kernel BUG at fs/ext4/inode.c:LINE!

Status: upstream: reported C repro on 2020/12/25 03:51
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+ea5f5548b2cb99b8955c@syzkaller.appspotmail.com
First crash: 2047d, last: 1253d
▶ ▼ Similar bugs (14)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 kernel BUG at fs/ext4/inode.c:LINE! ext4 -1 syz, C error 145 1246d 2119d 0/1 upstream: reported C repro on 2020/10/14 01:19
android-54 kernel BUG at fs/ext4/inode.c:LINE! ext4 -1 syz, C 272 435d 2393d 0/2 upstream: reported C repro on 2020/01/14 12:13
upstream kernel BUG at fs/ext4/inode.c:LINE! ext4 -1 syz, C done 9 2042d 2167d 19/29 fixed on 2021/03/10 01:48
android-49 kernel BUG at fs/ext4/inode.c:LINE! -1 syz, C 280 2742d 2671d 0/3 public: reported C repro on 2019/04/11 08:44
android-414 kernel BUG at fs/ext4/inode.c:LINE! -1 1 2817d 2669d 0/1 auto-closed as invalid on 2019/05/15 13:37
android-5-10 kernel BUG in mpage_prepare_extent_to_map -1 syz, C error 254 1567d 1735d 2/2 fixed on 2022/04/21 04:24
android-5-10 kernel BUG in ext4_writepages -1 syz, C error 5 1385d 1547d 2/2 fixed on 2022/11/16 18:44
android-44 kernel BUG at fs/ext4/inode.c:LINE! -1 syz, C 110 2759d 2671d 0/2 public: reported C repro on 2019/04/11 08:44
upstream kernel BUG in mpage_prepare_extent_to_map ext4 -1 syz, C done error 145 1329d 1890d 0/29 auto-obsoleted due to no activity on 2024/03/07 20:46
linux-5.15 kernel BUG in ext4_writepages origin:upstream -1 syz, C error 284 11h05m 1239d 0/3 upstream: reported C repro on 2023/03/13 06:22
linux-6.1 kernel BUG in ext4_writepages origin:upstream -1 syz, C error 293 18h52m 1240d 0/3 upstream: reported C repro on 2023/03/12 17:26
android-5-15 kernel BUG in ext4_writepages ext4 origin:upstream -1 syz, C error 703 1d00h 1385d 0/2 upstream: reported C repro on 2022/10/18 14:12
android-6-1 kernel BUG in ext4_writepages origin:upstream -1 syz, C error 776 1d10h 1155d 0/2 upstream: reported C repro on 2023/06/05 07:33
android-5-10 kernel BUG in ext4_writepages (2) ext4 -1 syz, C error inconclusive 551 4d11h 1346d 0/2 upstream: reported C repro on 2022/11/27 00:51
▶ ▼ Fix bisection attempts (20)
Created Duration User Patch Repo Result
2023/02/01 07:46 30m bisect fix linux-4.14.y OK (0) job log log
2022/09/17 04:12 21m bisect fix linux-4.14.y OK (0) job log log
2022/08/08 00:25 28m bisect fix linux-4.14.y OK (0) job log log
2022/07/08 23:58 26m bisect fix linux-4.14.y OK (0) job log log
2022/06/08 23:32 26m bisect fix linux-4.14.y OK (0) job log log
2022/04/18 08:04 23m bisect fix linux-4.14.y OK (0) job log log
2022/03/19 03:47 27m bisect fix linux-4.14.y OK (0) job log log
2022/02/15 16:00 24m bisect fix linux-4.14.y OK (0) job log log
2022/01/07 02:53 24m bisect fix linux-4.14.y OK (0) job log log
2021/12/08 02:24 29m bisect fix linux-4.14.y OK (0) job log log
2021/11/08 01:33 30m bisect fix linux-4.14.y OK (0) job log log
2021/10/09 01:10 21m bisect fix linux-4.14.y OK (0) job log log
2021/09/09 00:43 26m bisect fix linux-4.14.y OK (0) job log log
2021/08/09 23:45 22m bisect fix linux-4.14.y OK (0) job log log
2021/07/10 23:24 20m bisect fix linux-4.14.y OK (0) job log log
2021/06/10 22:57 27m bisect fix linux-4.14.y OK (0) job log log
2021/05/11 22:35 22m bisect fix linux-4.14.y OK (0) job log log
2021/03/26 05:46 20m bisect fix linux-4.14.y OK (0) job log log
2021/02/24 04:55 21m bisect fix linux-4.14.y OK (0) job log log
2021/01/24 04:13 21m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:2861!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 8034 Comm: syz-executor179 Not tainted 4.14.307-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
task: ffff8880ac15e600 task.stack: ffff8880b2c20000
RIP: 0010:ext4_writepages+0x27fc/0x32a0 fs/ext4/inode.c:2861
RSP: 0018:ffff8880b2c27638 EFLAGS: 00010297
RAX: ffff8880ac15e600 RBX: 00000000a802c010 RCX: 1ffff1101582bec1
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880ac15f608
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000001c44
R10: 0000000000000001 R11: ffff8880ac15e600 R12: 0000000000000001
R13: dffffc0000000000 R14: ffff88808e33d2b0 R15: ffff8880b2c27a60
FS:  00007ff90d9e5700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd6ff489b0 CR3: 00000000a238f000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 do_writepages+0xc3/0x240 mm/page-writeback.c:2361
 __filemap_fdatawrite_range+0x236/0x310 mm/filemap.c:346
 file_write_and_wait_range+0x86/0xd0 mm/filemap.c:678
 __generic_file_fsync+0x70/0x190 fs/libfs.c:1001
 ext4_sync_file+0x8ed/0x12c0 fs/ext4/fsync.c:118
 vfs_fsync_range+0x103/0x260 fs/sync.c:196
 generic_write_sync include/linux/fs.h:2684 [inline]
 ext4_file_write_iter+0x5fa/0xd20 fs/ext4/file.c:281
 call_write_iter include/linux/fs.h:1780 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x44c/0x630 fs/read_write.c:482
 vfs_write+0x17f/0x4d0 fs/read_write.c:544
 SYSC_write fs/read_write.c:590 [inline]
 SyS_write+0xf2/0x210 fs/read_write.c:582
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x5e/0xd3
RIP: 0033:0x7ff915d61f89
RSP: 002b:00007ff90d9e5208 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007ff915d61f89
RDX: 000000000000000c RSI: 00000000200002c0 RDI: 0000000000000004
RBP: 00007ff915ddf6d0 R08: 00007ff915ddf6d8 R09: 00007ff915ddf6d8
R10: 00007ff90d9e5700 R11: 0000000000000246 R12: 00007ff915ddf6dc
R13: 00007ffd6fe60faf R14: 00007ff90d9e5300 R15: 0000000000022000
Code: ff ff 4c 89 ff e8 65 b1 c3 ff e9 98 db ff ff e8 eb ed 99 ff 48 8b bc 24 b8 00 00 00 e8 7e 56 b1 ff e9 18 f5 ff ff e8 d4 ed 99 ff <0f> 0b e8 cd ed 99 ff 48 8b bc 24 b8 00 00 00 e8 60 56 b1 ff 8b 
RIP: ext4_writepages+0x27fc/0x32a0 fs/ext4/inode.c:2861 RSP: ffff8880b2c27638
---[ end trace 5000948806bbccde ]---

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/27 06:09 linux-4.14.y 7878a41b6cc1 ee50e71c .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-4-14 kernel BUG in ext4_writepages
2022/12/04 06:44 linux-4.14.y 179ef7fe8677 e080de16 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-4-14 kernel BUG in ext4_writepages
2022/10/19 04:34 linux-4.14.y 9d5c0b3a8e1a b31320fc .config console log report syz C [disk image] [vmlinux] [mounted in repro] ci2-linux-4-14 kernel BUG in ext4_writepages
2022/08/18 03:49 linux-4.14.y b641242202ed a9409d47 .config console log report syz C ci2-linux-4-14 kernel BUG in ext4_writepages
2022/05/09 23:23 linux-4.14.y e3a56aaade89 8b277b8e .config console log report syz C ci2-linux-4-14 kernel BUG in ext4_writepages
2020/12/25 03:50 linux-4.14.y 3f2ecb86cb90 c2c1d1dd .config console log report syz C ci2-linux-4-14
2022/12/04 11:04 linux-4.14.y 179ef7fe8677 e080de16 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-4-14 kernel BUG in ext4_writepages
2022/11/17 06:12 linux-4.14.y e911713e40ca 3a127a31 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-linux-4-14 kernel BUG in ext4_writepages
2022/12/21 06:42 linux-4.14.y c4215ee4771b d3e76707 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-4-14 kernel BUG in ext4_writepages
2022/01/16 15:59 linux-4.14.y 4ba8e26127c3 723cfaf0 .config console log report info ci2-linux-4-14 kernel BUG in ext4_writepages
2021/04/11 22:35 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 kernel BUG in ext4_getblk
* Struck through repros no longer work on HEAD.