BTRFS info (device loop4): block group has cluster?: no BTRFS info (device loop4): 0 free space entries at or bigger than 4096 bytes BTRFS info (device loop4): 4190208 bytes available across all block groups ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/block-group.c:4097 at do_chunk_alloc fs/btrfs/block-group.c:4097 [inline], CPU#1: kworker/u8:3/50 WARNING: fs/btrfs/block-group.c:4097 at btrfs_chunk_alloc+0x101d/0x15e0 fs/btrfs/block-group.c:4338, CPU#1: kworker/u8:3/50 Modules linked in: CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: events_unbound btrfs_async_reclaim_data_space RIP: 0010:do_chunk_alloc fs/btrfs/block-group.c:4097 [inline] RIP: 0010:btrfs_chunk_alloc+0x101f/0x15e0 fs/btrfs/block-group.c:4338 Code: a7 66 bb fd e9 6d 01 00 00 e8 fd 81 a0 fd 84 c0 74 22 e8 94 66 bb fd e9 5a 01 00 00 e8 8a 66 bb fd 48 8d 3d 23 39 f0 0b 89 de <67> 48 0f b9 3a e9 b3 fc ff ff e8 b2 7d 91 07 41 89 c6 31 ff 89 c6 RSP: 0018:ffffc90000bb7730 EFLAGS: 00010293 RAX: ffffffff8408e6c6 RBX: ffffffffffffffe4 RCX: ffff8880212b1e40 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff8ff91ff0 RBP: 0000000000000000 R08: ffff8880212b1e40 R09: 0000000000000003 R10: 00000000fffffffb R11: 0000000000000000 R12: 1ffff1100a531f16 R13: ffff888032d18e40 R14: ffff88807ce4c001 R15: ffff888028427000 FS: 0000000000000000(0000) GS:ffff8881257df000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c360f5f CR3: 0000000033ead000 CR4: 0000000000350ef0 Call Trace: flush_space+0x353/0xd30 fs/btrfs/space-info.c:896 do_async_reclaim_data_space+0x145/0x520 fs/btrfs/space-info.c:1423 btrfs_async_reclaim_data_space+0x41/0x90 fs/btrfs/space-info.c:1487 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xaec/0x17a0 kernel/workqueue.c:3340 worker_thread+0xda6/0x1360 kernel/workqueue.c:3421 kthread+0x726/0x8b0 kernel/kthread.c:463 ret_from_fork+0x51b/0xa40 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ---------------- Code disassembly (best guess): 0: a7 cmpsl %es:(%rdi),%ds:(%rsi) 1: 66 bb fd e9 mov $0xe9fd,%bx 5: 6d insl (%dx),%es:(%rdi) 6: 01 00 add %eax,(%rax) 8: 00 e8 add %ch,%al a: fd std b: 81 a0 fd 84 c0 74 22 andl $0x6694e822,0x74c084fd(%rax) 12: e8 94 66 15: bb fd e9 5a 01 mov $0x15ae9fd,%ebx 1a: 00 00 add %al,(%rax) 1c: e8 8a 66 bb fd call 0xfdbb66ab 21: 48 8d 3d 23 39 f0 0b lea 0xbf03923(%rip),%rdi # 0xbf0394b 28: 89 de mov %ebx,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 b3 fc ff ff jmp 0xfffffce7 34: e8 b2 7d 91 07 call 0x7917deb 39: 41 89 c6 mov %eax,%r14d 3c: 31 ff xor %edi,%edi 3e: 89 c6 mov %eax,%esi