syzbot


WARNING in inode_set_cached_link

Status: upstream: reported C repro on 2025/02/06 17:01
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+2cca5ef7e5ed862c0799@syzkaller.appspotmail.com
First crash: 100d, last: 39d
Cause bisection: introduced by (bisect log) :
commit 6408a56623761f969537b421d99f045a4cc955b9
Author: Mateusz Guzik <mjguzik@gmail.com>
Date: Tue Feb 4 21:32:07 2025 +0000

  vfs: sanity check the length passed to inode_set_cached_link()

Crash: WARNING in inode_set_cached_link (log)
Repro: C syz .config
  
Fix bisection: fixed by (bisect log) [merge commit]:
commit 99c21beaab2db53d1ba17102b7cedc7a584dfe23
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Mon Mar 24 16:13:50 2025 +0000

  Merge tag 'vfs-6.15-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

  
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly ext4 report (Mar 2025) 0 (1) 2025/03/24 18:56
[syzbot] [ext4?] WARNING in inode_set_cached_link 1 (3) 2025/02/08 18:23
Last patch testing requests (8)
Created Duration User Patch Repo Result
2025/04/21 23:43 19m retest repro upstream OK log
2025/04/21 17:44 26m retest repro upstream OK log
2025/04/21 16:24 49m retest repro linux-next error
2025/04/21 11:44 23m retest repro upstream OK log
2025/04/21 11:44 19m retest repro upstream OK log
2025/04/21 11:44 22m retest repro upstream OK log
2025/04/21 11:44 19m retest repro upstream OK log
2025/04/21 11:44 1h09m retest repro upstream OK log

Sample crash report:
EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
EXT4-fs (loop0): Cannot turn on quotas: error -22
------------[ cut here ]------------
bad length passed for symlink [
ó] (got 9000, expected 3)
WARNING: CPU: 1 PID: 5832 at ./include/linux/fs.h:803 inode_set_cached_link+0xd0/0x110 include/linux/fs.h:802
Modules linked in:
CPU: 1 UID: 0 PID: 5832 Comm: syz-executor433 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:inode_set_cached_link+0xd0/0x110 include/linux/fs.h:802
Code: 41 5f 5d c3 cc cc cc cc e8 ed 1b 44 ff c6 05 b5 51 8a 0d 01 90 48 c7 c7 20 dc 1d 8c 4c 89 f6 44 89 fa 89 e9 e8 d1 c7 04 ff 90 <0f> 0b 90 90 e9 6a ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 7c a1 e8
RSP: 0018:ffffc90003967658 EFLAGS: 00010246
RAX: b92553c73f221b00 RBX: ffff88807b3a02b0 RCX: ffff88802ef89e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: ffffffff81803292 R09: fffffbfff1cfa5b8
R10: dffffc0000000000 R11: fffffbfff1cfa5b8 R12: ffff88807b3a02b0
R13: dffffc0000000000 R14: ffff88807b3a0000 R15: 0000000000002328
FS:  00005555558f7380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff832fc000 CR3: 0000000028d14000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __ext4_iget+0x2ea4/0x3f30 fs/ext4/inode.c:5000
 ext4_orphan_get+0x1bb/0x5f0 fs/ext4/ialloc.c:1389
 ext4_orphan_cleanup+0xa19/0x13d0 fs/ext4/orphan.c:467
 __ext4_fill_super fs/ext4/super.c:5602 [inline]
 ext4_fill_super+0x5dd5/0x6760 fs/ext4/super.c:5722
 get_tree_bdev_flags+0x48c/0x5c0 fs/super.c:1636
 vfs_get_tree+0x90/0x2b0 fs/super.c:1814
 do_new_mount+0x2be/0xb40 fs/namespace.c:3659
 do_mount fs/namespace.c:3999 [inline]
 __do_sys_mount fs/namespace.c:4210 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4187
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc90683b93a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff832fba58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fff832fba70 RCX: 00007fc90683b93a
RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00007fff832fba70
RBP: 0000200000000000 R08: 00007fff832fbab0 R09: 00000000000004f5
R10: 000000000200801f R11: 0000000000000202 R12: 0000200000000080
R13: 0000000000000004 R14: 0000000000000003 R15: 00007fff832fbab0
 </TASK>

Crashes (78396):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/06 12:54 linux-next 808eb958781e 577d049b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root WARNING in inode_set_cached_link
2025/03/25 04:32 upstream 38fec10eb60d 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in inode_set_cached_link
2025/03/25 03:10 upstream 38fec10eb60d 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in inode_set_cached_link
2025/03/09 13:04 upstream 2a520073e74f 163f510d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-kasan-gce-root WARNING in inode_set_cached_link
2025/02/27 18:18 upstream dd83757f6e68 6a8fcbc4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs WARNING in inode_set_cached_link
2025/02/26 19:52 upstream ac9c34d1e45a d34966d1 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-upstream-fs WARNING in inode_set_cached_link
2025/02/16 13:49 upstream ad1b832bf1cf 40a34ec9 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-upstream-fs WARNING in inode_set_cached_link
2025/02/12 16:22 upstream 09fbf3d50205 b27c2402 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs WARNING in inode_set_cached_link
2025/02/09 05:03 upstream 9946eaf552b1 ef44b750 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-upstream-fs WARNING in inode_set_cached_link
2025/02/08 20:56 upstream 8f6629c004b1 ef44b750 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs WARNING in inode_set_cached_link
2025/03/25 02:58 upstream 38fec10eb60d 875573af .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in inode_set_cached_link
2025/02/10 03:36 linux-next ed58d103e6da ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in inode_set_cached_link
2025/04/07 08:44 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 08:33 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 08:25 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 08:17 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 08:08 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 07:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 07:45 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 07:31 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 06:21 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 05:23 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 04:34 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 04:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 03:18 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 02:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 01:29 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 01:08 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/07 00:05 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 23:12 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 22:58 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 21:57 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 21:02 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 20:02 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 19:34 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 18:30 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 18:20 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 18:12 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 18:12 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 17:12 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 16:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 15:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 15:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 14:09 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 13:27 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 12:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 12:09 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 11:05 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 10:08 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 09:54 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 08:52 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 08:51 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 07:51 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
2025/04/06 07:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci d6b13dbd03b7 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inode_set_cached_link
* Struck through repros no longer work on HEAD.