syzbot


kernel BUG in gfs2_glock_nq

Status: upstream: reported C repro on 2023/03/12 21:28
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+1c34b9af91345e5a2c2e@syzkaller.appspotmail.com
First crash: 195d, last: 1d21h
Bug presence (1)
Date Name Commit Repro Result
2023/05/04 upstream (ToT) 1a5304fecee5 C [report] kernel BUG in gfs2_glock_nq
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 kernel BUG in gfs2_glock_nq 2 614d 658d 0/1 auto-closed as invalid on 2022/05/17 22:53
linux-4.19 kernel BUG in gfs2_glock_nq 1 894d 894d 0/1 auto-closed as invalid on 2021/08/11 04:31
linux-4.19 kernel BUG in gfs2_glock_nq (2) gfs2 C error 52 201d 740d 0/1 upstream: reported C repro on 2021/09/14 01:12
upstream kernel BUG in gfs2_glock_nq gfs2 2 669d 659d 0/25 auto-closed as invalid on 2022/03/23 19:53
linux-6.1 kernel BUG in gfs2_glock_nq origin:upstream C 27 26d 196d 0/3 upstream: reported C repro on 2023/03/12 01:31
linux-4.14 kernel BUG in gfs2_glock_nq (2) gfs2 C 7 205d 486d 0/1 upstream: reported C repro on 2022/05/26 14:43
upstream kernel BUG in gfs2_glock_nq (2) gfs2 C error 646 11h50m 366d 0/25 upstream: reported C repro on 2022/09/23 06:12
linux-4.14 kernel BUG at fs/gfs2/glock.c:LINE! 3 970d 1042d 0/1 auto-closed as invalid on 2021/05/27 07:56
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/06/30 21:33 1h06m bisect fix linux-5.15.y job log (0) log
2023/05/24 00:21 59m bisect fix linux-5.15.y job log (0) log

Sample crash report:
gfs2: fsid=syz:syz.0: pid: 3585
gfs2: fsid=syz:syz.0: lock type: 8 req lock state : 1
gfs2: fsid=syz:syz.0: new: gfs2_glock_nq_init fs/gfs2/glock.h:244 [inline]
gfs2: fsid=syz:syz.0: new: do_sync+0x3ab/0xc60 fs/gfs2/quota.c:910
gfs2: fsid=syz:syz.0: pid: 3585
gfs2: fsid=syz:syz.0: lock type: 8 req lock state : 1
gfs2: fsid=syz:syz.0: G:  s:EX n:8/1 f:qb t:EX d:EX/0 a:0 v:0 r:6 m:20 p:0
gfs2: fsid=syz:syz.0:  H: s:EX f:cH e:0 p:3585 [syz-executor323] gfs2_glock_nq_init fs/gfs2/glock.h:244 [inline]
gfs2: fsid=syz:syz.0:  H: s:EX f:cH e:0 p:3585 [syz-executor323] do_sync+0x3ab/0xc60 fs/gfs2/quota.c:910
------------[ cut here ]------------
kernel BUG at fs/gfs2/glock.c:1501!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 3585 Comm: syz-executor323 Not tainted 5.15.104-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
RIP: 0010:add_to_queue fs/gfs2/glock.c:1501 [inline]
RIP: 0010:gfs2_glock_nq+0x10c7/0x15e0 fs/gfs2/glock.c:1525
Code: ef e8 fd 7b 41 fe 0f b7 4d 00 48 c7 c7 a0 f7 cb 8a 4c 89 e6 89 da e8 11 1f 8e 06 31 ff 4c 89 f6 ba 01 00 00 00 e8 29 87 ff ff <0f> 0b e8 22 34 f8 fd e8 1d 03 79 fd e9 0f f9 ff ff 48 8d 5a 08 48
RSP: 0018:ffffc90002c0f918 EFLAGS: 00010246
RAX: 20ad41c79fc5f900 RBX: 0000000000000008 RCX: ffff888016a08000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff888015bc625a R08: ffffffff83872009 R09: fffffbfff1bc62ee
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807de192c0
R13: dffffc0000000000 R14: ffff888075dea8a0 R15: ffff888015bc6222
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f330918a140 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 gfs2_glock_nq_init fs/gfs2/glock.h:246 [inline]
 do_sync+0x3b3/0xc60 fs/gfs2/quota.c:910
 gfs2_quota_sync+0x379/0x810 fs/gfs2/quota.c:1318
 gfs2_sync_fs+0x49/0xb0 fs/gfs2/super.c:647
 sync_filesystem+0xe8/0x220 fs/sync.c:56
 generic_shutdown_super+0x6e/0x2c0 fs/super.c:448
 kill_block_super+0x7a/0xe0 fs/super.c:1396
 deactivate_locked_super+0xa0/0x110 fs/super.c:335
 cleanup_mnt+0x44e/0x500 fs/namespace.c:1143
 task_work_run+0x129/0x1a0 kernel/task_work.c:164
 exit_task_work include/linux/task_work.h:32 [inline]
 do_exit+0x6a3/0x2480 kernel/exit.c:872
 do_group_exit+0x144/0x310 kernel/exit.c:994
 __do_sys_exit_group kernel/exit.c:1005 [inline]
 __se_sys_exit_group kernel/exit.c:1003 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1003
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f33091039b9
Code: Unable to access opcode bytes at RIP 0x7f330910398f.
RSP: 002b:00007ffd1c5b7e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f330918c330 RCX: 00007f33091039b9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000013420
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f330918c330
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
 </TASK>
Modules linked in:
---[ end trace eaba2e00c2ef60eb ]---
RIP: 0010:add_to_queue fs/gfs2/glock.c:1501 [inline]
RIP: 0010:gfs2_glock_nq+0x10c7/0x15e0 fs/gfs2/glock.c:1525
Code: ef e8 fd 7b 41 fe 0f b7 4d 00 48 c7 c7 a0 f7 cb 8a 4c 89 e6 89 da e8 11 1f 8e 06 31 ff 4c 89 f6 ba 01 00 00 00 e8 29 87 ff ff <0f> 0b e8 22 34 f8 fd e8 1d 03 79 fd e9 0f f9 ff ff 48 8d 5a 08 48
RSP: 0018:ffffc90002c0f918 EFLAGS: 00010246
RAX: 20ad41c79fc5f900 RBX: 0000000000000008 RCX: ffff888016a08000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff888015bc625a R08: ffffffff83872009 R09: fffffbfff1bc62ee
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807de192c0
R13: dffffc0000000000 R14: ffff888075dea8a0 R15: ffff888015bc6222
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f330918a140 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/26 18:54 linux-5.15.y 115472395b0a fbf0499a .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in gfs2_glock_nq
2023/09/22 22:27 linux-5.15.y 35ecaa3632bf 0b6a67ac .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/08/07 03:50 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/03/12 21:27 linux-5.15.y bbf9f29bac04 5205ef30 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/09/02 11:20 linux-5.15.y 8f790700c974 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/04/14 10:34 linux-5.15.y 4fdad925aa1a 3cfcaa1b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in gfs2_glock_nq
2023/04/12 04:35 linux-5.15.y d86dfc4d95cd 49faf98d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in gfs2_glock_nq
2023/04/09 18:15 linux-5.15.y d86dfc4d95cd 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in gfs2_glock_nq
2023/08/15 19:15 linux-5.15.y 24c4de4069cb 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/08/12 05:28 linux-5.15.y 24c4de4069cb 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/08/07 02:59 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/07/03 17:09 linux-5.15.y 4af60700a60c 6e553898 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/05/31 10:25 linux-5.15.y 0ab06468cbd1 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/04/23 03:18 linux-5.15.y 3299fb36854f 2b32bd34 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/04/19 17:12 linux-5.15.y 4fdad925aa1a 94b4184e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/04/16 22:09 linux-5.15.y 4fdad925aa1a ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/04/16 08:55 linux-5.15.y 4fdad925aa1a ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/04/11 09:31 linux-5.15.y d86dfc4d95cd 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/04/09 02:35 linux-5.15.y d86dfc4d95cd 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
2023/04/08 21:11 linux-5.15.y d86dfc4d95cd 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in gfs2_glock_nq
* Struck through repros no longer work on HEAD.