syzbot


kernel BUG in _ocfs2_free_suballoc_bits

Status: upstream: reported C repro on 2024/09/03 10:29
Subsystems: ocfs2
[Documentation on labels]
Reported-by: syzbot+2d6d9df993967dde8297@syzkaller.appspotmail.com
First crash: 172d, last: 1d14h
Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: KASAN: use-after-free Read in __ocfs2_flush_truncate_log (log)
Repro: C syz .config
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [ocfs2?] kernel BUG in _ocfs2_free_suballoc_bits 0 (3) 2024/09/19 00:04
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in _ocfs2_free_suballoc_bits origin:upstream C error 6 36d 81d 0/3 upstream: reported C repro on 2024/11/29 19:55
linux-6.1 kernel BUG in _ocfs2_free_suballoc_bits origin:upstream C 9 7d22h 114d 0/3 upstream: reported C repro on 2024/10/28 02:52

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:2543!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 954 Comm: kworker/u8:5 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: ocfs2_wq ocfs2_truncate_log_worker
RIP: 0010:_ocfs2_free_suballoc_bits+0x11aa/0x14a0 fs/ocfs2/suballoc.c:2543
Code: e1 80 e1 07 80 c1 03 38 c1 0f 8c 92 fb ff ff 4c 89 e7 e8 19 4a 68 fe e9 85 fb ff ff e8 3f bc 01 fe 90 0f 0b e8 37 bc 01 fe 90 <0f> 0b f3 0f 1e fa 65 8b 1d b5 ac 70 7c bf 07 00 00 00 89 de e8 5d
RSP: 0018:ffffc90003a9f640 EFLAGS: 00010293
RAX: ffffffff83932ac9 RBX: 0000000000000e00 RCX: ffff888025d78000
RDX: 0000000000000000 RSI: 0000000000000e00 RDI: 00000000000083ef
RBP: ffffc90003a9f7e8 R08: ffffffff83931a8c R09: 0000000000007fcf
R10: dffffc0000000000 R11: fffffbfff20378de R12: 00000000000083ef
R13: dffffc0000000000 R14: ffff8880bffb6e00 R15: 0000000000000e00
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555941c788 CR3: 0000000031f8e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 _ocfs2_free_clusters+0x5ff/0xad0 fs/ocfs2/suballoc.c:2646
 ocfs2_replay_truncate_records fs/ocfs2/alloc.c:5971 [inline]
 __ocfs2_flush_truncate_log+0x760/0x1250 fs/ocfs2/alloc.c:6054
 ocfs2_flush_truncate_log fs/ocfs2/alloc.c:6076 [inline]
 ocfs2_truncate_log_worker+0xa2/0x1b0 fs/ocfs2/alloc.c:6089
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:_ocfs2_free_suballoc_bits+0x11aa/0x14a0 fs/ocfs2/suballoc.c:2543
Code: e1 80 e1 07 80 c1 03 38 c1 0f 8c 92 fb ff ff 4c 89 e7 e8 19 4a 68 fe e9 85 fb ff ff e8 3f bc 01 fe 90 0f 0b e8 37 bc 01 fe 90 <0f> 0b f3 0f 1e fa 65 8b 1d b5 ac 70 7c bf 07 00 00 00 89 de e8 5d
RSP: 0018:ffffc90003a9f640 EFLAGS: 00010293
RAX: ffffffff83932ac9 RBX: 0000000000000e00 RCX: ffff888025d78000
RDX: 0000000000000000 RSI: 0000000000000e00 RDI: 00000000000083ef
RBP: ffffc90003a9f7e8 R08: ffffffff83931a8c R09: 0000000000007fcf
R10: dffffc0000000000 R11: fffffbfff20378de R12: 00000000000083ef
R13: dffffc0000000000 R14: ffff8880bffb6e00 R15: 0000000000000e00
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055ed82464078 CR3: 0000000031664000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (90):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/13 06:52 upstream 7234e2ea0edd 084d8178 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in _ocfs2_free_suballoc_bits
2024/10/04 02:59 upstream 7ec462100ef9 d7906eff .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in _ocfs2_free_suballoc_bits
2025/02/12 17:46 upstream 09fbf3d50205 b27c2402 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/19 17:04 upstream fda5e3f28400 f2cb035c .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/10/26 09:11 upstream c71f8fb4dc91 65e8686b .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/10/06 20:50 upstream 8f602276d390 d7906eff .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/09/30 18:54 upstream 9852d85ec9d4 179f4029 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/09/24 20:09 upstream abf2050f51fd 5643e0e9 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/09/23 01:51 upstream af9c191ac2a0 6f888b75 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/09/19 00:03 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5f5673607153 c673ca06 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/11 15:08 upstream 2d5404caa8c7 0c4b1325 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in _ocfs2_free_suballoc_bits
2024/10/11 01:21 upstream 1d227fcc7222 cd942402 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/10/02 01:50 upstream e32cde8d2bd7 ea2b66a6 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/09/09 18:21 upstream da3ea35007d0 8f722c94 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] [mounted in repro #3] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/27 03:43 upstream c2da8b3f914f 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/08 17:24 upstream 09a0fa92e5b4 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/04 19:53 upstream 63676eefb7a0 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/01 05:08 upstream ccb98ccef0e5 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/17 15:04 upstream 0ad2507d5d93 4121cf9d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/15 11:17 upstream 04f41cbf03ec 40a34ec9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/14 04:55 upstream ab68d7eb7b1a d9a046cf .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/13 02:20 upstream 4dc1d1bec898 2afad16e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/10 15:10 upstream a64dcfb451e2 43f51a00 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/09 06:19 upstream 9946eaf552b1 ef44b750 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/08 14:39 upstream 8f6629c004b1 ef44b750 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/07 16:25 upstream bb066fe812d6 a4f327c2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/07 06:56 upstream bb066fe812d6 53657d1b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/01 02:48 upstream 69e858e0b8b2 aa47157c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/29 17:54 upstream 805ba04cb7cc d03b0c97 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/24 23:20 upstream bc8198dc7ebc 1293872d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/19 04:31 upstream fda5e3f28400 f2cb035c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2025/01/09 18:57 upstream eea6e4b4dfb8 9220929f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/30 03:56 upstream 4099a71718b0 d3ccff63 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/11 21:28 upstream f92f4749861b ff949d25 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/11 07:20 upstream f92f4749861b cfc402b4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/08 13:24 upstream 7503345ac5f5 9ac0fdc6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/06 11:49 upstream 5076001689e4 946d28f0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/05 23:05 upstream 5076001689e4 1c533826 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/04 06:06 upstream ceb8bf2ceaa7 b50eb251 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/01 11:20 upstream bcc8eda6d349 68914665 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/11/30 05:06 upstream 2ba9f676d0a2 68914665 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/11/29 21:48 upstream 7af08b57bcb9 b5d2be89 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/11/29 01:26 upstream 65ae975e97d5 5df23865 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/11/28 03:37 upstream b86545e02e8c 5df23865 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/11/18 05:09 upstream f66d6acccbc0 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/11/08 03:11 upstream 906bd684e4b1 179b040e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/11/07 22:15 upstream ff7afaeca1a1 867e44df .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/10/27 05:54 upstream 850925a8133c 65e8686b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/08/31 08:51 upstream fb24560f31f9 1eda0d14 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/08/30 10:18 upstream 3b9dfd9e5936 ee2602b8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/27 15:55 linux-next 8155b4ef3466 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/07 17:28 linux-next af2ea8ab7a54 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in _ocfs2_free_suballoc_bits
2024/12/01 22:23 linux-next f486c8aa16b8 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in _ocfs2_free_suballoc_bits
2025/02/15 09:33 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a64dcfb451e2 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/02/10 00:25 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2014c95afece ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/02/06 17:45 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2014c95afece 577d049b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/01/05 23:37 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 573067a5a685 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/12/27 00:02 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 573067a5a685 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/12/24 11:18 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 573067a5a685 444551c4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/28 16:48 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 7b1d1d4cfac0 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/26 22:08 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 7b1d1d4cfac0 11dbc254 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/23 23:50 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 7b1d1d4cfac0 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/17 14:19 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 887407160d72 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/15 19:26 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 887407160d72 f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/10 22:39 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 563047e691f2 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/10 03:28 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 563047e691f2 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/08 19:18 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci eb17c12d043d 179b040e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/02 03:43 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 1bf329c696cf f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in _ocfs2_free_suballoc_bits
* Struck through repros no longer work on HEAD.