BTRFS error (device loop0): cow_file_range failed, root=5 inode=263 start=360448 len=172032 cur_offset=360448 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=263 folio=360448 submit_bitmap=0 start=360448 len=172032: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=263 start=782336 len=16384 cur_offset=782336 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=263 folio=782336 submit_bitmap=0 start=782336 len=16384: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=264 start=0 len=4096 cur_offset=0 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=264 folio=0 submit_bitmap=0 start=0 len=4096: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=264 start=0 len=4096 cur_offset=0 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=264 folio=0 submit_bitmap=0 start=0 len=4096: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=263 start=798720 len=4096 cur_offset=798720 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=263 folio=798720 submit_bitmap=0 start=798720 len=4096: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=263 start=16785408 len=4096 cur_offset=16785408 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=263 folio=16785408 submit_bitmap=0 start=16785408 len=4096: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=264 start=0 len=4096 cur_offset=0 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=264 folio=0 submit_bitmap=0 start=0 len=4096: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=263 start=16789504 len=4096 cur_offset=16789504 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=263 folio=16789504 submit_bitmap=0 start=16789504 len=4096: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=264 start=0 len=73728 cur_offset=0 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=264 folio=0 submit_bitmap=0 start=0 len=73728: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=263 start=16863232 len=4096 cur_offset=16863232 cur_alloc_size=0: -28 BTRFS error (device loop0): failed to run delalloc range, root=5 ino=263 folio=16863232 submit_bitmap=0 start=16863232 len=4096: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=263 start=16896000 len=12288 cur_offset=16896000 cur_alloc_size=0: -28 BTRFS error (device loop0): cow_file_range failed, root=5 inode=263 start=25305088 len=385024 cur_offset=25305088 cur_alloc_size=0: -28 BTRFS warning (device loop0): Skipping commit of aborted transaction. ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/transaction.c:2036 at cleanup_transaction fs/btrfs/transaction.c:2036 [inline], CPU#0: kworker/u4:11/1807 WARNING: fs/btrfs/transaction.c:2036 at btrfs_commit_transaction+0x30f7/0x3b10 fs/btrfs/transaction.c:2629, CPU#0: kworker/u4:11/1807 Modules linked in: CPU: 0 UID: 0 PID: 1807 Comm: kworker/u4:11 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:cleanup_transaction fs/btrfs/transaction.c:2036 [inline] RIP: 0010:btrfs_commit_transaction+0x30ff/0x3b10 fs/btrfs/transaction.c:2629 Code: 97 20 ef fd eb 7d e8 00 16 d5 fd 84 c0 74 25 e8 87 20 ef fd eb 6d e8 80 20 ef fd 48 8d 3d 09 39 b9 0b 44 8b 6c 24 38 44 89 ee <67> 48 0f b9 3a e9 24 f9 ff ff e8 92 bf 89 07 89 c3 31 ff 89 c6 e8 RSP: 0018:ffffc900025a7520 EFLAGS: 00010293 RAX: ffffffff83d1e6e0 RBX: ffff888000e3c001 RCX: ffff8880385224c0 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff8f8b1ff0 RBP: ffffc900025a7850 R08: ffff8880385224c0 R09: 0000000000000003 R10: 00000000fffffffb R11: 0000000000000000 R12: 1ffff11008c7af0d R13: 00000000ffffffe4 R14: 0000000000000000 R15: ffff888000e3c000 FS: 0000000000000000(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f39c735d420 CR3: 0000000011313000 CR4: 0000000000352ef0 Call Trace: flush_space+0x4dd/0xd20 fs/btrfs/space-info.c:921 do_async_reclaim_metadata_space+0x11e/0x350 fs/btrfs/space-info.c:1185 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1252 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ---------------- Code disassembly (best guess): 0: 97 xchg %eax,%edi 1: 20 ef and %ch,%bh 3: fd std 4: eb 7d jmp 0x83 6: e8 00 16 d5 fd call 0xfdd5160b b: 84 c0 test %al,%al d: 74 25 je 0x34 f: e8 87 20 ef fd call 0xfdef209b 14: eb 6d jmp 0x83 16: e8 80 20 ef fd call 0xfdef209b 1b: 48 8d 3d 09 39 b9 0b lea 0xbb93909(%rip),%rdi # 0xbb9392b 22: 44 8b 6c 24 38 mov 0x38(%rsp),%r13d 27: 44 89 ee mov %r13d,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 24 f9 ff ff jmp 0xfffff958 34: e8 92 bf 89 07 call 0x789bfcb 39: 89 c3 mov %eax,%ebx 3b: 31 ff xor %edi,%edi 3d: 89 c6 mov %eax,%esi 3f: e8 .byte 0xe8