BTRFS warning (device loop0): Skipping commit of aborted transaction. ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/transaction.c:2067 at cleanup_transaction+0x800/0x9d0 fs/btrfs/transaction.c:2067, CPU#0: kworker/u4:3/42 Modules linked in: CPU: 0 UID: 0 PID: 42 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:cleanup_transaction+0x803/0x9d0 fs/btrfs/transaction.c:2067 Code: 0a e8 51 ba d5 fd e9 87 00 00 00 e8 27 c1 ba fd 84 c0 74 2f e8 3e ba d5 fd eb 77 e8 37 ba d5 fd 48 8d 3d c0 7d 49 0c 44 89 e6 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 18 e9 8d RSP: 0018:ffffc90000447460 EFLAGS: 00010293 RAX: ffffffff83f00bd9 RBX: ffff888012483000 RCX: ffff88801ce9a540 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff903989a0 RBP: ffffc90000447590 R08: ffff88801ce9a540 R09: 0000000000000003 R10: 00000000fffffffb R11: 0000000000000000 R12: 00000000ffffffe4 R13: ffff88800e4504c8 R14: 0000000000000000 R15: 1ffff11001c8a099 FS: 0000000000000000(0000) GS:ffff88808c891000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa22fefaf20 CR3: 000000001227b000 CR4: 0000000000352ef0 Call Trace: btrfs_commit_transaction+0x2594/0x2fc0 fs/btrfs/transaction.c:2659 flush_space+0x2a3/0xe20 fs/btrfs/space-info.c:-1 do_async_reclaim_metadata_space+0x3fc/0x960 fs/btrfs/space-info.c:1211 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1278 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: e8 51 ba d5 fd call 0xfdd5ba56 5: e9 87 00 00 00 jmp 0x91 a: e8 27 c1 ba fd call 0xfdbac136 f: 84 c0 test %al,%al 11: 74 2f je 0x42 13: e8 3e ba d5 fd call 0xfdd5ba56 18: eb 77 jmp 0x91 1a: e8 37 ba d5 fd call 0xfdd5ba56 1f: 48 8d 3d c0 7d 49 0c lea 0xc497dc0(%rip),%rdi # 0xc497de6 26: 44 89 e6 mov %r12d,%esi * 29: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2e: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15 35: fc ff df 38: 4c 8b 6c 24 18 mov 0x18(%rsp),%r13 3d: e9 .byte 0xe9 3e: 8d .byte 0x8d