[ 488.678376][ T6612] BTRFS info (device loop1): last unmount of filesystem 2721f167-6ade-4456-8e9f-a3f66a799b84 [ 489.588207][T14689] loop2: detected capacity change from 0 to 32768 [ 489.635428][T14689] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.401 (14689) [ 489.737222][T14689] BTRFS info (device loop2): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 489.773044][T14692] loop3: detected capacity change from 0 to 32768 [ 489.798012][T14689] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 489.828014][T14689] BTRFS info (device loop2): using free-space-tree [ 489.828241][T14692] BTRFS: device /dev/loop3 (7:3) using temp-fsid 39418f43-9b9c-4688-9003-c6eede64ac6f [ 489.914862][T14694] loop0: detected capacity change from 0 to 32768 [ 489.925636][T14692] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.399 (14692) [ 490.078185][T14694] BTRFS: device /dev/loop0 (7:0) using temp-fsid 44a6db7c-048c-49c3-a446-7cb4dca8c6b1 [ 490.114309][T14692] BTRFS info (device loop3): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 490.121237][T14694] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.400 (14694) [ 490.177429][T14692] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 490.217275][T14694] BTRFS info (device loop0): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 490.254645][T14692] BTRFS info (device loop3): using free-space-tree [ 490.264066][T14694] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 490.297054][T14699] loop1: detected capacity change from 0 to 32768 [ 490.325427][T14694] BTRFS info (device loop0): using free-space-tree [ 490.349731][T14697] loop4: detected capacity change from 0 to 32768 [ 490.404733][T14699] BTRFS: device /dev/loop1 (7:1) using temp-fsid c3d045a4-1651-42b6-a51b-9ce888cd6ab0 [ 490.459534][T14699] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.403 (14699) [ 490.655929][T14697] BTRFS: device /dev/loop4 (7:4) using temp-fsid 460a5180-763b-49fd-be4f-e0da05300cab [ 490.706329][T14699] BTRFS info (device loop1): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 490.713892][T14697] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.402 (14697) [ 490.788031][T14699] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 490.796940][T14699] BTRFS info (device loop1): using free-space-tree [ 490.807266][T14697] BTRFS info (device loop4): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 490.862694][T14697] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 490.873531][T14697] BTRFS info (device loop4): using free-space-tree [ 491.213030][ T6623] BTRFS info (device loop3): last unmount of filesystem 39418f43-9b9c-4688-9003-c6eede64ac6f [ 491.497097][ T6616] BTRFS info (device loop2): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 492.320524][T14696] BTRFS info (device loop4): last unmount of filesystem 460a5180-763b-49fd-be4f-e0da05300cab [ 492.726942][T14694] BTRFS info (device loop0): last unmount of filesystem 44a6db7c-048c-49c3-a446-7cb4dca8c6b1 [ 492.766480][T14698] BTRFS info (device loop1): last unmount of filesystem c3d045a4-1651-42b6-a51b-9ce888cd6ab0 [ 492.842745][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.116895][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.260616][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.385707][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.658603][ T1151] bridge_slave_1: left allmulticast mode [ 493.664358][ T1151] bridge_slave_1: left promiscuous mode [ 493.681923][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.699284][ T1151] bridge_slave_0: left allmulticast mode Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 493.705190][ T1151] bridge_slave_0: left promiscuous mode [ 493.722191][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state executing program executing program executing program executing program executing program [ 495.073625][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.106194][T14806] loop1: detected capacity change from 0 to 32768 [ 495.157492][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.170050][T14806] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor344 (14806) [ 495.216765][ T1151] bond0 (unregistering): Released all slaves [ 495.245114][T14806] BTRFS info (device loop1): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 495.288322][T14806] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 495.297227][T14806] BTRFS info (device loop1): using free-space-tree [ 495.299985][T14808] loop4: detected capacity change from 0 to 32768 [ 495.342028][T14808] BTRFS: device /dev/loop4 (7:4) using temp-fsid 01aae886-ab31-4d82-8983-4f094ce134ad [ 495.366367][T14810] loop0: detected capacity change from 0 to 32768 [ 495.400418][T14808] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor344 (14808) [ 495.413482][T14811] loop2: detected capacity change from 0 to 32768 [ 495.433795][T14810] BTRFS: device /dev/loop0 (7:0) using temp-fsid 824226e5-0b0e-4abf-ba40-3038b81c4dda [ 495.459450][T14808] BTRFS info (device loop4): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 495.491827][T14808] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 495.501827][T14810] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor344 (14810) [ 495.520006][T14808] BTRFS info (device loop4): using free-space-tree [ 495.559040][T14811] BTRFS: device /dev/loop2 (7:2) using temp-fsid 0e63b251-cd85-4e2d-a5e4-d14daab7a39c [ 495.578879][T14810] BTRFS info (device loop0): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 495.588295][T14811] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor344 (14811) [ 495.642108][T14811] BTRFS info (device loop2): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 495.651482][T14810] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 495.680643][T14811] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 495.703708][T14810] BTRFS info (device loop0): using free-space-tree [ 495.736569][T14816] loop3: detected capacity change from 0 to 32768 [ 495.762936][T14811] BTRFS info (device loop2): using free-space-tree [ 495.778960][T14816] BTRFS: device /dev/loop3 (7:3) using temp-fsid 7d74d0ed-10b1-40b7-8588-b1ee98edaee7 [ 495.800781][T14816] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor344 (14816) [ 495.846970][T14816] BTRFS info (device loop3): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 495.919715][T14816] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 495.996501][T14816] BTRFS info (device loop3): using free-space-tree [ 496.994131][ T1151] hsr_slave_0: left promiscuous mode [ 497.084638][ T1151] hsr_slave_1: left promiscuous mode [ 497.126114][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.196640][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.303338][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.315906][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.488322][ T1151] veth1_macvtap: left promiscuous mode [ 497.493963][ T1151] veth0_macvtap: left promiscuous mode [ 497.566285][ T1151] veth1_vlan: left promiscuous mode [ 497.595914][ T1151] veth0_vlan: left promiscuous mode [ 498.408653][T14917] ======================================================= [ 498.408653][T14917] WARNING: The mand mount option has been deprecated and [ 498.408653][T14917] and is ignored by this kernel. Remove the mand [ 498.408653][T14917] option from the mount to silence this warning. [ 498.408653][T14917] ======================================================= [ 498.588001][T14918] BTRFS warning (device loop4 state M): remount supports changing free space tree only from RO to RW [ 498.649733][ T36] BTRFS error (device loop4 state M): trying to do action 2 to bytenr 1052672 num_bytes 4096 but there is no existing entry! [ 498.656265][T14917] BTRFS warning (device loop1 state M): remount supports changing free space tree only from RO to RW [ 498.663546][ T36] BTRFS error (device loop4 state M): Ref action 2, root 3, ref_root 3, parent 0, owner 0, offset 0, num_refs 18446744073709551615 [ 498.688320][ T36] btrfs_force_cow_block+0xf77/0x1e10 [ 498.694129][ T36] btrfs_cow_block+0x40a/0x830 [ 498.699211][ T36] btrfs_search_slot+0xcd7/0x2d90 [ 498.704478][ T36] btrfs_update_device+0x149/0x4c0 [ 498.705832][T14918] BTRFS info (device loop4 state M): setting nodatasum [ 498.710269][ T36] btrfs_chunk_alloc_add_chunk_item+0x2ab/0x1070 [ 498.723743][ T36] btrfs_chunk_alloc+0x7e2/0x1150 [ 498.730233][ T36] flush_space+0x30b/0xcd0 [ 498.735909][ T36] do_async_reclaim_metadata_space+0x144/0x390 [ 498.742394][ T36] btrfs_async_reclaim_metadata_space+0x89/0xe0 [ 498.748926][ T36] process_scheduled_works+0xade/0x17b0 [ 498.754702][ T36] worker_thread+0x8a0/0xda0 [ 498.759598][ T36] kthread+0x711/0x8a0 [ 498.763898][ T36] ret_from_fork+0x3fc/0x770 [ 498.768807][ T36] ret_from_fork_asm+0x1a/0x30 [ 498.778579][T14918] BTRFS info (device loop4 state M): setting nodatasum [ 498.806039][T14917] BTRFS info (device loop1 state M): setting nodatasum [ 498.836587][T14918] BTRFS info (device loop4 state M): turning off barriers [ 498.854623][T14917] BTRFS info (device loop1 state M): setting nodatasum [ 498.882213][T14918] BTRFS info (device loop4 state M): turning on flush-on-commit [ 498.887277][T14917] BTRFS info (device loop1 state M): turning off barriers [ 498.905721][T14917] BTRFS info (device loop1 state M): turning on flush-on-commit [ 498.939343][T14918] BTRFS info (device loop4 state M): force clearing of disk cache [ 498.942498][T14917] BTRFS info (device loop1 state M): force clearing of disk cache [ 498.957573][T14917] BTRFS info (device loop1 state M): doing ref verification [ 498.967933][T14917] BTRFS info (device loop1 state M): max_inline set to 26856 [ 498.978926][T14920] BTRFS warning (device loop2 state M): remount supports changing free space tree only from RO to RW [ 498.983622][T14919] BTRFS error (device loop2 state M): trying to do action 2 to bytenr 1052672 num_bytes 4096 but there is no existing entry! [ 499.003185][T14919] BTRFS error (device loop2 state M): Ref action 2, root 3, ref_root 3, parent 0, owner 0, offset 0, num_refs 18446744073709551615 [ 499.016869][T14919] btrfs_force_cow_block+0xf77/0x1e10 [ 499.022488][T14919] btrfs_cow_block+0x40a/0x830 [ 499.027443][T14919] btrfs_search_slot+0xcd7/0x2d90 [ 499.032796][T14919] btrfs_update_device+0x149/0x4c0 [ 499.038841][T14919] btrfs_chunk_alloc_add_chunk_item+0x2ab/0x1070 [ 499.045529][T14919] btrfs_chunk_alloc+0x7e2/0x1150 [ 499.051085][T14919] flush_space+0x30b/0xcd0 [ 499.055699][T14919] do_async_reclaim_metadata_space+0x144/0x390 [ 499.062159][T14919] btrfs_async_reclaim_metadata_space+0x89/0xe0 [ 499.068944][T14919] process_scheduled_works+0xade/0x17b0 [ 499.074709][T14919] worker_thread+0x8a0/0xda0 [ 499.079578][T14919] kthread+0x711/0x8a0 [ 499.084292][T14919] ret_from_fork+0x3fc/0x770 [ 499.089130][T14919] ret_from_fork_asm+0x1a/0x30 [ 499.096390][T14921] BTRFS warning (device loop3 state M): remount supports changing free space tree only from RO to RW [ 499.114628][T14918] BTRFS info (device loop4 state M): max_inline set to 26856 [ 499.118032][T14920] BTRFS info (device loop2 state M): setting nodatasum [ 499.131321][ T36] BTRFS error (device loop3 state M): trying to do action 2 to bytenr 1052672 num_bytes 4096 but there is no existing entry! [ 499.138326][T14921] BTRFS info (device loop3 state M): setting nodatasum [ 499.146215][ T36] BTRFS error (device loop3 state M): Ref action 2, root 3, ref_root 3, parent 0, owner 0, offset 0, num_refs 18446744073709551615 [ 499.166812][ T36] btrfs_force_cow_block+0xf77/0x1e10 [ 499.172462][T14920] BTRFS info (device loop2 state M): setting nodatasum [ 499.172487][T14920] BTRFS info (device loop2 state M): turning off barriers [ 499.172504][T14920] BTRFS info (device loop2 state M): turning on flush-on-commit [ 499.172520][T14920] BTRFS info (device loop2 state M): force clearing of disk cache [ 499.172537][T14920] BTRFS info (device loop2 state M): doing ref verification [ 499.172554][T14920] BTRFS info (device loop2 state M): max_inline set to 26856 [ 499.178945][T14921] BTRFS info (device loop3 state M): setting nodatasum [ 499.179892][ T36] btrfs_cow_block+0x40a/0x830 [ 499.203119][T14921] BTRFS info (device loop3 state M): turning off barriers [ 499.203145][T14921] BTRFS info (device loop3 state M): turning on flush-on-commit [ 499.203163][T14921] BTRFS info (device loop3 state M): force clearing of disk cache [ 499.203180][T14921] BTRFS info (device loop3 state M): doing ref verification [ 499.203199][T14921] BTRFS info (device loop3 state M): max_inline set to 26856 [ 499.270083][ T36] btrfs_search_slot+0xcd7/0x2d90 [ 499.275350][ T36] btrfs_update_device+0x149/0x4c0 [ 499.280780][ T36] btrfs_chunk_alloc_add_chunk_item+0x2ab/0x1070 [ 499.287352][ T36] btrfs_chunk_alloc+0x7e2/0x1150 [ 499.292706][ T36] flush_space+0x30b/0xcd0 [ 499.297363][ T36] do_async_reclaim_metadata_space+0x144/0x390 [ 499.304015][ T36] btrfs_async_reclaim_metadata_space+0x89/0xe0 [ 499.310562][ T36] process_scheduled_works+0xade/0x17b0 [ 499.316357][ T36] worker_thread+0x8a0/0xda0 [ 499.321494][ T36] kthread+0x711/0x8a0 [ 499.325798][ T36] ret_from_fork+0x3fc/0x770 [ 499.330687][ T36] ret_from_fork_asm+0x1a/0x30 [ 499.345566][T14798] BTRFS info (device loop0): last unmount of filesystem 824226e5-0b0e-4abf-ba40-3038b81c4dda [ 499.367613][T14800] BTRFS info (device loop1): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 499.385056][T14803] BTRFS info (device loop3): last unmount of filesystem 7d74d0ed-10b1-40b7-8588-b1ee98edaee7 [ 499.432540][T14803] ------------[ cut here ]------------ [ 499.438668][T14803] WARNING: CPU: 1 PID: 14803 at fs/btrfs/block-rsv.c:466 btrfs_release_global_block_rsv+0x262/0x270 [ 499.450965][T14803] Modules linked in: [ 499.457322][T14803] CPU: 1 UID: 0 PID: 14803 Comm: syz-executor344 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 499.468877][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.472965][T14802] BTRFS info (device loop2): last unmount of filesystem 0e63b251-cd85-4e2d-a5e4-d14daab7a39c [ 499.479549][T14803] RIP: 0010:btrfs_release_global_block_rsv+0x262/0x270 [ 499.496901][T14803] Code: 0f 0b 90 e9 0b ff ff ff e8 bb 2d dd fd 90 0f 0b 90 e9 35 ff ff ff e8 ad 2d dd fd 90 0f 0b 90 e9 66 ff ff ff e8 9f 2d dd fd 90 <0f> 0b 90 eb 88 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 499.501760][T14804] BTRFS info (device loop4): last unmount of filesystem 01aae886-ab31-4d82-8983-4f094ce134ad [ 499.517475][T14803] RSP: 0018:ffffc90010187ad0 EFLAGS: 00010293 [ 499.535059][T14803] RAX: ffffffff83e2f811 RBX: ffffffffffff0000 RCX: ffff88802ccdbc00 [ 499.544047][T14803] RDX: 0000000000000000 RSI: ffffffffffff0000 RDI: 0000000000000000 [ 499.552963][T14803] RBP: ffff88805e8e8188 R08: ffff8880747fd823 R09: 1ffff1100e8ffb04 [ 499.562621][T14803] R10: dffffc0000000000 R11: ffffed100e8ffb05 R12: ffff88805e8e8180 [ 499.571829][T14803] R13: ffff8880747fab18 R14: 0000000000000000 R15: dffffc0000000000 [ 499.580103][T14803] FS: 0000555571b253c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 499.585608][T14802] ------------[ cut here ]------------ [ 499.589143][T14803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.589165][T14803] CR2: 00007f5498319000 CR3: 00000000754ba000 CR4: 00000000003526f0 [ 499.594636][T14802] WARNING: CPU: 0 PID: 14802 at fs/btrfs/block-rsv.c:466 btrfs_release_global_block_rsv+0x262/0x270 [ 499.601300][T14803] Call Trace: [ 499.601326][T14803] [ 499.601345][T14803] btrfs_free_block_groups+0xc2c/0xf40 [ 499.601415][T14803] close_ctree+0x7f0/0xd60 [ 499.601451][T14803] ? do_raw_spin_unlock+0x122/0x240 [ 499.601507][T14803] ? __pfx_close_ctree+0x10/0x10 [ 499.601534][T14803] ? hook_sb_delete+0x1a8/0xbd0 [ 499.609644][T14802] Modules linked in: [ 499.609680][T14802] CPU: 0 UID: 0 PID: 14802 Comm: syz-executor344 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 499.620575][T14803] ? __pfx_hook_sb_delete+0x10/0x10 [ 499.623764][T14802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.626730][T14803] ? __pfx_evict_inodes+0x10/0x10 [ 499.632271][T14802] RIP: 0010:btrfs_release_global_block_rsv+0x262/0x270 [ 499.636640][T14803] ? btrfs_sync_fs+0x1b2/0x6a0 [ 499.642107][T14802] Code: 0f 0b 90 e9 0b ff ff ff e8 bb 2d dd fd 90 0f 0b 90 e9 35 ff ff ff e8 ad 2d dd fd 90 0f 0b 90 e9 66 ff ff ff e8 9f 2d dd fd 90 <0f> 0b 90 eb 88 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 499.646854][T14803] ? __pfx_btrfs_put_super+0x10/0x10 [ 499.652231][T14802] RSP: 0018:ffffc90010177ad0 EFLAGS: 00010293 [ 499.652258][T14802] RAX: ffffffff83e2f811 RBX: ffffffffffff0000 RCX: ffff88802ed91e00 [ 499.652277][T14802] RDX: 0000000000000000 RSI: ffffffffffff0000 RDI: 0000000000000000 [ 499.652292][T14802] RBP: ffff88807eaec188 R08: ffff888079545823 R09: 1ffff1100f2a8b04 [ 499.652310][T14802] R10: dffffc0000000000 R11: ffffed100f2a8b05 R12: ffff88807eaec180 [ 499.652328][T14802] R13: ffff888079547b18 R14: 0000000000000000 R15: dffffc0000000000 [ 499.652345][T14802] FS: 0000555571b253c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 499.652365][T14802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.652381][T14802] CR2: 00007ffdcb8f7ff8 CR3: 0000000032382000 CR4: 00000000003526f0 [ 499.652402][T14802] Call Trace: [ 499.652411][T14802] [ 499.652424][T14802] btrfs_free_block_groups+0xc2c/0xf40 [ 499.652470][T14802] close_ctree+0x7f0/0xd60 [ 499.652500][T14802] ? do_raw_spin_unlock+0x122/0x240 [ 499.652539][T14802] ? __pfx_close_ctree+0x10/0x10 [ 499.652567][T14802] ? hook_sb_delete+0x1a8/0xbd0 [ 499.652606][T14802] ? __pfx_hook_sb_delete+0x10/0x10 [ 499.652642][T14802] ? __pfx_evict_inodes+0x10/0x10 [ 499.652668][T14802] ? btrfs_sync_fs+0x1b2/0x6a0 [ 499.652697][T14802] ? __pfx_btrfs_put_super+0x10/0x10 [ 499.652727][T14802] generic_shutdown_super+0x135/0x2c0 [ 499.652764][T14802] kill_anon_super+0x3b/0x70 [ 499.652798][T14802] btrfs_kill_super+0x41/0x50 [ 499.652827][T14802] deactivate_locked_super+0xb9/0x130 [ 499.652862][T14802] cleanup_mnt+0x425/0x4c0 [ 499.652893][T14802] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.652921][T14802] task_work_run+0x1d4/0x260 [ 499.652958][T14802] ? __pfx_task_work_run+0x10/0x10 [ 499.652995][T14802] ? __x64_sys_umount+0x122/0x160 [ 499.653024][T14802] ? exit_to_user_mode_loop+0x40/0x110 [ 499.653050][T14802] exit_to_user_mode_loop+0xec/0x110 [ 499.653074][T14802] do_syscall_64+0x2bd/0x3b0 [ 499.656991][T14803] generic_shutdown_super+0x135/0x2c0 [ 499.668409][T14802] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.668440][T14802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.668464][T14802] ? clear_bhb_loop+0x60/0xb0 [ 499.668493][T14802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.668515][T14802] RIP: 0033:0x7f54983861e7 [ 499.668548][T14802] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 499.668569][T14802] RSP: 002b:00007ffdcb8f81c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 499.668596][T14802] RAX: 0000000000000000 RBX: 0000000000000048 RCX: 00007f54983861e7 [ 499.668612][T14802] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcb8f8280 [ 499.668627][T14802] RBP: 00007ffdcb8f8280 R08: 0000000000000000 R09: 0000000000000000 [ 499.668641][T14802] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffdcb8f9330 [ 499.668658][T14802] R13: 0000555571b26700 R14: 431bde82d7b634db R15: 00007ffdcb8f92d4 [ 499.668694][T14802] [ 499.668712][T14802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 499.668729][T14802] CPU: 0 UID: 0 PID: 14802 Comm: syz-executor344 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 499.668754][T14802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.668768][T14802] Call Trace: [ 499.668777][T14802] [ 499.668786][T14802] dump_stack_lvl+0x99/0x250 [ 499.668813][T14802] ? __asan_memcpy+0x40/0x70 [ 499.668843][T14802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.668871][T14802] ? __pfx__printk+0x10/0x10 [ 499.668921][T14802] panic+0x2db/0x790 [ 499.668955][T14802] ? __pfx_panic+0x10/0x10 [ 499.669016][T14802] __warn+0x31b/0x4b0 [ 499.669040][T14802] ? btrfs_release_global_block_rsv+0x262/0x270 [ 499.669072][T14802] ? btrfs_release_global_block_rsv+0x262/0x270 [ 499.669099][T14802] report_bug+0x2be/0x4f0 [ 499.669122][T14802] ? btrfs_release_global_block_rsv+0x262/0x270 [ 499.669150][T14802] ? btrfs_release_global_block_rsv+0x262/0x270 [ 499.669177][T14802] ? btrfs_release_global_block_rsv+0x264/0x270 [ 499.669204][T14802] handle_bug+0x84/0x160 [ 499.669236][T14802] exc_invalid_op+0x1a/0x50 [ 499.669266][T14802] asm_exc_invalid_op+0x1a/0x20 [ 499.669289][T14802] RIP: 0010:btrfs_release_global_block_rsv+0x262/0x270 [ 499.669317][T14802] Code: 0f 0b 90 e9 0b ff ff ff e8 bb 2d dd fd 90 0f 0b 90 e9 35 ff ff ff e8 ad 2d dd fd 90 0f 0b 90 e9 66 ff ff ff e8 9f 2d dd fd 90 <0f> 0b 90 eb 88 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 499.669338][T14802] RSP: 0018:ffffc90010177ad0 EFLAGS: 00010293 [ 499.669362][T14802] RAX: ffffffff83e2f811 RBX: ffffffffffff0000 RCX: ffff88802ed91e00 [ 499.669381][T14802] RDX: 0000000000000000 RSI: ffffffffffff0000 RDI: 0000000000000000 [ 499.669399][T14802] RBP: ffff88807eaec188 R08: ffff888079545823 R09: 1ffff1100f2a8b04 [ 499.669418][T14802] R10: dffffc0000000000 R11: ffffed100f2a8b05 R12: ffff88807eaec180 [ 499.669437][T14802] R13: ffff888079547b18 R14: 0000000000000000 R15: dffffc0000000000 [ 499.669465][T14802] ? btrfs_release_global_block_rsv+0x261/0x270 [ 499.669502][T14802] btrfs_free_block_groups+0xc2c/0xf40 [ 499.669549][T14802] close_ctree+0x7f0/0xd60 [ 499.669583][T14802] ? do_raw_spin_unlock+0x122/0x240 [ 499.669625][T14802] ? __pfx_close_ctree+0x10/0x10 [ 499.669657][T14802] ? hook_sb_delete+0x1a8/0xbd0 [ 499.669698][T14802] ? __pfx_hook_sb_delete+0x10/0x10 [ 499.669739][T14802] ? __pfx_evict_inodes+0x10/0x10 [ 499.669767][T14802] ? btrfs_sync_fs+0x1b2/0x6a0 [ 499.669798][T14802] ? __pfx_btrfs_put_super+0x10/0x10 [ 499.669832][T14802] generic_shutdown_super+0x135/0x2c0 [ 499.669871][T14802] kill_anon_super+0x3b/0x70 [ 499.669908][T14802] btrfs_kill_super+0x41/0x50 [ 499.669941][T14802] deactivate_locked_super+0xb9/0x130 [ 499.669978][T14802] cleanup_mnt+0x425/0x4c0 [ 499.670022][T14802] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.670051][T14802] task_work_run+0x1d4/0x260 [ 499.670091][T14802] ? __pfx_task_work_run+0x10/0x10 [ 499.670125][T14802] ? __x64_sys_umount+0x122/0x160 [ 499.670154][T14802] ? exit_to_user_mode_loop+0x40/0x110 [ 499.670184][T14802] exit_to_user_mode_loop+0xec/0x110 [ 499.670208][T14802] do_syscall_64+0x2bd/0x3b0 [ 499.670235][T14802] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.670259][T14802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.670285][T14802] ? clear_bhb_loop+0x60/0xb0 [ 499.670317][T14802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.670341][T14802] RIP: 0033:0x7f54983861e7 [ 499.670363][T14802] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 499.670386][T14802] RSP: 002b:00007ffdcb8f81c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 499.670411][T14802] RAX: 0000000000000000 RBX: 0000000000000048 RCX: 00007f54983861e7 [ 499.670428][T14802] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcb8f8280 [ 499.670445][T14802] RBP: 00007ffdcb8f8280 R08: 0000000000000000 R09: 0000000000000000 [ 499.670459][T14802] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffdcb8f9330 [ 499.670477][T14802] R13: 0000555571b26700 R14: 431bde82d7b634db R15: 00007ffdcb8f92d4 [ 499.670515][T14802] [ 499.674377][T14802] Kernel Offset: disabled