BTRFS info (device loop5): 0 free space entries at or bigger than 4096 bytes BTRFS info (device loop5): 4190208 bytes available across all block groups ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/block-group.c:4012 at do_chunk_alloc fs/btrfs/block-group.c:4012 [inline], CPU#0: kworker/u8:1/13 WARNING: fs/btrfs/block-group.c:4012 at btrfs_chunk_alloc+0x1029/0x15e0 fs/btrfs/block-group.c:4253, CPU#0: kworker/u8:1/13 Modules linked in: CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:do_chunk_alloc fs/btrfs/block-group.c:4012 [inline] RIP: 0010:btrfs_chunk_alloc+0x102b/0x15e0 fs/btrfs/block-group.c:4253 Code: db d0 d3 fd e9 6d 01 00 00 e8 01 c6 b9 fd 84 c0 74 22 e8 c8 d0 d3 fd e9 5a 01 00 00 e8 be d0 d3 fd 48 8d 3d 27 48 f8 0a 89 de <67> 48 0f b9 3a e9 b3 fc ff ff e8 36 bd e5 06 41 89 c6 31 ff 89 c6 RSP: 0018:ffffc90000127730 EFLAGS: 00010293 RAX: ffffffff83ebd932 RBX: ffffffffffffffe4 RCX: ffff88801b6d8000 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff8ee42160 RBP: 0000000000000000 R08: ffff88801b6d8000 R09: 0000000000000003 R10: 0000000000000100 R11: 00000000fffffffb R12: 1ffff11004f3bb1e R13: ffff88805d3a9de8 R14: ffff888063560001 R15: ffff888032ac6800 FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564ec690e8e0 CR3: 000000001ff9c000 CR4: 00000000003526f0 Call Trace: flush_space+0x355/0xd20 fs/btrfs/space-info.c:894 do_async_reclaim_metadata_space+0x11e/0x350 fs/btrfs/space-info.c:1185 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1252 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ---------------- Code disassembly (best guess): 0: db d0 fcmovnbe %st(0),%st 2: d3 fd sar %cl,%ebp 4: e9 6d 01 00 00 jmp 0x176 9: e8 01 c6 b9 fd call 0xfdb9c60f e: 84 c0 test %al,%al 10: 74 22 je 0x34 12: e8 c8 d0 d3 fd call 0xfdd3d0df 17: e9 5a 01 00 00 jmp 0x176 1c: e8 be d0 d3 fd call 0xfdd3d0df 21: 48 8d 3d 27 48 f8 0a lea 0xaf84827(%rip),%rdi # 0xaf8484f 28: 89 de mov %ebx,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 b3 fc ff ff jmp 0xfffffce7 34: e8 36 bd e5 06 call 0x6e5bd6f 39: 41 89 c6 mov %eax,%r14d 3c: 31 ff xor %edi,%edi 3e: 89 c6 mov %eax,%esi