kernel BUG at fs/buffer.c:LINE! (2)

Status: upstream: reported C repro on 2020/11/21 07:48
Subsystems: udf ext4
[Documentation on labels]
Reported-by: syzbot+6b91ee7179cc5a01018d@syzkaller.appspotmail.com
First crash: 2074d, last: 1260d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (16)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at fs/buffer.c:LINE! nilfs -1 C done error 567 839d 3020d 25/29 fixed on 2024/04/10 03:59
android-49 kernel BUG at fs/buffer.c:LINE! -1 5 2919d 2974d 0/3 auto-closed as invalid on 2019/02/22 13:09
linux-4.14 kernel BUG at fs/buffer.c:LINE! -1 C error 59 1253d 2647d 0/1 upstream: reported C repro on 2019/04/27 19:47
linux-4.19 kernel BUG at fs/buffer.c:LINE! -1 syz done 23 2185d 2638d 1/1 fixed on 2020/09/01 18:34
android-54 kernel BUG at fs/buffer.c:LINE! ext4 -1 C 4762 428d 2378d 0/2 upstream: reported C repro on 2020/01/21 13:12
android-6-1 kernel BUG in __block_commit_write -1 syz error error 1 1047d 1047d 0/2 auto-obsoleted due to no activity on 2023/12/12 18:06
android-6-1 kernel BUG in __block_commit_write (2) origin:upstream missing-backport -1 C error error 1 143d 920d 0/2 upstream: reported C repro on 2024/01/19 10:04
android-5-10 kernel BUG in __block_commit_write -1 1 1047d 1047d 0/2 auto-obsoleted due to no activity on 2023/12/12 11:41
android-5-10 kernel BUG in __block_commit_write (2) -1 syz error 2 102d 922d 0/2 premoderation: reported syz repro on 2024/01/17 04:07
linux-6.1 kernel BUG in submit_bh_wbc origin:lts-only -1 C done 19 780d 1209d 3/3 fixed on 2024/07/20 06:27
upstream kernel BUG in submit_bh_wbc (2) udf -1 C done 123 717d 823d 27/29 fixed on 2024/08/14 03:44
linux-6.1 kernel BUG in submit_bh_wbc (2) origin:lts-only -1 C inconclusive 277 7d07h 730d 0/3 upstream: reported C repro on 2024/07/26 16:49
upstream kernel BUG in submit_bh_wbc (3) nilfs fs -1 C done 18 644d 651d 28/29 fixed on 2024/11/12 23:31
linux-5.15 kernel BUG in submit_bh_wbc -1 C error 8 870d 1148d 0/3 auto-obsoleted due to no activity on 2024/06/16 14:58
upstream kernel BUG in submit_bh_wbc nilfs -1 C done 10 824d 833d 25/29 fixed on 2024/04/24 18:26
android-6-1 kernel BUG in submit_bh_wbc missing-backport origin:lts -1 C done done 2563 1d11h 1138d 0/2 upstream: reported C repro on 2023/06/15 00:20
▶ ▼ Fix bisection attempts (9)
Created Duration User Patch Repo Result
2021/11/18 20:27 13m bisect fix linux-4.19.y error job log
2021/10/01 16:44 25m bisect fix linux-4.19.y OK (0) job log log
2021/07/07 03:26 23m bisect fix linux-4.19.y OK (0) job log log
2021/06/07 03:00 26m bisect fix linux-4.19.y OK (0) job log log
2021/04/25 16:11 30m bisect fix linux-4.19.y OK (0) job log log
2021/03/26 08:35 22m bisect fix linux-4.19.y OK (0) job log log
2021/02/24 07:05 23m bisect fix linux-4.19.y OK (0) job log log
2021/01/24 13:00 23m bisect fix linux-4.19.y OK (0) job log log
2020/12/25 12:35 24m bisect fix linux-4.19.y OK (0) job log log

Sample crash report:
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
------------[ cut here ]------------
kernel BUG at fs/buffer.c:3049!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 16728 Comm: syz-executor218 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:submit_bh_wbc+0x5e5/0x760 fs/buffer.c:3049
Code: 10 4c 8d 7b 20 48 89 44 24 08 e9 3e fc ff ff e8 41 98 b1 ff f0 80 63 01 f7 e9 4d fb ff ff e8 32 98 b1 ff 0f 0b e8 2b 98 b1 ff <0f> 0b e8 24 98 b1 ff 0f 0b e8 1d 98 b1 ff 0f 0b e8 16 98 b1 ff 0f
RSP: 0018:ffff888094dffa30 EFLAGS: 00010293
RAX: ffff8880afdec400 RBX: ffff88808aca6dc8 RCX: ffffffff81b0e7d1
RDX: 0000000000000000 RSI: ffffffff81b0ed45 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000008
FS:  0000555555e46300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffddc515b48 CR3: 000000009c07b000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 submit_bh fs/buffer.c:3096 [inline]
 __bread_slow fs/buffer.c:1176 [inline]
 __bread_gfp+0x14e/0x300 fs/buffer.c:1369
 sb_bread include/linux/buffer_head.h:309 [inline]
 udf_tread+0xe8/0x130 fs/udf/misc.c:44
 udf_read_tagged+0x4e/0x530 fs/udf/misc.c:219
 udf_find_fileset fs/udf/super.c:762 [inline]
 udf_fill_super+0xddf/0x17a0 fs/udf/super.c:2263
 mount_bdev+0x2fc/0x3b0 fs/super.c:1158
 mount_fs+0xa3/0x310 fs/super.c:1261
 vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961
 vfs_kern_mount fs/namespace.c:951 [inline]
 do_new_mount fs/namespace.c:2492 [inline]
 do_mount+0x115c/0x2f50 fs/namespace.c:2822
 ksys_mount+0xcf/0x130 fs/namespace.c:3038
 __do_sys_mount fs/namespace.c:3052 [inline]
 __se_sys_mount fs/namespace.c:3049 [inline]
 __x64_sys_mount+0xba/0x150 fs/namespace.c:3049
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe61da9ff0a
Code: 48 c7 c2 c0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 a8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffddc5159d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe61da9ff0a
RDX: 0000000020000c00 RSI: 0000000020000c40 RDI: 00007ffddc5159f0
RBP: 00007ffddc5159f0 R08: 00007ffddc515a30 R09: 0000000000000be8
R10: 0000000000000804 R11: 0000000000000282 R12: 0000000000000006
R13: 0000555555e462c0 R14: 0000000000000804 R15: 00007ffddc515a30
Modules linked in:
---[ end trace 6ba6d6280c9a12b5 ]---
RIP: 0010:submit_bh_wbc+0x5e5/0x760 fs/buffer.c:3049
Code: 10 4c 8d 7b 20 48 89 44 24 08 e9 3e fc ff ff e8 41 98 b1 ff f0 80 63 01 f7 e9 4d fb ff ff e8 32 98 b1 ff 0f 0b e8 2b 98 b1 ff <0f> 0b e8 24 98 b1 ff 0f 0b e8 1d 98 b1 ff 0f 0b e8 16 98 b1 ff 0f
RSP: 0018:ffff888094dffa30 EFLAGS: 00010293
RAX: ffff8880afdec400 RBX: ffff88808aca6dc8 RCX: ffffffff81b0e7d1
RDX: 0000000000000000 RSI: ffffffff81b0ed45 RDI: 0000000000000001
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000008
FS:  0000555555e46300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe615750e00 CR3: 000000009c07b000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)

Crashes (31):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/12/23 11:29 linux-4.19.y 3f8a27f9e27b 9da18ae8 .config console log report syz C [disk image] [vmlinux] [mounted in repro] ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/10/14 03:26 linux-4.19.y 3f8a27f9e27b 4954e4b2 .config console log report syz C [disk image] [vmlinux] [mounted in repro] ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/09/03 08:37 linux-4.19.y 3f8a27f9e27b 49e94a20 .config console log report syz C [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/05/14 17:28 linux-4.19.y 3f8a27f9e27b 744a39e2 .config console log report syz C ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/03/19 03:23 linux-4.19.y 3f8a27f9e27b e2d91b1d .config console log report syz C ci2-linux-4-19 kernel BUG in submit_bh_wbc
2021/05/01 14:38 linux-4.19.y 97a8651cadce 77e2b668 .config console log report syz C ci2-linux-4-19 kernel BUG in __block_commit_write
2020/11/25 12:35 linux-4.19.y 0c88e405c97e 1a1f4bd8 .config console log report syz C ci2-linux-4-19
2023/02/13 03:29 linux-4.19.y 3f8a27f9e27b 93e26d60 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/10/18 23:25 linux-4.19.y 3f8a27f9e27b b31320fc .config console log report info [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/10/18 23:14 linux-4.19.y 3f8a27f9e27b b31320fc .config console log report info [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/09/27 04:00 linux-4.19.y 3f8a27f9e27b d59ba983 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/09/03 08:01 linux-4.19.y 3f8a27f9e27b 49e94a20 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/08/24 02:27 linux-4.19.y 3f8a27f9e27b cea8b0f7 .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2022/08/21 15:36 linux-4.19.y 3f8a27f9e27b 26a13b38 .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/07/11 20:13 linux-4.19.y 3f8a27f9e27b f3f217ff .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/06/09 17:00 linux-4.19.y 3f8a27f9e27b 0d5abf15 .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/04/21 19:15 linux-4.19.y 3f8a27f9e27b 2738b391 .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/03/17 14:34 linux-4.19.y 3f8a27f9e27b dfa9a8ed .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2022/01/17 03:11 linux-4.19.y 3f8a27f9e27b 723cfaf0 .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2022/01/16 21:16 linux-4.19.y 3f8a27f9e27b 723cfaf0 .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2022/01/15 10:46 linux-4.19.y 3f8a27f9e27b 723cfaf0 .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2022/01/13 17:28 linux-4.19.y 3f8a27f9e27b b8d780ab .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2021/11/29 19:53 linux-4.19.y 3f8a27f9e27b d0830353 .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2021/11/29 02:53 linux-4.19.y 3f8a27f9e27b 63eeac02 .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2021/11/25 01:51 linux-4.19.y 3f8a27f9e27b 545ab074 .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2021/10/19 19:56 linux-4.19.y 3f8a27f9e27b 466b7db1 .config console log report info ci2-linux-4-19 kernel BUG in __block_commit_write
2021/10/07 11:33 linux-4.19.y 6db10b4d5efd 62ee0987 .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2021/09/01 16:43 linux-4.19.y e23d55af0e1f 7eb7e152 .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2021/08/04 00:06 linux-4.19.y 53bd76690e27 6c236867 .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2021/05/08 02:59 linux-4.19.y 3c8c23092588 bc5434be .config console log report info ci2-linux-4-19 kernel BUG in submit_bh_wbc
2020/11/21 07:47 linux-4.19.y 2c746135a12e 68068804 .config console log report info ci2-linux-4-19
* Struck through repros no longer work on HEAD.