BTRFS info (device loop7): block group 1048576 has 4194304 bytes, 4096 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (4190208 bytes available) [readonly] BTRFS info (device loop7): block group has cluster?: no BTRFS info (device loop7): 0 free space entries at or bigger than 4096 bytes BTRFS info (device loop7): 4190208 bytes available across all block groups ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/block-group.c:4097 at do_chunk_alloc fs/btrfs/block-group.c:4097 [inline], CPU#1: kworker/u8:10/3493 WARNING: fs/btrfs/block-group.c:4097 at btrfs_chunk_alloc+0x1029/0x15f0 fs/btrfs/block-group.c:4338, CPU#1: kworker/u8:10/3493 Modules linked in: CPU: 1 UID: 0 PID: 3493 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:do_chunk_alloc fs/btrfs/block-group.c:4097 [inline] RIP: 0010:btrfs_chunk_alloc+0x102b/0x15f0 fs/btrfs/block-group.c:4338 Code: 4b a8 c2 fd e9 6d 01 00 00 e8 51 d7 a7 fd 84 c0 74 22 e8 38 a8 c2 fd e9 5a 01 00 00 e8 2e a8 c2 fd 48 8d 3d e7 e1 51 0b 89 de <67> 48 0f b9 3a e9 b3 fc ff ff e8 a6 ea 11 07 41 89 c6 31 ff 89 c6 RSP: 0018:ffffc9000d80f6f0 EFLAGS: 00010293 RAX: ffffffff84006d52 RBX: ffffffffffffffe4 RCX: ffff8880324e1e00 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff8f524f40 RBP: 0000000000000000 R08: ffff8880324e1e00 R09: 0000000000000003 R10: 0000000000000100 R11: 00000000fffffffb R12: 1ffff1100bc91f1e R13: ffff888062b16d08 R14: ffff888075fc0001 R15: ffff88803b6b0800 FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2fe23ffc CR3: 000000005e5fc000 CR4: 00000000003526f0 Call Trace: flush_space+0x353/0xd30 fs/btrfs/space-info.c:896 do_async_reclaim_metadata_space+0x411/0x970 fs/btrfs/space-info.c:1187 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1254 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xaec/0x17a0 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:467 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 4b a8 c2 rex.WXB test $0xc2,%al 3: fd std 4: e9 6d 01 00 00 jmp 0x176 9: e8 51 d7 a7 fd call 0xfda7d75f e: 84 c0 test %al,%al 10: 74 22 je 0x34 12: e8 38 a8 c2 fd call 0xfdc2a84f 17: e9 5a 01 00 00 jmp 0x176 1c: e8 2e a8 c2 fd call 0xfdc2a84f 21: 48 8d 3d e7 e1 51 0b lea 0xb51e1e7(%rip),%rdi # 0xb51e20f 28: 89 de mov %ebx,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 b3 fc ff ff jmp 0xfffffce7 34: e8 a6 ea 11 07 call 0x711eadf 39: 41 89 c6 mov %eax,%r14d 3c: 31 ff xor %edi,%edi 3e: 89 c6 mov %eax,%esi