x20: 0000000000005000 x19: ffff0000d5d74000 x18: 1fffe00033776488 x17: ffff80008f85e000 x16: ffff8000805381bc x15: 0000000000000001 x14: 1fffe0001abae835 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001abae836 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000e1181e80 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff80008254ed04 x2 : 0000000000000001 x1 : 0000000000005000 x0 : 0000000000000000 Call trace: btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 (P) btrfs_free_block_groups+0x9a0/0xd10 fs/btrfs/block-group.c:4568 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2131 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1375 __cleanup_mnt+0x20/0x30 fs/namespace.c:1382 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x168 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 808216 hardirqs last enabled at (808215): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (808216): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (806336): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (806334): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6547 at fs/btrfs/block-group.c:4462 check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 Modules linked in: CPU: 0 UID: 0 PID: 6547 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 lr : check_removing_space_info+0x260/0x280 fs/btrfs/block-group.c:4462 sp : ffff8000a36a7930 x29: ffff8000a36a7930 x28: 1fffe0001b16ee2c x27: dfff800000000000 x26: ffff0000d8b77058 x25: 0000000000000001 x24: 1fffe0001b16ed02 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000028000 x20: ffff0000fff48000 x19: ffff0000d8b76800 x18: 1fffe00033776488 x17: ffff80008f85e000 x16: ffff8000805381bc x15: 0000000000000001 x14: 1fffe0001b16ed04 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b16ed05 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000e1181e80 x7 : ffff800082549af0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff0000d8b76800 x0 : ffff0000fff48000 Call trace: check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 (P) btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4580 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2131 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1375 __cleanup_mnt+0x20/0x30 fs/namespace.c:1382 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x168 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 808466 hardirqs last enabled at (808465): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (808466): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (808440): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (808440): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (808219): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 1589248 free, is not full BTRFS info (device loop4): space_info total=3276800, used=1503232, pinned=0, reserved=20480, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop4): global_block_rsv: size 0 reserved 0 BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6547 at fs/btrfs/block-group.c:4473 check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 Modules linked in: CPU: 1 UID: 0 PID: 6547 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 lr : check_removing_space_info+0x238/0x280 fs/btrfs/block-group.c:4473 sp : ffff8000a36a7930 x29: ffff8000a36a7930 x28: 1fffe0001b16ee2c x27: dfff800000000000 x26: ffff0000d8b77058 x25: 0000000000000001 x24: 1fffe0001b16ed02 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000005000 x20: ffff0000fff48000 x19: ffff0000d8b76800 x18: 1fffe00033776488 x17: ffff80008f85e000 x16: ffff80008b065bd0 x15: 0000000000000001 x14: 1fffe0001be99940 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001be99941 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000e1181e80 x7 : ffff800080493890 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff0000d8b76800 x0 : ffff0000fff48000 Call trace: check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 (P) btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4580 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643 kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2131 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1375 __cleanup_mnt+0x20/0x30 fs/namespace.c:1382 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x168 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 808996 hardirqs last enabled at (808995): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1531 [inline] hardirqs last enabled at (808995): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5105 hardirqs last disabled at (808996): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (808944): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (808944): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (808469): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 1589248 free, is not full BTRFS info (device loop4): space_info total=3276800, used=1503232, pinned=0, reserved=20480, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop4): global_block_rsv: size 0 reserved 0 BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 VFS: Busy inodes after unmount of loop4 (btrfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:653! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 6547 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 lr : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 sp : ffff8000a36a7bc0 x29: ffff8000a36a7bc0 x28: 00007dfeb339dc28 x27: ffff80008f862030 x26: ffffffffffffffff x25: dfff800000000000 x24: 1fffe0001ad130f1 x23: ffff80008b5516e0 x22: dfff800000000000 x21: 0000000000000000 x20: ffff80008ffbc580 x19: ffff0000d6898000 x18: 1fffe00033771c88 x17: ffff0001fea8d8b0 x16: ffff80008b065bd0 x15: 0000000000000001 x14: 1ffff000146d4ef0 x13: 0000000000000000 x12: 0000000000000000 x11: ffff7000146d4ef1 x10: 0000000000ff0100 x9 : e7f3d5f555207f00 x8 : e7f3d5f555207f00 x7 : ffff80008056636c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807d446c x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002f Call trace: generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 (P) kill_anon_super+0x4c/0x7c fs/super.c:1282 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2131 deactivate_locked_super+0xc4/0x12c fs/super.c:474 deactivate_super+0xe0/0x100 fs/super.c:507 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1375 __cleanup_mnt+0x20/0x30 fs/namespace.c:1382 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x168 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: 90052560 910e0000 9119c261 97cea0a1 (d4210000) ---[ end trace 0000000000000000 ]---