As i had written here before, sometimes bio which dispatched to the dm's target, it's bi_size could exceed region size in dm-mirror.c, i also found similar problem in dm-stripe.c and dm-snap.c , in such situation, bio's bi_size could exceed strip target's chunk size and snap target's chunk size, but in current code, we never care about this. so in strip target we could read/write bad position after stripe_map() function, and cause same effect in dm-snap.c. I think such bugs are very dangerous then kernel panic or cracsh becasue it may destroy your data in silence. we'd better to annonuce our linux users don't use thus dm-targets before we correct it. Sincerely, Zhao Qian <zhaoqian@xxxxxxxxxxx>