syzbot


kernel BUG in gfs2_glock_nq (2)

Status: upstream: reported C repro on 2021/09/14 01:12
Reported-by: syzbot+081ca6c9e9a204a5d3a3@syzkaller.appspotmail.com
First crash: 442d, last: 1d20h

Fix bisection: failed (bisect log)
similar bugs (7):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 kernel BUG in gfs2_glock_nq 2 316d 360d 0/1 auto-closed as invalid on 2022/05/17 22:53
linux-4.19 kernel BUG in gfs2_glock_nq 1 596d 596d 0/1 auto-closed as invalid on 2021/08/11 04:31
upstream kernel BUG in gfs2_glock_nq 2 372d 361d 0/24 auto-closed as invalid on 2022/03/23 19:53
linux-4.14 kernel BUG in gfs2_glock_nq (2) 2 103d 188d 0/1 upstream: reported on 2022/05/26 14:43
upstream kernel BUG in gfs2_glock_nq (2) C error 19 1d03h 68d 0/24 upstream: reported C repro on 2022/09/23 06:12
linux-4.14 kernel BUG at fs/gfs2/glock.c:LINE! 3 672d 744d 0/1 auto-closed as invalid on 2021/05/27 07:56
linux-4.19 kernel BUG at fs/gfs2/glock.c:LINE! 2 740d 773d 0/1 auto-closed as invalid on 2021/03/20 05:06

Sample crash report:
gfs2: pid: 8117
gfs2: lock type: 8 req lock state : 1
gfs2: G:  s:EX n:8/1 f:qb t:EX d:EX/0 a:0 v:0 r:5 m:20
gfs2:  H: s:EX f:cH e:0 p:8117 [syz-executor401] gfs2_glock_nq_init fs/gfs2/glock.h:226 [inline]
gfs2:  H: s:EX f:cH e:0 p:8117 [syz-executor401] do_sync+0x442/0xc90 fs/gfs2/quota.c:896
------------[ cut here ]------------
kernel BUG at fs/gfs2/glock.c:1082!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 8117 Comm: syz-executor401 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:add_to_queue fs/gfs2/glock.c:1082 [inline]
RIP: 0010:gfs2_glock_nq.cold+0x276/0x2cd fs/gfs2/glock.c:1107
Code: 0f b6 04 02 84 c0 74 04 3c 03 7e 6e 8b 73 18 44 89 ea 48 c7 c7 60 4f a6 88 e8 02 57 f8 ff 48 8b 74 24 08 31 ff e8 0b cc 0a fb <0f> 0b e8 74 02 9d f9 4c 8b 04 24 e9 aa fd ff ff 31 ed e9 12 fe ff
RSP: 0018:ffff8880b24278e8 EFLAGS: 00010292
RAX: 0000000000000000 RBX: ffff88809bf1dcf8 RCX: ffffffff83063ba3
RDX: 0000000000000000 RSI: ffffffff83063bf2 RDI: ffffffff88a67230
RBP: 0000000000001fb5 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880a8dd5f38
R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880b4d3c780
FS:  000055555601c300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7cc9c24b90 CR3: 0000000009e6d000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 gfs2_glock_nq_init fs/gfs2/glock.h:228 [inline]
 do_sync+0x44a/0xc90 fs/gfs2/quota.c:896
 gfs2_quota_sync+0x5d1/0x780 fs/gfs2/quota.c:1303
 gfs2_sync_fs+0x40/0xb0 fs/gfs2/super.c:957
 __sync_filesystem fs/sync.c:39 [inline]
 sync_filesystem+0x105/0x250 fs/sync.c:64
 generic_shutdown_super+0x70/0x370 fs/super.c:442
 kill_block_super+0x97/0xf0 fs/super.c:1185
 gfs2_kill_sb+0x12c/0x1a0 fs/gfs2/ops_fstype.c:1390
 deactivate_locked_super+0x94/0x160 fs/super.c:329
 deactivate_super+0x174/0x1a0 fs/super.c:360
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
 task_work_run+0x148/0x1c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0xbf3/0x2be0 kernel/exit.c:870
 do_group_exit+0x125/0x310 kernel/exit.c:967
 __do_sys_exit_group kernel/exit.c:978 [inline]
 __se_sys_exit_group kernel/exit.c:976 [inline]
 __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:976
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f8c78128999
Code: Bad RIP value.
RSP: 002b:00007fff8ebd9808 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f8c781b1330 RCX: 00007f8c78128999
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00000000000134ba
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c781b1330
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
Modules linked in:
---[ end trace 0ac1b7ca49a97d28 ]---
RIP: 0010:add_to_queue fs/gfs2/glock.c:1082 [inline]
RIP: 0010:gfs2_glock_nq.cold+0x276/0x2cd fs/gfs2/glock.c:1107
Code: 0f b6 04 02 84 c0 74 04 3c 03 7e 6e 8b 73 18 44 89 ea 48 c7 c7 60 4f a6 88 e8 02 57 f8 ff 48 8b 74 24 08 31 ff e8 0b cc 0a fb <0f> 0b e8 74 02 9d f9 4c 8b 04 24 e9 aa fd ff ff 31 ed e9 12 fe ff
RSP: 0018:ffff8880b24278e8 EFLAGS: 00010292
RAX: 0000000000000000 RBX: ffff88809bf1dcf8 RCX: ffffffff83063ba3
RDX: 0000000000000000 RSI: ffffffff83063bf2 RDI: ffffffff88a67230
RBP: 0000000000001fb5 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880a8dd5f38
R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880b4d3c780
FS:  000055555601c300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8c7812896f CR3: 0000000009e6d000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (16):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-19 2022/11/23 23:30 linux-4.19.y 3f8a27f9e27b 52fdf57a .config log report syz C kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/06/10 02:10 linux-4.19.y 3f8a27f9e27b 0d5abf15 .config log report syz kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/11/29 00:58 linux-4.19.y 3f8a27f9e27b ca9683b8 .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/11/23 23:15 linux-4.19.y 3f8a27f9e27b 52fdf57a .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/11/21 14:06 linux-4.19.y 3f8a27f9e27b 5bb70014 .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/09/14 17:46 linux-4.19.y 3f8a27f9e27b b884348d .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/08/01 13:09 linux-4.19.y 3f8a27f9e27b fef302b1 .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/06/08 23:05 linux-4.19.y 3f8a27f9e27b 0d5abf15 .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/04/20 16:56 linux-4.19.y 3f8a27f9e27b d4befee1 .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/04/08 15:16 linux-4.19.y 3f8a27f9e27b c6ff3e05 .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/01/30 00:08 linux-4.19.y 3f8a27f9e27b 495e00c5 .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2022/01/05 12:21 linux-4.19.y 3f8a27f9e27b 0a2584dd .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2021/11/07 06:11 linux-4.19.y 3f8a27f9e27b 4c1be0be .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2021/11/06 12:59 linux-4.19.y 3f8a27f9e27b 4c1be0be .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2021/11/05 20:23 linux-4.19.y 3f8a27f9e27b 4c1be0be .config log report info kernel BUG in gfs2_glock_nq
ci2-linux-4-19 2021/09/14 01:12 linux-4.19.y b172b44fcb17 58d09404 .config log report info kernel BUG in gfs2_glock_nq
* Struck through repros no longer work on HEAD.