WARNING in f2fs_submit_page_bio

5 views
Skip to first unread message

syzbot

unread,
Dec 30, 2020, 1:18:21 PM12/30/20
to syzkaller...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 17529385 Linux 4.14.213
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17bf1a77500000
kernel config: https://syzkaller.appspot.com/x/.config?x=f94010bb59bd4675
dashboard link: https://syzkaller.appspot.com/bug?extid=e4103db43ce5a611ab5d
compiler: gcc (GCC) 10.1.0-syz 20200507

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e4103d...@syzkaller.appspotmail.com

nfnl_err_deliver net/netfilter/nfnetlink.c:270 [inline]
nfnetlink_rcv_batch net/netfilter/nfnetlink.c:451 [inline]
nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:495 [inline]
nfnetlink_rcv+0x147b/0x1da0 net/netfilter/nfnetlink.c:513
netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline]
netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1313
------------[ cut here ]------------
netlink_sendmsg+0x62e/0xb80 net/netlink/af_netlink.c:1878
WARNING: CPU: 1 PID: 25366 at fs/f2fs/checkpoint.c:150 f2fs_is_valid_blkaddr+0x2d9/0x920 fs/f2fs/checkpoint.c:148
Kernel panic - not syncing: panic_on_warn set ...

sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xb5/0x100 net/socket.c:656
___sys_sendmsg+0x6c8/0x800 net/socket.c:2062
__sys_sendmsg+0xa3/0x120 net/socket.c:2096
SYSC_sendmsg net/socket.c:2107 [inline]
SyS_sendmsg+0x27/0x40 net/socket.c:2103
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45e299
RSP: 002b:00007fb118849c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e299
RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003
RBP: 00007fb118849ca0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
R13: 00007ffcf0b52f0f R14: 00007fb11884a9c0 R15: 000000000119bf8c
CPU: 1 PID: 25366 Comm: syz-executor.5 Not tainted 4.14.213-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x283 lib/dump_stack.c:58
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x20/0x4b kernel/panic.c:547
report_bug+0x208/0x249 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:f2fs_is_valid_blkaddr+0x2d9/0x920 fs/f2fs/checkpoint.c:150
RSP: 0018:ffff888091987820 EFLAGS: 00010286
RAX: dffffc0000000000 RBX: ffff8880a1290740 RCX: ffffc90009110000
RDX: 0000000000040000 RSI: ffffffff82cbe72e RDI: 0000000000000001
RBP: 0000000000000005 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000001 R14: 0000000000001000 R15: 0000000000000200
f2fs_submit_page_bio+0x10a/0x1380 fs/f2fs/data.c:377
read_node_page+0x209/0x2f0 fs/f2fs/node.c:1128
__get_node_page.part.0+0x97/0xea0 fs/f2fs/node.c:1173
__get_node_page fs/f2fs/node.c:37 [inline]
get_node_page+0xdd/0x170 fs/f2fs/node.c:1219
do_read_inode fs/f2fs/inode.c:264 [inline]
f2fs_iget+0x1e8/0x3760 fs/f2fs/inode.c:360
f2fs_fill_super+0x30ac/0x56a0 fs/f2fs/super.c:2622
mount_bdev+0x2b3/0x360 fs/super.c:1134
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x460cea
RSP: 002b:00007ff68a135a78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ff68a135b10 RCX: 0000000000460cea
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ff68a135ad0
RBP: 00007ff68a135ad0 R08: 00007ff68a135b10 R09: 0000000020000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000
R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900
Kernel Offset: disabled
Rebooting in 86400 seconds..


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Apr 29, 2021, 2:18:12 PM4/29/21
to syzkaller...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages