syzbot

 sign-in | mailing list | source | docs
🐞 Open [706]
🐞 Fixed [58]
🐞 Invalid [596]
⬇ Missing Backports [56]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

kernel BUG in __block_write_begin_int

Status: fixed on 2024/08/28 13:04
Reported-by: syzbot+23e308d104920bf102d4@syzkaller.appspotmail.com
Fix commit: 7000b438dda9 nilfs2: fix kernel bug on rename operation of broken directory
First crash: 126d, last: 126d
Fix bisection: fixed by (bisect log) :
commit 7000b438dda9d0f41a956fc9bffed92d2eb6be0d
Author: Ryusuke Konishi <konishi.ryusuke@gmail.com>
Date: Fri Jun 28 16:51:07 2024 +0000

  nilfs2: fix kernel bug on rename operation of broken directory

  
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2024/07/18 upstream (ToT) 68b59730459e C Didn't crash
▶ ▼ Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in __block_write_begin_int (3) nilfs C 4 36d 36d 28/28 fixed on 2024/11/14 10:09
upstream kernel BUG in __block_write_begin_int (2) nilfs C inconclusive 2 136d 201d 27/28 fixed on 2024/08/14 03:44
linux-6.1 kernel BUG in __block_write_begin_int 1 126d 126d 0/3 auto-obsoleted due to no activity on 2024/10/26 08:47
upstream kernel BUG in __block_write_begin_int block C done 14 425d 444d 25/28 fixed on 2023/12/21 03:45

Sample crash report:
loop0: detected capacity change from 0 to 4096
------------[ cut here ]------------
kernel BUG at fs/buffer.c:1988!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3501 Comm: syz-executor288 Not tainted 5.15.162-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:__block_write_begin_int+0x1624/0x1650 fs/buffer.c:1988
Code: 02 e9 db ec ff ff e8 4b 48 9a ff 0f 0b 48 85 db 75 26 e8 3f 48 9a ff 4c 8b 7c 24 18 eb 22 e8 33 48 9a ff 0f 0b e8 2c 48 9a ff <0f> 0b e8 25 48 9a ff 0f 0b e8 1e 6a 38 08 e8 19 48 9a ff 49 ff cf
RSP: 0018:ffffc90002b97760 EFLAGS: 00010293
RAX: ffffffff81e61334 RBX: 00fff0000000241d RCX: ffff8880135b9dc0
RDX: 0000000000000000 RSI: 0000000000006575 RDI: 0000000000001000
RBP: ffffc90002b978e8 R08: ffffffff81e5ff1d R09: fffff940002b8871
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000006575 R14: 0000000000000000 R15: ffffea00015c4380
FS:  0000555556a35480(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6aaf5e3ed8 CR3: 00000000743a5000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 nilfs_prepare_chunk fs/nilfs2/dir.c:92 [inline]
 nilfs_set_link+0x165/0x530 fs/nilfs2/dir.c:425
 nilfs_rename+0x844/0xb80 fs/nilfs2/namei.c:414
 vfs_rename+0xd32/0x10f0 fs/namei.c:4832
 do_renameat2+0xe0f/0x1700 fs/namei.c:4985
 __do_sys_renameat2 fs/namei.c:5018 [inline]
 __se_sys_renameat2 fs/namei.c:5015 [inline]
 __x64_sys_renameat2+0xce/0xe0 fs/namei.c:5015
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7efe8152c349
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe7b702d98 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe8152c349
RDX: 0000000000000005 RSI: 00000000200001c0 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe7b702df0
R10: 0000000020000200 R11: 0000000000000246 R12: 00007ffe7b702df0
R13: 00007ffe7b702ed0 R14: 431bde82d7b634db R15: 00007efe8157501d
 </TASK>
Modules linked in:
---[ end trace f06c5de7441bfe59 ]---
RIP: 0010:__block_write_begin_int+0x1624/0x1650 fs/buffer.c:1988
Code: 02 e9 db ec ff ff e8 4b 48 9a ff 0f 0b 48 85 db 75 26 e8 3f 48 9a ff 4c 8b 7c 24 18 eb 22 e8 33 48 9a ff 0f 0b e8 2c 48 9a ff <0f> 0b e8 25 48 9a ff 0f 0b e8 1e 6a 38 08 e8 19 48 9a ff 49 ff cf
RSP: 0018:ffffc90002b97760 EFLAGS: 00010293
RAX: ffffffff81e61334 RBX: 00fff0000000241d RCX: ffff8880135b9dc0
RDX: 0000000000000000 RSI: 0000000000006575 RDI: 0000000000001000
RBP: ffffc90002b978e8 R08: ffffffff81e5ff1d R09: fffff940002b8871
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000006575 R14: 0000000000000000 R15: ffffea00015c4380
FS:  0000555556a35480(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6aaf5e3ed8 CR3: 00000000743a5000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/18 06:52 linux-5.15.y f45bea23c39c 0f902625 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in __block_write_begin_int
2024/07/18 03:28 linux-5.15.y f45bea23c39c 0f902625 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in __block_write_begin_int
2024/07/18 03:28 linux-5.15.y f45bea23c39c 0f902625 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in __block_write_begin_int
* Struck through repros no longer work on HEAD.