BTRFS warning (device loop0): Skipping commit of aborted transaction. ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/transaction.c:2061 at cleanup_transaction+0x7e6/0x9c0 fs/btrfs/transaction.c:2061, CPU#0: kworker/u4:2/30 Modules linked in: CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:cleanup_transaction+0x7e9/0x9c0 fs/btrfs/transaction.c:2061 Code: 0a e8 1b 46 d9 fd e9 82 00 00 00 e8 21 49 be fd 84 c0 74 2a e8 08 46 d9 fd eb 72 e8 01 46 d9 fd 48 8d 3d 5a 94 2e 0c 44 89 fe <67> 48 0f b9 3a 4c 8b 6c 24 18 4c 8b 64 24 20 e9 a7 f9 ff ff e8 6e RSP: 0018:ffffc900003873e0 EFLAGS: 00010293 RAX: ffffffff83ec786f RBX: ffff8880129ef000 RCX: ffff88801ebba4c0 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff901b0cd0 RBP: ffffc90000387510 R08: ffff88801ebba4c0 R09: 0000000000000003 R10: 00000000fffffffb R11: 0000000000000000 R12: 1ffff11008efc10f R13: ffff8880477e0878 R14: 0000000000000000 R15: 00000000ffffffe4 FS: 0000000000000000(0000) GS:ffff88808ca4e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5e2547f000 CR3: 0000000040e08000 CR4: 0000000000352ef0 Call Trace: btrfs_commit_transaction+0x25aa/0x31a0 fs/btrfs/transaction.c:2646 flush_space+0x4da/0xd80 fs/btrfs/space-info.c:923 do_async_reclaim_metadata_space+0x3fc/0x960 fs/btrfs/space-info.c:1187 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1254 process_one_work kernel/workqueue.c:3276 [inline] process_scheduled_works+0xb6e/0x18c0 kernel/workqueue.c:3359 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3440 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 0a e8 or %al,%ch 2: 1b 46 d9 sbb -0x27(%rsi),%eax 5: fd std 6: e9 82 00 00 00 jmp 0x8d b: e8 21 49 be fd call 0xfdbe4931 10: 84 c0 test %al,%al 12: 74 2a je 0x3e 14: e8 08 46 d9 fd call 0xfdd94621 19: eb 72 jmp 0x8d 1b: e8 01 46 d9 fd call 0xfdd94621 20: 48 8d 3d 5a 94 2e 0c lea 0xc2e945a(%rip),%rdi # 0xc2e9481 27: 44 89 fe mov %r15d,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 4c 8b 6c 24 18 mov 0x18(%rsp),%r13 34: 4c 8b 64 24 20 mov 0x20(%rsp),%r12 39: e9 a7 f9 ff ff jmp 0xfffff9e5 3e: e8 .byte 0xe8 3f: 6e outsb %ds:(%rsi),(%dx)