syzbot

BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
BTRFS info (device loop0): at unmount dio bytes count 8192
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6665 at fs/btrfs/block-group.c:172 btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172
Modules linked in:
CPU: 1 UID: 0 PID: 6665 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172
lr : btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172
sp : ffff8000a0787910
x29: ffff8000a0787910 x28: 1fffe00019f0e12c x27: dfff800000000000
x26: ffff0000cf8719c0 x25: 0000000000000001 x24: ffff0000cf8709a8
x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000001
x20: 0000000000002000 x19: ffff0000cf870800 x18: 1fffe000337a0688
x17: ffff80008f7be000 x16: ffff800080535980 x15: 0000000000000001
x14: 1fffe00019f0e135 x13: 0000000000000000 x12: 0000000000000000
x11: ffff600019f0e136 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000cd049e80 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff800082560438
x2 : 0000000000000001 x1 : 0000000000002000 x0 : 0000000000000000
Call trace:
 btrfs_put_block_group+0x2cc/0x364 fs/btrfs/block-group.c:172 (P)
 btrfs_free_block_groups+0x9a0/0xd10 fs/btrfs/block-group.c:4561
 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424
 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74
 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643
 kill_anon_super+0x4c/0x7c fs/super.c:1282
 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2114
 deactivate_locked_super+0xc4/0x12c fs/super.c:474
 deactivate_super+0xe0/0x100 fs/super.c:507
 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1378
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1385
 task_work_run+0x1dc/0x260 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 do_notify_resume+0x174/0x1f4 arch/arm64/kernel/entry-common.c:155
 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:173 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:182 [inline]
 el0_svc+0xb8/0x180 arch/arm64/kernel/entry-common.c:880
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
irq event stamp: 193150
hardirqs last  enabled at (193149): [<ffff800080c6f5fc>] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234
hardirqs last disabled at (193150): [<ffff80008b001bfc>] el1_brk64+0x1c/0x48 arch/arm64/kernel/entry-common.c:574
softirqs last  enabled at (191162): [<ffff8000803d88a0>] softirq_handle_end kernel/softirq.c:425 [inline]
softirqs last  enabled at (191162): [<ffff8000803d88a0>] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607
softirqs last disabled at (190545): [<ffff800080022028>] __do_softirq+0x14/0x20 kernel/softirq.c:613
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6665 at fs/btrfs/block-group.c:4455 check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4456
Modules linked in:
CPU: 1 UID: 0 PID: 6665 Comm: syz-executor Tainted: G        W           6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4456
lr : check_removing_space_info+0x260/0x280 fs/btrfs/block-group.c:4455
sp : ffff8000a0787910
x29: ffff8000a0787910 x28: 1fffe00019f0e22c x27: dfff800000000000
x26: ffff0000cf871058 x25: 0000000000000001 x24: 1fffe00019f0e302
x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000018000
x20: ffff0000c6880000 x19: ffff0000cf871800 x18: 1fffe000337a0688
x17: ffff80008f7be000 x16: ffff800080535980 x15: 0000000000000001
x14: 1fffe00019f0e304 x13: 0000000000000000 x12: 0000000000000000
x11: ffff600019f0e305 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000cd049e80 x7 : ffff80008255b224 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : ffff0000cf871800 x0 : ffff0000c6880000
Call trace:
 check_removing_space_info+0x10c/0x280 fs/btrfs/block-group.c:4456 (P)
 btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4573
 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424
 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74
 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643
 kill_anon_super+0x4c/0x7c fs/super.c:1282
 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2114
 deactivate_locked_super+0xc4/0x12c fs/super.c:474
 deactivate_super+0xe0/0x100 fs/super.c:507
 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1378
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1385
 task_work_run+0x1dc/0x260 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 do_notify_resume+0x174/0x1f4 arch/arm64/kernel/entry-common.c:155
 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:173 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:182 [inline]
 el0_svc+0xb8/0x180 arch/arm64/kernel/entry-common.c:880
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
irq event stamp: 193216
hardirqs last  enabled at (193215): [<ffff800080c6f5fc>] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234
hardirqs last disabled at (193216): [<ffff80008b001bfc>] el1_brk64+0x1c/0x48 arch/arm64/kernel/entry-common.c:574
softirqs last  enabled at (193190): [<ffff8000803d88a0>] softirq_handle_end kernel/softirq.c:425 [inline]
softirqs last  enabled at (193190): [<ffff8000803d88a0>] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607
softirqs last disabled at (193153): [<ffff800080022028>] __do_softirq+0x14/0x20 kernel/softirq.c:613
---[ end trace 0000000000000000 ]---
BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 3055616 free, is not full
BTRFS info (device loop0): space_info total=3276800, used=114688, pinned=0, reserved=8192, may_use=98304, readonly=0 zone_unusable=0
BTRFS info (device loop0): global_block_rsv: size 0 reserved 0
BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0
BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6665 at fs/btrfs/block-group.c:4466 check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4467
Modules linked in:
CPU: 1 UID: 0 PID: 6665 Comm: syz-executor Tainted: G        W           6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4467
lr : check_removing_space_info+0x238/0x280 fs/btrfs/block-group.c:4466
sp : ffff8000a0787910
x29: ffff8000a0787910 x28: 1fffe00019f0e22c x27: dfff800000000000
x26: ffff0000cf871058 x25: 0000000000000001 x24: 1fffe00019f0e302
x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000002000
x20: ffff0000c6880000 x19: ffff0000cf871800 x18: 1fffe000337a0688
x17: ffff80008f7be000 x16: ffff80008b007230 x15: 0000000000000001
x14: 1fffe0001b2c95c8 x13: 0000000000000000 x12: 0000000000000000
x11: ffff60001b2c95c9 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000cd049e80 x7 : ffff800080491074 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : ffff0000cf871800 x0 : ffff0000c6880000
Call trace:
 check_removing_space_info+0x248/0x280 fs/btrfs/block-group.c:4467 (P)
 btrfs_free_block_groups+0xa80/0xd10 fs/btrfs/block-group.c:4573
 close_ctree+0x644/0x1130 fs/btrfs/disk-io.c:4424
 btrfs_put_super+0x1ac/0x1c0 fs/btrfs/super.c:74
 generic_shutdown_super+0x12c/0x2b8 fs/super.c:643
 kill_anon_super+0x4c/0x7c fs/super.c:1282
 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2114
 deactivate_locked_super+0xc4/0x12c fs/super.c:474
 deactivate_super+0xe0/0x100 fs/super.c:507
 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1378
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1385
 task_work_run+0x1dc/0x260 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 do_notify_resume+0x174/0x1f4 arch/arm64/kernel/entry-common.c:155
 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:173 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:182 [inline]
 el0_svc+0xb8/0x180 arch/arm64/kernel/entry-common.c:880
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
irq event stamp: 193712
hardirqs last  enabled at (193711): [<ffff800080491108>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1531 [inline]
hardirqs last  enabled at (193711): [<ffff800080491108>] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5105
hardirqs last disabled at (193712): [<ffff80008b001bfc>] el1_brk64+0x1c/0x48 arch/arm64/kernel/entry-common.c:574
softirqs last  enabled at (193706): [<ffff8000803d88a0>] softirq_handle_end kernel/softirq.c:425 [inline]
softirqs last  enabled at (193706): [<ffff8000803d88a0>] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607
softirqs last disabled at (193701): [<ffff800080022028>] __do_softirq+0x14/0x20 kernel/softirq.c:613
---[ end trace 0000000000000000 ]---
BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 3055616 free, is not full
BTRFS info (device loop0): space_info total=3276800, used=114688, pinned=0, reserved=8192, may_use=98304, readonly=0 zone_unusable=0
BTRFS info (device loop0): global_block_rsv: size 0 reserved 0
BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0
BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0
VFS: Busy inodes after unmount of loop0 (btrfs)
------------[ cut here ]------------
kernel BUG at fs/super.c:653!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 6665 Comm: syz-executor Tainted: G        W           6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651
lr : generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651
sp : ffff8000a0787ba0
x29: ffff8000a0787ba0 x28: 00007dfeb3199cf0 x27: ffff80008f7c2040
x26: ffffffffffffffff x25: dfff800000000000 x24: 1fffe0001a511cf1
x23: ffff80008b4f5340 x22: dfff800000000000 x21: 0000000000000000
x20: ffff80008ff25c00 x19: ffff0000d288e000 x18: 1fffe000337a0688
x17: ffff80008f7be000 x16: ffff80008b007230 x15: 0000000000000001
x14: 1ffff000140f0eec x13: 0000000000000000 x12: 0000000000000000
x11: ffff7000140f0eed x10: 0000000000ff0100 x9 : 43b951e77eab5800
x8 : 43b951e77eab5800 x7 : ffff800080491074 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff8000807de560
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002f
Call trace:
 generic_shutdown_super+0x2b4/0x2b8 fs/super.c:651 (P)
 kill_anon_super+0x4c/0x7c fs/super.c:1282
 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2114
 deactivate_locked_super+0xc4/0x12c fs/super.c:474
 deactivate_super+0xe0/0x100 fs/super.c:507
 cleanup_mnt+0x31c/0x3ac fs/namespace.c:1378
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1385
 task_work_run+0x1dc/0x260 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 do_notify_resume+0x174/0x1f4 arch/arm64/kernel/entry-common.c:155
 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:173 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:182 [inline]
 el0_svc+0xb8/0x180 arch/arm64/kernel/entry-common.c:880
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
Code: d00521c0 91120000 9119c261 97ce439f (d4210000) 
---[ end trace 0000000000000000 ]---