syzbot


WARNING in can_finish_ordered_extent

Status: upstream: reported C repro on 2026/06/22 17:01
Subsystems: btrfs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+085adc3f91549d11066a@syzkaller.appspotmail.com
First crash: 3d01h, last: 1d00h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
7d4aefcb-0334-40cc-87fc-db1a0fb00e81 assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ✅ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ WARNING in can_finish_ordered_extent 2026/06/22 00:04 2026/06/22 00:04 2026/06/22 01:04 43bfcdb07c3552e4664e1029672054ac0924d543

			
		
ecdad2ac-798d-4729-9217-d2965f1f2630 assessment-security 💥 WARNING in can_finish_ordered_extent 2026/06/21 00:02 2026/06/21 00:02 2026/06/21 00:02 43bfcdb07c3552e4664e1029672054ac0924d543
failed to run ["git" "-c" "core.hooksPath=/dev/null" "checkout" "1a3746ccbb0a97bed3c06ccde6b880013b1dddc1"]: exit status 128
Previous HEAD position was e771677c937d Merge tag 'for-linus-iommufd' of gi...
truncated to first 200 bytes; open job for full error
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [btrfs?] WARNING in can_finish_ordered_extent 0 (1) 2026/06/22 17:01

Sample crash report:
------------[ cut here ]------------
len > ordered->bytes_left
WARNING: fs/btrfs/ordered-data.c:390 at can_finish_ordered_extent+0x409/0x830 fs/btrfs/ordered-data.c:390, CPU#0: kworker/u4:9/1149
Modules linked in:
CPU: 0 UID: 0 PID: 1149 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: btrfs-endio simple_end_io_work
RIP: 0010:can_finish_ordered_extent+0x409/0x830 fs/btrfs/ordered-data.c:390
Code: 00 00 00 e8 09 81 c8 fd eb 05 e8 02 81 c8 fd 4d 85 ed 0f 94 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 92 b5 07 cc 90 <0f> 0b 90 e8 2f fd ad fd 48 8d 05 00 00 00 00 48 c7 c7 a0 9b 95 8e
RSP: 0018:ffffc900015bf968 EFLAGS: 00010287
RAX: ffffffff83fdc133 RBX: 1ffff11007f3479e RCX: ffff888032faa540
RDX: 0000000000000000 RSI: 0000000000006000 RDI: 0000000000071000
RBP: 1ffff11007f347a3 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff520002b7f2c R12: ffff88803f9a3cf0
R13: fffffffffff95000 R14: 1ffff110084b063c R15: 0000000000071000
FS:  0000000000000000(0000) GS:ffff88808c848000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb7eda7a000 CR3: 00000000439b1000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 btrfs_finish_ordered_extent+0xed/0x420 fs/btrfs/ordered-data.c:438
 end_bbio_data_write+0xad3/0xc80 fs/btrfs/extent_io.c:538
 btrfs_bio_end_io+0x3ea/0x4d0 fs/btrfs/bio.c:147
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/20 23:07 upstream 1a3746ccbb0a 43bfcdb0 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root WARNING in can_finish_ordered_extent
2026/06/21 01:39 upstream 1a3746ccbb0a 43bfcdb0 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root WARNING in can_finish_ordered_extent
2026/06/20 18:59 upstream 1a3746ccbb0a 43bfcdb0 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root WARNING in can_finish_ordered_extent
2026/06/22 18:13 upstream ef0c9f75a195 ab2703f0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in can_finish_ordered_extent
2026/06/22 18:09 upstream ef0c9f75a195 ab2703f0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in can_finish_ordered_extent
2026/06/20 16:47 upstream 1a3746ccbb0a 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in can_finish_ordered_extent
2026/06/20 16:44 upstream 1a3746ccbb0a 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in can_finish_ordered_extent
* Struck through repros no longer work on HEAD.