syzbot


general protection fault in blk_get_backing_dev_info

Status: auto-closed as invalid on 2019/02/22 14:34
First crash: 2176d, last: 2162d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 general protection fault in blk_get_backing_dev_info 2 2075d 2077d 0/2 auto-closed as invalid on 2019/02/22 12:31
android-49 general protection fault in blk_get_backing_dev_info (2) C 3 1876d 1832d 0/3 public: reported C repro on 2019/04/14 08:51

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 8345 Comm: kworker/u4:7 Not tainted 4.9.100-ge14d1a3 #30
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: writeback wb_workfn (flush-7:0)
task: ffff8801d7ea0000 task.stack: ffff8801d7470000
RIP: 0010:[<ffffffff81e0704a>]  [<ffffffff81e0704a>] bdev_get_queue include/linux/blkdev.h:847 [inline]
RIP: 0010:[<ffffffff81e0704a>]  [<ffffffff81e0704a>] blk_get_backing_dev_info+0x4a/0x70 block/blk-core.c:118
RSP: 0018:ffff8801d7477818  EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000002099
RDX: 00000000000000a6 RSI: ffffffff81e0700d RDI: 0000000000000530
RBP: ffff8801d7477820 R08: ffff8801d7ea0960 R09: 0000000000000001
R10: 0000000000000000 R11: 1ffff1003afd4127 R12: ffff8801cbf74690
R13: ffff8801cfeb8f80 R14: ffff8801d7477b98 R15: ffff8801d7477940
FS:  0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f720000 CR3: 000000019e6fc000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801da09a200 ffff8801d7477840 ffffffff81600685 ffff8801cbf74810
 dffffc0000000000 ffff8801d7477968 ffffffff81600c31 ffff8801cfeb8fd8
 ffff8801cfeb8f98 ffff8801d7477a80 ffff8801cbf74718 ffff8801cbf74768
Call Trace:
 [<ffffffff81600685>] inode_to_bdi include/linux/backing-dev.h:186 [inline]
 [<ffffffff81600685>] inode_to_wb include/linux/backing-dev.h:454 [inline]
 [<ffffffff81600685>] inode_to_wb_and_lock_list+0xc5/0xf0 fs/fs-writeback.c:912
 [<ffffffff81600c31>] writeback_sb_inodes+0x581/0xe70 fs/fs-writeback.c:1607
 [<ffffffff8160161b>] __writeback_inodes_wb+0xfb/0x1e0 fs/fs-writeback.c:1653
 [<ffffffff81601da2>] wb_writeback+0x512/0xbd0 fs/fs-writeback.c:1762
 [<ffffffff8160b5a3>] wb_check_background_flush fs/fs-writeback.c:1843 [inline]
 [<ffffffff8160b5a3>] wb_do_writeback fs/fs-writeback.c:1902 [inline]
 [<ffffffff8160b5a3>] wb_workfn+0x723/0xdb0 fs/fs-writeback.c:1930
 [<ffffffff8118ae31>] process_one_work+0x7e1/0x1500 kernel/workqueue.c:2092
 [<ffffffff8118bc26>] worker_thread+0xd6/0x10a0 kernel/workqueue.c:2226
 [<ffffffff8119ad5d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff839f47dc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Code: 89 fa 48 c1 ea 03 80 3c 02 00 75 35 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 17 48 8b 83 30 05 00 00 5b 5d 48 05 28 02 00 00 
RIP  [<ffffffff81e0704a>] bdev_get_queue include/linux/blkdev.h:847 [inline]
RIP  [<ffffffff81e0704a>] blk_get_backing_dev_info+0x4a/0x70 block/blk-core.c:118
 RSP <ffff8801d7477818>
---[ end trace 711fc4a347c68420 ]---

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/19 05:03 https://android.googlesource.com/kernel/common android-4.9 e14d1a35ebd9 849705db .config console log report ci-android-49-kasan-gce
2018/05/05 19:34 https://android.googlesource.com/kernel/common android-4.9 63a812bb84e4 6a0382b5 .config console log report ci-android-49-kasan-gce-root
2018/05/04 17:01 https://android.googlesource.com/kernel/common android-4.9 0e25e2cab07a 9ce14f4b .config console log report ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.