kernel BUG in extent_writepage_io (2)

Status: upstream: reported on 2026/06/22 06:23
Subsystems: btrfs
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+11036d2e408a419c179c@syzkaller.appspotmail.com
First crash: 52d, last: 4d23h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
9517fd67 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ kernel BUG in extent_writepage_io (2) 2026/06/20 00:32 2026/06/20 00:32 2026/06/20 01:42 023e42b5
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [btrfs?] kernel BUG in extent_writepage_io (2) 0 (1) 2026/06/22 06:23
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in extent_writepage_io btrfs -1 syz, C error done 6 233d 656d 0/29 auto-obsoleted due to no activity on 2026/03/29 20:26

Sample crash report:
assertion failed: block_start != EXTENT_MAP_HOLE, in fs/btrfs/extent_io.c:1721
------------[ cut here ]-[  471.774055][T10545] ------------[ cut here ]------------
kernel BUG at fs/btrfs/extent_io.c:1721!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 10545 Comm: syz.0.585 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:submit_one_sector fs/btrfs/extent_io.c:1721 [inline]
RIP: 0010:extent_writepage_io+0x1070/0x11a0 fs/btrfs/extent_io.c:1826
Code: 18 fd 90 0f 0b e8 10 33 b7 fd 48 c7 c7 a0 4b b8 8b 48 c7 c6 c0 62 b8 8b 48 c7 c2 20 4c b8 8b b9 b9 06 00 00 e8 51 bd 18 fd 90 <0f> 0b e8 e9 32 b7 fd 48 89 ef 48 c7 c6 80 53 b8 8b e8 1a 1c 19 fd
RSP: 0018:ffffc9001bc97080 EFLAGS: 00010246
RAX: 000000000000004e RBX: ffffea00019e5bc8 RCX: 26f8578e38012100
RDX: ffffc9000f6e5000 RSI: 00000000000064d3 RDI: 00000000000064d4
RBP: ffffea00019e5bc0 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff52003792dc1 R12: 0000000000001000
R13: dffffc0000000000 R14: ffff88801e3a7788 R15: fffffffffffffffd
FS:  00007f6cfbff56c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000069000 CR3: 000000003d2fe000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 extent_writepage fs/btrfs/extent_io.c:1936 [inline]
 extent_write_cache_pages fs/btrfs/extent_io.c:2593 [inline]
 btrfs_writepages+0x17a1/0x28b0 fs/btrfs/extent_io.c:2725
 do_writepages+0x338/0x560 mm/page-writeback.c:2571
 filemap_writeback mm/filemap.c:387 [inline]
 filemap_fdatawrite_range+0x1f2/0x300 mm/filemap.c:412
 btrfs_fdatawrite_range+0x54/0xf0 fs/btrfs/file.c:3884
 btrfs_direct_write+0x6a0/0xc30 fs/btrfs/direct-io.c:1038
 btrfs_do_write_iter+0x329/0x790 fs/btrfs/file.c:1449
 do_iter_readv_writev+0x624/0x8d0 fs/read_write.c:-1
 vfs_writev+0x34c/0x990 fs/read_write.c:1058
 do_pwritev fs/read_write.c:1154 [inline]
 __do_sys_pwritev2 fs/read_write.c:1212 [inline]
 __se_sys_pwritev2+0x17a/0x2a0 fs/read_write.c:1203
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6cfddbe019
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6cfbff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
RAX: ffffffffffffffda RBX: 00007f6cfe046090 RCX: 00007f6cfddbe019
RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
RBP: 00007f6cfde5500c R08: 0000000000000000 R09: 0000000000000003
R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6cfe046128 R14: 00007f6cfe046090 R15: 00007ffe330a5758
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:submit_one_sector fs/btrfs/extent_io.c:1721 [inline]
RIP: 0010:extent_writepage_io+0x1070/0x11a0 fs/btrfs/extent_io.c:1826
Code: 18 fd 90 0f 0b e8 10 33 b7 fd 48 c7 c7 a0 4b b8 8b 48 c7 c6 c0 62 b8 8b 48 c7 c2 20 4c b8 8b b9 b9 06 00 00 e8 51 bd 18 fd 90 <0f> 0b e8 e9 32 b7 fd 48 89 ef 48 c7 c6 80 53 b8 8b e8 1a 1c 19 fd
RSP: 0018:ffffc9001bc97080 EFLAGS: 00010246
RAX: 000000000000004e RBX: ffffea00019e5bc8 RCX: 26f8578e38012100
RDX: ffffc9000f6e5000 RSI: 00000000000064d3 RDI: 00000000000064d4
RBP: ffffea00019e5bc0 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff52003792dc1 R12: 0000000000001000
R13: dffffc0000000000 R14: ffff88801e3a7788 R15: fffffffffffffffd
FS:  00007f6cfbff56c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000069000 CR3: 000000003d2fe000 CR4: 00000000003526f0

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/03 10:09 upstream 075b74841bd0 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in extent_writepage_io
2026/08/03 09:50 upstream 075b74841bd0 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in extent_writepage_io
2026/07/30 11:03 upstream 11028ab62899 2377cd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in extent_writepage_io
2026/07/25 22:13 upstream 0ce37745d4bf 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in extent_writepage_io
2026/06/26 19:32 upstream 4edcdefd4083 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in extent_writepage_io
2026/08/04 22:01 upstream 562bfb501c54 3c5eaa21 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/08/02 17:41 upstream 2d2338c93da7 e611ffe1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/08/02 10:21 upstream 2d2338c93da7 e611ffe1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/31 16:42 upstream 8ba098e6b6ff 7664cf44 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/31 16:42 upstream 8ba098e6b6ff 7664cf44 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/27 20:50 upstream f5098b6bae76 1f273138 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/27 20:50 upstream f5098b6bae76 1f273138 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/27 20:50 upstream f5098b6bae76 1f273138 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/27 17:06 upstream f5098b6bae76 1f273138 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/26 07:08 upstream 3dab139d4795 492bab15 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/23 13:12 upstream 4539944e5151 71a13572 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/21 18:48 upstream b95f03f04d47 7c5de9c3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/21 15:14 upstream b95f03f04d47 7c5de9c3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/21 05:10 upstream 1590cf032971 de6a700d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/02 04:33 upstream 4a50a141f05a 27192279 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/02 04:32 upstream 4a50a141f05a 27192279 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/02 04:32 upstream 4a50a141f05a 27192279 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/02 04:32 upstream 4a50a141f05a 27192279 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/07/02 04:32 upstream 4a50a141f05a 27192279 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/06/23 16:57 upstream 502d801f0ab0 4b1d8f01 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/06/23 14:43 upstream 502d801f0ab0 4b1d8f01 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/06/22 14:01 upstream ef0c9f75a195 ab2703f0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/06/21 04:56 upstream 1a3746ccbb0a 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/06/20 09:23 upstream a975094bf98c 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/06/19 15:09 upstream 9ecfb2f7287a 023e42b5 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/06/18 21:05 upstream e771677c937d a776b0d0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
2026/06/18 06:15 upstream e771677c937d b62b3ded .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in extent_writepage_io
* Struck through repros no longer work on HEAD.