syzbot


kernel BUG in find_lock_entries

Status: auto-obsoleted due to no activity on 2023/08/13 14:38
Reported-by: syzbot+f6cfd16b94c1e01b835c@syzkaller.appspotmail.com
First crash: 541d, last: 541d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in find_lock_entries mm C done 10 992d 1154d 20/28 fixed on 2022/03/08 16:11
upstream kernel BUG in __filemap_get_folio kernel C done 814 730d 901d 22/28 fixed on 2023/02/24 13:50

Sample crash report:
 kill_block_super+0x7a/0xe0 fs/super.c:1405
 deactivate_locked_super+0xa0/0x110 fs/super.c:335
 cleanup_mnt+0x44e/0x500 fs/namespace.c:1143
 task_work_run+0x129/0x1a0 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop+0x106/0x130 kernel/entry/common.c:175
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x5d/0x250 kernel/entry/common.c:301
 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
------------[ cut here ]------------
kernel BUG at mm/filemap.c:2107!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 27123 Comm: syz-executor.4 Not tainted 5.15.107-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
RIP: 0010:find_lock_entries+0xffd/0x1030 mm/filemap.c:2106
Code: ff 48 8b 7c 24 10 48 c7 c6 60 d4 92 8a e8 3b e9 0d 00 0f 0b e8 e4 19 d8 ff 48 8b 7c 24 10 48 c7 c6 a0 ce 92 8a e8 23 e9 0d 00 <0f> 0b e8 6c 66 6f 08 e8 c7 19 d8 ff 49 ff ce 4c 89 74 24 10 48 8b
RSP: 0018:ffffc9000b5df620 EFLAGS: 00010246
RAX: 6716a4fdbf050900 RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc90006041000 RSI: 000000000003b079 RDI: 000000000003b07a
RBP: ffffc9000b5df770 R08: ffffffff81cfd3c4 R09: ffffed10173667a0
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000b5df6c8
R13: 0000000000000041 R14: ffffea0001b75700 R15: dffffc0000000000
FS:  00007f800c6a1700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffce9fbcd98 CR3: 000000007937d000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 truncate_inode_pages_range+0x1c9/0x1290 mm/truncate.c:320
 kill_bdev block/bdev.c:77 [inline]
 set_blocksize+0x2ff/0x370 block/bdev.c:157
 sb_set_blocksize+0x45/0xe0 block/bdev.c:166
 ext4_fill_super+0x39ef/0x9f70 fs/ext4/super.c:4338
 mount_bdev+0x26d/0x3a0 fs/super.c:1378
 legacy_get_tree+0xeb/0x180 fs/fs_context.c:610
 vfs_get_tree+0x88/0x270 fs/super.c:1508
 do_new_mount+0x28b/0xad0 fs/namespace.c:2994
 do_mount fs/namespace.c:3337 [inline]
 __do_sys_mount fs/namespace.c:3545 [inline]
 __se_sys_mount+0x2d5/0x3c0 fs/namespace.c:3522
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f800e13069a
Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f800c6a0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000000007a9 RCX: 00007f800e13069a
RDX: 0000000020000280 RSI: 00000000200007c0 RDI: 00007f800c6a0fe0
RBP: 00007f800c6a1020 R08: 00007f800c6a1020 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000280
R13: 00000000200007c0 R14: 00007f800c6a0fe0 R15: 0000000020002180
 </TASK>
Modules linked in:
---[ end trace 0098d4072430d328 ]---
RIP: 0010:find_lock_entries+0xffd/0x1030 mm/filemap.c:2106
Code: ff 48 8b 7c 24 10 48 c7 c6 60 d4 92 8a e8 3b e9 0d 00 0f 0b e8 e4 19 d8 ff 48 8b 7c 24 10 48 c7 c6 a0 ce 92 8a e8 23 e9 0d 00 <0f> 0b e8 6c 66 6f 08 e8 c7 19 d8 ff 49 ff ce 4c 89 74 24 10 48 8b
RSP: 0018:ffffc9000b5df620 EFLAGS: 00010246
RAX: 6716a4fdbf050900 RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc90006041000 RSI: 000000000003b079 RDI: 000000000003b07a
RBP: ffffc9000b5df770 R08: ffffffff81cfd3c4 R09: ffffed10173667a0
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000b5df6c8
R13: 0000000000000041 R14: ffffea0001b75700 R15: dffffc0000000000
FS:  00007f800c6a1700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2db25000 CR3: 000000007937d000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/04/15 14:38 linux-5.15.y 4fdad925aa1a ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in find_lock_entries
* Struck through repros no longer work on HEAD.