syzbot


BUG: unable to handle kernel paging request in build_segment_manager

Status: closed as invalid on 2020/03/24 18:50
Fix commit: f2fs/fscrypt: updates on 4.18-rc1
First crash: 2233d, last: 2233d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: unable to handle kernel paging request in build_segment_manager f2fs C 1 2234d 2233d 8/26 fixed on 2018/07/09 18:05

Sample crash report:
F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
F2FS-fs (loop0): invalid crc value
BUG: unable to handle kernel paging request at ffffed005f12edd0
IP: [<ffffffff81c8e524>] build_sit_entries fs/f2fs/segment.c:3654 [inline]
IP: [<ffffffff81c8e524>] build_segment_manager+0x6b44/0x9d30 fs/f2fs/segment.c:3853
PGD 21fffb067 [   31.665745] PUD 21fff9067 
Oops: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 3801 Comm: syzkaller256711 Not tainted 4.9.95-g13cc540 #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801b8b03000 task.stack: ffff8801b5700000
RIP: 0010:[<ffffffff81c8e524>]  [<ffffffff81c8e524>] build_sit_entries fs/f2fs/segment.c:3654 [inline]
RIP: 0010:[<ffffffff81c8e524>]  [<ffffffff81c8e524>] build_segment_manager+0x6b44/0x9d30 fs/f2fs/segment.c:3853
RSP: 0018:ffff8801b5707910  EFLAGS: 00010a02
RAX: 1ffff1005f12edd0 RBX: ffff8802f8976e80 RCX: 0000000000000000
RDX: ffff8801cb0f2b01 RSI: 0000000000000001 RDI: ffff8801cb0f2b80
RBP: ffff8801b5707a90 R08: ffffffff853f05d0 R09: 0000000000000001
R10: ffff8801b8b03000 R11: ffff8801b5707627 R12: ffff8801cb0f2b3e
R13: dffffc0000000000 R14: 0000000000000138 R15: ffff8801d7131100
FS:  0000000001b36880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed005f12edd0 CR3: 00000001b6bd8000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801b64f92bc ffff8801b64f9340 ffff8801b64f9340 ffff8801cb0f2a00
 ffff8801b89779d8 ffff880100000007 ffff8801d7131bc0 1ffff1003ae26376
 ffffed0036c9f268 ffffed0000000000 0000000000000000 ffffea0000000000
Call Trace:
 [<ffffffff81bfe8e0>] f2fs_fill_super+0x1d10/0x5d00 fs/f2fs/super.c:2807
 [<ffffffff81579d17>] mount_bdev+0x2c7/0x390 fs/super.c:1100
 [<ffffffff81beaa94>] f2fs_mount+0x34/0x40 fs/f2fs/super.c:3024
 [<ffffffff8157ba9c>] mount_fs+0x28c/0x370 fs/super.c:1206
 [<ffffffff815db041>] vfs_kern_mount.part.29+0xd1/0x3d0 fs/namespace.c:991
 [<ffffffff815e2969>] vfs_kern_mount fs/namespace.c:973 [inline]
 [<ffffffff815e2969>] do_new_mount fs/namespace.c:2512 [inline]
 [<ffffffff815e2969>] do_mount+0x3c9/0x2740 fs/namespace.c:2834
 [<ffffffff815e56be>] SYSC_mount fs/namespace.c:3050 [inline]
 [<ffffffff815e56be>] SyS_mount+0xfe/0x110 fs/namespace.c:3027
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839f2313>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 48 89 d0 83 e0 07 38 c1 0f 9e c2 84 c9 0f 95 c0 84 c2 0f 85 fe 2a 00 00 49 8b 44 24 42 48 89 85 d0 fe ff ff 48 89 d8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 74 08 3c 03 0f 8e cd 2a 00 00 0f b7 03 66 
RIP  [<ffffffff81c8e524>] build_sit_entries fs/f2fs/segment.c:3654 [inline]
RIP  [<ffffffff81c8e524>] build_segment_manager+0x6b44/0x9d30 fs/f2fs/segment.c:3853
 RSP <ffff8801b5707910>
CR2: ffffed005f12edd0
---[ end trace d2bcd53476675f19 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/20 19:29 https://android.googlesource.com/kernel/common android-4.9 13cc54013b24 cc402841 .config console log report syz C ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.