BTRFS warning (device loop0): Skipping commit of aborted transaction. ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/transaction.c:2045 at cleanup_transaction+0x7e6/0x9c0 fs/btrfs/transaction.c:2045, CPU#0: kworker/u4:4/52 Modules linked in: CPU: 0 UID: 0 PID: 52 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:cleanup_transaction+0x7e9/0x9c0 fs/btrfs/transaction.c:2045 Code: 0a e8 2b bf da fd e9 82 00 00 00 e8 c1 c3 bf fd 84 c0 74 2a e8 18 bf da fd eb 72 e8 11 bf da fd 48 8d 3d ca b1 2f 0c 44 89 fe <67> 48 0f b9 3a 4c 8b 6c 24 18 4c 8b 64 24 20 e9 a7 f9 ff ff e8 4e RSP: 0018:ffffc90000aff400 EFLAGS: 00010293 RAX: ffffffff83ead88f RBX: ffff888011eac000 RCX: ffff888000532480 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff901a8a60 RBP: ffffc90000aff530 R08: ffff888000532480 R09: 0000000000000003 R10: 00000000fffffffb R11: 0000000000000000 R12: 1ffff110063aaa56 R13: ffff888031d552b0 R14: 0000000000000000 R15: 00000000ffffffe4 FS: 0000000000000000(0000) GS:ffff88808ca62000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa18cc9bff8 CR3: 0000000038c98000 CR4: 0000000000352ef0 Call Trace: btrfs_commit_transaction+0x25aa/0x31a0 fs/btrfs/transaction.c:2630 flush_space+0x4da/0xd80 fs/btrfs/space-info.c:923 do_async_reclaim_metadata_space+0x3fc/0x960 fs/btrfs/space-info.c:1187 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1254 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439 kthread+0x388/0x470 kernel/kthread.c:467 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 0a e8 or %al,%ch 2: 2b bf da fd e9 82 sub -0x7d160226(%rdi),%edi 8: 00 00 add %al,(%rax) a: 00 e8 add %ch,%al c: c1 c3 bf rol $0xbf,%ebx f: fd std 10: 84 c0 test %al,%al 12: 74 2a je 0x3e 14: e8 18 bf da fd call 0xfddabf31 19: eb 72 jmp 0x8d 1b: e8 11 bf da fd call 0xfddabf31 20: 48 8d 3d ca b1 2f 0c lea 0xc2fb1ca(%rip),%rdi # 0xc2fb1f1 27: 44 89 fe mov %r15d,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 4c 8b 6c 24 18 mov 0x18(%rsp),%r13 34: 4c 8b 64 24 20 mov 0x20(%rsp),%r12 39: e9 a7 f9 ff ff jmp 0xfffff9e5 3e: e8 .byte 0xe8 3f: 4e rex.WRX