syzbot


WARNING in mark_buffer_dirty

Status: upstream: reported C repro on 2022/01/20 22:23
Reported-by: syzbot+12dcc27187a73642a1db@syzkaller.appspotmail.com
First crash: 373d, last: 27d

Fix bisection: failed (bisect log)
similar bugs (8):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in mark_buffer_dirty (4) nilfs2 bfs C inconclusive 744 6h14m 208d 0/24 upstream: reported C repro on 2022/07/04 10:22
android-44 WARNING in mark_buffer_dirty 2 1487d 1385d 0/2 auto-closed as invalid on 2019/07/01 11:44
upstream WARNING in mark_buffer_dirty C 21 1516d 1899d 0/24 closed as invalid on 2019/07/24 04:22
linux-4.14 WARNING in mark_buffer_dirty (2) nilfs2 C error 6 19d 352d 0/1 upstream: reported C repro on 2022/02/10 08:17
upstream WARNING in mark_buffer_dirty (2) 665 1018d 1151d 0/24 auto-closed as invalid on 2020/07/14 01:44
upstream WARNING in mark_buffer_dirty (3) 2 700d 713d 0/24 auto-closed as invalid on 2021/06/27 09:01
android-49 WARNING in mark_buffer_dirty 7 1332d 1385d 0/3 auto-closed as invalid on 2019/10/25 08:47
linux-4.14 WARNING in mark_buffer_dirty 1 1112d 1112d 0/1 auto-closed as invalid on 2020/05/11 07:45

Sample crash report:
syz-executor169[8153]: segfault at 0 ip 0000000000000000 sp 00000000200000c8 error 14
Code: Bad RIP value.
WARNING: CPU: 1 PID: 8211 at fs/buffer.c:1087 mark_buffer_dirty+0x464/0x5c0 fs/buffer.c:1087
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 8211 Comm: syz-executor169 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 panic+0x26a/0x50e kernel/panic.c:186
 __warn.cold+0x20/0x5a kernel/panic.c:541
 report_bug+0x262/0x2b0 lib/bug.c:183
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038
RIP: 0010:mark_buffer_dirty+0x464/0x5c0 fs/buffer.c:1087
Code: c1 ea 03 80 3c 02 00 0f 85 6c 01 00 00 48 8b 3b be 04 00 00 00 e8 3c 7b fd ff 5b 5d 41 5c 41 5d e9 c1 34 b2 ff e8 bc 34 b2 ff <0f> 0b e9 d6 fb ff ff e8 b0 34 b2 ff 0f 0b e9 fa fb ff ff e8 a4 34
RSP: 0018:ffff888091db7880 EFLAGS: 00010293
RAX: ffff8880b13582c0 RBX: ffff888089b6fa80 RCX: ffffffff81b04c88
RDX: 0000000000000000 RSI: ffffffff81b050b4 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff888091d78140
R13: ffffed10123af04d R14: ffff888089b6fa80 R15: 0000000000000015
 bfs_move_block fs/bfs/file.c:43 [inline]
 bfs_move_blocks fs/bfs/file.c:56 [inline]
 bfs_get_block+0x3b6/0xd00 fs/bfs/file.c:125
 __block_write_begin_int+0x46c/0x17b0 fs/buffer.c:1978
 __block_write_begin fs/buffer.c:2028 [inline]
 block_write_begin+0x58/0x2e0 fs/buffer.c:2087
 bfs_write_begin+0x35/0xd0 fs/bfs/file.c:177
 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170
 __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295
 generic_file_write_iter+0x3f8/0x730 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 new_sync_write fs/read_write.c:474 [inline]
 __vfs_write+0x51b/0x770 fs/read_write.c:487
 vfs_write+0x1f3/0x540 fs/read_write.c:549
 ksys_write+0x12b/0x2a0 fs/read_write.c:599
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f8af71062b9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffcb05fca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8af71062b9
RDX: 000000000208e24b RSI: 0000000020000080 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007fffcb05fcd0 R09: 00007fffcb05fcd0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffcb05fccc
R13: 00007fffcb05fd00 R14: 00007fffcb05fce0 R15: 0000000000000014
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci2-linux-4-19 2022/10/25 00:15 linux-4.19.y 3f8a27f9e27b faae2fda .config console log report syz C [disk image] [vmlinux] [mounted in repro] WARNING in mark_buffer_dirty
ci2-linux-4-19 2022/01/20 22:50 linux-4.19.y 3f8a27f9e27b b838eb76 .config console log report syz C WARNING in mark_buffer_dirty
ci2-linux-4-19 2022/06/30 13:26 linux-4.19.y 3f8a27f9e27b 1434eec0 .config console log report syz WARNING in mark_buffer_dirty
ci2-linux-4-19 2023/01/01 13:57 linux-4.19.y 3f8a27f9e27b ab32d508 .config console log report info [disk image] [vmlinux] WARNING in mark_buffer_dirty
ci2-linux-4-19 2022/10/29 19:42 linux-4.19.y 3f8a27f9e27b 2a71366b .config console log report info [disk image] [vmlinux] WARNING in mark_buffer_dirty
ci2-linux-4-19 2022/10/28 14:51 linux-4.19.y 3f8a27f9e27b 8168b69e .config console log report info [disk image] [vmlinux] WARNING in mark_buffer_dirty
ci2-linux-4-19 2022/10/24 23:02 linux-4.19.y 3f8a27f9e27b faae2fda .config console log report info [disk image] [vmlinux] WARNING in mark_buffer_dirty
ci2-linux-4-19 2022/09/17 00:47 linux-4.19.y 3f8a27f9e27b dd9a85ff .config console log report info [disk image] [vmlinux] WARNING in mark_buffer_dirty
ci2-linux-4-19 2022/09/08 20:43 linux-4.19.y 3f8a27f9e27b f3027468 .config console log report info WARNING in mark_buffer_dirty
ci2-linux-4-19 2022/01/20 22:22 linux-4.19.y 3f8a27f9e27b b838eb76 .config console log report info WARNING in mark_buffer_dirty
* Struck through repros no longer work on HEAD.