syzbot


kernel BUG in ocfs2_claim_suballoc_bits

Status: upstream: reported C repro on 2024/12/02 23:45
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+9a1fb0bfb3697af3a16d@syzkaller.appspotmail.com
First crash: 19d, last: 13d
Bug presence (1)
Date Name Commit Repro Result
2024/12/09 upstream (ToT) fac04efc5c79 C [report] kernel BUG in ocfs2_claim_suballoc_bits
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in ocfs2_claim_suballoc_bits ocfs2 C inconclusive 436 1h55m 121d 0/28 upstream: reported C repro on 2024/08/22 08:11
linux-5.15 kernel BUG in ocfs2_claim_suballoc_bits origin:upstream C 3 19d 54d 0/3 upstream: reported C repro on 2024/10/28 07:17

Sample crash report:
WARNING: The mand mount option has been deprecated and
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:1387!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 4240 Comm: syz-executor195 Not tainted 6.1.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:ocfs2_find_victim_chain fs/ocfs2/suballoc.c:1387 [inline]
RIP: 0010:ocfs2_claim_suballoc_bits+0x23c2/0x2560 fs/ocfs2/suballoc.c:1927
Code: 85 e9 ff ff e8 df 53 15 fe 0f 0b e8 d8 53 15 fe 0f 0b e8 d1 53 15 fe 0f 0b e8 ca 53 15 fe 0f 0b e8 13 8b 3c 07 e8 be 53 15 fe <0f> 0b e8 b7 53 15 fe 0f 0b 65 44 8b 35 5d d1 8c 7c 48 c7 c0 b8 f9
RSP: 0018:ffffc90003d769e0 EFLAGS: 00010293
RAX: ffffffff83754832 RBX: 0000000000000000 RCX: ffff88801bb81dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90003d76c90 R08: ffffffff83753366 R09: ffffc90003d76d20
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff88802fb33e88 R14: ffff8880709f7e00 R15: 0000000000000255
FS:  00005555940df380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055df8ae744a8 CR3: 0000000075bcb000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __ocfs2_claim_clusters+0x327/0xa30 fs/ocfs2/suballoc.c:2338
 ocfs2_claim_clusters fs/ocfs2/suballoc.c:2375 [inline]
 ocfs2_block_group_alloc_contig fs/ocfs2/suballoc.c:428 [inline]
 ocfs2_block_group_alloc fs/ocfs2/suballoc.c:695 [inline]
 ocfs2_reserve_suballoc_bits+0x1241/0x5190 fs/ocfs2/suballoc.c:828
 ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 fs/ocfs2/suballoc.c:978
 ocfs2_init_xattr_set_ctxt+0x3ab/0x950 fs/ocfs2/xattr.c:3281
 ocfs2_xattr_set+0xf46/0x1930 fs/ocfs2/xattr.c:3638
 __vfs_setxattr+0x3e7/0x420 fs/xattr.c:182
 __vfs_setxattr_noperm+0x12a/0x5e0 fs/xattr.c:216
 vfs_setxattr+0x21d/0x420 fs/xattr.c:309
 do_setxattr fs/xattr.c:594 [inline]
 setxattr+0x250/0x2b0 fs/xattr.c:617
 path_setxattr+0x1bc/0x2a0 fs/xattr.c:636
 __do_sys_setxattr fs/xattr.c:652 [inline]
 __se_sys_setxattr fs/xattr.c:648 [inline]
 __x64_sys_setxattr+0xb7/0xd0 fs/xattr.c:648
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fb759bc56f9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd76fb0178 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fb759bc56f9
RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000020000140
RBP: 00007fb759c3c610 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd76fb0348 R14: 0000000000000001 R15: 0000000000000001
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ocfs2_find_victim_chain fs/ocfs2/suballoc.c:1387 [inline]
RIP: 0010:ocfs2_claim_suballoc_bits+0x23c2/0x2560 fs/ocfs2/suballoc.c:1927
Code: 85 e9 ff ff e8 df 53 15 fe 0f 0b e8 d8 53 15 fe 0f 0b e8 d1 53 15 fe 0f 0b e8 ca 53 15 fe 0f 0b e8 13 8b 3c 07 e8 be 53 15 fe <0f> 0b e8 b7 53 15 fe 0f 0b 65 44 8b 35 5d d1 8c 7c 48 c7 c0 b8 f9
RSP: 0018:ffffc90003d769e0 EFLAGS: 00010293
RAX: ffffffff83754832 RBX: 0000000000000000 RCX: ffff88801bb81dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90003d76c90 R08: ffffffff83753366 R09: ffffc90003d76d20
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff88802fb33e88 R14: ffff8880709f7e00 R15: 0000000000000255
FS:  00005555940df380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055df8ae744a8 CR3: 0000000075bcb000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/08 20:48 linux-6.1.y e4d90d63d385 9ac0fdc6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in ocfs2_claim_suballoc_bits
2024/12/08 19:56 linux-6.1.y e4d90d63d385 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in ocfs2_claim_suballoc_bits
2024/12/02 23:44 linux-6.1.y e4d90d63d385 b499ea68 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in ocfs2_claim_suballoc_bits
* Struck through repros no longer work on HEAD.