kernel BUG in bd_finish_claiming
8 views
Skip to first unread message
syzbot
Sep 9, 2021, 2:42:31 AM9/9/21
to syzkaller-a...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 8670e680e307 FROMGIT: selinux: use __GFP_NOWARN with GFP_N..
git tree: android12-5.4
console output: https://syzkaller.appspot.com/x/log.txt?x=15dc01ed300000
kernel config: https://syzkaller.appspot.com/x/.config?x=12fdca0186751701
dashboard link: https://syzkaller.appspot.com/bug?extid=2a676285757e854832d9
compiler: Debian clang version 11.0.1-2, GNU ld (GNU Binutils for Debian) 2.35.1
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2a6762...@syzkaller.appspotmail.com
------------[ cut here ]------------
kernel BUG at fs/block_dev.c:1218!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 3506 Comm: syz-executor.5 Not tainted 5.4.125-syzkaller-00017-g8670e680e307 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bd_finish_claiming+0x1c4/0x1d0 fs/block_dev.c:1047
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 57 ff ff ff 4c 89 e7 e8 4d d1 ec ff e9 4a ff ff ff e8 43 11 be ff 0f 0b e8 3c 11 be ff <0f> 0b e8 35 11 be ff 0f 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49
RSP: 0018:ffff8881ec55f788 EFLAGS: 00010283
RAX: ffffffff81a742a4 RBX: ffff8881f5848418 RCX: 0000000000040000
RDX: ffffc90001993000 RSI: 0000000000000353 RDI: 0000000000000354
RBP: ffff8881f1103400 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffed103d8abee1 R11: 0000000000000004 R12: ffff8881f5848400
R13: dffffc0000000000 R14: ffff8881f5848440 R15: 1ffff1103eb09088
FS: 00007f4a6a0de700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000522230 CR3: 00000001a5fbd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
blkdev_get+0x1a7/0x390 fs/block_dev.c:1722
do_dentry_open+0x949/0x1100 fs/open.c:796
do_last fs/namei.c:3495 [inline]
path_openat+0x1127/0x3da0 fs/namei.c:3612
do_filp_open+0x208/0x450 fs/namei.c:3642
do_sys_open+0x383/0x7c0 fs/open.c:1113
do_syscall_64+0xcb/0x1e0 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4665f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4a6a0de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9
RDX: 000000000000c080 RSI: 0000000020000000 RDI: ffffffffffffff9c
RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000020 R11: 0000000000000246 R12: 000000000056c038
R13: 00007ffd8c372a9f R14: 00007f4a6a0de300 R15: 0000000000022000
Modules linked in:
---[ end trace 8cd95d59ed311b98 ]---
RIP: 0010:bd_finish_claiming+0x1c4/0x1d0 fs/block_dev.c:1047
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 57 ff ff ff 4c 89 e7 e8 4d d1 ec ff e9 4a ff ff ff e8 43 11 be ff 0f 0b e8 3c 11 be ff <0f> 0b e8 35 11 be ff 0f 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49
RSP: 0018:ffff8881ec55f788 EFLAGS: 00010283
RAX: ffffffff81a742a4 RBX: ffff8881f5848418 RCX: 0000000000040000
RDX: ffffc90001993000 RSI: 0000000000000353 RDI: 0000000000000354
RBP: ffff8881f1103400 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffed103d8abee1 R11: 0000000000000004 R12: ffff8881f5848400
R13: dffffc0000000000 R14: ffff8881f5848440 R15: 1ffff1103eb09088
FS: 00007f4a6a0de700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000522230 CR3: 00000001a5fbd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 8670e680e307 FROMGIT: selinux: use __GFP_NOWARN with GFP_N..
git tree: android12-5.4
console output: https://syzkaller.appspot.com/x/log.txt?x=15dc01ed300000
kernel config: https://syzkaller.appspot.com/x/.config?x=12fdca0186751701
dashboard link: https://syzkaller.appspot.com/bug?extid=2a676285757e854832d9
compiler: Debian clang version 11.0.1-2, GNU ld (GNU Binutils for Debian) 2.35.1
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2a6762...@syzkaller.appspotmail.com
------------[ cut here ]------------
kernel BUG at fs/block_dev.c:1218!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 3506 Comm: syz-executor.5 Not tainted 5.4.125-syzkaller-00017-g8670e680e307 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bd_finish_claiming+0x1c4/0x1d0 fs/block_dev.c:1047
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 57 ff ff ff 4c 89 e7 e8 4d d1 ec ff e9 4a ff ff ff e8 43 11 be ff 0f 0b e8 3c 11 be ff <0f> 0b e8 35 11 be ff 0f 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49
RSP: 0018:ffff8881ec55f788 EFLAGS: 00010283
RAX: ffffffff81a742a4 RBX: ffff8881f5848418 RCX: 0000000000040000
RDX: ffffc90001993000 RSI: 0000000000000353 RDI: 0000000000000354
RBP: ffff8881f1103400 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffed103d8abee1 R11: 0000000000000004 R12: ffff8881f5848400
R13: dffffc0000000000 R14: ffff8881f5848440 R15: 1ffff1103eb09088
FS: 00007f4a6a0de700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000522230 CR3: 00000001a5fbd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
blkdev_get+0x1a7/0x390 fs/block_dev.c:1722
do_dentry_open+0x949/0x1100 fs/open.c:796
do_last fs/namei.c:3495 [inline]
path_openat+0x1127/0x3da0 fs/namei.c:3612
do_filp_open+0x208/0x450 fs/namei.c:3642
do_sys_open+0x383/0x7c0 fs/open.c:1113
do_syscall_64+0xcb/0x1e0 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4665f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4a6a0de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9
RDX: 000000000000c080 RSI: 0000000020000000 RDI: ffffffffffffff9c
RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000020 R11: 0000000000000246 R12: 000000000056c038
R13: 00007ffd8c372a9f R14: 00007f4a6a0de300 R15: 0000000000022000
Modules linked in:
---[ end trace 8cd95d59ed311b98 ]---
RIP: 0010:bd_finish_claiming+0x1c4/0x1d0 fs/block_dev.c:1047
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 57 ff ff ff 4c 89 e7 e8 4d d1 ec ff e9 4a ff ff ff e8 43 11 be ff 0f 0b e8 3c 11 be ff <0f> 0b e8 35 11 be ff 0f 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49
RSP: 0018:ffff8881ec55f788 EFLAGS: 00010283
RAX: ffffffff81a742a4 RBX: ffff8881f5848418 RCX: 0000000000040000
RDX: ffffc90001993000 RSI: 0000000000000353 RDI: 0000000000000354
RBP: ffff8881f1103400 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffed103d8abee1 R11: 0000000000000004 R12: ffff8881f5848400
R13: dffffc0000000000 R14: ffff8881f5848440 R15: 1ffff1103eb09088
FS: 00007f4a6a0de700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000522230 CR3: 00000001a5fbd000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Sep 9, 2021, 3:56:29 AM9/9/21
to syzkaller-a...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 8670e680e307 FROMGIT: selinux: use __GFP_NOWARN with GFP_N..
git tree: android12-5.4
console output: https://syzkaller.appspot.com/x/log.txt?x=15c8e61b300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2a6762...@syzkaller.appspotmail.com
------------[ cut here ]------------
kernel BUG at fs/block_dev.c:1218!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 725 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00017-g8670e680e307 #0
RAX: ffffffff81a742a4 RBX: ffff8881e5b6e018 RCX: ffff8881eb910fc0
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881eb15f700
RBP: ffff8881f110a400 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffed103d62bee1 R11: 0000000000000004 R12: ffff8881e5b6e000
R13: dffffc0000000000 R14: ffff8881e5b6e040 R15: 1ffff1103cb6dc08
FS: 00007f2d54dc4700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665f9
R13: 00007ffdefdc671f R14: 00007f2d54dc4300 R15: 0000000000022000
Modules linked in:
---[ end trace 3e5e3b430b755c06 ]---
RAX: ffffffff81a742a4 RBX: ffff8881e5b6e018 RCX: ffff8881eb910fc0
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881eb15f700
RBP: ffff8881f110a400 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffed103d62bee1 R11: 0000000000000004 R12: ffff8881e5b6e000
R13: dffffc0000000000 R14: ffff8881e5b6e040 R15: 1ffff1103cb6dc08
FS: 00007f2d54dc4700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
HEAD commit: 8670e680e307 FROMGIT: selinux: use __GFP_NOWARN with GFP_N..
git tree: android12-5.4
kernel config: https://syzkaller.appspot.com/x/.config?x=12fdca0186751701
dashboard link: https://syzkaller.appspot.com/bug?extid=2a676285757e854832d9
compiler: Debian clang version 11.0.1-2, GNU ld (GNU Binutils for Debian) 2.35.1
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1659dbcd300000
dashboard link: https://syzkaller.appspot.com/bug?extid=2a676285757e854832d9
compiler: Debian clang version 11.0.1-2, GNU ld (GNU Binutils for Debian) 2.35.1
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2a6762...@syzkaller.appspotmail.com
------------[ cut here ]------------
kernel BUG at fs/block_dev.c:1218!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bd_finish_claiming+0x1c4/0x1d0 fs/block_dev.c:1047
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 57 ff ff ff 4c 89 e7 e8 4d d1 ec ff e9 4a ff ff ff e8 43 11 be ff 0f 0b e8 3c 11 be ff <0f> 0b e8 35 11 be ff 0f 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49
RSP: 0018:ffff8881eb15f788 EFLAGS: 00010293
RIP: 0010:bd_finish_claiming+0x1c4/0x1d0 fs/block_dev.c:1047
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 57 ff ff ff 4c 89 e7 e8 4d d1 ec ff e9 4a ff ff ff e8 43 11 be ff 0f 0b e8 3c 11 be ff <0f> 0b e8 35 11 be ff 0f 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49
RAX: ffffffff81a742a4 RBX: ffff8881e5b6e018 RCX: ffff8881eb910fc0
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881eb15f700
RBP: ffff8881f110a400 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffed103d62bee1 R11: 0000000000000004 R12: ffff8881e5b6e000
R13: dffffc0000000000 R14: ffff8881e5b6e040 R15: 1ffff1103cb6dc08
FS: 00007f2d54dc4700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1104f2ef28 CR3: 00000001f25dd000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
blkdev_get+0x1a7/0x390 fs/block_dev.c:1722
do_dentry_open+0x949/0x1100 fs/open.c:796
do_last fs/namei.c:3495 [inline]
path_openat+0x1127/0x3da0 fs/namei.c:3612
do_filp_open+0x208/0x450 fs/namei.c:3642
do_sys_open+0x383/0x7c0 fs/open.c:1113
do_syscall_64+0xcb/0x1e0 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4665f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2d54dc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
blkdev_get+0x1a7/0x390 fs/block_dev.c:1722
do_dentry_open+0x949/0x1100 fs/open.c:796
do_last fs/namei.c:3495 [inline]
path_openat+0x1127/0x3da0 fs/namei.c:3612
do_filp_open+0x208/0x450 fs/namei.c:3642
do_sys_open+0x383/0x7c0 fs/open.c:1113
do_syscall_64+0xcb/0x1e0 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4665f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665f9
RDX: 000000000000c080 RSI: 0000000020000000 RDI: ffffffffffffff9c
RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000020 R11: 0000000000000246 R12: 000000000056c1a8
RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
R13: 00007ffdefdc671f R14: 00007f2d54dc4300 R15: 0000000000022000
Modules linked in:
---[ end trace 3e5e3b430b755c06 ]---
RIP: 0010:bd_finish_claiming+0x1c4/0x1d0 fs/block_dev.c:1047
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 57 ff ff ff 4c 89 e7 e8 4d d1 ec ff e9 4a ff ff ff e8 43 11 be ff 0f 0b e8 3c 11 be ff <0f> 0b e8 35 11 be ff 0f 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49
RSP: 0018:ffff8881eb15f788 EFLAGS: 00010293
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 57 ff ff ff 4c 89 e7 e8 4d d1 ec ff e9 4a ff ff ff e8 43 11 be ff 0f 0b e8 3c 11 be ff <0f> 0b e8 35 11 be ff 0f 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49
RAX: ffffffff81a742a4 RBX: ffff8881e5b6e018 RCX: ffff8881eb910fc0
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881eb15f700
RBP: ffff8881f110a400 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffed103d62bee1 R11: 0000000000000004 R12: ffff8881e5b6e000
R13: dffffc0000000000 R14: ffff8881e5b6e040 R15: 1ffff1103cb6dc08
FS: 00007f2d54dc4700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1104f2ef28 CR3: 00000001f25dd000 CR4: 00000000001406e0
syzbot
Apr 22, 2023, 3:03:44 PM4/22/23
to syzkaller-a...@googlegroups.com
Auto-closing this bug as obsolete.
No recent activity, existing reproducers are no longer triggering the issue.
No recent activity, existing reproducers are no longer triggering the issue.
Reply all
Reply to author
Forward
0 new messages