BTRFS warning (device loop0): Skipping commit of aborted transaction. ------------[ cut here ]------------ BTRFS: Transaction aborted (error -28) WARNING: fs/btrfs/transaction.c:2061 at cleanup_transaction+0x7e6/0x9c0 fs/btrfs/transaction.c:2061, CPU#0: kworker/u4:0/12 Modules linked in: CPU: 0 UID: 0 PID: 12 Comm: kworker/u4:0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: events_unbound btrfs_async_reclaim_metadata_space RIP: 0010:cleanup_transaction+0x7e9/0x9c0 fs/btrfs/transaction.c:2061 Code: 0a e8 8b 81 d9 fd e9 82 00 00 00 e8 41 85 be fd 84 c0 74 2a e8 78 81 d9 fd eb 72 e8 71 81 d9 fd 48 8d 3d 6a ad 2e 0c 44 89 fe <67> 48 0f b9 3a 4c 8b 6c 24 18 4c 8b 64 24 20 e9 a7 f9 ff ff e8 ce RSP: 0018:ffffc9000025f3e0 EFLAGS: 00010293 RAX: ffffffff83ec2e0f RBX: ffff888011de3000 RCX: ffff88801cadc980 RDX: 0000000000000000 RSI: 00000000ffffffe4 RDI: ffffffff901adb80 RBP: ffffc9000025f510 R08: ffff88801cadc980 R09: 0000000000000003 R10: 00000000fffffffb R11: 0000000000000000 R12: 1ffff1100235267b R13: ffff888011a933d8 R14: 0000000000000000 R15: 00000000ffffffe4 FS: 0000000000000000(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4268030ff8 CR3: 00000000446ef000 CR4: 0000000000352ef0 Call Trace: btrfs_commit_transaction+0x25aa/0x31a0 fs/btrfs/transaction.c:2646 flush_space+0x4da/0xd80 fs/btrfs/space-info.c:923 do_async_reclaim_metadata_space+0x3fc/0x960 fs/btrfs/space-info.c:1187 btrfs_async_reclaim_metadata_space+0x89/0xe0 fs/btrfs/space-info.c:1254 process_one_work kernel/workqueue.c:3276 [inline] process_scheduled_works+0xb6e/0x18c0 kernel/workqueue.c:3359 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3440 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 0a e8 or %al,%ch 2: 8b 81 d9 fd e9 82 mov -0x7d160227(%rcx),%eax 8: 00 00 add %al,(%rax) a: 00 e8 add %ch,%al c: 41 85 be fd 84 c0 74 test %edi,0x74c084fd(%r14) 13: 2a e8 sub %al,%ch 15: 78 81 js 0xffffff98 17: d9 fd fscale 19: eb 72 jmp 0x8d 1b: e8 71 81 d9 fd call 0xfdd98191 20: 48 8d 3d 6a ad 2e 0c lea 0xc2ead6a(%rip),%rdi # 0xc2ead91 27: 44 89 fe mov %r15d,%esi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 4c 8b 6c 24 18 mov 0x18(%rsp),%r13 34: 4c 8b 64 24 20 mov 0x20(%rsp),%r12 39: e9 a7 f9 ff ff jmp 0xfffff9e5 3e: e8 .byte 0xe8 3f: ce (bad)