BTRFS info (device loop0): enabling ssd optimizations BTRFS info (device loop0): using spread ssd allocation scheme BTRFS info (device loop0): turning on sync discard BTRFS info (device loop0): using free space tree ===================================== WARNING: bad unlock balance detected! 6.5.0-rc7-syzkaller-00004-gf7757129e3de-dirty #0 Not tainted ------------------------------------- syz-executor.0/5425 is trying to release lock (btrfs-root-00) at: [] btrfs_tree_unlock_rw fs/btrfs/locking.h:191 [inline] [] btrfs_release_path+0x114/0x260 fs/btrfs/ctree.c:220 but there are no more locks to release! other info that might help us debug this: 1 lock held by syz-executor.0/5425: #0: ffff88802bbb00e0 (&type->s_umount_key#50/1){+.+.}-{3:3}, at: alloc_super+0x217/0x920 fs/super.c:228 stack backtrace: CPU: 0 PID: 5425 Comm: syz-executor.0 Not tainted 6.5.0-rc7-syzkaller-00004-gf7757129e3de-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106 print_unlock_imbalance_bug+0x252/0x2c0 kernel/locking/lockdep.c:5201 __lock_release kernel/locking/lockdep.c:5438 [inline] lock_release+0x59d/0x9d0 kernel/locking/lockdep.c:5781 up_read+0x16/0x20 kernel/locking/rwsem.c:1615 btrfs_tree_unlock_rw fs/btrfs/locking.h:191 [inline] btrfs_release_path+0x114/0x260 fs/btrfs/ctree.c:220 btrfs_free_path+0x1f/0x40 fs/btrfs/ctree.c:201 btrfs_init_root_free_objectid+0x258/0x320 fs/btrfs/disk-io.c:4970 init_tree_roots+0x8c3/0x1db0 fs/btrfs/disk-io.c:2627 open_ctree+0x1b3d/0x3030 fs/btrfs/disk-io.c:3333 btrfs_fill_super+0x1c7/0x2f0 fs/btrfs/super.c:1154 btrfs_mount_root+0x7e0/0x910 fs/btrfs/super.c:1519 legacy_get_tree+0xef/0x190 fs/fs_context.c:611 vfs_get_tree+0x8c/0x270 fs/super.c:1519 fc_mount fs/namespace.c:1112 [inline] vfs_kern_mount+0xbc/0x150 fs/namespace.c:1142 btrfs_mount+0x39f/0xb50 fs/btrfs/super.c:1579 legacy_get_tree+0xef/0x190 fs/fs_context.c:611 vfs_get_tree+0x8c/0x270 fs/super.c:1519 do_new_mount+0x28f/0xae0 fs/namespace.c:3335 do_mount fs/namespace.c:3675 [inline] __do_sys_mount fs/namespace.c:3884 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3861 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f7ce5a7e1ea Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7ce680cee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f7ce680cf80 RCX: 00007f7ce5a7e1ea RDX: 00000000200055c0 RSI: 0000000020005600 RDI: 00007f7ce680cf40 RBP: 00000000200055c0 R08: 00007f7ce680cf80 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020005600 R13: 00007f7ce680cf40 R14: 00000000000055a8 R15: 00000000200013c0 ------------[ cut here ]------------ DEBUG_RWSEMS_WARN_ON(tmp < 0): count = 0xffffffffffffff00, magic = 0xffff88807c59a430, owner = 0x1, curr 0xffff88801478d940, list empty WARNING: CPU: 0 PID: 5425 at kernel/locking/rwsem.c:1348 __up_read+0x40a/0x690 kernel/locking/rwsem.c:1348 Modules linked in: CPU: 0 PID: 5425 Comm: syz-executor.0 Not tainted 6.5.0-rc7-syzkaller-00004-gf7757129e3de-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 RIP: 0010:__up_read+0x40a/0x690 kernel/locking/rwsem.c:1348 Code: 44 d8 48 c7 c7 a0 8c 0a 8b 48 c7 c6 c0 8e 0a 8b 48 8b 54 24 10 4c 89 f9 4d 89 e8 4c 8b 4c 24 08 53 e8 aa 60 e8 ff 48 83 c4 08 <0f> 0b 48 bb 00 00 00 00 00 fc ff df e9 86 fe ff ff c6 05 76 26 19 RSP: 0018:ffffc90005d4f360 EFLAGS: 00010296 RAX: e6e508aa02c4dc00 RBX: ffffffff8b0a8d80 RCX: ffff88801478d940 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90005d4f420 R08: ffffffff8152d442 R09: 1ffff92000ba9de4 R10: dffffc0000000000 R11: fffff52000ba9de5 R12: ffffffffffffff00 R13: 0000000000000001 R14: 1ffff1100f8b3487 R15: ffff88807c59a430 FS: 00007f7ce680d6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000563c9d4f3950 CR3: 0000000069adc000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: btrfs_tree_unlock_rw fs/btrfs/locking.h:191 [inline] btrfs_release_path+0x114/0x260 fs/btrfs/ctree.c:220 btrfs_free_path+0x1f/0x40 fs/btrfs/ctree.c:201 btrfs_init_root_free_objectid+0x258/0x320 fs/btrfs/disk-io.c:4970 init_tree_roots+0x8c3/0x1db0 fs/btrfs/disk-io.c:2627 open_ctree+0x1b3d/0x3030 fs/btrfs/disk-io.c:3333 btrfs_fill_super+0x1c7/0x2f0 fs/btrfs/super.c:1154 btrfs_mount_root+0x7e0/0x910 fs/btrfs/super.c:1519 legacy_get_tree+0xef/0x190 fs/fs_context.c:611 vfs_get_tree+0x8c/0x270 fs/super.c:1519 fc_mount fs/namespace.c:1112 [inline] vfs_kern_mount+0xbc/0x150 fs/namespace.c:1142 btrfs_mount+0x39f/0xb50 fs/btrfs/super.c:1579 legacy_get_tree+0xef/0x190 fs/fs_context.c:611 vfs_get_tree+0x8c/0x270 fs/super.c:1519 do_new_mount+0x28f/0xae0 fs/namespace.c:3335 do_mount fs/namespace.c:3675 [inline] __do_sys_mount fs/namespace.c:3884 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3861 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f7ce5a7e1ea Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7ce680cee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f7ce680cf80 RCX: 00007f7ce5a7e1ea RDX: 00000000200055c0 RSI: 0000000020005600 RDI: 00007f7ce680cf40 RBP: 00000000200055c0 R08: 00007f7ce680cf80 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020005600 R13: 00007f7ce680cf40 R14: 00000000000055a8 R15: 00000000200013c0