WARNING in btrfs_drop_extents

Status: upstream: reported C repro on 2023/07/17 09:20
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+f89428e9af97a9cf157f@syzkaller.appspotmail.com
First crash: 1127d, last: 39d
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/07/18 linux-5.15.y (ToT) d54cfc420586 C [report] WARNING in btrfs_drop_extents
2023/07/18 upstream (ToT) 74f1456c4a5f C Didn't crash
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/07/09 18:34 16m retest repro linux-5.15.y report log
2026/04/27 06:27 16m retest repro linux-5.15.y report log
2026/02/15 18:01 10m retest repro linux-5.15.y report log
2025/12/07 12:53 10m retest repro linux-5.15.y report log
2025/09/27 23:24 10m retest repro linux-5.15.y report log
2025/07/19 08:41 10m retest repro linux-5.15.y report log
2025/05/09 11:51 14m retest repro linux-5.15.y report log
2025/02/28 03:03 1h02m retest repro linux-5.15.y report log
2024/12/20 02:02 10m retest repro linux-5.15.y report log
2024/10/07 22:27 14m retest repro linux-5.15.y report log
▶ ▼ Fix bisection attempts (12)
Created Duration User Patch Repo Result
2026/05/17 17:07 12m fix candidate upstream error job log
2026/03/24 03:45 0m fix candidate upstream error job log
2026/02/21 09:27 0m fix candidate upstream error job log
2026/01/22 07:26 1m fix candidate upstream error job log
2024/11/23 04:04 1m fix candidate upstream error job log
2024/10/15 03:36 0m fix candidate upstream error job log
2024/09/03 20:15 3m fix candidate upstream error job log
2024/06/28 03:16 0m fix candidate upstream error job log
2024/03/20 17:16 1m fix candidate upstream error job log
2024/01/23 16:50 0m (2) fix candidate upstream error job log
2023/12/18 10:22 0m fix candidate upstream error job log
2023/09/03 07:40 0m fix candidate upstream error job log

Sample crash report:
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4080 at fs/btrfs/file.c:966 btrfs_drop_extents+0x2664/0x2b80 fs/btrfs/file.c:966
Modules linked in:
CPU: 1 PID: 4080 Comm: syz-executor140 Not tainted 5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : btrfs_drop_extents+0x2664/0x2b80 fs/btrfs/file.c:966
lr : btrfs_drop_extents+0x2664/0x2b80 fs/btrfs/file.c:966
sp : ffff80001d2e6fc0
x29: ffff80001d2e7300 x28: 00000000fffffff4 x27: ffff0000c7c033b0
x26: ffff0000c8d17360 x25: dfff800000000000 x24: ffff80001d2e7210
x23: 0000000000011000 x22: ffff80001d2e71a0 x21: 0000000000011000
x20: 1fffe0001b8f476b x19: ffff0000dc7a3b58 x18: 0000000000000001
x17: ff80800008335ea8 x16: ffff80001195b9f4 x15: ffff800008335ea8
x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000832d950 x10: 0000000000000000 x9 : d0bbd428e51d9100
x8 : d0bbd428e51d9100 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001d2e6738 x4 : ffff8000149cfca0 x3 : ffff80000854e3cc
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026
Call trace:
 btrfs_drop_extents+0x2664/0x2b80 fs/btrfs/file.c:966
 btrfs_replace_file_extents+0x3a4/0x1388 fs/btrfs/file.c:2796
 insert_prealloc_file_extent fs/btrfs/inode.c:10336 [inline]
 __btrfs_prealloc_file_range+0x5ac/0x1164 fs/btrfs/inode.c:10404
 btrfs_prealloc_file_range+0x60/0x7c fs/btrfs/inode.c:10494
 btrfs_zero_range+0xd58/0xfd8 fs/btrfs/file.c:3400
 btrfs_fallocate+0xb4c/0x1954 fs/btrfs/file.c:3515
 vfs_fallocate+0x478/0x5b4 fs/open.c:308
 ksys_fallocate fs/open.c:331 [inline]
 __do_sys_fallocate fs/open.c:339 [inline]
 __se_sys_fallocate fs/open.c:337 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:337
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 70870
hardirqs last  enabled at (70869): [<ffff80000832bae8>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (70870): [<ffff800011957088>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last  enabled at (70850): [<ffff800008020ccc>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (70850): [<ffff800008020ccc>] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587
softirqs last disabled at (70823): [<ffff8000081b573c>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (70823): [<ffff8000081b573c>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (70823): [<ffff8000081b573c>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 37c948a64ba68f44 ]---
BTRFS: error (device loop0) in btrfs_drop_extents:966: errno=-12 Out of memory
BTRFS info (device loop0): forced readonly
BTRFS: error (device loop0) in btrfs_replace_file_extents:2813: errno=-12 Out of memory

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/17 11:55 linux-5.15.y d54cfc420586 35d9ecc5 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 WARNING in btrfs_drop_extents
2023/07/17 09:20 linux-5.15.y d54cfc420586 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in btrfs_drop_extents
* Struck through repros no longer work on HEAD.