syzbot


WARNING in ext4_iomap_begin

Status: fixed on 2025/07/14 10:31
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+8973d96aa456c9171655@syzkaller.appspotmail.com
Fix commit: a597a609bfd4 ext4: ensure i_size is smaller than maxbytes
First crash: 83d, last: 49d
Fix bisection: fixed by (bisect log) :
commit a597a609bfd4a2f6f4bce7b7d5f62769401c4c81
Author: Zhang Yi <yi.zhang@huawei.com>
Date: Tue May 6 01:20:09 2025 +0000

  ext4: ensure i_size is smaller than maxbytes

  
Bug presence (1)
Date Name Commit Repro Result
2025/05/08 upstream (ToT) d76bb1ebb558 C [report] WARNING in ext4_iomap_begin
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING in ext4_iomap_begin (2) origin:upstream -1 C done 10 42d 127d 3/3 fixed on 2025/07/16 19:57
linux-6.1 WARNING in ext4_iomap_begin -1 1 733d 733d 0/3 auto-obsoleted due to no activity on 2023/11/02 21:33
upstream WARNING in ext4_iomap_begin ext4 -1 C inconclusive error 16 1082d 1110d 0/29 auto-obsoleted due to no activity on 2023/04/04 00:54
upstream WARNING in ext4_iomap_begin (2) ext4 -1 C done 7 657d 772d 25/29 fixed on 2023/12/21 03:45
upstream WARNING in ext4_iomap_begin (3) ext4 -1 C inconclusive 52 1d10h 270d 0/29 upstream: reported C repro on 2024/10/31 12:34
Last patch testing requests (3)
Created Duration User Patch Repo Result
2025/05/30 09:21 11m retest repro linux-5.15.y report log
2025/05/30 09:21 14m retest repro linux-5.15.y report log
2025/05/30 09:21 16m retest repro linux-5.15.y report log

Sample crash report:
WARNING: CPU: 1 PID: 4418 at fs/ext4/inode.c:3436 ext4_iomap_begin+0xa0d/0xb80 fs/ext4/inode.c:3436
Modules linked in:
CPU: 1 PID: 4418 Comm: syz-executor122 Not tainted 5.15.181-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RIP: 0010:ext4_iomap_begin+0xa0d/0xb80 fs/ext4/inode.c:3436
Code: 89 e8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 37 f0 6e ff 48 bb 00 00 00 00 00 fc ff df e9 71 ff ff ff e8 23 f0 6e ff <0f> 0b 41 bd de ff ff ff 48 bb 00 00 00 00 00 fc ff df e9 7b ff ff
RSP: 0018:ffffc9000393efc0 EFLAGS: 00010293
RAX: ffffffff8208cded RBX: ffff88806ec8a152 RCX: ffff888021d29dc0
RDX: 0000000000000000 RSI: 00000000000000d4 RDI: 0000000000000000
RBP: ffffc9000393f140 R08: dffffc0000000000 R09: ffffed100dd913c8
R10: ffffed100dd913c8 R11: 1ffff1100dd913c7 R12: 00000000000000d4
R13: 1ffff1100dd9142a R14: 000000000000000a R15: 0000000000000000
FS:  00007faf95e2b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faf95e4d000 CR3: 0000000019394000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 iomap_iter+0x620/0xdb0 fs/iomap/iter.c:74
 __iomap_dio_rw+0xa69/0x1a70 fs/iomap/direct-io.c:585
 iomap_dio_rw+0x38/0x90 fs/iomap/direct-io.c:672
 ext4_dio_write_iter fs/ext4/file.c:540 [inline]
 ext4_file_write_iter+0x132b/0x17b0 fs/ext4/file.c:660
 do_iter_readv_writev+0x497/0x600 fs/read_write.c:-1
 do_iter_write+0x205/0x7b0 fs/read_write.c:855
 iter_file_splice_write+0x65f/0xc40 fs/splice.c:689
 do_splice_from fs/splice.c:767 [inline]
 direct_splice_actor+0xe1/0x130 fs/splice.c:936
 splice_direct_to_actor+0x4dc/0xb50 fs/splice.c:891
 do_splice_direct+0x1b9/0x2c0 fs/splice.c:979
 do_sendfile+0x5d5/0xec0 fs/read_write.c:1249
 __do_sys_sendfile64 fs/read_write.c:1317 [inline]
 __se_sys_sendfile64+0x13b/0x190 fs/read_write.c:1303
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7faf95e8fcc9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007faf95e2b218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007faf95f176d8 RCX: 00007faf95e8fcc9
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
RBP: 00007faf95f176d0 R08: 00007ffd555d5127 R09: 0000000000000000
R10: 0000000000014000 R11: 0000000000000246 R12: 00007faf95ee4590
R13: 0031656c69662f2e R14: 0000200000000600 R15: 0000003202000000
 </TASK>

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/07 10:01 linux-5.15.y 16fdf2c7111b 350f4ffc .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan WARNING in ext4_iomap_begin
2025/05/07 09:22 linux-5.15.y 16fdf2c7111b 350f4ffc .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan WARNING in ext4_iomap_begin
2025/06/09 09:26 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ext4_iomap_begin
2025/06/09 02:59 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ext4_iomap_begin
2025/05/14 17:08 linux-5.15.y 3b8db0e4f263 a4fa04ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ext4_iomap_begin
2025/05/07 10:40 linux-5.15.y 16fdf2c7111b 350f4ffc .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan WARNING in ext4_iomap_begin
2025/05/06 17:05 linux-5.15.y 16fdf2c7111b ae98e6b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ext4_iomap_begin
2025/05/06 17:05 linux-5.15.y 16fdf2c7111b ae98e6b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ext4_iomap_begin
* Struck through repros no longer work on HEAD.