BTRFS info (device loop4): remap_block_rsv: size 0 reserved 0 BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 BTRFS info (device loop4): delayed_refs_rsv: size 65536 reserved 0 BTRFS info (device loop4): block group 1048576 has 4194304 bytes, 4096 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (4190208 bytes available) [readonly] BTRFS info (device loop4): block group has cluster?: no BTRFS info (device loop4): 0 free space entries at or bigger than 4096 bytes BTRFS info (device loop4): 4190208 bytes available across all block groups ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/block-group.c:4105 at do_chunk_alloc fs/btrfs/block-group.c:4105 [inline], CPU#0: kworker/u8:1/13 WARNING: fs/btrfs/block-group.c:4105 at btrfs_chunk_alloc+0x1029/0x15f0 fs/btrfs/block-group.c:4346, CPU#0: kworker/u8:1/13 Modules linked in: CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:do_chunk_alloc fs/btrfs/block-group.c:4105 [inline] RIP: 0010:btrfs_chunk_alloc+0x102b/0x15f0 fs/btrfs/block-group.c:4346 Code: db bd bb fd e9 6d 01 00 00 e8 51 c0 a0 fd 84 c0 74 22 e8 c8 bd bb fd e9 5a 01 00 00 e8 be bd bb fd 48 8d 3d 77 dd 6a 0b 89 de <67> 48 0f b9 3a e9 b3 fc ff ff e8 16 21 1a 07 41 89 c6 31 ff 89 c6 RSP: 0018:ffffc900001276f0 EFLAGS: 00010293 RAX: ffffffff840896e2 RBX: ffffffffffffffe4 RCX: ffff88801ca9db80 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff8f737460 RBP: 0000000000000000 R08: ffff88801ca9db80 R09: 0000000000000003 R10: 0000000000000100 R11: 00000000fffffffb R12: 1ffff1100ca9be1e R13: ffff888065f6db18 R14: ffff8880349c0001 R15: ffff8880654b9000 FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff67247c000 CR3: 000000003751c000 CR4: 00000000003526f0 Call Trace: flush_space+0x353/0xd80 fs/btrfs/space-info.c:896 do_async_reclaim_metadata_space+0x411/0x970 fs/btrfs/space-info.c:1187 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1254 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: db bd bb fd e9 6d fstpt 0x6de9fdbb(%rbp) 6: 01 00 add %eax,(%rax) 8: 00 e8 add %ch,%al a: 51 push %rcx b: c0 a0 fd 84 c0 74 22 shlb $0x22,0x74c084fd(%rax) 12: e8 c8 bd bb fd call 0xfdbbbddf 17: e9 5a 01 00 00 jmp 0x176 1c: e8 be bd bb fd call 0xfdbbbddf 21: 48 8d 3d 77 dd 6a 0b lea 0xb6add77(%rip),%rdi # 0xb6add9f 28: 89 de mov %ebx,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 b3 fc ff ff jmp 0xfffffce7 34: e8 16 21 1a 07 call 0x71a214f 39: 41 89 c6 mov %eax,%r14d 3c: 31 ff xor %edi,%edi 3e: 89 c6 mov %eax,%esi