BTRFS warning (device loop0): Skipping commit of aborted transaction. ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/transaction.c:2045 at cleanup_transaction+0x7e6/0x9c0 fs/btrfs/transaction.c:2045, CPU#0: kworker/u4:9/1088 Modules linked in: CPU: 0 UID: 0 PID: 1088 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:cleanup_transaction+0x7e9/0x9c0 fs/btrfs/transaction.c:2045 Code: 0a e8 3b c4 d9 fd e9 82 00 00 00 e8 91 c8 be fd 84 c0 74 2a e8 28 c4 d9 fd eb 72 e8 21 c4 d9 fd 48 8d 3d ba ee 2e 0c 44 89 fe <67> 48 0f b9 3a 4c 8b 6c 24 18 4c 8b 64 24 20 e9 a7 f9 ff ff e8 ee RSP: 0018:ffffc90005647400 EFLAGS: 00010293 RAX: ffffffff83ebe4ef RBX: ffff88800bb44000 RCX: ffff888036a524c0 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff901ad3b0 RBP: ffffc90005647530 R08: ffff888036a524c0 R09: 0000000000000003 R10: 00000000fffffffb R11: 0000000000000000 R12: 1ffff1100ab21a56 R13: ffff88805590d2b0 R14: 0000000000000000 R15: 00000000ffffffe4 FS: 0000000000000000(0000) GS:ffff88808ca56000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f580c3ff000 CR3: 000000001abbb000 CR4: 0000000000352ef0 Call Trace: btrfs_commit_transaction+0x25aa/0x31a0 fs/btrfs/transaction.c:2630 flush_space+0x4da/0xd80 fs/btrfs/space-info.c:923 do_async_reclaim_metadata_space+0x3fc/0x960 fs/btrfs/space-info.c:1187 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1254 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 0a e8 or %al,%ch 2: 3b c4 cmp %esp,%eax 4: d9 fd fscale 6: e9 82 00 00 00 jmp 0x8d b: e8 91 c8 be fd call 0xfdbec8a1 10: 84 c0 test %al,%al 12: 74 2a je 0x3e 14: e8 28 c4 d9 fd call 0xfdd9c441 19: eb 72 jmp 0x8d 1b: e8 21 c4 d9 fd call 0xfdd9c441 20: 48 8d 3d ba ee 2e 0c lea 0xc2eeeba(%rip),%rdi # 0xc2eeee1 27: 44 89 fe mov %r15d,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 4c 8b 6c 24 18 mov 0x18(%rsp),%r13 34: 4c 8b 64 24 20 mov 0x20(%rsp),%r12 39: e9 a7 f9 ff ff jmp 0xfffff9e5 3e: e8 .byte 0xe8 3f: ee out %al,(%dx)