BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! turning off the locking correctness validator. CPU: 1 PID: 6250 Comm: syz.5.288 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 add_chain_cache kernel/locking/lockdep.c:-1 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:3772 [inline] validate_chain kernel/locking/lockdep.c:3793 [inline] __lock_acquire+0x1b40/0x6544 kernel/locking/lockdep.c:5049 lock_acquire+0x20c/0x644 kernel/locking/lockdep.c:5662 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x6c/0xb4 kernel/locking/spinlock.c:162 __stack_depot_save+0x1c4/0x4b8 lib/stackdepot.c:479 kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x64/0x80 mm/kasan/common.c:52 kasan_save_free_info+0x3c/0x60 mm/kasan/generic.c:516 ____kasan_slab_free+0x148/0x1b0 mm/kasan/common.c:236 __kasan_slab_free+0x18/0x28 mm/kasan/common.c:244 kasan_slab_free include/linux/kasan.h:177 [inline] slab_free_hook mm/slub.c:1729 [inline] slab_free_freelist_hook+0x16c/0x1ec mm/slub.c:1755 slab_free mm/slub.c:3687 [inline] __kmem_cache_free+0xc0/0x224 mm/slub.c:3700 kfree+0xd0/0x1ac mm/slab_common.c:988 btrfs_ref_tree_mod+0xed0/0x128c fs/btrfs/ref-verify.c:808 btrfs_free_tree_block+0x244/0xa1c fs/btrfs/extent-tree.c:3297 btrfs_force_cow_block+0xb70/0x187c fs/btrfs/ctree.c:527 btrfs_cow_block+0x2d0/0x710 fs/btrfs/ctree.c:623 btrfs_search_slot+0xa54/0x2364 fs/btrfs/ctree.c:2087 btrfs_insert_empty_items+0xa4/0x178 fs/btrfs/ctree.c:4185 btrfs_insert_delayed_item fs/btrfs/delayed-inode.c:743 [inline] btrfs_insert_delayed_items fs/btrfs/delayed-inode.c:821 [inline] __btrfs_commit_inode_delayed_items+0x86c/0x1788 fs/btrfs/delayed-inode.c:1108 __btrfs_run_delayed_items+0x1ac/0x440 fs/btrfs/delayed-inode.c:1153 btrfs_run_delayed_items+0x24/0x34 fs/btrfs/delayed-inode.c:1190 btrfs_commit_transaction+0xf8c/0x29f0 fs/btrfs/transaction.c:2388 create_snapshot+0x4ec/0x838 fs/btrfs/ioctl.c:856 btrfs_mksubvol+0x554/0x6bc fs/btrfs/ioctl.c:1008 btrfs_mksnapshot+0xc4/0x154 fs/btrfs/ioctl.c:1054 __btrfs_ioctl_snap_create+0x310/0x3f8 fs/btrfs/ioctl.c:2218 btrfs_ioctl_snap_create_v2+0x1a4/0x38c fs/btrfs/ioctl.c:2305 btrfs_ioctl+0xa88/0xbd0 fs/btrfs/ioctl.c:-1 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585