syzbot


kernel BUG in ocfs2_dio_wr_get_block

Status: upstream: reported C repro on 2024/09/12 09:36
Subsystems: ocfs2
[Documentation on labels]
Reported-by: syzbot+f8b081be889b639423bb@syzkaller.appspotmail.com
First crash: 622d, last: 9d14h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
76749fbe-a019-48e0-89a3-0b47003b196c assessment-security 💥 kernel BUG in ocfs2_dio_wr_get_block 2026/05/14 08:15 2026/05/14 08:15 2026/05/14 08:18 6ccb967e465e832a7bfd7a116ad00d52a0923a5d failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/f393507a7c76eac8f3265d27bb193168dbcbddc2" "-s" "bzImage" "compile_commands.json"]: exit status 2 /app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/security/apparmor/apparmorfs.c:177:28: warning: unused function 'get_loaddata_common_ref' [-Wunused-function] 177 | static struct aa_loaddata *get_loaddata_common_ref(struct aa_common_ref *ref) | ^~~~~~~~~~~~~~~~~~~~~~~ 1 warning generated. /app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/lib/maple_tree.c:3514:20: warning: stack frame size (2424) exceeds limit (2048) in 'mas_wr_store_entry' [-Wframe-larger-than] 3514 | static inline void mas_wr_store_entry(struct ma_wr_state *wr_mas) | ^ 1 warning generated. /app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/sound/usb/mixer_s1810c.c:634:5: warning: stack frame size (2360) exceeds limit (2048) in 'snd_sc1810_init_mixer' [-Wframe-larger-than] 634 | int snd_sc1810_init_mixer(struct usb_mixer_interface *mixer) | ^ 1 warning generated. /app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/security/apparmor/policy_unpack.c:1727:5: warning: stack frame size (2872) exceeds limit (2048) in 'aa_unpack' [-Wframe-larger-than] 1727 | int aa_unpack(struct aa_loaddata *udata, struct list_head *lh, | ^ 1 warning generated. /app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/net/ethtool/cmis_fw_update.c:432:1: warning: stack frame size (2392) exceeds limit (2048) in 'ethtool_cmis_fw_update' [-Wframe-larger-than] 432 | ethtool_cmis_fw_update(struct ethtool_cmis_fw_update_params *fw_update) | ^ 1 warning generated. /app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/lib/crypto/curve25519-hacl64.c:757:6: warning: stack frame size (2936) exceeds limit (2048) in 'curve25519_generic' [-Wframe-larger-than] 757 | void curve25519_generic(u8 mypublic[CURVE25519_KEY_SIZE], | ^ 1 warning generated. /app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/drivers/block/loop.c:1515:12: warning: stack frame size (2872) exceeds limit (2048) in 'lo_ioctl' [-Wframe-larger-than] 1515 | static int lo_ioctl(struct block_device *bdev, blk_mode_t mode, | ^ 1 warning generated. fixdep: not all data was written to the output make[6]: *** [/app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/scripts/Makefile.build:289: drivers/misc/mei/interrupt.o] Error 1 make[6]: *** Deleting file 'drivers/misc/mei/interrupt.o' make[5]: *** [/app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/scripts/Makefile.build:548: drivers/misc/mei] Error 2 make[5]: *** Waiting for unfinished jobs.... fatal error: error in backend: IO failure on output stream: No space left on device PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script. Stack dump: 0. Program arguments: /usr/bin/clang --target=x86_64-linux-gnu -fintegrated-as -Werror=unknown-warning-option -Werror=ignored-optimization-argument -Werror=option-ignored -Werror=unused-command-line-argument -fmacro-prefix-map=/app/workdir/cache/src/1e39944fbafaaa3768fe503059b27f6727d79506/= -fshort-wchar -funsigned-char -fno-common -fno-PIE -fno-strict-aliasing -std=gnu11 -fms-extensions -Wno-gnu -Wno-microsoft-anon-tag -mno-sse -mno-mmx -mno-sse2 -mno-3dnow -mno-avx -mno-sse4a -fcf-protection=branch -fno-jump-tables -m64 -falign-loops=1 -mno-80387 -mno-fp-ret-in-387 -mstack-alignment=8 -mskip-rax-setup -march=x86-64 -mtune=generic -mno-red-zone -mcmodel=kernel -mstack-protector-guard-reg=gs -mstack-protector-guard-symbol=__ref_stack_chk_guard -Wno-sign-compare -fno-asynchronous-unwind-tables -mretpoline-external-thunk -mindirect-branch-cs-prefix -mfunction-return=thunk-extern -fpatchable-function-entry=16,16 -fno-delete-null-pointer-checks -O2 -f
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [ocfs2?] kernel BUG in ocfs2_dio_wr_get_block 0 (3) 2025/04/07 01:06
Last patch testing requests (3)
Created Duration User Patch Repo Result
2025/09/11 16:58 19m retest repro upstream OK log
2025/09/11 16:58 20m retest repro upstream OK log
2025/09/11 16:58 19m retest repro upstream OK log

Sample crash report:
loop0: detected capacity change from 0 to 32768
(syz.0.0,5325,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
(syz.0.0,5325,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
JBD2: Ignoring recovery information on journal
ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
(syz.0.0,5325,0):__ocfs2_journal_access:724 ERROR: Error -30 getting 1 access to buffer!
(syz.0.0,5325,0):ocfs2_write_end_nolock:1945 ERROR: status = -30
(syz.0.0,5325,0):ocfs2_commit_trans:401 ERROR: status = -5
------------[ cut here ]------------
kernel BUG at fs/ocfs2/aops.c:2256!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:ocfs2_dio_wr_get_block+0x17ee/0x1800 fs/ocfs2/aops.c:2256
Code: 89 d7 e8 45 5c 73 fe 44 89 fa 4c 8b 7c 24 38 e9 a3 fa ff ff e8 83 90 06 fe 90 0f 0b e8 7b 90 06 fe 90 0f 0b e8 73 90 06 fe 90 <0f> 0b e8 6b 90 06 fe 90 0f 0b 0f 1f 84 00 00 00 00 00 90 90 90 90
RSP: 0018:ffffc9000344ee40 EFLAGS: 00010287
RAX: ffffffff83bf435d RBX: 00000000ffffffe2 RCX: 0000000000100000
RDX: ffffc90020802000 RSI: 0000000000033717 RDI: 0000000000033718
RBP: ffffc9000344f010 R08: ffffffff9030eaf7 R09: 1ffffffff2061d5e
R10: dffffc0000000000 R11: fffffbfff2061d5f R12: ffff888046a4ea90
R13: dffffc0000000000 R14: 1ffff92000689ddc R15: 0000000000001000
FS:  00007f7ed96a66c0(0000) GS:ffff88808c87f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7ed965c000 CR3: 0000000042e39000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 get_more_blocks fs/direct-io.c:648 [inline]
 do_direct_IO fs/direct-io.c:936 [inline]
 __blockdev_direct_IO+0x161d/0x34e0 fs/direct-io.c:1243
 ocfs2_direct_IO+0x251/0x2c0 fs/ocfs2/aops.c:2455
 generic_file_direct_write+0x1db/0x3e0 mm/filemap.c:4259
 __generic_file_write_iter+0x11d/0x230 mm/filemap.c:4428
 ocfs2_file_write_iter+0x1663/0x1e70 fs/ocfs2/file.c:2476
 iter_file_splice_write+0x9a1/0x10f0 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x101/0x160 fs/splice.c:1159
 splice_direct_to_actor+0x53a/0xc70 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x195/0x290 fs/splice.c:1228
 do_sendfile+0x535/0x7d0 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64+0x144/0x1a0 fs/read_write.c:1419
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7ed879ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7ed96a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f7ed8a15fa0 RCX: 00007f7ed879ce59
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
RBP: 00007f7ed8832d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7ed8a16038 R14: 00007f7ed8a15fa0 R15: 00007fff3b9f9c48
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ocfs2_dio_wr_get_block+0x17ee/0x1800 fs/ocfs2/aops.c:2256
Code: 89 d7 e8 45 5c 73 fe 44 89 fa 4c 8b 7c 24 38 e9 a3 fa ff ff e8 83 90 06 fe 90 0f 0b e8 7b 90 06 fe 90 0f 0b e8 73 90 06 fe 90 <0f> 0b e8 6b 90 06 fe 90 0f 0b 0f 1f 84 00 00 00 00 00 90 90 90 90
RSP: 0018:ffffc9000344ee40 EFLAGS: 00010287
RAX: ffffffff83bf435d RBX: 00000000ffffffe2 RCX: 0000000000100000
RDX: ffffc90020802000 RSI: 0000000000033717 RDI: 0000000000033718
RBP: ffffc9000344f010 R08: ffffffff9030eaf7 R09: 1ffffffff2061d5e
R10: dffffc0000000000 R11: fffffbfff2061d5f R12: ffff888046a4ea90
R13: dffffc0000000000 R14: 1ffff92000689ddc R15: 0000000000001000
FS:  00007f7ed96a66c0(0000) GS:ffff88808c87f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000042e39000 CR4: 0000000000352ef0

Crashes (373):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/17 16:14 upstream 6916d5703ddf de5aae85 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/05/16 18:40 upstream 6916d5703ddf a15a64a6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/05/16 05:22 upstream d458a240344c 81fb92f3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/05/12 11:48 upstream 50897c955902 07aeade5 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/05/06 18:48 upstream 74fe02ce122a 23ad3581 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/05/03 11:22 upstream 66edb901bf87 a0d91488 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/05/01 05:56 upstream 26fd6bff2c05 753c55b9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/04/27 02:33 upstream 14479877c1ec 9c2d0995 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/04/24 12:23 upstream dd6c438c3e64 9cfb3ca7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/04/18 05:07 upstream 8541d8f725c6 5be7a9de .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/04/18 02:06 upstream 43cfbdda5af6 24ecfc1e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/04/18 00:22 upstream 43cfbdda5af6 24ecfc1e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/04/17 22:18 upstream 43cfbdda5af6 24ecfc1e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/04/08 10:08 upstream 3036cd0d3328 2c961e87 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/03/27 04:21 upstream 46b513250491 50cdcaa1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/03/14 12:06 upstream 1c9982b49613 ee8d34d6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/03/04 16:12 upstream 0031c06807cf e6b6b96b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/03/04 06:26 upstream 0031c06807cf 4180d919 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/02/23 15:55 upstream 6de23f81a5e0 7c9658af .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/02/21 14:24 upstream a95f71ad3e2e 6e7b5511 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/02/20 08:53 upstream 8bf22c33e7a1 17d780d6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/02/19 01:17 upstream 23b0f90ba871 77d4d919 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/01/07 18:23 upstream 54e82e93ca93 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/01/05 14:21 upstream 54e82e93ca93 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/01/02 05:39 upstream b69053dd3ffb d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2026/01/01 08:31 upstream 349bd28a86f2 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/12/29 14:30 upstream 7839932417dd d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/12/14 18:39 upstream 8f0b4cce4481 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/12/11 06:45 upstream d358e5254674 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/12/10 21:49 upstream 0048fbb4011e d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/11/25 20:45 upstream 8a2bcda5e139 bf6fe8fe .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/11/23 02:45 upstream 89edd36fd801 4fb8ef37 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/11/07 11:30 upstream 4a0c9b339199 4e1406b4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/11/06 21:02 upstream c2c2ccfd4ba7 4e1406b4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/10/22 18:18 upstream dd72c8fcf6d3 c0460fcd .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/10/13 02:57 upstream 3a8660878839 ff1712fe .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/10/12 08:27 upstream 98906f9d850e ff1712fe .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/10/11 20:39 upstream 0739473694c4 ff1712fe .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/09/27 19:50 upstream fec734e8d564 001c9061 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/09/27 13:28 upstream fec734e8d564 001c9061 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/09/27 07:58 upstream 083fc6d7fa0d 001c9061 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/09/23 03:04 upstream cec1e6e5d1ab 0ac7291c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/09/15 20:12 upstream f83ec76bf285 e2beed91 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/08/28 15:17 upstream 07d9df80082b bee60a83 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/08/27 20:13 upstream 39f90c196721 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/06/11 19:14 upstream aef17cb3d3c4 98683f8f .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1 (clean fs)] [mounted in repro #2 (clean fs)] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/04/07 01:05 upstream 0af2f6be1b42 1c65791e .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2025/02/15 23:06 upstream 7ff71e6d9239 40a34ec9 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1 (clean fs)] [mounted in repro #2 (clean fs)] [mounted in repro #3] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
2024/09/11 16:06 upstream 8d8d276ba2fb ede7a22c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_dio_wr_get_block
* Struck through repros no longer work on HEAD.