syzbot
kernel BUG at fs/buffer.c:LINE! (2)
Status:
upstream: reported C repro on 2020/11/21 07:48
Subsystems:
udf
ext4
[Documentation on labels]
Reported-by: syzbot+6b91ee7179cc5a01018d@syzkaller.appspotmail.com
First crash: 2089d, last: 1276d
▶
▼
Similar bugs (17)
| Kernel |
Title |
Rank
🛈
|
Repro |
Cause bisect |
Fix bisect |
Count |
Last |
Reported |
Patched |
Status |
| upstream |
kernel BUG at fs/buffer.c:LINE!
nilfs
|
-1 |
syz, C |
done |
error |
567 |
855d |
3036d
|
25/29 |
fixed on 2024/04/10 03:59
|
| android-49 |
kernel BUG at fs/buffer.c:LINE!
|
-1 |
|
|
|
5 |
2935d |
2990d
|
0/3 |
auto-closed as invalid on 2019/02/22 13:09
|
| linux-4.14 |
kernel BUG at fs/buffer.c:LINE!
|
-1 |
syz, C |
|
error |
59 |
1268d |
2663d
|
0/1 |
upstream: reported C repro on 2019/04/27 19:47
|
| linux-4.19 |
kernel BUG at fs/buffer.c:LINE!
|
-1 |
syz |
|
done |
23 |
2201d |
2654d
|
1/1 |
fixed on 2020/09/01 18:34
|
| android-54 |
kernel BUG at fs/buffer.c:LINE!
ext4
|
-1 |
syz, C |
|
|
4762 |
444d |
2394d
|
0/2 |
upstream: reported C repro on 2020/01/21 13:12
|
| android-6-1 |
kernel BUG in __block_commit_write
|
-1 |
syz |
error |
error |
1 |
1063d |
1063d
|
0/2 |
auto-obsoleted due to no activity on 2023/12/12 18:06
|
| android-6-1 |
kernel BUG in __block_commit_write (2)
origin:upstream
missing-backport
|
-1 |
syz, C |
error |
error |
1 |
159d |
935d
|
0/2 |
upstream: reported C repro on 2024/01/19 10:04
|
| android-5-10 |
kernel BUG in __block_commit_write
|
-1 |
|
|
|
1 |
1063d |
1063d
|
0/2 |
auto-obsoleted due to no activity on 2023/12/12 11:41
|
| android-5-10 |
kernel BUG in __block_commit_write (2)
|
-1 |
syz |
|
error |
2 |
117d |
938d
|
0/2 |
premoderation: reported syz repro on 2024/01/17 04:07
|
| linux-6.1 |
kernel BUG in submit_bh_wbc
origin:lts-only
|
-1 |
syz, C |
|
done |
19 |
796d |
1225d
|
3/3 |
fixed on 2024/07/20 06:27
|
| linux-6.6 |
kernel BUG in submit_bh_wbc
|
-1 |
|
|
|
1 |
13h28m |
13h27m
|
0/2 |
upstream: reported on 2026/08/11 15:13
|
| upstream |
kernel BUG in submit_bh_wbc (2)
udf
|
-1 |
syz, C |
done |
|
123 |
733d |
838d
|
27/29 |
fixed on 2024/08/14 03:44
|
| linux-6.1 |
kernel BUG in submit_bh_wbc (2)
origin:lts-only
|
-1 |
syz, C |
|
inconclusive |
280 |
2d03h |
746d
|
0/3 |
upstream: reported C repro on 2024/07/26 16:49
|
| upstream |
kernel BUG in submit_bh_wbc (3)
nilfs
fs
|
-1 |
syz, C |
done |
|
18 |
659d |
666d
|
28/29 |
fixed on 2024/11/12 23:31
|
| linux-5.15 |
kernel BUG in submit_bh_wbc
|
-1 |
syz, C |
|
error |
8 |
886d |
1164d
|
0/3 |
auto-obsoleted due to no activity on 2024/06/16 14:58
|
| upstream |
kernel BUG in submit_bh_wbc
nilfs
|
-1 |
syz, C |
done |
|
10 |
839d |
849d
|
25/29 |
fixed on 2024/04/24 18:26
|
| android-6-1 |
kernel BUG in submit_bh_wbc
missing-backport
origin:lts
|
-1 |
syz, C |
done |
done |
2574 |
1d15h |
1154d
|
0/2 |
upstream: reported C repro on 2023/06/15 00:20
|
▶
▼
Fix bisection attempts (9)
Sample crash report:
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
------------[ cut here ]------------
kernel BUG at fs/buffer.c:3049!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 16728 Comm: syz-executor218 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:submit_bh_wbc+0x5e5/0x760 fs/buffer.c:3049
Code: 10 4c 8d 7b 20 48 89 44 24 08 e9 3e fc ff ff e8 41 98 b1 ff f0 80 63 01 f7 e9 4d fb ff ff e8 32 98 b1 ff 0f 0b e8 2b 98 b1 ff <0f> 0b e8 24 98 b1 ff 0f 0b e8 1d 98 b1 ff 0f 0b e8 16 98 b1 ff 0f
RSP: 0018:ffff888094dffa30 EFLAGS: 00010293
RAX: ffff8880afdec400 RBX: ffff88808aca6dc8 RCX: ffffffff81b0e7d1
RDX: 0000000000000000 RSI: ffffffff81b0ed45 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000008
FS: 0000555555e46300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffddc515b48 CR3: 000000009c07b000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
submit_bh fs/buffer.c:3096 [inline]
__bread_slow fs/buffer.c:1176 [inline]
__bread_gfp+0x14e/0x300 fs/buffer.c:1369
sb_bread include/linux/buffer_head.h:309 [inline]
udf_tread+0xe8/0x130 fs/udf/misc.c:44
udf_read_tagged+0x4e/0x530 fs/udf/misc.c:219
udf_find_fileset fs/udf/super.c:762 [inline]
udf_fill_super+0xddf/0x17a0 fs/udf/super.c:2263
mount_bdev+0x2fc/0x3b0 fs/super.c:1158
mount_fs+0xa3/0x310 fs/super.c:1261
vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2492 [inline]
do_mount+0x115c/0x2f50 fs/namespace.c:2822
ksys_mount+0xcf/0x130 fs/namespace.c:3038
__do_sys_mount fs/namespace.c:3052 [inline]
__se_sys_mount fs/namespace.c:3049 [inline]
__x64_sys_mount+0xba/0x150 fs/namespace.c:3049
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe61da9ff0a
Code: 48 c7 c2 c0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 a8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffddc5159d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe61da9ff0a
RDX: 0000000020000c00 RSI: 0000000020000c40 RDI: 00007ffddc5159f0
RBP: 00007ffddc5159f0 R08: 00007ffddc515a30 R09: 0000000000000be8
R10: 0000000000000804 R11: 0000000000000282 R12: 0000000000000006
R13: 0000555555e462c0 R14: 0000000000000804 R15: 00007ffddc515a30
Modules linked in:
---[ end trace 6ba6d6280c9a12b5 ]---
RIP: 0010:submit_bh_wbc+0x5e5/0x760 fs/buffer.c:3049
Code: 10 4c 8d 7b 20 48 89 44 24 08 e9 3e fc ff ff e8 41 98 b1 ff f0 80 63 01 f7 e9 4d fb ff ff e8 32 98 b1 ff 0f 0b e8 2b 98 b1 ff <0f> 0b e8 24 98 b1 ff 0f 0b e8 1d 98 b1 ff 0f 0b e8 16 98 b1 ff 0f
RSP: 0018:ffff888094dffa30 EFLAGS: 00010293
RAX: ffff8880afdec400 RBX: ffff88808aca6dc8 RCX: ffffffff81b0e7d1
RDX: 0000000000000000 RSI: ffffffff81b0ed45 RDI: 0000000000000001
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000008
FS: 0000555555e46300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe615750e00 CR3: 000000009c07b000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
* Struck through repros no longer work on HEAD.