syzbot


kernel BUG in ext4_ind_map_blocks

Status: premoderation: reported on 2025/04/11 22:18
Reported-by: syzbot+e6b21dc810a65e345315@syzkaller.appspotmail.com
First crash: 36d, last: 18d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in ext4_ind_map_blocks 1 757d 757d 0/3 auto-obsoleted due to no activity on 2023/08/20 16:37
android-6-1 kernel BUG in ext4_ind_map_blocks 1 34d 34d 0/2 premoderation: reported on 2025/04/13 22:28

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/ext4/indirect.c:544!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 5031 Comm: syz.9.1346 Tainted: G        W         5.10.236-syzkaller-00012-gab07aeb2c93d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:ext4_ind_map_blocks+0x1fc3/0x2130 fs/ext4/indirect.c:544
Code: 08 4c 89 ff e8 3e 57 d1 ff 49 8b 3f 48 8b 74 24 18 89 da 44 89 f1 44 8b 44 24 34 e8 17 91 0a 00 e9 e9 00 00 00 e8 7d 70 97 ff <0f> 0b e8 76 70 97 ff 0f 0b 65 8b 05 05 f5 35 7e 41 89 c6 c1 e8 06
RSP: 0018:ffffc90000f87180 EFLAGS: 00010293
RAX: ffffffff81cc1c33 RBX: 0000000000080000 RCX: ffff888117d84f00
RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000
RBP: ffffc90000f87410 R08: dffffc0000000000 R09: ffffed1025ce9185
R10: ffffed1025ce9185 R11: 1ffff11025ce9184 R12: 1ffff920001f0ec1
R13: 0000000000000001 R14: 0000000000000001 R15: ffffc90000f87608
FS:  000055558ba20500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8818fd8f98 CR3: 00000001226d8000 CR4: 00000000003506b0
DR0: 0000000000000081 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_map_blocks+0x93c/0x1b80 fs/ext4/inode.c:675
 _ext4_get_block+0x1bb/0x4b0 fs/ext4/inode.c:816
 ext4_get_block+0x39/0x50 fs/ext4/inode.c:833
 __block_write_begin_int+0x4f3/0x1570 fs/buffer.c:2042
 __block_write_begin fs/buffer.c:2092 [inline]
 block_page_mkwrite+0x200/0x270 fs/buffer.c:2554
 ext4_page_mkwrite+0x48c/0x1300 fs/ext4/inode.c:6307
 do_page_mkwrite mm/memory.c:3037 [inline]
 wp_page_shared+0x46a/0x750 mm/memory.c:3372
 do_wp_page+0xaee/0xc80 mm/memory.c:3476
 handle_pte_fault+0xac1/0x3750 mm/memory.c:4810
 __handle_mm_fault mm/memory.c:4944 [inline]
 handle_mm_fault+0xf3f/0x16a0 mm/memory.c:5358
 do_user_addr_fault+0x5a2/0xc80 arch/x86/mm/fault.c:1362
 handle_page_fault arch/x86/mm/fault.c:1428 [inline]
 exc_page_fault+0x5a/0xc0 arch/x86/mm/fault.c:1484
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:571
RIP: 0033:0x7f820b70cfe1
Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0
RSP: 002b:00007ffee9a592c0 EFLAGS: 00010246
RAX: 0000200000000150 RBX: 0000000000000004 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558ba203c8
RBP: 00007ffee9a593c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004
R13: 00007f820ba6dfa0 R14: fffffffffffffffe R15: 00007ffee9a59410
Modules linked in:
---[ end trace bf8022213d944483 ]---
RIP: 0010:ext4_ind_map_blocks+0x1fc3/0x2130 fs/ext4/indirect.c:544
Code: 08 4c 89 ff e8 3e 57 d1 ff 49 8b 3f 48 8b 74 24 18 89 da 44 89 f1 44 8b 44 24 34 e8 17 91 0a 00 e9 e9 00 00 00 e8 7d 70 97 ff <0f> 0b e8 76 70 97 ff 0f 0b 65 8b 05 05 f5 35 7e 41 89 c6 c1 e8 06
RSP: 0018:ffffc90000f87180 EFLAGS: 00010293
RAX: ffffffff81cc1c33 RBX: 0000000000080000 RCX: ffff888117d84f00
RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000
RBP: ffffc90000f87410 R08: dffffc0000000000 R09: ffffed1025ce9185
R10: ffffed1025ce9185 R11: 1ffff11025ce9184 R12: 1ffff920001f0ec1
R13: 0000000000000001 R14: 0000000000000001 R15: ffffc90000f87608
FS:  000055558ba20500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe274d45178 CR3: 00000001226d8000 CR4: 00000000003506b0
DR0: 0000000000000081 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/30 04:24 android13-5.10-lts ab07aeb2c93d 85a5a23f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in ext4_ind_map_blocks
2025/04/11 22:18 android13-5.10-lts e0b88ee5f09c 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in ext4_ind_map_blocks
* Struck through repros no longer work on HEAD.