BTRFS warning (device loop0): couldn't read tree root BTRFS warning (device loop0): try to load backup roots slot 3 BTRFS info (device loop0): rebuilding free space tree ------------[ cut here ]------------ WARNING: CPU: 1 PID: 8802 at fs/btrfs/extent-tree.c:3196 __btrfs_free_extent+0x2168/0x3264 fs/btrfs/extent-tree.c:3197 Modules linked in: CPU: 1 UID: 0 PID: 8802 Comm: syz.0.512 Not tainted 6.14.0-rc1-syzkaller-g2014c95afece #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __btrfs_free_extent+0x2168/0x3264 fs/btrfs/extent-tree.c:3197 lr : __btrfs_free_extent+0x458/0x3264 fs/btrfs/extent-tree.c:3099 sp : ffff80009f2c6900 x29: ffff80009f2c6ac0 x28: 0000000000000000 x27: 0000000000690000 x26: 1fffe0001b09ac76 x25: ffff0000f1664000 x24: 00000000fffffffe x23: 1fffe0001b09ac77 x22: 00000000fffffffe x21: ffff0000c8c386e0 x20: ffff0000d84d63b0 x19: ffff0000d84d63b8 x18: ffff0000d1ba4240 x17: 000000000003fdd0 x16: ffff8000832d977c x15: ffff700013e58cae x14: 0000000000000002 x13: 00000000fffffffe x12: ffff0000cb8edb80 x11: 0000000000ff0100 x10: 0000000000000005 x9 : ffff800090318a20 x8 : 0000800000000000 x7 : ffff8000823f6ec0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000002 x1 : ffff800090318a00 x0 : 00000000fffffffe Call trace: __btrfs_free_extent+0x2168/0x3264 fs/btrfs/extent-tree.c:3197 (P) run_delayed_tree_ref fs/btrfs/extent-tree.c:1753 [inline] run_one_delayed_ref fs/btrfs/extent-tree.c:1779 [inline] btrfs_run_delayed_refs_for_head fs/btrfs/extent-tree.c:1976 [inline] __btrfs_run_delayed_refs+0xb54/0x3798 fs/btrfs/extent-tree.c:2046 btrfs_run_delayed_refs+0xc4/0x2e8 fs/btrfs/extent-tree.c:2158 btrfs_start_dirty_block_groups+0xaa0/0xdec fs/btrfs/block-group.c:3481 btrfs_commit_transaction+0x2d0/0x2ba4 fs/btrfs/transaction.c:2224 btrfs_rebuild_free_space_tree+0x20c/0x550 fs/btrfs/free-space-tree.c:1361 btrfs_start_pre_rw_mount+0xb68/0xef4 fs/btrfs/disk-io.c:3070 open_ctree+0x1ce0/0x21c4 fs/btrfs/disk-io.c:3616 btrfs_fill_super fs/btrfs/super.c:972 [inline] btrfs_get_tree_super fs/btrfs/super.c:1898 [inline] btrfs_get_tree+0xdb8/0x12c4 fs/btrfs/super.c:2093 vfs_get_tree+0x90/0x28c fs/super.c:1814 fc_mount+0x24/0xac fs/namespace.c:1271 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline] btrfs_get_tree+0x4f0/0x12c4 fs/btrfs/super.c:2094 vfs_get_tree+0x90/0x28c fs/super.c:1814 do_new_mount+0x278/0x900 fs/namespace.c:3560 path_mount+0x590/0xe04 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount fs/namespace.c:4088 [inline] __arm64_sys_mount+0x4d8/0x5ac fs/namespace.c:4088 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 65012 hardirqs last enabled at (65011): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (65012): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (63332): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (63332): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (63273): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ BTRFS: Transaction aborted (error -117) WARNING: CPU: 0 PID: 8802 at fs/btrfs/extent-tree.c:3200 __btrfs_free_extent+0x21dc/0x3264 fs/btrfs/extent-tree.c:3197 Modules linked in: CPU: 0 UID: 0 PID: 8802 Comm: syz.0.512 Tainted: G W 6.14.0-rc1-syzkaller-g2014c95afece #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __btrfs_free_extent+0x21dc/0x3264 fs/btrfs/extent-tree.c:3197 lr : __btrfs_free_extent+0x21dc/0x3264 fs/btrfs/extent-tree.c:3197 sp : ffff80009f2c6900 x29: ffff80009f2c6ac0 x28: 0000000000000000 x27: ffff700013e58d3c x26: 1fffe0001b09ac76 x25: ffff0000f1664000 x24: 00000000fffffffe x23: 1fffe0001b09ac77 x22: 0000000000000000 x21: 0000000000000000 x20: ffff0000d84d63b0 x19: ffff0000d84d63b8 x18: 1fffe000366f1c86 x17: ffff80008fbcd000 x16: ffff800080469d6c x15: 0000000000000001 x14: 1fffe0001b236110 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b236111 x10: 1fffe0001b236110 x9 : 20ce618fc4efef00 x8 : 20ce618fc4efef00 x7 : ffff8000803d5ea8 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff8000803c8b70 x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 Call trace: __btrfs_free_extent+0x21dc/0x3264 fs/btrfs/extent-tree.c:3197 (P) run_delayed_tree_ref fs/btrfs/extent-tree.c:1753 [inline] run_one_delayed_ref fs/btrfs/extent-tree.c:1779 [inline] btrfs_run_delayed_refs_for_head fs/btrfs/extent-tree.c:1976 [inline] __btrfs_run_delayed_refs+0xb54/0x3798 fs/btrfs/extent-tree.c:2046 btrfs_run_delayed_refs+0xc4/0x2e8 fs/btrfs/extent-tree.c:2158 btrfs_start_dirty_block_groups+0xaa0/0xdec fs/btrfs/block-group.c:3481 btrfs_commit_transaction+0x2d0/0x2ba4 fs/btrfs/transaction.c:2224 btrfs_rebuild_free_space_tree+0x20c/0x550 fs/btrfs/free-space-tree.c:1361 btrfs_start_pre_rw_mount+0xb68/0xef4 fs/btrfs/disk-io.c:3070 open_ctree+0x1ce0/0x21c4 fs/btrfs/disk-io.c:3616 btrfs_fill_super fs/btrfs/super.c:972 [inline] btrfs_get_tree_super fs/btrfs/super.c:1898 [inline] btrfs_get_tree+0xdb8/0x12c4 fs/btrfs/super.c:2093 vfs_get_tree+0x90/0x28c fs/super.c:1814 fc_mount+0x24/0xac fs/namespace.c:1271 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline] btrfs_get_tree+0x4f0/0x12c4 fs/btrfs/super.c:2094 vfs_get_tree+0x90/0x28c fs/super.c:1814 do_new_mount+0x278/0x900 fs/namespace.c:3560 path_mount+0x590/0xe04 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount fs/namespace.c:4088 [inline] __arm64_sys_mount+0x4d8/0x5ac fs/namespace.c:4088 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 65294 hardirqs last enabled at (65293): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1533 [inline] hardirqs last enabled at (65293): [] finish_lock_switch+0xbc/0x1e4 kernel/sched/core.c:5131 hardirqs last disabled at (65294): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (65276): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (65276): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (65255): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- BTRFS: error (device loop0 state A) in __btrfs_free_extent:3200: errno=-117 Filesystem corrupted BTRFS info (device loop0 state EA): leaf 5308416 gen 8 total ptrs 14 free space 3210 owner 2 item 0 key (1048576 192 4194304) itemoff 3971 itemsize 24 block group used 4096 chunk_objectid 256 flags 2 item 1 key (1052672 169 0) itemoff 3938 itemsize 33 extent refs 1 gen 5 flags 2 ref#0: tree block backref root 3 item 2 key (5242880 169 0) itemoff 3905 itemsize 33 extent refs 1 gen 6 flags 2 ref#0: tree block backref root 1 item 3 key (5242880 192 1638400) itemoff 3881 itemsize 24 block group used 40960 chunk_objectid 256 flags 5 item 4 key (5246976 169 0) itemoff 3848 itemsize 33 extent refs 1 gen 5 flags 2 ref#0: tree block backref root 5 item 5 key (5251072 169 0) itemoff 3815 itemsize 33 extent refs 1 gen 6 flags 2 ref#0: tree block backref root 2 item 6 key (5259264 169 0) itemoff 3782 itemsize 33 extent refs 1 gen 5 flags 2 ref#0: tree block backref root 4 item 7 key (5263360 169 0) itemoff 3749 itemsize 33 extent refs 1 gen 6 flags 2 ref#0: tree block backref root 10 item 8 key (5279744 169 0) itemoff 3716 itemsize 33 extent refs 1 gen 5 flags 2 ref#0: tree block backref root 7 item 9 key (5287936 169 0) itemoff 3683 itemsize 33 extent refs 1 gen 5 flags 2 ref#0: tree block backref root 18446744073709551607 item 10 key (5292032 169 0) itemoff 3650 itemsize 33 extent refs 1 gen 5 flags 2 ref#0: tree block backref root 9 item 11 key (5304320 169 0) itemoff 3617 itemsize 33 extent refs 1 gen 8 flags 2 ref#0: tree block backref root 10 item 12 key (5308416 169 0) itemoff 3584 itemsize 33 extent refs 1 gen 8 flags 2 ref#0: tree block backref root 2 item 13 key (6881280 192 1638400) itemoff 3560 itemsize 24 block group used 0 chunk_objectid 256 flags 5 BTRFS critical (device loop0 state EA): unable to find ref byte nr 6881280 parent 0 root 10 owner 0 offset 0 slot 13 BTRFS error (device loop0 state EA): failed to run delayed ref for logical 6881280 num_bytes 4096 type 176 action 2 ref_mod 1: -2 BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2160: errno=-2 No such entry BTRFS warning (device loop0 state EA): failed to rebuild free space tree: -2 BTRFS error (device loop0 state EA): commit super ret -30 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8802 at fs/btrfs/block-group.c:159 btrfs_put_block_group+0x2cc/0x360 fs/btrfs/block-group.c:159 Modules linked in: CPU: 0 UID: 0 PID: 8802 Comm: syz.0.512 Tainted: G W 6.14.0-rc1-syzkaller-g2014c95afece #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_put_block_group+0x2cc/0x360 fs/btrfs/block-group.c:159 lr : btrfs_put_block_group+0x2cc/0x360 fs/btrfs/block-group.c:159 sp : ffff80009f2c73c0 x29: ffff80009f2c73c0 x28: dead000000000100 x27: 0000000000000002 x26: 0000000000000001 x25: ffff0000c4f80800 x24: 0000000000000000 x23: dfff800000000000 x22: ffff0000e1af4180 x21: 0000000000000001 x20: 0000000000001000 x19: ffff0000c4f80800 x18: ffff80009f2c6c80 x17: 00000000000402e2 x16: ffff8000803b9ea0 x15: 0000000000000001 x14: 1fffe000189f0135 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a1249000 x8 : 0000000000080000 x7 : ffff80008015878c x6 : ffff800080158988 x5 : ffff0000d8f12208 x4 : ffff80009f2c70d8 x3 : ffff800082667928 x2 : 0000000000000001 x1 : 0000000000001000 x0 : 0000000000000000 Call trace: btrfs_put_block_group+0x2cc/0x360 fs/btrfs/block-group.c:159 (P) btrfs_free_block_groups+0x9d8/0xe4c fs/btrfs/block-group.c:4458 close_ctree+0x644/0xb60 fs/btrfs/disk-io.c:4458 open_ctree+0x1f44/0x21c4 btrfs_fill_super fs/btrfs/super.c:972 [inline] btrfs_get_tree_super fs/btrfs/super.c:1898 [inline] btrfs_get_tree+0xdb8/0x12c4 fs/btrfs/super.c:2093 vfs_get_tree+0x90/0x28c fs/super.c:1814 fc_mount+0x24/0xac fs/namespace.c:1271 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline] btrfs_get_tree+0x4f0/0x12c4 fs/btrfs/super.c:2094 vfs_get_tree+0x90/0x28c fs/super.c:1814 do_new_mount+0x278/0x900 fs/namespace.c:3560 path_mount+0x590/0xe04 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount fs/namespace.c:4088 [inline] __arm64_sys_mount+0x4d8/0x5ac fs/namespace.c:4088 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 69060 hardirqs last enabled at (69059): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (69060): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (68650): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (68650): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (68511): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8802 at fs/btrfs/block-group.c:159 btrfs_put_block_group+0x2cc/0x360 fs/btrfs/block-group.c:159 Modules linked in: CPU: 0 UID: 0 PID: 8802 Comm: syz.0.512 Tainted: G W 6.14.0-rc1-syzkaller-g2014c95afece #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_put_block_group+0x2cc/0x360 fs/btrfs/block-group.c:159 lr : btrfs_put_block_group+0x2cc/0x360 fs/btrfs/block-group.c:159 sp : ffff80009f2c73c0 x29: ffff80009f2c73c0 x28: dead000000000100 x27: 0000000000000002 x26: 0000000000000001 x25: ffff0000f0298800 x24: 0000000000000000 x23: dfff800000000000 x22: ffff0000e1af4180 x21: 0000000000000001 x20: 0000000000002000 x19: ffff0000f0298800 x18: ffff80009f2c6c80 x17: 00000000000402e2 x16: ffff8000803b9ea0 x15: 0000000000000001 x14: 1fffe0001e053135 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a1249000 x8 : 0000000000080000 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff800082667928 x2 : 0000000000000001 x1 : 0000000000002000 x0 : 0000000000000000 Call trace: btrfs_put_block_group+0x2cc/0x360 fs/btrfs/block-group.c:159 (P) btrfs_free_block_groups+0x9d8/0xe4c fs/btrfs/block-group.c:4458 close_ctree+0x644/0xb60 fs/btrfs/disk-io.c:4458 open_ctree+0x1f44/0x21c4 btrfs_fill_super fs/btrfs/super.c:972 [inline] btrfs_get_tree_super fs/btrfs/super.c:1898 [inline] btrfs_get_tree+0xdb8/0x12c4 fs/btrfs/super.c:2093 vfs_get_tree+0x90/0x28c fs/super.c:1814 fc_mount+0x24/0xac fs/namespace.c:1271 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline] btrfs_get_tree+0x4f0/0x12c4 fs/btrfs/super.c:2094 vfs_get_tree+0x90/0x28c fs/super.c:1814 do_new_mount+0x278/0x900 fs/namespace.c:3560 path_mount+0x590/0xe04 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount fs/namespace.c:4088 [inline] __arm64_sys_mount+0x4d8/0x5ac fs/namespace.c:4088 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 69346 hardirqs last enabled at (69345): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (69346): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (69302): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (69302): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (69063): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8802 at fs/btrfs/block-rsv.c:454 btrfs_release_global_block_rsv+0x218/0x22c fs/btrfs/block-rsv.c:454 Modules linked in: CPU: 0 UID: 0 PID: 8802 Comm: syz.0.512 Tainted: G W 6.14.0-rc1-syzkaller-g2014c95afece #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_release_global_block_rsv+0x218/0x22c fs/btrfs/block-rsv.c:454 lr : btrfs_release_global_block_rsv+0x218/0x22c fs/btrfs/block-rsv.c:454 sp : ffff80009f2c73d0 x29: ffff80009f2c73d0 x28: dead000000000100 x27: 0000000000100000 x26: 0000000000000001 x25: ffff0000f0299800 x24: 0000000000000000 x23: 1fffe0001e053333 x22: ffff0000e1af4180 x21: dfff800000000000 x20: 000000000005e000 x19: ffff0000e1af4400 x18: 1fffe0001e053d0b x17: 00000000000402e2 x16: ffff8000803b9ea0 x15: 0000000000000001 x14: 1fffe0001e053d01 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a1249000 x8 : 0000000000080000 x7 : ffff800082662c48 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080483764 x2 : 0000000000000001 x1 : 000000000005e000 x0 : 0000000000000000 Call trace: btrfs_release_global_block_rsv+0x218/0x22c fs/btrfs/block-rsv.c:454 (P) btrfs_free_block_groups+0xa88/0xe4c fs/btrfs/block-group.c:4464 close_ctree+0x644/0xb60 fs/btrfs/disk-io.c:4458 open_ctree+0x1f44/0x21c4 btrfs_fill_super fs/btrfs/super.c:972 [inline] btrfs_get_tree_super fs/btrfs/super.c:1898 [inline] btrfs_get_tree+0xdb8/0x12c4 fs/btrfs/super.c:2093 vfs_get_tree+0x90/0x28c fs/super.c:1814 fc_mount+0x24/0xac fs/namespace.c:1271 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline] btrfs_get_tree+0x4f0/0x12c4 fs/btrfs/super.c:2094 vfs_get_tree+0x90/0x28c fs/super.c:1814 do_new_mount+0x278/0x900 fs/namespace.c:3560 path_mount+0x590/0xe04 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount fs/namespace.c:4088 [inline] __arm64_sys_mount+0x4d8/0x5ac fs/namespace.c:4088 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 69474 hardirqs last enabled at (69473): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (69474): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (69444): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (69444): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (69351): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8802 at fs/btrfs/block-rsv.c:455 btrfs_release_global_block_rsv+0x224/0x22c fs/btrfs/block-rsv.c:455 Modules linked in: CPU: 0 UID: 0 PID: 8802 Comm: syz.0.512 Tainted: G W 6.14.0-rc1-syzkaller-g2014c95afece #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_release_global_block_rsv+0x224/0x22c fs/btrfs/block-rsv.c:455 lr : btrfs_release_global_block_rsv+0x224/0x22c fs/btrfs/block-rsv.c:455 sp : ffff80009f2c73d0 x29: ffff80009f2c73d0 x28: dead000000000100 x27: 0000000000100000 x26: 0000000000000001 x25: ffff0000f0299800 x24: 0000000000000000 x23: 1fffe0001e053333 x22: ffff0000e1af4180 x21: dfff800000000000 x20: 000000000005e000 x19: 00000000000c0000 x18: 1fffe0001e053d0b x17: 00000000000402e2 x16: ffff8000803b9ea0 x15: 0000000000000001 x14: 1fffe0001e053d01 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a1249000 x8 : 0000000000080000 x7 : ffff800082662c48 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080483764 x2 : 0000000000000001 x1 : 00000000000c0000 x0 : 0000000000000000 Call trace: btrfs_release_global_block_rsv+0x224/0x22c fs/btrfs/block-rsv.c:455 (P) btrfs_free_block_groups+0xa88/0xe4c fs/btrfs/block-group.c:4464 close_ctree+0x644/0xb60 fs/btrfs/disk-io.c:4458 open_ctree+0x1f44/0x21c4 btrfs_fill_super fs/btrfs/super.c:972 [inline] btrfs_get_tree_super fs/btrfs/super.c:1898 [inline] btrfs_get_tree+0xdb8/0x12c4 fs/btrfs/super.c:2093 vfs_get_tree+0x90/0x28c fs/super.c:1814 fc_mount+0x24/0xac fs/namespace.c:1271 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline] btrfs_get_tree+0x4f0/0x12c4 fs/btrfs/super.c:2094 vfs_get_tree+0x90/0x28c fs/super.c:1814 do_new_mount+0x278/0x900 fs/namespace.c:3560 path_mount+0x590/0xe04 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount fs/namespace.c:4088 [inline] __arm64_sys_mount+0x4d8/0x5ac fs/namespace.c:4088 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 69790 hardirqs last enabled at (69789): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline] hardirqs last enabled at (69789): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:95 hardirqs last disabled at (69790): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (69784): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (69784): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (69477): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8802 at fs/btrfs/block-group.c:4476 btrfs_free_block_groups+0xaf8/0xe4c fs/btrfs/block-group.c:4475 Modules linked in: CPU: 0 UID: 0 PID: 8802 Comm: syz.0.512 Tainted: G W 6.14.0-rc1-syzkaller-g2014c95afece #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_free_block_groups+0xaf8/0xe4c fs/btrfs/block-group.c:4475 lr : btrfs_free_block_groups+0xd24/0xe4c fs/btrfs/block-group.c:4475 sp : ffff80009f2c7400 x29: ffff80009f2c7420 x28: dead000000000100 x27: 0000000000100000 x26: 1fffe0001c35ea45 x25: ffff0000f0299800 x24: 000000000005e000 x23: ffff0000f029e800 x22: ffff0000f029e8b8 x21: ffff0000e1af5af0 x20: ffff0000e1af5228 x19: dfff800000000000 x18: 1fffe0001e053d0b x17: 00000000000402e2 x16: ffff8000803b9ea0 x15: 0000000000000001 x14: 1fffe0001e053d01 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a1249000 x8 : 0000000000080000 x7 : ffff800082662c48 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080483764 x2 : 0000000000000001 x1 : 000000000005e000 x0 : 0000000000000000 Call trace: btrfs_free_block_groups+0xaf8/0xe4c fs/btrfs/block-group.c:4475 (P) close_ctree+0x644/0xb60 fs/btrfs/disk-io.c:4458 open_ctree+0x1f44/0x21c4 btrfs_fill_super fs/btrfs/super.c:972 [inline] btrfs_get_tree_super fs/btrfs/super.c:1898 [inline] btrfs_get_tree+0xdb8/0x12c4 fs/btrfs/super.c:2093 vfs_get_tree+0x90/0x28c fs/super.c:1814 fc_mount+0x24/0xac fs/namespace.c:1271 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline] btrfs_get_tree+0x4f0/0x12c4 fs/btrfs/super.c:2094 vfs_get_tree+0x90/0x28c fs/super.c:1814 do_new_mount+0x278/0x900 fs/namespace.c:3560 path_mount+0x590/0xe04 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount fs/namespace.c:4088 [inline] __arm64_sys_mount+0x4d8/0x5ac fs/namespace.c:4088 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 70086 hardirqs last enabled at (70085): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline] hardirqs last enabled at (70085): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:95 hardirqs last disabled at (70086): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (70080): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (70080): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (69793): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop0 state EA): space_info DATA+METADATA has 2838528 free, is not full BTRFS info (device loop0 state EA): space_info total=3276800, used=40960, pinned=0, reserved=12288, may_use=385024, readonly=0 zone_unusable=0 BTRFS info (device loop0 state EA): global_block_rsv: size 0 reserved 0 BTRFS info (device loop0 state EA): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop0 state EA): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop0 state EA): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop0 state EA): delayed_refs_rsv: size 786432 reserved 385024 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 8802 at fs/btrfs/block-group.c:4488 btrfs_free_block_groups+0xcfc/0xe4c fs/btrfs/block-group.c:4488 Modules linked in: CPU: 1 UID: 0 PID: 8802 Comm: syz.0.512 Tainted: G W 6.14.0-rc1-syzkaller-g2014c95afece #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : btrfs_free_block_groups+0xcfc/0xe4c fs/btrfs/block-group.c:4488 lr : btrfs_free_block_groups+0xcfc/0xe4c fs/btrfs/block-group.c:4488 sp : ffff80009f2c7400 x29: ffff80009f2c7420 x28: dead000000000100 x27: 0000000000100000 x26: 1fffe0001c35ea45 x25: ffff0000f0299800 x24: 0000000000003000 x23: ffff0000f029e800 x22: ffff0000f029e8b8 x21: ffff0000e1af5af0 x20: ffff0000e1af5228 x19: dfff800000000000 x18: 1fffe000366f6486 x17: ffff80008fbcd000 x16: ffff800080469d6c x15: 0000000000000001 x14: 1ffff000120a0dda x13: ffff80009f2c8000 x12: 0000000000000003 x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a1249000 x8 : 0000000000080000 x7 : ffff80008015878c x6 : ffff800080158988 x5 : ffff0000d8f12908 x4 : ffff80009f2c6de8 x3 : 0000000000000000 x2 : 0000000000000006 x1 : 0000000000003000 x0 : 0000000000000000 Call trace: btrfs_free_block_groups+0xcfc/0xe4c fs/btrfs/block-group.c:4488 (P) close_ctree+0x644/0xb60 fs/btrfs/disk-io.c:4458 open_ctree+0x1f44/0x21c4 btrfs_fill_super fs/btrfs/super.c:972 [inline] btrfs_get_tree_super fs/btrfs/super.c:1898 [inline] btrfs_get_tree+0xdb8/0x12c4 fs/btrfs/super.c:2093 vfs_get_tree+0x90/0x28c fs/super.c:1814 fc_mount+0x24/0xac fs/namespace.c:1271 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline] btrfs_get_tree+0x4f0/0x12c4 fs/btrfs/super.c:2094 vfs_get_tree+0x90/0x28c fs/super.c:1814 do_new_mount+0x278/0x900 fs/namespace.c:3560 path_mount+0x590/0xe04 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount fs/namespace.c:4088 [inline] __arm64_sys_mount+0x4d8/0x5ac fs/namespace.c:4088 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 71260 hardirqs last enabled at (71259): [] __call_rcu_common kernel/rcu/tree.c:3090 [inline] hardirqs last enabled at (71259): [] call_rcu+0x6d4/0xb9c kernel/rcu/tree.c:3172 hardirqs last disabled at (71260): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (71218): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (71218): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (70661): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- BTRFS info (device loop0 state EA): space_info DATA+METADATA has 2838528 free, is not full BTRFS info (device loop0 state EA): space_info total=3276800, used=40960, pinned=0, reserved=12288, may_use=385024, readonly=0 zone_unusable=0 BTRFS info (device loop0 state EA): global_block_rsv: size 0 reserved 0 BTRFS info (device loop0 state EA): trans_block_rsv: size 0 reserved 0 BTRFS info (device loop0 state EA): chunk_block_rsv: size 0 reserved 0 BTRFS info (device loop0 state EA): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop0 state EA): delayed_refs_rsv: size 786432 reserved 385024 BTRFS error (device loop0 state EA): open_ctree failed: -2