syzbot

 sign-in | mailing list | source | docs
🐞 Open [1461]
≡ Subsystems
🐞 Fixed [6817]
🐞 Invalid [17647]
⬇ Missing Backports [225]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

general protection fault in bfs_get_block (3)

Status: upstream: reported C repro on 2024/10/30 00:43
Subsystems: bfs
[Documentation on labels]
Reported-by: syzbot+f51a2a34984e4d8888fd@syzkaller.appspotmail.com
First crash: 429d, last: 4d02h
▶ ▼ Discussions (4)
Title Replies (including bot) Last reply
[PATCH] bfs: Fix calculation of offset when moving blocks 2 (2) 2025/12/15 07:55
[syzbot] Monthly bfs report (Dec 2025) 0 (1) 2025/12/10 02:19
[syzbot] [bfs?] general protection fault in bfs_get_block (3) 4 (11) 2025/11/19 18:40
[PATCH] bfs: add check for return value of sb_getblk 1 (1) 2024/11/03 14:36
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in bfs_get_block bfs 2 2 1019d 1055d 0/29 auto-obsoleted due to no activity on 2023/07/13 12:29
linux-6.1 general protection fault in bfs_get_block origin:upstream 2 C error 1 480d 1002d 0/3 upstream: reported C repro on 2023/04/02 00:46
upstream general protection fault in bfs_get_block (2) bfs 2 C error done 2 745d 764d 25/29 fixed on 2024/01/30 15:47
▶ ▼ Last patch testing requests (14)
Created Duration User Patch Repo Result
2025/11/19 18:40 26m zlatistiv@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci OK log
2025/09/08 04:00 19m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2025/07/02 02:36 20m retest repro upstream OK log
2025/06/13 10:18 23m retest repro upstream OK log
2025/04/23 01:53 14m retest repro upstream report log
2025/04/04 09:51 16m retest repro upstream report log
2025/02/12 01:22 18m retest repro upstream report log
2025/01/24 09:19 12m retest repro upstream error
2024/11/29 18:03 13m retest repro upstream report log
2024/11/12 16:59 13m retest repro upstream report log
2024/11/03 14:13 18m eadavis@qq.com patch upstream OK log
2024/11/03 06:08 18m eadavis@qq.com patch upstream OK log
2024/11/03 04:37 14m eadavis@qq.com patch upstream report log
2024/11/03 01:37 18m eadavis@qq.com patch upstream report log

Sample crash report:
loop0: detected capacity change from 0 to 64
BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
Unable to handle kernel paging request at virtual address dfff800000000005
KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[dfff800000000005] address between user and kernel address ranges
Internal error: Oops: 0000000096000005 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 6719 Comm: syz.0.17 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : bfs_move_block fs/bfs/file.c:43 [inline]
pc : bfs_move_blocks fs/bfs/file.c:57 [inline]
pc : bfs_get_block+0x498/0x9d4 fs/bfs/file.c:126
lr : __getblk include/linux/buffer_head.h:380 [inline]
lr : sb_getblk include/linux/buffer_head.h:386 [inline]
lr : bfs_move_block fs/bfs/file.c:42 [inline]
lr : bfs_move_blocks fs/bfs/file.c:57 [inline]
lr : bfs_get_block+0x470/0x9d4 fs/bfs/file.c:126
sp : ffff8000a3d973f0
x29: ffff8000a3d97460 x28: ffff0000c70be160 x27: dfff800000000000
x26: 0000000000000028 x25: ffff0000e3808528 x24: 0000000000000000
x23: ffff0000c70be018 x22: ffff0000c176e828 x21: 1fffe00018e17c2c
x20: 0000000000000200 x19: 000000000000001b x18: 00000000ffffffff
x17: ffff800093507000 x16: ffff800080535980 x15: 0000000000000001
x14: 1fffffbff878c87e x13: 0000000000000000 x12: 0000000000000000
x11: ffff7fbff878c87f x10: 0000000000ff0100 x9 : 0000000000000000
x8 : 0000000000000005 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000020 x4 : 0000000000000008 x3 : ffff800080e6d698
x2 : 0000000000000001 x1 : 0000000000000040 x0 : 0000000000000000
Call trace:
 bfs_move_block fs/bfs/file.c:43 [inline] (P)
 bfs_move_blocks fs/bfs/file.c:57 [inline] (P)
 bfs_get_block+0x498/0x9d4 fs/bfs/file.c:126 (P)
 __block_write_begin_int+0x53c/0x15e8 fs/buffer.c:2145
 block_write_begin+0xa0/0x128 fs/buffer.c:2256
 bfs_write_begin+0x48/0xec fs/bfs/file.c:180
 generic_perform_write+0x244/0x7bc mm/filemap.c:4175
 __generic_file_write_iter+0xfc/0x204 mm/filemap.c:4292
 generic_file_write_iter+0x10c/0x47c mm/filemap.c:4318
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x540/0xa3c fs/read_write.c:686
 ksys_write+0x120/0x210 fs/read_write.c:738
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __arm64_sys_write+0x7c/0x90 fs/read_write.c:746
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
Code: 97e6ba62 9100a31a f94012d4 d343ff48 (387b6908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	97e6ba62 	bl	0xffffffffff9ae988
   4:	9100a31a 	add	x26, x24, #0x28
   8:	f94012d4 	ldr	x20, [x22, #32]
   c:	d343ff48 	lsr	x8, x26, #3
* 10:	387b6908 	ldrb	w8, [x8, x27] <-- trapping instruction

Crashes (29):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/24 19:26 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 8f5ae30d69d7 bf27483f .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in bfs_get_block
2025/11/23 18:00 upstream d13f3ac64efb 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root general protection fault in bfs_get_block
2025/11/15 07:23 upstream d4f8cccc6230 f7988ea4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in bfs_get_block
2025/07/24 09:55 upstream 01a412d06bc5 0c1d6ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in bfs_get_block
2025/12/25 04:04 upstream ccd1cdca5cd4 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/12/20 05:34 upstream dd9b004b7ff3 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/12/14 09:50 upstream 8f0b4cce4481 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/12/13 21:23 upstream 9d9c1cfec01c d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/12/09 15:32 upstream cb015814f8b6 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/12/09 09:46 upstream a110f942672c d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/12/08 02:43 upstream 37bb2e7217b0 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/12/05 01:47 upstream 6dfafbd0299a d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/12/01 10:13 upstream 7d0a66e4bb90 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/11/01 17:36 upstream ba36dd5ee6fd 2c50b6a9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/05/17 13:34 upstream 172a9d94339c f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/01/29 01:03 upstream 805ba04cb7cc 865ef71e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/01/10 09:12 upstream 643e2e259c2b 67d7ec0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2024/12/04 16:56 upstream feffde684ac2 b50eb251 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2024/11/15 17:57 upstream cfaaa7d010d1 eeafb645 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root general protection fault in bfs_get_block
2024/11/15 17:11 upstream cfaaa7d010d1 eeafb645 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2024/11/14 17:19 upstream 0a9b9d17f3a7 77f3eeb7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2024/11/13 14:55 upstream f1b785f4c787 4dfba277 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2024/10/29 16:56 upstream e42b1a9a2557 66aeb999 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2024/10/26 10:29 upstream c71f8fb4dc91 65e8686b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root general protection fault in bfs_get_block
2024/10/26 00:37 upstream c71f8fb4dc91 65e8686b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root general protection fault in bfs_get_block
2025/10/12 17:37 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci bf45a62baffc ff1712fe .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in bfs_get_block
2025/08/24 18:46 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 8f5ae30d69d7 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in bfs_get_block
2025/06/16 04:06 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 39dfc971e42d 5f4b362d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in bfs_get_block
2025/06/16 04:06 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 39dfc971e42d 5f4b362d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in bfs_get_block
* Struck through repros no longer work on HEAD.