BTRFS info (device loop5): at unmount dio bytes count 12288 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6892 at fs/btrfs/block-group.c:172 btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 Modules linked in: CPU: 0 UID: 0 PID: 6892 Comm: syz-executor Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 lr : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 sp : ffff80009f307930 x29: ffff80009f307930 x28: 1fffe0002075aa2c x27: dfff800000000000 x26: ffff000103ad41c0 x25: 0000000000000001 x24: ffff000103ad51a8 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000001 x20: 0000000000003000 x19: ffff000103ad5000 x18: 0000000000000000 x17: ffff0001fea8c870 x16: ffff800080538320 x15: 0000000000000001 x14: 1fffe0002075aa35 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60002075aa36 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000da6a5c40 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff80008259fe98 x2 : 0000000000000001 x1 : 0000000000003000 x0 : 0000000000000000 Call trace: btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 (P) btrfs_free_block_groups+0x9a0/0xd10 fs/btrfs/block-group.c:4568 close_ctree+0x650/0x113c fs/btrfs/disk-io.c:4426 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:642 kill_anon_super+0x4c/0x7c fs/super.c:1288 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2134 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x178 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 635632 hardirqs last enabled at (635631): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (635632): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (633866): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (633864): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6892 at fs/btrfs/block-group.c:4462 check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 Modules linked in: CPU: 1 UID: 0 PID: 6892 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 lr : check_removing_space_info+0x260/0x280 fs/btrfs/block-group.c:4462 sp : ffff80009f307930 x29: ffff80009f307930 x28: 1fffe0002075a92c x27: dfff800000000000 x26: ffff000103ad4858 x25: 0000000000000001 x24: 1fffe0002075a802 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000028000 x20: ffff0000f116c000 x19: ffff000103ad4000 x18: 0000000000000000 x17: ffff0001fea8c870 x16: ffff800080538320 x15: 0000000000000001 x14: 1fffe0002075a804 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60002075a805 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000da6a5c40 x7 : ffff80008259ac84 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff000103ad4000 x0 : ffff0000f116c000 Call trace: check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4463 (P) btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4580 close_ctree+0x650/0x113c fs/btrfs/disk-io.c:4426 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:642 kill_anon_super+0x4c/0x7c fs/super.c:1288 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2134 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x178 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 635710 hardirqs last enabled at (635709): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (635710): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (635672): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (635672): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (635635): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop5): space_info DATA+METADATA (sub-group id 0) has 2457600 free, is not full BTRFS info (device loop5): space_info total=3276800, used=643072, pinned=0, reserved=12288, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop5): global_block_rsv: size 0 reserved 0 BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop5): delayed_refs_rsv: size 0 reserved 0 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6892 at fs/btrfs/block-group.c:4473 check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 Modules linked in: CPU: 1 UID: 0 PID: 6892 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 lr : check_removing_space_info+0x238/0x280 fs/btrfs/block-group.c:4473 sp : ffff80009f307930 x29: ffff80009f307930 x28: 1fffe0002075a92c x27: dfff800000000000 x26: ffff000103ad4858 x25: 0000000000000001 x24: 1fffe0002075a802 x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000003000 x20: ffff0000f116c000 x19: ffff000103ad4000 x18: 1fffe000337d9290 x17: ffff80008f5ae000 x16: ffff800082defcc0 x15: 0000000000000001 x14: 1fffe000337dbd18 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093134c88 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000da6a5c40 x7 : ffff8000804936c4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff000103ad4000 x0 : ffff0000f116c000 Call trace: check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4474 (P) btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4580 close_ctree+0x650/0x113c fs/btrfs/disk-io.c:4426 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74 generic_shutdown_super+0x12c/0x2b8 fs/super.c:642 kill_anon_super+0x4c/0x7c fs/super.c:1288 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2134 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x178 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 636090 hardirqs last enabled at (636089): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1559 [inline] hardirqs last enabled at (636089): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5073 hardirqs last disabled at (636090): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (636040): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (636040): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (635713): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop5): space_info DATA+METADATA (sub-group id 0) has 2457600 free, is not full BTRFS info (device loop5): space_info total=3276800, used=643072, pinned=0, reserved=12288, may_use=163840, readonly=0 zone_unusable=0 BTRFS info (device loop5): global_block_rsv: size 0 reserved 0 BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop5): delayed_refs_rsv: size 0 reserved 0 VFS: Busy inodes after unmount of loop5 (btrfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:652! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 1 UID: 0 PID: 6892 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:650 lr : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:650 sp : ffff80009f307bc0 x29: ffff80009f307bc0 x28: 00007dfeb2d40974 x27: ffff80008f5b1f28 x26: ffffffffffffffff x25: dfff800000000000 x24: 1fffe0001e8678f0 x23: ffff80008b2fada0 x22: dfff800000000000 x21: 0000000000000000 x20: ffff80008fd18000 x19: ffff0000f433c000 x18: 1fffe000337d9290 x17: ffff80008f5ae000 x16: ffff800082defd48 x15: 0000000000000001 x14: 1fffe000337dbd18 x13: 0000000000000000 x12: 0000000000000000 x11: 00000000000018ee x10: 0000000000ff0100 x9 : e5f8cbb139438900 x8 : e5f8cbb139438900 x7 : ffff8000804936c4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 x2 : 0000000000000002 x1 : 0000000100000000 x0 : 000000000000002f Call trace: generic_shutdown_super+0x2b4/0x2b8 fs/super.c:650 (P) kill_anon_super+0x4c/0x7c fs/super.c:1288 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2134 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1318 __cleanup_mnt+0x20/0x30 fs/namespace.c:1325 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xfc/0x178 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: f0051140 91228000 9119a261 97ce10a9 (d4210000) ---[ end trace 0000000000000000 ]---