syzbot


WARNING in ext4_dio_get_block_overwrite

Status: auto-closed as invalid on 2019/08/23 22:50
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+9b095ee32c8a10c367dc@syzkaller.appspotmail.com
First crash: 2066d, last: 1975d
Discussions (1)
Title Replies (including bot) Last reply
WARNING in ext4_dio_get_block_overwrite 0 (1) 2018/11/26 20:39
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 WARNING in ext4_dio_get_block_overwrite 1 1509d 1509d 0/1 auto-closed as invalid on 2020/10/03 08:57
android-414 WARNING in ext4_dio_get_block_overwrite (2) 3 1734d 1788d 0/1 auto-closed as invalid on 2020/02/21 05:41
android-414 WARNING in ext4_dio_get_block_overwrite 2 2048d 1927d 0/1 auto-closed as invalid on 2019/06/12 07:43
android-49 WARNING in ext4_dio_get_block_overwrite 8 1715d 1927d 0/3 auto-closed as invalid on 2020/03/10 23:01

Sample crash report:
audit: type=1804 audit(1550371127.271:76): pid=26404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir070396084/syzkaller.gYtqza/405/bus" dev="sda1" ino=17417 res=1
WARNING: CPU: 0 PID: 26203 at fs/ext4/inode.c:945 ext4_dio_get_block_overwrite fs/ext4/inode.c:945 [inline]
WARNING: CPU: 0 PID: 26203 at fs/ext4/inode.c:945 ext4_dio_get_block_overwrite+0xb7/0xf0 fs/ext4/inode.c:930
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 26203 Comm: syz-executor.0 Not tainted 5.0.0-rc6+ #74
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2cb/0x65c kernel/panic.c:214
 __warn.cold+0x20/0x45 kernel/panic.c:571
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:290
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:ext4_dio_get_block_overwrite fs/ext4/inode.c:945 [inline]
RIP: 0010:ext4_dio_get_block_overwrite+0xb7/0xf0 fs/ext4/inode.c:930
Code: 3f d3 81 ff 84 db 74 1d e8 f6 d1 81 ff 49 8b 1c 24 31 ff 48 c1 eb 0c 83 e3 01 89 de e8 22 d3 81 ff 84 db 74 07 e8 d9 d1 81 ff <0f> 0b e8 d2 d1 81 ff 44 89 e8 5b 41 5c 41 5d 41 5e 5d c3 e8 c1 d1
RSP: 0018:ffff8880a374f0c0 EFLAGS: 00010246
RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90005deb000
RDX: 0000000000040000 RSI: ffffffff81ee0f37 RDI: 0000000000000001
RBP: ffff8880a374f0e0 R08: ffff8880555a2300 R09: ffffed1012b764c2
R10: ffffed1012b764c1 R11: ffff888095bb260f R12: ffff8880a374f280
R13: 0000000000000000 R14: 000000000000001a R15: ffff8880907da580
 get_more_blocks fs/direct-io.c:717 [inline]
 do_direct_IO fs/direct-io.c:1002 [inline]
 do_blockdev_direct_IO+0x2689/0x8db0 fs/direct-io.c:1334
 __blockdev_direct_IO+0xa1/0xca fs/direct-io.c:1420
 ext4_direct_IO_write fs/ext4/inode.c:3775 [inline]
 ext4_direct_IO+0x1194/0x1c10 fs/ext4/inode.c:3902
 generic_file_direct_write+0x214/0x4b0 mm/filemap.c:3111
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
 __generic_file_write_iter+0x2ee/0x630 mm/filemap.c:3290
 ext4_file_write_iter+0x33f/0x1160 fs/ext4/file.c:266
audit: type=1804 audit(1550371127.311:77): pid=26404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir070396084/syzkaller.gYtqza/405/bus" dev="sda1" ino=17417 res=1
 call_write_iter include/linux/fs.h:1863 [inline]
 do_iter_readv_writev+0x5e0/0x8e0 fs/read_write.c:680
 do_iter_write fs/read_write.c:956 [inline]
 do_iter_write+0x184/0x610 fs/read_write.c:937
 vfs_iter_write+0x77/0xb0 fs/read_write.c:969
 iter_file_splice_write+0x667/0xbe0 fs/splice.c:749
kobject: 'loop1' (00000000d8f3efd5): kobject_uevent_env
kobject: 'loop1' (00000000d8f3efd5): fill_kobj_path: path = '/devices/virtual/block/loop1'
kobject: 'input12' (000000001cbf88b8): kobject_cleanup, parent           (null)
 do_splice_from fs/splice.c:851 [inline]
 direct_splice_actor+0x126/0x1a0 fs/splice.c:1023
kobject: 'input12' (000000001cbf88b8): calling ktype release
 splice_direct_to_actor+0x369/0x970 fs/splice.c:978
 do_splice_direct+0x1da/0x2a0 fs/splice.c:1066
kobject: 'input12': free name
 do_sendfile+0x597/0xd00 fs/read_write.c:1436
 __do_sys_sendfile64 fs/read_write.c:1497 [inline]
 __se_sys_sendfile64 fs/read_write.c:1483 [inline]
 __x64_sys_sendfile64+0x1dd/0x220 fs/read_write.c:1483
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457e29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fc748a2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 00008000fffffffe R11: 0000000000000246 R12: 00007fc748a306d4
R13: 00000000004c4dcf R14: 00000000004d8a58 R15: 00000000ffffffff
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/02/17 02:39 upstream 5ded5871030e f42dee6d .config console log report ci-upstream-kasan-gce-root
2019/02/10 12:12 upstream df3865f8f568 b4f792e4 .config console log report ci-upstream-kasan-gce-root
2019/01/23 01:32 upstream 787a3b432276 b1ff06b2 .config console log report ci-upstream-kasan-gce-smack-root
2019/01/12 13:30 upstream 4b3c31c8d4dd c3f3344c .config console log report ci-upstream-kasan-gce-root
2019/01/12 13:08 upstream 4b3c31c8d4dd c3f3344c .config console log report ci-upstream-kasan-gce-root
2019/01/12 12:58 upstream 4b3c31c8d4dd c3f3344c .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/01 05:28 upstream f12e840c819b 3d85f48c .config console log report ci-upstream-kasan-gce-root
2018/12/07 21:17 upstream b72f711a4efa 1eb6a7e4 .config console log report ci-upstream-kasan-gce-root
2019/02/24 22:47 linux-next 94a47529a645 7a06e792 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/01/20 15:19 linux-next 9673b4aa71ca 353f32ea .config console log report ci-upstream-linux-next-kasan-gce-root
2018/11/26 06:18 linux-next 442b8cea2477 3d3ec907 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.