syzbot

 sign-in | mailing list | source | docs
🐞 Open [717] 🐞 Fixed [181] 🐞 Invalid [640] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel BUG in ext4_mb_load_buddy_gfp

Status: upstream: reported C repro on 2021/04/29 16:39
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+9fb6cebb68c961541029@syzkaller.appspotmail.com
First crash: 1082d, last: 409d
▶ ▼ Similar bugs (11)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 kernel BUG in ext4_mb_load_buddy_gfp (2) origin:upstream missing-backport C error done 24 298d 346d 0/2 upstream: reported C repro on 2023/05/06 10:12
android-5-10 kernel BUG in ext4_free_blocks 3 855d 887d 0/2 auto-closed as invalid on 2022/03/13 09:34
android-6-1 kernel BUG in ext4_mb_load_buddy_gfp C error done 42 178d 335d 0/2 auto-obsoleted due to no activity on 2023/12/29 16:31
android-5-10 kernel BUG in ext4_free_blocks (2) ext4 C error 25 350d 652d 2/2 fixed on 2023/05/04 14:51
linux-4.19 kernel BUG at fs/ext4/ext4.h:LINE! ext4 C error 13 429d 1248d 0/1 upstream: reported C repro on 2020/11/15 12:08
android-5-15 kernel BUG in ext4_mb_load_buddy_gfp ext4 C error 9 389d 506d 2/2 fixed on 2023/03/28 12:29
android-5-10 kernel BUG in ext4_mb_load_buddy_gfp C error 28 31d 347d 0/2 upstream: reported C repro on 2023/05/04 23:52
android-54 kernel BUG at fs/ext4/ext4.h:LINE! ext4 C 200 12h53m 1285d 0/2 upstream: reported C repro on 2020/10/08 13:59
upstream kernel BUG at fs/ext4/ext4.h:LINE! ext4 1 1201d 1197d 0/26 auto-closed as invalid on 2021/05/01 06:31
upstream kernel BUG in ext4_get_group_info ext4 C error 237 338d 971d 22/26 fixed on 2023/07/01 16:05
android-5-15 kernel BUG in ext4_free_blocks ext4 1 450d 450d 0/2 auto-obsoleted due to no activity on 2023/04/30 03:35
▶ ▼ Fix bisection attempts (18)
Created Duration User Patch Repo Result
2023/03/04 09:35 25m bisect fix linux-4.14.y job log (0) log
2023/01/21 10:30 21m bisect fix linux-4.14.y job log (0) log
2022/11/04 14:11 28m bisect fix linux-4.14.y job log (0) log
2022/09/02 04:52 30m bisect fix linux-4.14.y job log (0) log
2022/08/03 04:11 25m bisect fix linux-4.14.y job log (0) log
2022/06/11 04:42 21m bisect fix linux-4.14.y job log (0) log
2022/04/30 04:12 21m (5) bisect fix linux-4.14.y job log (0) log
2022/03/31 03:42 25m bisect fix linux-4.14.y job log (0) log
2022/02/28 21:38 21m bisect fix linux-4.14.y job log (0) log
2022/01/29 21:08 30m bisect fix linux-4.14.y job log (0) log
2021/12/30 20:32 30m bisect fix linux-4.14.y job log (0) log
2021/11/30 20:04 21m bisect fix linux-4.14.y job log (0) log
2021/10/31 19:41 21m bisect fix linux-4.14.y job log (0) log
2021/10/01 19:05 27m bisect fix linux-4.14.y job log (0) log
2021/09/01 18:37 28m bisect fix linux-4.14.y job log (0) log
2021/08/02 17:01 21m bisect fix linux-4.14.y job log (0) log
2021/07/03 16:39 21m bisect fix linux-4.14.y job log (0) log
2021/06/03 16:11 27m bisect fix linux-4.14.y job log (0) log

Sample crash report:
EXT4-fs warning (device loop0): ext4_update_dynamic_rev:793: updating to rev 1 because of new feature flag, running e2fsck is recommended
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
------------[ cut here ]------------
kernel BUG at fs/ext4/ext4.h:2849!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 7974 Comm: syz-executor360 Not tainted 4.14.295-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
task: ffff888097072340 task.stack: ffff88809bbf0000
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2849 [inline]
RIP: 0010:ext4_mb_load_buddy_gfp+0x10dd/0x16c0 fs/ext4/mballoc.c:1128
RSP: 0018:ffff88809bbf73f8 EFLAGS: 00010297
RAX: ffff888097072340 RBX: ffff88809bbf74e0 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880b3884140
RBP: 0000000000000001 R08: ffffffff81b7afd0 R09: ffff88809bbf7800
R10: ffff88809bbf7857 R11: ffff888097072340 R12: ffff8880961e2080
R13: ffff88808e4fa7b0 R14: ffff8880b3884100 R15: ffff8880961e2700
FS:  0000555556061300(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000561ea69d7160 CR3: 00000000a22cf000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_mb_load_buddy fs/ext4/mballoc.c:1253 [inline]
 ext4_mballoc_query_range+0x8f/0x740 fs/ext4/mballoc.c:5396
 ext4_getfsmap_datadev+0x5ba/0x11d0 fs/ext4/fsmap.c:550
 ext4_getfsmap+0x5f6/0x8c0 fs/ext4/fsmap.c:721
 ext4_ioc_getfsmap+0x251/0x830 fs/ext4/ioctl.c:603
 ext4_ioctl+0x248/0x3800 fs/ext4/ioctl.c:663
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fe1e1842fb9
RSP: 002b:00007ffe80da7178 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe1e1842fb9
RDX: 0000000020000200 RSI: 00000000c0c0583b RDI: 0000000000000003
RBP: 00007fe1e1802820 R08: 0000000000000000 R09: 0000000000000000
R10: 00005555560612c0 R11: 0000000000000246 R12: 00007fe1e18028b0
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: e8 e9 11 af ff e9 90 f8 ff ff e8 af d4 97 ff e9 f5 f6 ff ff e8 a5 d4 97 ff 48 89 ef e8 cd 11 af ff e9 3d fb ff ff e8 93 d4 97 ff <0f> 0b e8 8c d4 97 ff 8b 54 24 28 89 ee 4c 89 e7 e8 ce db ff ff 
RIP: ext4_get_group_info fs/ext4/ext4.h:2849 [inline] RSP: ffff88809bbf73f8
RIP: ext4_mb_load_buddy_gfp+0x10dd/0x16c0 fs/ext4/mballoc.c:1128 RSP: ffff88809bbf73f8
---[ end trace c9b48c97b687a281 ]---

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/03 11:21 linux-4.14.y 9d5c0b3a8e1a feb56351 .config console log report syz C [disk image] [vmlinux] ci2-linux-4-14 kernel BUG in ext4_mb_load_buddy_gfp
2021/04/29 16:38 linux-4.14.y 7d7d1c0ab3eb 77e2b668 .config console log report syz C ci2-linux-4-14 kernel BUG in ext4_mb_load_buddy_gfp
2022/07/04 04:11 linux-4.14.y ed2e96e11936 1434eec0 .config console log report syz C ci2-linux-4-14 kernel BUG in ext4_free_blocks
2023/02/02 09:32 linux-4.14.y 3949d1610004 9a6f477c .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-4-14 kernel BUG in ext4_mb_load_buddy_gfp
2021/05/04 15:45 linux-4.14.y 7d7d1c0ab3eb 06c27ff5 .config console log report info ci2-linux-4-14 kernel BUG in ext4_mb_load_buddy_gfp
2021/05/03 03:47 linux-4.14.y 7d7d1c0ab3eb 77e2b668 .config console log report info ci2-linux-4-14 kernel BUG in ext4_mb_load_buddy_gfp
* Struck through repros no longer work on HEAD.