kernel BUG at fs/ext4/ext4.h:LINE!

Status: upstream: reported C repro on 2020/11/15 12:08
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+c66c23b1d3271b709121@syzkaller.appspotmail.com
First crash: 2092d, last: 1274d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (14)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 kernel BUG in ext4_mb_find_by_goal -1 syz, C error done 19 1139d 1179d 0/2 auto-obsoleted due to no activity on 2023/09/19 22:50
android-5-10 kernel BUG in ext4_mb_find_by_goal -1 syz, C error done 31 1138d 1179d 2/2 fixed on 2023/08/16 20:51
android-54 kernel BUG at fs/ext4/ext4.h:LINE! ext4 -1 syz, C 1814 439d 2130d 0/2 upstream: reported C repro on 2020/10/08 13:59
android-6-1 kernel BUG in ext4_mb_find_by_goal origin:lts -1 syz, C error done 78 1021d 1179d 0/2 auto-obsoleted due to no activity on 2023/12/31 02:01
upstream kernel BUG at fs/ext4/ext4.h:LINE! ext4 -1 1 2045d 2041d 0/29 auto-closed as invalid on 2021/05/01 06:31
android-5-10 kernel BUG in ext4_free_blocks -1 3 1699d 1732d 0/2 auto-closed as invalid on 2022/03/13 09:34
linux-4.14 kernel BUG in ext4_mb_load_buddy_gfp ext4 -1 syz, C 6 1253d 1927d 0/1 upstream: reported C repro on 2021/04/29 16:39
android-5-10 kernel BUG in ext4_free_blocks (2) ext4 -1 syz, C error 25 1194d 1496d 2/2 fixed on 2023/05/04 14:51
upstream kernel BUG in ext4_get_group_info ext4 -1 syz, C error 237 1182d 1815d 22/29 fixed on 2023/07/01 16:05
android-5-15 kernel BUG in ext4_mb_load_buddy_gfp (2) origin:upstream missing-backport -1 syz, C error done 24 1143d 1190d 0/2 auto-obsoleted due to no activity on 2025/02/16 06:49
android-6-1 kernel BUG in ext4_mb_load_buddy_gfp -1 syz, C error done 42 1023d 1179d 0/2 auto-obsoleted due to no activity on 2023/12/29 16:31
android-5-15 kernel BUG in ext4_mb_load_buddy_gfp ext4 -1 syz, C error 9 1233d 1350d 2/2 fixed on 2023/03/28 12:29
android-5-10 kernel BUG in ext4_mb_load_buddy_gfp -1 syz, C error error 28 706d 1191d 0/2 upstream: reported C repro on 2023/05/04 23:52
android-5-15 kernel BUG in ext4_free_blocks ext4 -1 1 1294d 1294d 0/2 auto-obsoleted due to no activity on 2023/04/30 03:35
▶ ▼ Fix bisection attempts (10)
Created Duration User Patch Repo Result
2021/11/04 02:38 12m bisect fix linux-4.19.y error job log
2021/09/20 19:40 23m bisect fix linux-4.19.y OK (0) job log log
2021/08/12 13:38 24m bisect fix linux-4.19.y OK (0) job log log
2021/07/13 13:07 30m bisect fix linux-4.19.y OK (0) job log log
2021/05/31 02:19 23m bisect fix linux-4.19.y OK (0) job log log
2021/04/29 03:03 38m bisect fix linux-4.19.y OK (0) job log log
2021/03/30 02:27 35m bisect fix linux-4.19.y OK (0) job log log
2021/02/28 01:50 36m bisect fix linux-4.19.y OK (0) job log log
2021/01/14 15:45 36m bisect fix linux-4.19.y OK (0) job log log
2020/12/15 12:07 34m bisect fix linux-4.19.y OK (0) job log log

Sample crash report:
EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
------------[ cut here ]------------
kernel BUG at fs/ext4/ext4.h:2870!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 8112 Comm: syz-executor765 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2870 [inline]
RIP: 0010:ext4_mb_load_buddy_gfp+0x1460/0x1a90 fs/ext4/mballoc.c:1116
Code: 36 04 9f ff e9 b9 f6 ff ff e8 2c df 7f ff e9 b4 f4 ff ff e8 22 df 7f ff 48 89 ef e8 1a 04 9f ff e9 51 fa ff ff e8 10 df 7f ff <0f> 0b e8 09 df 7f ff 8b 54 24 1c 44 89 e6 48 89 ef e8 da d4 ff ff
RSP: 0018:ffff8880957e7290 EFLAGS: 00010293
RAX: ffff8880b5bca340 RBX: ffff8880957e73c0 RCX: ffffffff81e29313
RDX: 0000000000000000 RSI: ffffffff81e2a660 RDI: 0000000000000004
RBP: ffff8880b157cb80 R08: ffffffff81dc0bf0 R09: 0000000000000001
R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000001
R13: ffff8880b1676a80 R14: ffff8880b157d200 R15: 0000000000000001
FS:  000055555682c300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e908da8db8 CR3: 00000000a8cfd000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_mb_load_buddy fs/ext4/mballoc.c:1241 [inline]
 ext4_mballoc_query_range+0xac/0x990 fs/ext4/mballoc.c:5355
 ext4_getfsmap_datadev+0x166d/0x2860 fs/ext4/fsmap.c:537
 ext4_getfsmap+0x68b/0x980 fs/ext4/fsmap.c:708
 ext4_ioc_getfsmap+0x2ba/0x910 fs/ext4/ioctl.c:663
 ext4_ioctl+0x2a1/0x3eb0 fs/ext4/ioctl.c:761
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fbf5ecc7fb9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe647e6838 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbf5ecc7fb9
RDX: 0000000020000200 RSI: 00000000c0c0583b RDI: 0000000000000003
RBP: 00007fbf5ec87820 R08: 0000000000000000 R09: 0000000000000000
R10: 000055555682c2c0 R11: 0000000000000246 R12: 00007fbf5ec878b0
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace d532031f8f6032e7 ]---
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2870 [inline]
RIP: 0010:ext4_mb_load_buddy_gfp+0x1460/0x1a90 fs/ext4/mballoc.c:1116
Code: 36 04 9f ff e9 b9 f6 ff ff e8 2c df 7f ff e9 b4 f4 ff ff e8 22 df 7f ff 48 89 ef e8 1a 04 9f ff e9 51 fa ff ff e8 10 df 7f ff <0f> 0b e8 09 df 7f ff 8b 54 24 1c 44 89 e6 48 89 ef e8 da d4 ff ff
RSP: 0018:ffff8880957e7290 EFLAGS: 00010293
RAX: ffff8880b5bca340 RBX: ffff8880957e73c0 RCX: ffffffff81e29313
RDX: 0000000000000000 RSI: ffffffff81e2a660 RDI: 0000000000000004
RBP: ffff8880b157cb80 R08: ffffffff81dc0bf0 R09: 0000000000000001
R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000001
R13: ffff8880b1676a80 R14: ffff8880b157d200 R15: 0000000000000001
FS:  000055555682c300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e908da8db8 CR3: 00000000a8cfd000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/03 01:09 linux-4.19.y 3f8a27f9e27b feb56351 .config console log report syz C [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in ext4_mb_load_buddy_gfp
2022/07/05 00:56 linux-4.19.y 3f8a27f9e27b bff65f44 .config console log report syz C ci2-linux-4-19 kernel BUG in ext4_free_blocks
2021/08/21 19:40 linux-4.19.y 59456c9cc40c b599f2fc .config console log report syz C ci2-linux-4-19 kernel BUG in ext4_mb_load_buddy_gfp
2021/05/01 02:19 linux-4.19.y 97a8651cadce 77e2b668 .config console log report syz C ci2-linux-4-19 kernel BUG in ext4_mb_load_buddy_gfp
2020/11/15 12:07 linux-4.19.y 31acccdc8774 1bf9a662 .config console log report syz C ci2-linux-4-19
2023/02/02 09:29 linux-4.19.y 3f8a27f9e27b 9a6f477c .config console log report syz [disk image] [vmlinux] [mounted in repro] ci2-linux-4-19 kernel BUG in ext4_mb_load_buddy_gfp
2021/08/19 05:41 linux-4.19.y 59456c9cc40c a2fe1cb5 .config console log report syz ci2-linux-4-19 kernel BUG in ext4_mb_load_buddy_gfp
2021/01/29 01:50 linux-4.19.y c4ff839de17f 7df34f59 .config console log report syz ci2-linux-4-19 kernel BUG in ext4_mb_find_by_goal
2023/02/11 22:02 linux-4.19.y 3f8a27f9e27b 93e26d60 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in ext4_mb_load_buddy_gfp
2023/01/21 20:58 linux-4.19.y 3f8a27f9e27b cc0f9968 .config console log report info [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in ext4_mb_find_by_goal
2023/01/09 19:01 linux-4.19.y 3f8a27f9e27b 1dac8c7a .config console log report info [disk image] [vmlinux] ci2-linux-4-19 kernel BUG in ext4_mb_find_by_goal
2021/10/05 02:37 linux-4.19.y c2276d585654 ce697b49 .config console log report info ci2-linux-4-19 kernel BUG in ext4_mb_load_buddy_gfp
2021/06/13 13:07 linux-4.19.y 9a2dc0e6c531 1ba81399 .config console log report info ci2-linux-4-19 kernel BUG in ext4_mb_load_buddy_gfp
* Struck through repros no longer work on HEAD.