BTRFS warning (device loop0): Skipping commit of aborted transaction. ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/transaction.c:2036 at cleanup_transaction fs/btrfs/transaction.c:2036 [inline], CPU#0: kworker/u4:21/3617 WARNING: fs/btrfs/transaction.c:2036 at btrfs_commit_transaction+0x30f7/0x3b10 fs/btrfs/transaction.c:2629, CPU#0: kworker/u4:21/3617 Modules linked in: CPU: 0 UID: 0 PID: 3617 Comm: kworker/u4:21 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_data_space RIP: 0010:cleanup_transaction fs/btrfs/transaction.c:2036 [inline] RIP: 0010:btrfs_commit_transaction+0x30ff/0x3b10 fs/btrfs/transaction.c:2629 Code: f7 ce ee fd eb 7d e8 60 a8 d4 fd 84 c0 74 25 e8 e7 ce ee fd eb 6d e8 e0 ce ee fd 48 8d 3d 59 26 d8 0b 44 8b 6c 24 38 44 89 ee <67> 48 0f b9 3a e9 24 f9 ff ff e8 52 c6 8a 07 89 c3 31 ff 89 c6 e8 RSP: 0018:ffffc9000315f4e0 EFLAGS: 00010293 RAX: ffffffff83d2f1f0 RBX: ffff8880407c8001 RCX: ffff888040e44980 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff8fab1850 RBP: ffffc9000315f810 R08: ffff888040e44980 R09: 0000000000000003 R10: 00000000fffffffb R11: 0000000000000000 R12: 1ffff110024d81a1 R13: 00000000ffffffe4 R14: 0000000000000000 R15: ffff8880407c8000 FS: 0000000000000000(0000) GS:ffff88808d22a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff1dd3d1fc8 CR3: 0000000040184000 CR4: 0000000000352ef0 Call Trace: flush_space+0x4dd/0xd20 fs/btrfs/space-info.c:921 do_async_reclaim_data_space+0x29a/0x520 fs/btrfs/space-info.c:1437 btrfs_async_reclaim_data_space+0x41/0x90 fs/btrfs/space-info.c:1485 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ---------------- Code disassembly (best guess): 0: f7 ce ee fd eb 7d test $0x7debfdee,%esi 6: e8 60 a8 d4 fd call 0xfdd4a86b b: 84 c0 test %al,%al d: 74 25 je 0x34 f: e8 e7 ce ee fd call 0xfdeecefb 14: eb 6d jmp 0x83 16: e8 e0 ce ee fd call 0xfdeecefb 1b: 48 8d 3d 59 26 d8 0b lea 0xbd82659(%rip),%rdi # 0xbd8267b 22: 44 8b 6c 24 38 mov 0x38(%rsp),%r13d 27: 44 89 ee mov %r13d,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 24 f9 ff ff jmp 0xfffff958 34: e8 52 c6 8a 07 call 0x78ac68b 39: 89 c3 mov %eax,%ebx 3b: 31 ff xor %edi,%edi 3d: 89 c6 mov %eax,%esi 3f: e8 .byte 0xe8