[v6.1] kernel BUG in __ocfs2_move_extents_range
3 views
Skip to first unread message
syzbot
Aug 17, 2025, 8:39:31 PM8/17/25
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 0bc96de781b4 Linux 6.1.148
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17889234580000
kernel config: https://syzkaller.appspot.com/x/.config?x=483f799cd9933afc
dashboard link: https://syzkaller.appspot.com/bug?extid=a7a95f489958e3f4148d
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/cd15350f801a/disk-0bc96de7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/789a5d74139d/vmlinux-0bc96de7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a1ef0a7e815a/Image-0bc96de7.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a7a95f...@syzkaller.appspotmail.com
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:1349!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 6289 Comm: syz.4.403 Not tainted 6.1.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ocfs2_block_group_set_bits+0x510/0x6c4 fs/ocfs2/suballoc.c:1349
lr : ocfs2_block_group_set_bits+0x510/0x6c4 fs/ocfs2/suballoc.c:1349
sp : ffff8000210371e0
x29: ffff800021037260 x28: ffff700004206e7c x27: ffff0000e26c9cb0
x26: 000000000000000a x25: ffff0000f987d00c x24: ffff0000f5fc3338
x23: dfff800000000000 x22: 0000000000000022 x21: 0000000000000003
x20: 1ffff00004206e40 x19: ffff0000f987d000 x18: ffff800011aabce0
x17: ffff8000181e7000 x16: ffff8000082ca1cc x15: 0000000000000002
x14: 00000000fffffffc x13: 0000000000ff0100 x12: 0000000000080000
x11: 000000000007ffff x10: ffff800028d9d000 x9 : ffff800009db27a0
x8 : 0000000000080000 x7 : ffff800008e970e0 x6 : 0000000000000000
x5 : 0000000000000022 x4 : 0000000000000003 x3 : ffff0000e26c9cb0
x2 : ffff0000f987d000 x1 : 000000000000000a x0 : 0000000000000022
Call trace:
ocfs2_block_group_set_bits+0x510/0x6c4 fs/ocfs2/suballoc.c:1349
ocfs2_move_extent fs/ocfs2/move_extents.c:687 [inline]
__ocfs2_move_extents_range+0x208c/0x2aac fs/ocfs2/move_extents.c:860
ocfs2_move_extents+0x314/0x7e0 fs/ocfs2/move_extents.c:927
ocfs2_ioctl_move_extents+0x3fc/0x5c8 fs/ocfs2/move_extents.c:1053
ocfs2_ioctl+0x204/0xaf4 fs/ocfs2/ioctl.c:930
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:870 [inline]
__se_sys_ioctl fs/ioctl.c:856 [inline]
__arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 17ffff5e 979bbcec d4210000 979bbcea (d4210000)
---[ end trace 0000000000000000 ]---
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: 0bc96de781b4 Linux 6.1.148
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17889234580000
kernel config: https://syzkaller.appspot.com/x/.config?x=483f799cd9933afc
dashboard link: https://syzkaller.appspot.com/bug?extid=a7a95f489958e3f4148d
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/cd15350f801a/disk-0bc96de7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/789a5d74139d/vmlinux-0bc96de7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a1ef0a7e815a/Image-0bc96de7.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a7a95f...@syzkaller.appspotmail.com
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:1349!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 6289 Comm: syz.4.403 Not tainted 6.1.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ocfs2_block_group_set_bits+0x510/0x6c4 fs/ocfs2/suballoc.c:1349
lr : ocfs2_block_group_set_bits+0x510/0x6c4 fs/ocfs2/suballoc.c:1349
sp : ffff8000210371e0
x29: ffff800021037260 x28: ffff700004206e7c x27: ffff0000e26c9cb0
x26: 000000000000000a x25: ffff0000f987d00c x24: ffff0000f5fc3338
x23: dfff800000000000 x22: 0000000000000022 x21: 0000000000000003
x20: 1ffff00004206e40 x19: ffff0000f987d000 x18: ffff800011aabce0
x17: ffff8000181e7000 x16: ffff8000082ca1cc x15: 0000000000000002
x14: 00000000fffffffc x13: 0000000000ff0100 x12: 0000000000080000
x11: 000000000007ffff x10: ffff800028d9d000 x9 : ffff800009db27a0
x8 : 0000000000080000 x7 : ffff800008e970e0 x6 : 0000000000000000
x5 : 0000000000000022 x4 : 0000000000000003 x3 : ffff0000e26c9cb0
x2 : ffff0000f987d000 x1 : 000000000000000a x0 : 0000000000000022
Call trace:
ocfs2_block_group_set_bits+0x510/0x6c4 fs/ocfs2/suballoc.c:1349
ocfs2_move_extent fs/ocfs2/move_extents.c:687 [inline]
__ocfs2_move_extents_range+0x208c/0x2aac fs/ocfs2/move_extents.c:860
ocfs2_move_extents+0x314/0x7e0 fs/ocfs2/move_extents.c:927
ocfs2_ioctl_move_extents+0x3fc/0x5c8 fs/ocfs2/move_extents.c:1053
ocfs2_ioctl+0x204/0xaf4 fs/ocfs2/ioctl.c:930
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:870 [inline]
__se_sys_ioctl fs/ioctl.c:856 [inline]
__arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 17ffff5e 979bbcec d4210000 979bbcea (d4210000)
---[ end trace 0000000000000000 ]---
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Aug 19, 2025, 5:31:29 AM8/19/25
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: c79648372d02 Linux 5.15.189
syzbot found the following issue on:
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=144426f0580000
kernel config: https://syzkaller.appspot.com/x/.config?x=9e47345638b85bd0
dashboard link: https://syzkaller.appspot.com/bug?extid=99b56049729f07ad8e0c
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/7ab49562317a/disk-c7964837.raw.xz
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
vmlinux: https://storage.googleapis.com/syzbot-assets/e847ec1e38d3/vmlinux-c7964837.xz
kernel image: https://storage.googleapis.com/syzbot-assets/263158c6371c/Image-c7964837.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:1349!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ocfs2_block_group_set_bits+0x4d0/0x640 fs/ocfs2/suballoc.c:1349
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
lr : ocfs2_block_group_set_bits+0x4d0/0x640 fs/ocfs2/suballoc.c:1349
sp : ffff80001fe471e0
x29: ffff80001fe47260 x28: ffff700003fc8e7c x27: ffff0000de82d2b8
x26: 0000000000000025 x25: ffff0000eaecd00c x24: ffff0000ea69cfb8
x23: dfff800000000000 x22: 0000000000000003 x21: 0000000000000044
x20: 1ffff00003fc8e40 x19: ffff0000eaecd000 x18: 0000000000000000
x17: 0000000000000002 x16: ffff800009cbfac0 x15: 00000000fffffffc
x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000080000
x11: 000000000007ffff x10: ffff800023e49000 x9 : ffff800009cd0eb0
x8 : 0000000000080000 x7 : ffff800008ddb3a4 x6 : 0000000000000000
x5 : 0000000000000044 x4 : 0000000000000003 x3 : ffff0000de82d2b8
x2 : ffff0000eaecd000 x1 : 0000000000000025 x0 : 0000000000000044
Call trace:
ocfs2_block_group_set_bits+0x4d0/0x640 fs/ocfs2/suballoc.c:1349
ocfs2_move_extent fs/ocfs2/move_extents.c:687 [inline]
__ocfs2_move_extents_range+0x208c/0x2aac fs/ocfs2/move_extents.c:860
ocfs2_move_extents+0x314/0x7e0 fs/ocfs2/move_extents.c:927
ocfs2_ioctl_move_extents+0x3fc/0x5c8 fs/ocfs2/move_extents.c:1053
ocfs2_ioctl+0x204/0xc60 fs/ocfs2/ioctl.c:931
__ocfs2_move_extents_range+0x208c/0x2aac fs/ocfs2/move_extents.c:860
ocfs2_move_extents+0x314/0x7e0 fs/ocfs2/move_extents.c:927
ocfs2_ioctl_move_extents+0x3fc/0x5c8 fs/ocfs2/move_extents.c:1053
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:874 [inline]
__se_sys_ioctl fs/ioctl.c:860 [inline]
__arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:860
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: 17ffff67 979ea157 d4210000 979ea155 (d4210000)
---[ end trace 59309626a57a7509 ]---
syzbot
Nov 27, 2025, 4:31:21 AM11/27/25
to syzkaller...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
syzbot
Dec 2, 2025, 8:59:23 PM12/2/25
to syzkaller...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages