kernel BUG in ext4_es_cache

Date	Name	Commit	Repro	Result
2026/02/22	lts (merge base)	e45d5d41c134	C	[report] kernel BUG in ext4_ext_insert_extent
2026/02/22	upstream (ToT)	fa5c82f4d2bb	C	Didn't crash

Date

Name

Commit

Repro

Result

2026/02/22

lts (merge base)

e45d5d41c134

[report] kernel BUG in ext4_ext_insert_extent

2026/02/22

upstream (ToT)

fa5c82f4d2bb

Didn't crash

Kernel	Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	kernel BUG in ext4_es_cache_extent ext4	-1	C	inconclusive		6	1118d	1477d	22/29	fixed on 2023/02/24 13:50
android-54	kernel BUG in ext4_es_cache_extent ext4	-1	C			16	584d	1274d	0/2	auto-obsoleted due to no activity on 2024/10/26 14:37
upstream	kernel BUG in ext4_es_cache_extent (4) ext4	-1	syz	error		1	18d	14d	0/29	upstream: reported syz repro on 2026/02/09 02:08
android-5-10	kernel BUG in ext4_es_cache_extent	-1	C	error		1	1274d	1274d	0/2	closed as invalid on 2022/09/13 19:49
upstream	kernel BUG in ext4_es_cache_extent (3) ext4	-1	C			4	158d	171d	29/29	fixed on 2025/11/18 08:45
android-5-10	kernel BUG in ext4_es_cache_extent (2)	-1	C		done	3	86d	129d	0/2	upstream: reported C repro on 2025/10/16 22:01
upstream	kernel BUG in ext4_es_cache_extent (2) ext4	-1				1	395d	391d	0/29	auto-obsoleted due to no activity on 2025/05/03 18:51

------------[ cut here ]------------ kernel BUG at fs/ext4/extents_status.c:968! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work RIP: 0010:ext4_es_cache_extent+0x57b/0x5d0 fs/ext4/extents_status.c:968 Code: e8 03 42 80 3c 38 00 74 08 48 89 df e8 0e 51 d2 ff 48 8b 3b 48 8b 74 24 28 48 8d 54 24 60 e8 8c da 0c 00 eb 13 e8 85 22 93 ff <0f> 0b e8 7e 22 93 ff eb 28 e8 77 22 93 ff 31 f6 65 ff 0d f6 c2 2b RSP: 0018:ffffc900002ef4c0 EFLAGS: 00010293 RAX: ffffffff81d6aa7b RBX: 0000000000000010 RCX: ffff8881055f62c0 RDX: 0000000000000000 RSI: 0000000000000010 RDI: 000000000000000e RBP: ffffc900002ef5e0 R08: ffffc900002ef537 R09: ffffc900002ef520 R10: dffffc0000000000 R11: fffff5200005dea7 R12: ffff88811110c3c8 R13: 47ffffffffffffff R14: 000000000000000e R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000016000 CR3: 000000010d56e000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ext4_cache_extents fs/ext4/extents.c:517 [inline] ext4_find_extent+0x508/0xe20 fs/ext4/extents.c:918 ext4_ext_map_blocks+0x207/0x61e0 fs/ext4/extents.c:4166 ext4_map_blocks+0x988/0x1b30 fs/ext4/inode.c:674 ext4_convert_unwritten_extents+0x2b7/0x5f0 fs/ext4/extents.c:4869 ext4_convert_unwritten_io_end_vec+0x103/0x180 fs/ext4/extents.c:4908 ext4_end_io_end fs/ext4/page-io.c:186 [inline] ext4_do_flush_completed_IO fs/ext4/page-io.c:259 [inline] ext4_end_io_rsv_work+0x2c1/0x610 fs/ext4/page-io.c:273 process_one_work+0x6be/0xba0 kernel/workqueue.c:2325 worker_thread+0xa59/0x1200 kernel/workqueue.c:2472 kthread+0x411/0x500 kernel/kthread.c:337 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 </TASK> Modules linked in: ---[ end trace d988c7fe758d0df8 ]--- RIP: 0010:ext4_es_cache_extent+0x57b/0x5d0 fs/ext4/extents_status.c:968 Code: e8 03 42 80 3c 38 00 74 08 48 89 df e8 0e 51 d2 ff 48 8b 3b 48 8b 74 24 28 48 8d 54 24 60 e8 8c da 0c 00 eb 13 e8 85 22 93 ff <0f> 0b e8 7e 22 93 ff eb 28 e8 77 22 93 ff 31 f6 65 ff 0d f6 c2 2b RSP: 0018:ffffc900002ef4c0 EFLAGS: 00010293 RAX: ffffffff81d6aa7b RBX: 0000000000000010 RCX: ffff8881055f62c0 RDX: 0000000000000000 RSI: 0000000000000010 RDI: 000000000000000e RBP: ffffc900002ef5e0 R08: ffffc900002ef537 R09: ffffc900002ef520 R10: dffffc0000000000 R11: fffff5200005dea7 R12: ffff88811110c3c8 R13: 47ffffffffffffff R14: 000000000000000e R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000016000 CR3: 000000011f5d2000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2026/02/22 03:27	android13-5.15-lts	13d6d33696ef	6e7b5511	.config	console log	report	syz / log	C		[disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)]	ci2-android-5-15	kernel BUG in ext4_es_cache_extent
2026/02/22 02:23	android13-5.15-lts	13d6d33696ef	6e7b5511	.config	console log	report			info	[disk image] [vmlinux] [kernel image]	ci2-android-5-15	kernel BUG in ext4_es_cache_extent

Crashes (2):

Assets (help?)