BTRFS info (device loop0): 0 free space entries at or bigger than 4096 bytes BTRFS info (device loop0): 4190208 bytes available across all block groups ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/block-group.c:4105 at do_chunk_alloc fs/btrfs/block-group.c:4105 [inline], CPU#1: kworker/u8:9/1122 WARNING: fs/btrfs/block-group.c:4105 at btrfs_chunk_alloc+0x1029/0x15f0 fs/btrfs/block-group.c:4346, CPU#1: kworker/u8:9/1122 Modules linked in: CPU: 1 UID: 0 PID: 1122 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: events_unbound btrfs_async_reclaim_data_space RIP: 0010:do_chunk_alloc fs/btrfs/block-group.c:4105 [inline] RIP: 0010:btrfs_chunk_alloc+0x102b/0x15f0 fs/btrfs/block-group.c:4346 Code: db a7 bb fd e9 6d 01 00 00 e8 c1 a9 a0 fd 84 c0 74 22 e8 c8 a7 bb fd e9 5a 01 00 00 e8 be a7 bb fd 48 8d 3d 87 b2 6a 0b 89 de <67> 48 0f b9 3a e9 b3 fc ff ff e8 96 38 1a 07 41 89 c6 31 ff 89 c6 RSP: 0018:ffffc9000572f790 EFLAGS: 00010293 RAX: ffffffff8408cf62 RBX: ffffffffffffffe4 RCX: ffff888027de0000 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff8f7381f0 RBP: 0000000000000000 R08: ffff888027de0000 R09: 0000000000000003 R10: 0000000000000100 R11: 00000000fffffffb R12: 1ffff110079b3f1e R13: ffff88804c56a768 R14: ffff888032918001 R15: ffff88806603c800 FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7a995d90a0 CR3: 0000000030970000 CR4: 00000000003526f0 Call Trace: flush_space+0x353/0xd80 fs/btrfs/space-info.c:896 do_async_reclaim_data_space+0x145/0x520 fs/btrfs/space-info.c:1423 btrfs_async_reclaim_data_space+0x41/0x90 fs/btrfs/space-info.c:1487 process_one_work kernel/workqueue.c:3276 [inline] process_scheduled_works+0xb6e/0x18c0 kernel/workqueue.c:3359 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3440 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: db a7 bb fd e9 6d (bad) 0x6de9fdbb(%rdi) 6: 01 00 add %eax,(%rax) 8: 00 e8 add %ch,%al a: c1 a9 a0 fd 84 c0 74 shrl $0x74,-0x3f7b0260(%rcx) 11: 22 e8 and %al,%ch 13: c8 a7 bb fd enter $0xbba7,$0xfd 17: e9 5a 01 00 00 jmp 0x176 1c: e8 be a7 bb fd call 0xfdbba7df 21: 48 8d 3d 87 b2 6a 0b lea 0xb6ab287(%rip),%rdi # 0xb6ab2af 28: 89 de mov %ebx,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 b3 fc ff ff jmp 0xfffffce7 34: e8 96 38 1a 07 call 0x71a38cf 39: 41 89 c6 mov %eax,%r14d 3c: 31 ff xor %edi,%edi 3e: 89 c6 mov %eax,%esi