kernel BUG in ext4_write_inline_data_end (2)

Status: upstream: reported syz repro on 2023/01/25 15:39
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+ba461b83903ea68a8198@syzkaller.appspotmail.com
First crash: 1290d, last: 525d
▶ ▼ Similar bugs (15)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at fs/ext4/inline.c:LINE! ext4 -1 syz, C done done 76 1300d 2123d 22/29 fixed on 2023/02/24 13:50
android-54 kernel BUG in ext4_write_inline_data_end -1 syz, C 4 1484d 1617d 2/2 fixed on 2022/09/27 22:24
android-5-10 kernel BUG in ext4_write_inline_data_end -1 syz, C error 3 1550d 1617d 0/2 closed as dup on 2022/03/04 15:25
android-5-15 kernel BUG in ext4_write_inline_data_end (2) origin:upstream -1 syz, C error 16 20d 1048d 0/2 upstream: reported C repro on 2023/09/24 12:05
android-5-10 kernel BUG in ext4_write_inline_data_end (2) -1 syz, C error 23 47d 1502d 2/2 upstream: reported C repro on 2022/06/27 15:18
android-6-1 kernel BUG in ext4_write_inline_data_end (2) origin:upstream -1 syz 1 17d 52d 0/2 premoderation: reported syz repro on 2026/06/16 00:15
linux-6.1 kernel BUG in ext4_write_inline_data_end origin:upstream -1 syz, C error 44 482d 1243d 0/3 upstream: reported C repro on 2023/03/12 18:03
android-6-1 kernel BUG in ext4_write_inline_data_end origin:lts -1 syz, C error done 2 594d 997d 0/2 auto-obsoleted due to no activity on 2025/03/30 21:55
android-5-15 kernel BUG in ext4_write_inline_data_end -1 syz, C error 11 1341d 1402d 2/2 fixed on 2023/02/02 00:40
linux-4.19 kernel BUG in ext4_write_inline_data_end ext4 -1 syz, C error 12 1253d 2000d 0/1 upstream: reported C repro on 2021/02/14 13:39
upstream kernel BUG in ext4_write_inline_data_end (3) ext4 prio:normal -1 syz 1 8d22h 22d 0/29 upstream: reported syz repro on 2026/07/16 07:50
linux-5.15 kernel BUG in ext4_write_inline_data_end origin:upstream -1 syz, C error 9 47d 1165d 0/3 upstream: reported C repro on 2023/05/30 10:48
upstream kernel BUG in ext4_write_inline_data_end ext4 -1 syz, C error done 32 956d 1254d 25/29 fixed on 2024/01/30 23:26
linux-4.14 kernel BUG in ext4_write_inline_data_end -1 syz, C error 4 1340d 1925d 0/1 upstream: reported C repro on 2021/04/30 02:18
upstream kernel BUG in ext4_write_inline_data_end (2) ext4 -1 syz, C inconclusive error 174 48d 917d 29/29 fixed on 2026/07/15 08:27
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/05/10 12:02 16m retest repro android12-5.4 error
2026/05/10 12:02 17m retest repro android12-5.4 error
2026/02/20 01:28 19m retest repro android12-5.4 error
2026/02/20 01:28 11m retest repro android12-5.4 error
2025/12/12 00:12 51m retest repro android12-5.4 error
2025/12/12 00:12 13m retest repro android12-5.4 error
2025/10/02 10:05 28m retest repro android12-5.4 error
2025/10/02 10:05 17m retest repro android12-5.4 error
2025/07/22 18:11 15m retest repro android12-5.4 error
2025/07/22 18:11 14m retest repro android12-5.4 error

Sample crash report:
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
------------[ cut here ]------------
kernel BUG at fs/ext4/inline.c:235!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 394 Comm: syz-executor.0 Not tainted 5.4.268-syzkaller-00003-g2d5d8240a7cb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:ext4_write_inline_data fs/ext4/inline.c:235 [inline]
RIP: 0010:ext4_write_inline_data_end+0x81e/0x820 fs/ext4/inline.c:781
Code: ff e8 26 82 ce ff e9 d9 fc ff ff e8 7c 66 75 ff e8 47 ae 9e ff 0f 0b e8 40 ae 9e ff 0f 0b e8 39 ae 9e ff 0f 0b e8 32 ae 9e ff <0f> 0b 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec
RSP: 0018:ffff8881dd19f700 EFLAGS: 00010293
RAX: ffffffff81c598ee RBX: 000000000000003c RCX: ffff8881f31d9f80
RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000080
RBP: ffff8881dd19f840 R08: ffffffff81c593ee R09: ffffed103de0884f
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff8881dc55c628 R14: 0000000000000080 R15: 0000000000000078
FS:  00007fbff3a416c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbff3fea000 CR3: 00000001ee165000 CR4: 00000000003406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_da_write_inline_data_end+0x32/0x240 fs/ext4/inline.c:978
 ext4_da_write_end+0x81d/0xb90 fs/ext4/inode.c:3268
 generic_perform_write+0x3d3/0x560 mm/filemap.c:3461
 __generic_file_write_iter+0x224/0x530 mm/filemap.c:3579
 ext4_file_write_iter+0x499/0x10e0 fs/ext4/file.c:270
 call_write_iter include/linux/fs.h:1983 [inline]
 new_sync_write fs/read_write.c:483 [inline]
 __vfs_write+0x5d3/0x750 fs/read_write.c:496
 vfs_write+0x206/0x4e0 fs/read_write.c:558
 ksys_write+0x199/0x2c0 fs/read_write.c:611
 do_syscall_64+0xca/0x1c0 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
Modules linked in:
---[ end trace aebb6e387b05eb73 ]---
RIP: 0010:ext4_write_inline_data fs/ext4/inline.c:235 [inline]
RIP: 0010:ext4_write_inline_data_end+0x81e/0x820 fs/ext4/inline.c:781
Code: ff e8 26 82 ce ff e9 d9 fc ff ff e8 7c 66 75 ff e8 47 ae 9e ff 0f 0b e8 40 ae 9e ff 0f 0b e8 39 ae 9e ff 0f 0b e8 32 ae 9e ff <0f> 0b 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec
RSP: 0018:ffff8881dd19f700 EFLAGS: 00010293
RAX: ffffffff81c598ee RBX: 000000000000003c RCX: ffff8881f31d9f80
RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000080
RBP: ffff8881dd19f840 R08: ffffffff81c593ee R09: ffffed103de0884f
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff8881dc55c628 R14: 0000000000000080 R15: 0000000000000078
FS:  00007fbff3a416c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbff3fea000 CR3: 00000001ee165000 CR4: 00000000003406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/30 06:39 android12-5.4 2d5d8240a7cb f10afd69 .config strace log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
2024/04/24 13:41 android12-5.4 2d5d8240a7cb 21339d7b .config strace log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
2024/04/30 06:18 android12-5.4 2d5d8240a7cb f10afd69 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
2024/04/25 12:40 android12-5.4 2d5d8240a7cb 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
2024/04/22 20:55 android12-5.4 2d5d8240a7cb 36c961ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
2023/01/25 16:20 android12-5.4 95647568244a 9dfcf09c .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
2023/08/03 06:01 android12-5.4 d8e4fb522fec 39a91c18 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
2023/02/10 11:10 android12-5.4 6a5ec6cea0cd 07980f9d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
2023/01/25 15:39 android12-5.4 95647568244a 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data_end
* Struck through repros no longer work on HEAD.