syz test
3 views
Skip to first unread message
Tadeusz Struk
Jul 12, 2022, 3:56:41 PM7/12/22
to syzkaller, syzbot+15cd99...@syzkaller.appspotmail.com
syzbot
Jul 12, 2022, 4:05:10 PM7/12/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,
syzbot has tested the proposed patch but the reproducer is still triggering an issue:
kernel BUG in ext4_mb_clear_bb
EXT4-fs (loop0): orphan cleanup on readonly fs
EXT4-fs error (device loop0): ext4_mb_clear_bb:5963: comm syz-executor.0: Freeing blocks in system zone - Block = 16, count = 16
EXT4-fs (loop0): Remounting filesystem read-only
------------[ cut here ]------------
kernel BUG at fs/ext4/ext4.h:3319!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 413 Comm: syz-executor.0 Not tainted 5.19.0-rc6-syzkaller-00104-g72a8e05d4f66 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:3319 [inline]
RIP: 0010:ext4_mb_clear_bb+0x1c3e/0x1c50 fs/ext4/mballoc.c:5935
Code: 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 31 e6 ff ff 4c 89 f7 e8 c3 06 c7 ff e9 24 e6 ff ff e8 29 48 87 ff 0f 0b e8 22 48 87 ff <0f> 0b e8 cb 1c c8 02 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5
RSP: 0018:ffffc9000296ee60 EFLAGS: 00010293
RAX: ffffffff81ea0f2e RBX: 0000000000000001 RCX: ffff88810e550000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001
RBP: ffffc9000296f070 R08: ffffffff81e9f553 R09: ffffc9000296efc0
R10: fffff5200052ddff R11: 1ffff9200052ddf8 R12: ffff88810f288000
R13: ffff88810f288000 R14: ffff88810f288040 R15: 00000000ffffffff
FS: 00007f48083c5700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f48083c6000 CR3: 0000000122f0b000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
ext4_free_blocks+0xa44/0xd10 fs/ext4/mballoc.c:6185
ext4_clear_blocks+0x347/0x3c0 fs/ext4/indirect.c:880
ext4_free_data fs/ext4/indirect.c:954 [inline]
ext4_ind_truncate+0x83f/0x1040 fs/ext4/indirect.c:1146
ext4_truncate+0xb1b/0x1210 fs/ext4/inode.c:4242
ext4_evict_inode+0xf07/0x1700 fs/ext4/inode.c:284
evict+0x2a3/0x630 fs/inode.c:664
iput_final fs/inode.c:1744 [inline]
iput+0x61c/0x850 fs/inode.c:1770
ext4_quota_enable fs/ext4/super.c:6781 [inline]
ext4_enable_quotas+0x5a5/0x960 fs/ext4/super.c:6804
ext4_orphan_cleanup+0x557/0x1190 fs/ext4/orphan.c:432
__ext4_fill_super fs/ext4/super.c:5368 [inline]
ext4_fill_super+0x958e/0x9c30 fs/ext4/super.c:5507
get_tree_bdev+0x414/0x630 fs/super.c:1292
ext4_get_tree+0x1c/0x20 fs/ext4/super.c:5537
vfs_get_tree+0x88/0x290 fs/super.c:1497
do_new_mount+0x289/0xac0 fs/namespace.c:3040
path_mount+0x60c/0x1060 fs/namespace.c:3370
do_mount fs/namespace.c:3383 [inline]
__do_sys_mount fs/namespace.c:3591 [inline]
__se_sys_mount+0x2d2/0x3c0 fs/namespace.c:3568
__x64_sys_mount+0xbf/0xd0 fs/namespace.c:3568
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f480728a63a
Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f48083c4f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f480728a63a
RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007f48083c4fe0
RBP: 00007f48083c5020 R08: 00007f48083c5020 R09: 0000000020000000
R10: 0000000000000081 R11: 0000000000000246 R12: 0000000020000000
R13: 0000000020000040 R14: 00007f48083c4fe0 R15: 0000000020000180
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:3319 [inline]
RIP: 0010:ext4_mb_clear_bb+0x1c3e/0x1c50 fs/ext4/mballoc.c:5935
Code: 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 31 e6 ff ff 4c 89 f7 e8 c3 06 c7 ff e9 24 e6 ff ff e8 29 48 87 ff 0f 0b e8 22 48 87 ff <0f> 0b e8 cb 1c c8 02 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5
RSP: 0018:ffffc9000296ee60 EFLAGS: 00010293
RAX: ffffffff81ea0f2e RBX: 0000000000000001 RCX: ffff88810e550000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001
RBP: ffffc9000296f070 R08: ffffffff81e9f553 R09: ffffc9000296efc0
R10: fffff5200052ddff R11: 1ffff9200052ddf8 R12: ffff88810f288000
R13: ffff88810f288000 R14: ffff88810f288040 R15: 00000000ffffffff
FS: 00007f48083c5700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f480739c028 CR3: 0000000122f0b000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Tested on:
commit: 72a8e05d Merge tag 'ovl-fixes-5.19-rc7' of git://git.k..
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=1513af0a080000
kernel config: https://syzkaller.appspot.com/x/.config?x=416bd8aed6ca51ae
dashboard link: https://syzkaller.appspot.com/bug?extid=15cd994e273307bf5cfa
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
Note: no patches were applied.
syzbot has tested the proposed patch but the reproducer is still triggering an issue:
kernel BUG in ext4_mb_clear_bb
EXT4-fs (loop0): orphan cleanup on readonly fs
EXT4-fs error (device loop0): ext4_mb_clear_bb:5963: comm syz-executor.0: Freeing blocks in system zone - Block = 16, count = 16
EXT4-fs (loop0): Remounting filesystem read-only
------------[ cut here ]------------
kernel BUG at fs/ext4/ext4.h:3319!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 413 Comm: syz-executor.0 Not tainted 5.19.0-rc6-syzkaller-00104-g72a8e05d4f66 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:3319 [inline]
RIP: 0010:ext4_mb_clear_bb+0x1c3e/0x1c50 fs/ext4/mballoc.c:5935
Code: 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 31 e6 ff ff 4c 89 f7 e8 c3 06 c7 ff e9 24 e6 ff ff e8 29 48 87 ff 0f 0b e8 22 48 87 ff <0f> 0b e8 cb 1c c8 02 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5
RSP: 0018:ffffc9000296ee60 EFLAGS: 00010293
RAX: ffffffff81ea0f2e RBX: 0000000000000001 RCX: ffff88810e550000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001
RBP: ffffc9000296f070 R08: ffffffff81e9f553 R09: ffffc9000296efc0
R10: fffff5200052ddff R11: 1ffff9200052ddf8 R12: ffff88810f288000
R13: ffff88810f288000 R14: ffff88810f288040 R15: 00000000ffffffff
FS: 00007f48083c5700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f48083c6000 CR3: 0000000122f0b000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
ext4_free_blocks+0xa44/0xd10 fs/ext4/mballoc.c:6185
ext4_clear_blocks+0x347/0x3c0 fs/ext4/indirect.c:880
ext4_free_data fs/ext4/indirect.c:954 [inline]
ext4_ind_truncate+0x83f/0x1040 fs/ext4/indirect.c:1146
ext4_truncate+0xb1b/0x1210 fs/ext4/inode.c:4242
ext4_evict_inode+0xf07/0x1700 fs/ext4/inode.c:284
evict+0x2a3/0x630 fs/inode.c:664
iput_final fs/inode.c:1744 [inline]
iput+0x61c/0x850 fs/inode.c:1770
ext4_quota_enable fs/ext4/super.c:6781 [inline]
ext4_enable_quotas+0x5a5/0x960 fs/ext4/super.c:6804
ext4_orphan_cleanup+0x557/0x1190 fs/ext4/orphan.c:432
__ext4_fill_super fs/ext4/super.c:5368 [inline]
ext4_fill_super+0x958e/0x9c30 fs/ext4/super.c:5507
get_tree_bdev+0x414/0x630 fs/super.c:1292
ext4_get_tree+0x1c/0x20 fs/ext4/super.c:5537
vfs_get_tree+0x88/0x290 fs/super.c:1497
do_new_mount+0x289/0xac0 fs/namespace.c:3040
path_mount+0x60c/0x1060 fs/namespace.c:3370
do_mount fs/namespace.c:3383 [inline]
__do_sys_mount fs/namespace.c:3591 [inline]
__se_sys_mount+0x2d2/0x3c0 fs/namespace.c:3568
__x64_sys_mount+0xbf/0xd0 fs/namespace.c:3568
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f480728a63a
Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f48083c4f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f480728a63a
RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007f48083c4fe0
RBP: 00007f48083c5020 R08: 00007f48083c5020 R09: 0000000020000000
R10: 0000000000000081 R11: 0000000000000246 R12: 0000000020000000
R13: 0000000020000040 R14: 00007f48083c4fe0 R15: 0000000020000180
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:3319 [inline]
RIP: 0010:ext4_mb_clear_bb+0x1c3e/0x1c50 fs/ext4/mballoc.c:5935
Code: 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 31 e6 ff ff 4c 89 f7 e8 c3 06 c7 ff e9 24 e6 ff ff e8 29 48 87 ff 0f 0b e8 22 48 87 ff <0f> 0b e8 cb 1c c8 02 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5
RSP: 0018:ffffc9000296ee60 EFLAGS: 00010293
RAX: ffffffff81ea0f2e RBX: 0000000000000001 RCX: ffff88810e550000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001
RBP: ffffc9000296f070 R08: ffffffff81e9f553 R09: ffffc9000296efc0
R10: fffff5200052ddff R11: 1ffff9200052ddf8 R12: ffff88810f288000
R13: ffff88810f288000 R14: ffff88810f288040 R15: 00000000ffffffff
FS: 00007f48083c5700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f480739c028 CR3: 0000000122f0b000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Tested on:
commit: 72a8e05d Merge tag 'ovl-fixes-5.19-rc7' of git://git.k..
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=1513af0a080000
kernel config: https://syzkaller.appspot.com/x/.config?x=416bd8aed6ca51ae
dashboard link: https://syzkaller.appspot.com/bug?extid=15cd994e273307bf5cfa
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
Note: no patches were applied.
Reply all
Reply to author
Forward
0 new messages