kernel BUG in ext4_write_inline_data_end

Status: closed as dup on 2022/03/04 15:25
Reported-by: syzbot+2cc95c8e803bc7c9e5cb@syzkaller.appspotmail.com
First crash: 1620d, last: 1553d
Cause bisection: failed (error log, bisect log)
  
▶ ▼ Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
kernel BUG in ext4_ind_remove_space -1 syz, C error 55 1552d 1662d
▶ ▼ Similar bugs (15)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at fs/ext4/inline.c:LINE! ext4 -1 syz, C done done 76 1302d 2125d 22/29 fixed on 2023/02/24 13:50
android-54 kernel BUG in ext4_write_inline_data_end -1 syz, C 4 1486d 1620d 2/2 fixed on 2022/09/27 22:24
android-5-15 kernel BUG in ext4_write_inline_data_end (2) origin:upstream -1 syz, C error 16 23d 1050d 0/2 upstream: reported C repro on 2023/09/24 12:05
android-5-10 kernel BUG in ext4_write_inline_data_end (2) -1 syz, C error 23 49d 1504d 2/2 upstream: reported C repro on 2022/06/27 15:18
android-6-1 kernel BUG in ext4_write_inline_data_end (2) origin:upstream -1 syz 1 20d 55d 0/2 premoderation: reported syz repro on 2026/06/16 00:15
linux-6.1 kernel BUG in ext4_write_inline_data_end origin:upstream -1 syz, C error 44 485d 1246d 0/3 upstream: reported C repro on 2023/03/12 18:03
android-6-1 kernel BUG in ext4_write_inline_data_end origin:lts -1 syz, C error done 2 597d 999d 0/2 auto-obsoleted due to no activity on 2025/03/30 21:55
android-5-15 kernel BUG in ext4_write_inline_data_end -1 syz, C error 11 1344d 1404d 2/2 fixed on 2023/02/02 00:40
linux-4.19 kernel BUG in ext4_write_inline_data_end ext4 -1 syz, C error 12 1255d 2002d 0/1 upstream: reported C repro on 2021/02/14 13:39
upstream kernel BUG in ext4_write_inline_data_end (3) ext4 prio:normal -1 syz 1 11d 25d 0/29 upstream: reported syz repro on 2026/07/16 07:50
linux-5.15 kernel BUG in ext4_write_inline_data_end origin:upstream -1 syz, C error 9 49d 1167d 0/3 upstream: reported C repro on 2023/05/30 10:48
upstream kernel BUG in ext4_write_inline_data_end ext4 -1 syz, C error done 32 958d 1256d 25/29 fixed on 2024/01/30 23:26
android-54 kernel BUG in ext4_write_inline_data_end (2) ext4 -1 syz 9 528d 1292d 0/2 upstream: reported syz repro on 2023/01/25 15:39
linux-4.14 kernel BUG in ext4_write_inline_data_end -1 syz, C error 4 1342d 1928d 0/1 upstream: reported C repro on 2021/04/30 02:18
upstream kernel BUG in ext4_write_inline_data_end (2) ext4 -1 syz, C inconclusive error 174 51d 919d 29/29 fixed on 2026/07/15 08:27
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2022/07/12 18:15 19m tadeusz.struk@linaro.org patch android12-5.10-lts OK log

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/ext4/inline.c:760!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4242 Comm: syz-executor409 Not tainted 5.10.112-syzkaller-00287-gde64d941a71a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ext4_write_inline_data_end+0x4a4/0x4b0 fs/ext4/ext4.h:3513
Code: ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e0 fd ff ff 4c 89 e7 e8 cb d9 cc ff e9 d3 fd ff ff e8 61 e8 b6 02 e8 ac 0f 93 ff <0f> 0b e8 a5 0f 93 ff 0f 0b 0f 1f 00 55 48 89 e5 41 57 41 56 41 55
RSP: 0018:ffffc900071e76a0 EFLAGS: 00010293
RAX: ffffffff81d9a114 RBX: 0000000000000000 RCX: ffff88811b520000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900071e7788 R08: ffffffff81d99e14 R09: ffffed1023c503bc
R10: ffffed1023c503bc R11: 1ffff11023c503bb R12: 0000004c00080000
R13: ffff88811e281dd8 R14: ffffea00046cf840 R15: ffff88811e281f20
FS:  00007f697cdef700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020012600 CR3: 000000010a11f000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_write_end+0x1e5/0xde0 fs/ext4/inode.c:1304
 ext4_da_write_end+0xb7/0xb40 fs/ext4/inode.c:3137
 generic_perform_write+0x410/0x5b0 mm/filemap.c:3479
 ext4_buffered_write_iter+0x47c/0x610 fs/ext4/file.c:272
 ext4_file_write_iter+0x192/0x1cd0 fs/ext4/file.c:683
 call_write_iter include/linux/fs.h:1947 [inline]
 new_sync_write fs/read_write.c:518 [inline]
 vfs_write+0xc1c/0xf40 fs/read_write.c:605
 ksys_write+0x198/0x2c0 fs/read_write.c:658
 __do_sys_write fs/read_write.c:670 [inline]
 __se_sys_write fs/read_write.c:667 [inline]
 __x64_sys_write+0x7b/0x90 fs/read_write.c:667
 do_syscall_64+0x34/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f697ce42cf9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f697cdef2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f697cec84a0 RCX: 00007f697ce42cf9
RDX: 000000000000003d RSI: 0000000020000040 RDI: 0000000000000003
RBP: 00007f697ce950ac R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f697ce940a8
R13: 0030656c69662f2e R14: e5d26e84aa4cf3c6 R15: 00007f697cec84a8
Modules linked in:
---[ end trace ab959557f95f62e5 ]---
RIP: 0010:ext4_write_inline_data_end+0x4a4/0x4b0 fs/ext4/ext4.h:3513
Code: ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e0 fd ff ff 4c 89 e7 e8 cb d9 cc ff e9 d3 fd ff ff e8 61 e8 b6 02 e8 ac 0f 93 ff <0f> 0b e8 a5 0f 93 ff 0f 0b 0f 1f 00 55 48 89 e5 41 57 41 56 41 55
RSP: 0018:ffffc900071e76a0 EFLAGS: 00010293
RAX: ffffffff81d9a114 RBX: 0000000000000000 RCX: ffff88811b520000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900071e7788 R08: ffffffff81d99e14 R09: ffffed1023c503bc
R10: ffffed1023c503bc R11: 1ffff11023c503bb R12: 0000004c00080000
R13: ffff88811e281dd8 R14: ffffea00046cf840 R15: ffff88811e281f20
FS:  00007f697cdef700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020012600 CR3: 000000010a11f000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/05/10 01:18 android12-5.10-lts de64d941a71a 8b277b8e .config strace log report syz C ci2-android-5-10 kernel BUG in ext4_write_inline_data_end
2022/03/04 05:02 android12-5.10-lts e1b86e7f5cbb 45a13a73 .config console log report syz C ci2-android-5-10 kernel BUG in ext4_write_inline_data_end
2022/03/04 03:29 android12-5.10-lts e1b86e7f5cbb 45a13a73 .config console log report info ci2-android-5-10 kernel BUG in ext4_write_inline_data_end
* Struck through repros no longer work on HEAD.