WARNING in ext4_dio_get_block

[upstream] WARNING in ext4_dio_get_block_overwrite
Status: upstream: reported on 2018/11/26 20:39
Reported-by: syzbot+9b095ee32c8a10c367dc@syzkaller.appspotmail.com
First crash: 120d, last: 29d

Sample crash report:

audit: type=1804 audit(1550371127.271:76): pid=26404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir070396084/syzkaller.gYtqza/405/bus" dev="sda1" ino=17417 res=1
WARNING: CPU: 0 PID: 26203 at fs/ext4/inode.c:945 ext4_dio_get_block_overwrite fs/ext4/inode.c:945 [inline]
WARNING: CPU: 0 PID: 26203 at fs/ext4/inode.c:945 ext4_dio_get_block_overwrite+0xb7/0xf0 fs/ext4/inode.c:930
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 26203 Comm: syz-executor.0 Not tainted 5.0.0-rc6+ #74
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2cb/0x65c kernel/panic.c:214
 __warn.cold+0x20/0x45 kernel/panic.c:571
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:290
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:ext4_dio_get_block_overwrite fs/ext4/inode.c:945 [inline]
RIP: 0010:ext4_dio_get_block_overwrite+0xb7/0xf0 fs/ext4/inode.c:930
Code: 3f d3 81 ff 84 db 74 1d e8 f6 d1 81 ff 49 8b 1c 24 31 ff 48 c1 eb 0c 83 e3 01 89 de e8 22 d3 81 ff 84 db 74 07 e8 d9 d1 81 ff <0f> 0b e8 d2 d1 81 ff 44 89 e8 5b 41 5c 41 5d 41 5e 5d c3 e8 c1 d1
RSP: 0018:ffff8880a374f0c0 EFLAGS: 00010246
RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90005deb000
RDX: 0000000000040000 RSI: ffffffff81ee0f37 RDI: 0000000000000001
RBP: ffff8880a374f0e0 R08: ffff8880555a2300 R09: ffffed1012b764c2
R10: ffffed1012b764c1 R11: ffff888095bb260f R12: ffff8880a374f280
R13: 0000000000000000 R14: 000000000000001a R15: ffff8880907da580
 get_more_blocks fs/direct-io.c:717 [inline]
 do_direct_IO fs/direct-io.c:1002 [inline]
 do_blockdev_direct_IO+0x2689/0x8db0 fs/direct-io.c:1334
 __blockdev_direct_IO+0xa1/0xca fs/direct-io.c:1420
 ext4_direct_IO_write fs/ext4/inode.c:3775 [inline]
 ext4_direct_IO+0x1194/0x1c10 fs/ext4/inode.c:3902
 generic_file_direct_write+0x214/0x4b0 mm/filemap.c:3111
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
 __generic_file_write_iter+0x2ee/0x630 mm/filemap.c:3290
 ext4_file_write_iter+0x33f/0x1160 fs/ext4/file.c:266
audit: type=1804 audit(1550371127.311:77): pid=26404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir070396084/syzkaller.gYtqza/405/bus" dev="sda1" ino=17417 res=1
 call_write_iter include/linux/fs.h:1863 [inline]
 do_iter_readv_writev+0x5e0/0x8e0 fs/read_write.c:680
 do_iter_write fs/read_write.c:956 [inline]
 do_iter_write+0x184/0x610 fs/read_write.c:937
 vfs_iter_write+0x77/0xb0 fs/read_write.c:969
 iter_file_splice_write+0x667/0xbe0 fs/splice.c:749
kobject: 'loop1' (00000000d8f3efd5): kobject_uevent_env
kobject: 'loop1' (00000000d8f3efd5): fill_kobj_path: path = '/devices/virtual/block/loop1'
kobject: 'input12' (000000001cbf88b8): kobject_cleanup, parent           (null)
 do_splice_from fs/splice.c:851 [inline]
 direct_splice_actor+0x126/0x1a0 fs/splice.c:1023
kobject: 'input12' (000000001cbf88b8): calling ktype release
 splice_direct_to_actor+0x369/0x970 fs/splice.c:978
 do_splice_direct+0x1da/0x2a0 fs/splice.c:1066
kobject: 'input12': free name
 do_sendfile+0x597/0xd00 fs/read_write.c:1436
 __do_sys_sendfile64 fs/read_write.c:1497 [inline]
 __se_sys_sendfile64 fs/read_write.c:1483 [inline]
 __x64_sys_sendfile64+0x1dd/0x220 fs/read_write.c:1483
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457e29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fc748a2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 00008000fffffffe R11: 0000000000000246 R12: 00007fc748a306d4
R13: 00000000004c4dcf R14: 00000000004d8a58 R15: 00000000ffffffff
Kernel Offset: disabled
Rebooting in 86400 seconds..

All crashes (11):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Maintainers
ci-upstream-kasan-gce-root	2019/02/17 02:39	upstream	5ded5871	f42dee6d	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root	2019/02/10 12:12	upstream	df3865f8	b4f792e4	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-smack-root	2019/01/23 01:32	upstream	787a3b43	b1ff06b2	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root	2019/01/12 13:30	upstream	4b3c31c8	c3f3344c	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root	2019/01/12 13:08	upstream	4b3c31c8	c3f3344c	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-selinux-root	2019/01/12 12:58	upstream	4b3c31c8	c3f3344c	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root	2019/01/01 05:28	upstream	f12e840c	3d85f48c	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root	2018/12/07 21:17	upstream	b72f711a	1eb6a7e4	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-linux-next-kasan-gce-root	2018/11/26 06:18	linux-next	442b8cea	3d3ec907	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-linux-next-kasan-gce-root	2019/02/24 22:47	linux-next	94a47529	7a06e792	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-linux-next-kasan-gce-root	2019/01/20 15:19	linux-next	9673b4aa	353f32ea	.config	log	report	adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, tytso@mit.edu