syzbot


WARNING in csum_one_extent_buffer

Status: upstream: reported on 2025/12/08 07:15
Reported-by: syzbot+8b95753a0114d02649c0@syzkaller.appspotmail.com
First crash: 99d, last: 26d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in csum_one_extent_buffer btrfs -1 2 1137d 1141d 0/29 auto-obsoleted due to no activity on 2023/06/03 17:56

Sample crash report:
	item 7 key (263 108 917504) itemoff 3504 itemsize 53
		extent data disk bytenr 5378048 nr 1048576
		extent data offset 913408 nr 135168 ram 1048576
BTRFS error (device loop0): block=5263360 write time tree block corruption detected
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5293 at fs/btrfs/disk-io.c:345 csum_one_extent_buffer+0x456/0x520 fs/btrfs/disk-io.c:344
Modules linked in:
CPU: 1 PID: 5293 Comm: syz.0.300 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:csum_one_extent_buffer+0x456/0x520 fs/btrfs/disk-io.c:344
Code: 4c 89 f9 4d 89 e0 e8 75 ff b9 06 41 bd 8b ff ff ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 18 e9 e0 fe ff ff e8 ea 56 19 fe <0f> 0b e9 7e fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 19 fd ff ff 4c
RSP: 0018:ffffc9001cf06640 EFLAGS: 00010246
RAX: ffffffff83691cc6 RBX: fffffffffffffffa RCX: 0000000000080000
RDX: ffffc9000e2ca000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc9001cf06740 R08: ffffc9001cf061a7 R09: 1ffff920039e0c34
R10: dffffc0000000000 R11: fffff520039e0c35 R12: dffffc0000000000
R13: 00000000ffffff8b R14: ffff88805c2af05f R15: ffff88807c2e70a0
FS:  00007f6aa7eba6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffce8c75ba8 CR3: 000000001964a000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 csum_dirty_buffer fs/btrfs/disk-io.c:423 [inline]
 btree_csum_one_bio+0x6dd/0xa60 fs/btrfs/disk-io.c:720
 btrfs_submit_metadata_bio+0x3e7/0x510 fs/btrfs/disk-io.c:771
 submit_one_bio+0x202/0x3b0 fs/btrfs/extent_io.c:133
 submit_write_bio fs/btrfs/extent_io.c:160 [inline]
 btree_write_cache_pages+0x1639/0x17e0 fs/btrfs/extent_io.c:3074
 do_writepages+0x3ba/0x640 mm/page-writeback.c:2491
 filemap_fdatawrite_wbc+0x11e/0x180 mm/filemap.c:388
 __filemap_fdatawrite_range mm/filemap.c:421 [inline]
 filemap_fdatawrite_range+0xf3/0x160 mm/filemap.c:439
 btrfs_write_marked_extents+0x1c8/0x330 fs/btrfs/transaction.c:1101
 btrfs_sync_log+0x99f/0x2810 fs/btrfs/tree-log.c:2988
 btrfs_sync_file+0xce3/0x11e0 fs/btrfs/file.c:1974
 generic_write_sync include/linux/fs.h:2962 [inline]
 iomap_dio_complete+0x5c8/0x750 fs/iomap/direct-io.c:122
 btrfs_direct_write fs/btrfs/file.c:1545 [inline]
 btrfs_do_write_iter+0xfdf/0x14f0 fs/btrfs/file.c:1681
 do_iter_readv_writev fs/read_write.c:-1 [inline]
 do_iter_write+0x642/0xb10 fs/read_write.c:861
 iter_file_splice_write+0x699/0xcc0 fs/splice.c:685
 do_splice_from fs/splice.c:763 [inline]
 direct_splice_actor+0xe1/0x130 fs/splice.c:950
 splice_direct_to_actor+0x48b/0xb90 fs/splice.c:896
 do_splice_direct+0x1ce/0x2f0 fs/splice.c:1002
 do_sendfile+0x5f3/0xea0 fs/read_write.c:1255
 __do_sys_sendfile64 fs/read_write.c:1323 [inline]
 __se_sys_sendfile64+0x141/0x1a0 fs/read_write.c:1309
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f6aa6f9c629
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6aa7eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f6aa7216090 RCX: 00007f6aa6f9c629
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
RBP: 00007f6aa7032b39 R08: 0000000000000000 R09: 0000000000000000
R10: 000000007fffeffd R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6aa7216128 R14: 00007f6aa7216090 R15: 00007ffdb174ca88
 </TASK>

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/18 12:51 linux-6.1.y 8ce36b2849ef 39751c21 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in csum_one_extent_buffer
2025/12/14 07:48 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in csum_one_extent_buffer
2025/12/08 07:14 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in csum_one_extent_buffer
* Struck through repros no longer work on HEAD.