syzbot


WARNING: locking bug in ext4_xattr_inode_iget

Status: auto-obsoleted due to no activity on 2023/09/14 16:49
Reported-by: syzbot+ac6636cb5046144aa2e4@syzkaller.appspotmail.com
First crash: 353d, last: 324d
Fix bisection: failed (error log, bisect log)
  
Bug presence (1)
Date Name Commit Repro Result
2023/07/14 upstream (ToT) 4b810bf037e5 C Didn't crash
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING: locking bug in ext4_xattr_inode_iget origin:upstream missing-backport C inconclusive 7 120d 355d 0/3 upstream: reported C repro on 2023/05/06 10:34
upstream WARNING: locking bug in ext4_xattr_inode_iget (2) ext4 C 1 29d 25d 0/26 upstream: reported C repro on 2024/03/31 14:03
upstream WARNING: locking bug in ext4_xattr_inode_iget ext4 C error 23 321d 352d 22/26 fixed on 2023/07/01 16:05

Sample crash report:
EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz-executor164: casefold flag without casefold feature
EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: inode #12: comm syz-executor164: casefold flag without casefold feature
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3960 at kernel/locking/lockdep.c:896 look_up_lock_class+0x134/0x13c
Modules linked in:
CPU: 1 PID: 3960 Comm: syz-executor164 Not tainted 5.15.115-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : look_up_lock_class+0x134/0x13c
lr : look_up_lock_class+0x74/0x13c
sp : ffff80001a1a6f30
x29: ffff80001a1a6f30 x28: dfff800000000000 x27: 0000000100000000
x26: ffff8000183bfd20 x25: ffff8000183bf000 x24: ffff0000c8e23680
x23: ffff800014820d00 x22: 0000000000000000 x21: ffff800014c180f9
x20: ffff0000dc1b35c8 x19: ffff800016ffee80 x18: ffff80001a1a6ac0
x17: 1fffe00036903d8e x16: ffff8000082ea840 x15: 000000000000b2c4
x14: 00000000192385dd x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000a9a2f30 x10: 0000000000000000 x9 : ffff800017186d00
x8 : ffff800014c180f8 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010
x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000001
Call trace:
 look_up_lock_class+0x134/0x13c
 register_lock_class+0x90/0x6a4 kernel/locking/lockdep.c:1245
 lockdep_init_map_type+0x284/0x768 kernel/locking/lockdep.c:4814
 ext4_xattr_inode_set_class fs/ext4/xattr.c:126 [inline]
 ext4_xattr_inode_iget+0x278/0x4b8 fs/ext4/xattr.c:425
 ext4_xattr_inode_dec_ref_all+0x18c/0xd38 fs/ext4/xattr.c:1159
 ext4_xattr_delete_inode+0x938/0xad4 fs/ext4/xattr.c:2906
 ext4_evict_inode+0xd04/0x124c fs/ext4/inode.c:299
 evict+0x260/0x68c fs/inode.c:587
 iput_final fs/inode.c:1663 [inline]
 iput+0x744/0x824 fs/inode.c:1689
 ext4_process_orphan+0x244/0x2b8 fs/ext4/orphan.c:360
 ext4_orphan_cleanup+0x8bc/0x1048 fs/ext4/orphan.c:474
 ext4_fill_super+0x7f7c/0x868c fs/ext4/super.c:4966
 mount_bdev+0x274/0x370 fs/super.c:1378
 ext4_mount+0x44/0x58 fs/ext4/super.c:6583
 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610
 vfs_get_tree+0x90/0x274 fs/super.c:1508
 do_new_mount+0x25c/0x8c4 fs/namespace.c:2994
 path_mount+0x590/0x104c fs/namespace.c:3324
 do_mount fs/namespace.c:3337 [inline]
 __do_sys_mount fs/namespace.c:3545 [inline]
 __se_sys_mount fs/namespace.c:3522 [inline]
 __arm64_sys_mount+0x510/0x5e0 fs/namespace.c:3522
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 16227
hardirqs last  enabled at (16227): [<ffff800008268d0c>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1338 [inline]
hardirqs last  enabled at (16227): [<ffff800008268d0c>] finish_lock_switch+0xbc/0x1e8 kernel/sched/core.c:4780
hardirqs last disabled at (16226): [<ffff800011a0f7b8>] __schedule+0x308/0x1e38 kernel/sched/core.c:6268
softirqs last  enabled at (16144): [<ffff800008020ccc>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (16144): [<ffff800008020ccc>] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587
softirqs last disabled at (16107): [<ffff8000081b573c>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (16107): [<ffff8000081b573c>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (16107): [<ffff8000081b573c>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 61a140b275e662f1 ]---
EXT4-fs error (device loop0): ext4_do_update_inode:5146: inode #15: comm syz-executor164: corrupted inode contents
EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
EXT4-fs error (device loop0): ext4_do_update_inode:5146: inode #15: comm syz-executor164: corrupted inode contents
EXT4-fs error (device loop0): ext4_evict_inode:330: inode #15: comm syz-executor164: mark_inode_dirty error
EXT4-fs (loop0): 1 orphan inode deleted
EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: none.

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/06 16:49 linux-5.15.y d7af3e5ba454 a4ae4f42 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 WARNING: locking bug in ext4_xattr_inode_iget
2023/05/29 05:57 linux-5.15.y 1fe619a7d252 cf184559 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan WARNING: locking bug in ext4_xattr_inode_iget
2023/05/08 15:21 linux-5.15.y 8a7f2a5c5aa1 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 WARNING: locking bug in ext4_xattr_inode_iget
2023/06/06 13:19 linux-5.15.y d7af3e5ba454 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING: locking bug in ext4_xattr_inode_iget
* Struck through repros no longer work on HEAD.