syzbot


kernel BUG in clear_state_bit

Status: upstream: reported C repro on 2023/06/24 20:08
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+51ab883f63134b0ac7ef@syzkaller.appspotmail.com
First crash: 312d, last: 85d
Fix bisection: failed (error log, bisect log)
  
Bug presence (3)
Date Name Commit Repro Result
2024/02/06 linux-5.15.y (ToT) 6139f2a02fe0 C [report] kernel BUG in clear_state_bit
2023/06/25 upstream (ToT) a92b7d26c743 C [report] kernel BUG in clear_state_bit
2024/02/06 upstream (ToT) 54be6c6c5ae8 C Didn't crash
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in clear_state_bit origin:upstream missing-backport C inconclusive 4 51d 312d 0/3 upstream: reported C repro on 2023/06/24 17:54
upstream kernel BUG in clear_state_bit btrfs C done 52 5d03h 523d 0/26 upstream: reported C repro on 2022/11/25 09:46
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2024/03/24 11:01 0m fix candidate upstream error job log (0)
2023/10/07 14:12 0m bisect fix linux-5.15.y error job log (0)

Sample crash report:
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
------------[ cut here ]------------
kernel BUG at fs/btrfs/extent_io.c:658!
Internal error: Oops - BUG: 0 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 3965 Comm: syz-executor688 Not tainted 5.15.118-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : clear_state_bit+0x4f0/0x4f4 fs/btrfs/extent_io.c:658
lr : clear_state_bit+0x4f0/0x4f4 fs/btrfs/extent_io.c:658
sp : ffff80001a3571d0
x29: ffff80001a3571e0 x28: 0000000000001000 x27: dfff800000000000
x26: ffff0000df071460 x25: 0000000000000108 x24: 0000000000000000
x23: 0000000000000fff x22: 00000000fffffff4 x21: 0000000000000000
x20: 0000000000001000 x19: ffff0000ceac37d0 x18: 0000000000000002
x17: ff80800008335ea8 x16: ffff8000119547c4 x15: ffff800008335ea8
x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000a073b80 x10: 0000000000000000 x9 : ffff80000a073b80
x8 : ffff0000c81b9b40 x7 : 0000000000000000 x6 : 0000000000000001
x5 : ffff80001a3565d8 x4 : 0000000000000100 x3 : 0000000000000a20
x2 : 0000000000000038 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 clear_state_bit+0x4f0/0x4f4 fs/btrfs/extent_io.c:658
 __clear_extent_bit+0x630/0xcc0 fs/btrfs/extent_io.c:835
 clear_record_extent_bits+0x70/0x98 fs/btrfs/extent_io.c:1450
 __btrfs_qgroup_release_data+0x3c0/0x9b4 fs/btrfs/qgroup.c:3823
 btrfs_qgroup_free_data+0x40/0x54 fs/btrfs/qgroup.c:3857
 btrfs_invalidatepage+0x4f8/0x908 fs/btrfs/inode.c:8802
 do_invalidatepage mm/truncate.c:157 [inline]
 truncate_cleanup_page+0x15c/0x414 mm/truncate.c:176
 truncate_inode_pages_range+0x254/0xbe0 mm/truncate.c:325
 truncate_inode_pages mm/truncate.c:425 [inline]
 truncate_pagecache mm/truncate.c:735 [inline]
 truncate_setsize+0xd8/0x104 mm/truncate.c:760
 btrfs_setsize fs/btrfs/inode.c:5429 [inline]
 btrfs_setattr+0x6b8/0xe2c fs/btrfs/inode.c:5468
 notify_change+0xac4/0xd60 fs/attr.c:488
 do_truncate+0x1c0/0x28c fs/open.c:65
 do_sys_ftruncate+0x288/0x31c fs/open.c:193
 __do_sys_ftruncate fs/open.c:204 [inline]
 __se_sys_ftruncate fs/open.c:202 [inline]
 __arm64_sys_ftruncate+0x60/0x74 fs/open.c:202
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: 97a15b60 f94007e8 17ffff30 97913d7c (d4210000) 
---[ end trace 9c9cd73ae076729f ]---

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/24 20:08 linux-5.15.y f67653019430 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in clear_state_bit
2023/08/16 00:54 linux-5.15.y 24c4de4069cb 39990d51 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in clear_state_bit
* Struck through repros no longer work on HEAD.