kernel BUG in ext4_write_inline_data

Status: fixed on 2023/04/05 17:17
Reported-by: syzbot+70cc467cf6a5d8999f4c@syzkaller.appspotmail.com
Fix commit: 21086923c1e6 UPSTREAM: ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
First crash: 1388d, last: 1351d
▶ ▼ Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 kernel BUG in ext4_write_inline_data ext4 -1 syz, C 4 1294d 1390d 0/1 upstream: reported C repro on 2022/11/04 18:44
upstream kernel BUG at fs/ext4/inline.c:LINE! ext4 -1 syz, C done done 76 1318d 2141d 22/29 fixed on 2023/02/24 13:50
upstream kernel BUG in ext4_write_inline_data ext4 -1 syz, C error 36 772d 1258d 27/29 fixed on 2024/08/22 01:52
upstream kernel BUG in ext4_write_inline_data (4) ext4 -1 syz, C error 13 111d 204d 29/29 fixed on 2026/05/21 07:49
linux-6.1 kernel BUG in ext4_write_inline_data origin:upstream -1 syz, C error 13 196d 533d 0/3 upstream: reported C repro on 2025/03/10 13:01
android-6-1 kernel BUG in ext4_write_inline_data origin:lts -1 syz, C error error 33 27d 1150d 0/2 upstream: reported C repro on 2023/07/02 21:30
upstream kernel BUG in ext4_write_inline_data (3) ext4 -1 syz, C error 8 237d 346d 29/29 fixed on 2026/01/07 12:29
linux-4.19 kernel BUG in ext4_write_inline_data_end ext4 -1 syz, C error 12 1271d 2018d 0/1 upstream: reported C repro on 2021/02/14 13:39
upstream kernel BUG in ext4_write_inline_data (5) prio:high ext4 -1 syz error 28 8d02h 77d 0/29 upstream: reported syz repro on 2026/06/09 08:13
upstream kernel BUG in ext4_write_inline_data (2) ext4 -1 syz, C error 46 429d 642d 29/29 fixed on 2025/07/08 00:33
android-5-10 kernel BUG in ext4_write_inline_data ext4 -1 syz, C error inconclusive 3 1290d 1388d 2/2 fixed on 2023/05/04 14:51

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/ext4/inline.c:226!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 484 Comm: syz-executor196 Not tainted 5.4.219-syzkaller-00097-ga76dfbc99260 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:ext4_write_inline_data+0x36d/0x370 fs/ext4/inline.c:226
Code: 07 fe c1 38 c1 0f 8c 35 ff ff ff 48 89 ef 48 89 f3 e8 37 d4 d1 ff 48 89 de e9 22 ff ff ff e8 0a 6e a3 ff 0f 0b e8 03 6e a3 ff <0f> 0b 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81
RSP: 0018:ffff8881ec09f120 EFLAGS: 00010293
RAX: ffffffff81c1dd1d RBX: 0000000000000048 RCX: ffff8881ed114ec0
RDX: 0000000000000000 RSI: 0000000000000048 RDI: 0000000000000051
RBP: 0000000000000009 R08: ffffffff81c1dae1 R09: ffffed103dbd5c4f
R10: ffffed103dbd5c4f R11: 1ffff1103dbd5c4e R12: 0000000000000051
R13: ffff8881ec09f200 R14: ffff8881dac35874 R15: 0000000000000048
FS:  00007f12b431f700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000040 CR3: 00000001edd66000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_write_inline_data_end+0x27f/0x4e0 fs/ext4/inline.c:772
 ext4_da_write_inline_data_end+0x3e/0x200 fs/ext4/inline.c:969
 ext4_da_write_end+0x83c/0xc70 fs/ext4/inode.c:3268
 generic_perform_write+0x400/0x5a0 mm/filemap.c:3322
 __generic_file_write_iter+0x239/0x490 mm/filemap.c:3440
 ext4_file_write_iter+0x495/0x10e0 fs/ext4/file.c:270
 do_iter_readv_writev+0x529/0x740 fs/read_write.c:690
 do_iter_write+0x16f/0x570 fs/read_write.c:970
 iter_file_splice_write+0x887/0x10f0 fs/splice.c:746
 splice_direct_to_actor+0x4c4/0xb20 fs/splice.c:976
 do_splice_direct+0x2a0/0x3f0 fs/splice.c:1064
 do_sendfile+0x8f2/0xf10 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1525 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0x1ce/0x230 fs/read_write.c:1511
 do_syscall_64+0xcb/0x1c0 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
Modules linked in:
---[ end trace b693d7f009e37d64 ]---
RIP: 0010:ext4_write_inline_data+0x36d/0x370 fs/ext4/inline.c:226
Code: 07 fe c1 38 c1 0f 8c 35 ff ff ff 48 89 ef 48 89 f3 e8 37 d4 d1 ff 48 89 de e9 22 ff ff ff e8 0a 6e a3 ff 0f 0b e8 03 6e a3 ff <0f> 0b 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81
RSP: 0018:ffff8881ec09f120 EFLAGS: 00010293
RAX: ffffffff81c1dd1d RBX: 0000000000000048 RCX: ffff8881ed114ec0
RDX: 0000000000000000 RSI: 0000000000000048 RDI: 0000000000000051
RBP: 0000000000000009 R08: ffffffff81c1dae1 R09: ffffed103dbd5c4f
R10: ffffed103dbd5c4f R11: 1ffff1103dbd5c4e R12: 0000000000000051
R13: ffff8881ec09f200 R14: ffff8881dac35874 R15: 0000000000000048
FS:  00007f12b431f700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000040 CR3: 00000001edd66000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/12/14 01:08 android12-5.4 a76dfbc99260 f6511626 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data
2022/12/03 06:43 android12-5.4 1c84384fbdc7 e080de16 .config console log report syz C [mounted in repro] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data
2022/11/06 08:33 android12-5.4 d87b38e6be0f 6d752409 .config strace log report syz C [mounted in repro] ci2-android-5-4-kasan kernel BUG in ext4_write_inline_data
* Struck through repros no longer work on HEAD.