syzbot


kernel BUG at fs/ext4/ext4.h:LINE!
Status: upstream: reported C repro on 2020/11/15 12:08
Reported-by: syzbot+c66c23b1d3271b709121@syzkaller.appspotmail.com
First crash: 557d, last: 234d

Fix bisection: failed (bisect log)
similar bugs (5):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 kernel BUG at fs/ext4/ext4.h:LINE! C 5 196d 595d 0/2 upstream: reported C repro on 2020/10/08 13:59
upstream kernel BUG at fs/ext4/ext4.h:LINE! 1 511d 507d 0/22 auto-closed as invalid on 2021/05/01 06:31
android-5-10 kernel BUG in ext4_free_blocks 3 164d 197d 0/2 auto-closed as invalid on 2022/03/13 09:34
linux-4.14 kernel BUG in ext4_mb_load_buddy_gfp C 3 15d 392d 0/1 upstream: reported C repro on 2021/04/29 16:39
upstream kernel BUG in ext4_get_group_info syz error 1 10d 280d 0/22 upstream: reported syz repro on 2021/08/19 08:21

Sample crash report:
EXT4-fs error (device sda1): ext4_read_block_bitmap_nowait:429: comm kworker/u4:2: Invalid block bitmap block 14 in block_group 12
EXT4-fs (sda1): Delayed block allocation failed for inode 13855 at logical offset 0 with max blocks 435 with error 117
EXT4-fs (sda1): This should not happen!! Data will be lost
------------[ cut here ]------------
kernel BUG at fs/ext4/ext4.h:2870!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 7823 Comm: rs:main Q:Reg Not tainted 4.19.204-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2870 [inline]
RIP: 0010:ext4_mb_load_buddy_gfp+0x1460/0x1a90 fs/ext4/mballoc.c:1116
Code: 26 06 9f ff e9 b9 f6 ff ff e8 7c e9 7f ff e9 b4 f4 ff ff e8 72 e9 7f ff 48 89 ef e8 0a 06 9f ff e9 51 fa ff ff e8 60 e9 7f ff <0f> 0b e8 59 e9 7f ff 8b 54 24 1c 44 89 e6 48 89 ef e8 da d4 ff ff
RSP: 0018:ffff8880a2d97588 EFLAGS: 00010293
RAX: ffff8880a2c662c0 RBX: ffff8880a2d976c8 RCX: ffffffff81e295e3
RDX: 0000000000000000 RSI: ffffffff81e2a930 RDI: 0000000000000004
RBP: ffff8882350aee80 R08: 0000000000000000 R09: 00000000fffe8f8c
R10: 0000000000000004 R11: 0000000000074071 R12: 00000000fffe8f8c
R13: ffff8882350b0ec0 R14: ffff8882350af500 R15: 0000000000000010
FS:  00007f9793e71700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000556e2a562d68 CR3: 00000000b2cf7000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_discard_preallocations+0xaf4/0xfb0 fs/ext4/mballoc.c:4090
 ext4_truncate+0x74e/0x1380 fs/ext4/inode.c:4554
 ext4_truncate_failed_write fs/ext4/truncate.h:20 [inline]
 ext4_write_begin+0xb37/0x1610 fs/ext4/inode.c:1368
 ext4_da_write_begin+0x737/0x10e0 fs/ext4/inode.c:3051
 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170
 __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295
 ext4_file_write_iter+0x2fe/0xf20 fs/ext4/file.c:272
 call_write_iter include/linux/fs.h:1821 [inline]
 new_sync_write fs/read_write.c:474 [inline]
 __vfs_write+0x51b/0x770 fs/read_write.c:487
 vfs_write+0x1f3/0x540 fs/read_write.c:549
 ksys_write+0x12b/0x2a0 fs/read_write.c:599
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f97968b51cd
Code: c2 20 00 00 75 10 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ae fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 f7 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007f9793e70590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f9788024dd0 RCX: 00007f97968b51cd
RDX: 0000000000000146 RSI: 00007f9788024dd0 RDI: 0000000000000008
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9788024b50
R13: 00007f9793e705b0 R14: 00005632acf09440 R15: 0000000000000146
Modules linked in:
---[ end trace 5761d10fee6ec9a5 ]---
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2870 [inline]
RIP: 0010:ext4_mb_load_buddy_gfp+0x1460/0x1a90 fs/ext4/mballoc.c:1116
EXT4-fs (sda1): Delayed block allocation failed for inode 13856 at logical offset 0 with max blocks 301 with error 117
Code: 26 06 9f ff e9 b9 f6 ff ff e8 7c e9 7f ff e9 b4 f4 ff ff e8 72 e9 7f ff 48 89 ef e8 0a 06 9f ff e9 51 fa ff ff e8 60 e9 7f ff <0f> 0b e8 59 e9 7f ff 8b 54 24 1c 44 89 e6 48 89 ef e8 da d4 ff ff
EXT4-fs (sda1): This should not happen!! Data will be lost

RSP: 0018:ffff8880a2d97588 EFLAGS: 00010293
RAX: ffff8880a2c662c0 RBX: ffff8880a2d976c8 RCX: ffffffff81e295e3
RDX: 0000000000000000 RSI: ffffffff81e2a930 RDI: 0000000000000004
EXT4-fs (sda1): Delayed block allocation failed for inode 13858 at logical offset 0 with max blocks 1 with error 117
RBP: ffff8882350aee80 R08: 0000000000000000 R09: 00000000fffe8f8c
EXT4-fs (sda1): This should not happen!! Data will be lost

R10: 0000000000000004 R11: 0000000000074071 R12: 00000000fffe8f8c
R13: ffff8882350b0ec0 R14: ffff8882350af500 R15: 0000000000000010
FS:  00007f9793e71700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000556e2a562d68 CR3: 00000000b2cf7000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-19 2021/08/21 19:40 linux-4.19.y 59456c9cc40c b599f2fc .config log report syz C kernel BUG in ext4_mb_load_buddy_gfp
ci2-linux-4-19 2021/05/01 02:19 linux-4.19.y 97a8651cadce 77e2b668 .config log report syz C kernel BUG in ext4_mb_load_buddy_gfp
ci2-linux-4-19 2020/11/15 12:07 linux-4.19.y 31acccdc8774 1bf9a662 .config log report syz C
ci2-linux-4-19 2021/08/19 05:41 linux-4.19.y 59456c9cc40c a2fe1cb5 .config log report syz kernel BUG in ext4_mb_load_buddy_gfp
ci2-linux-4-19 2021/01/29 01:50 linux-4.19.y c4ff839de17f 7df34f59 .config log report syz kernel BUG in ext4_mb_find_by_goal
ci2-linux-4-19 2021/10/05 02:37 linux-4.19.y c2276d585654 ce697b49 .config log report info kernel BUG in ext4_mb_load_buddy_gfp
ci2-linux-4-19 2021/06/13 13:07 linux-4.19.y 9a2dc0e6c531 1ba81399 .config log report info kernel BUG in ext4_mb_load_buddy_gfp