syzbot


kernel BUG in hfsplus_bnode_put

Status: upstream: reported on 2023/01/18 07:25
Labels: hfs (incorrect?)
Reported-by: syzbot+005d2a9ecd9fbf525f6a@syzkaller.appspotmail.com
First crash: 136d, last: 48d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [hfsplus?] kernel BUG in hfsplus_bnode_put 0 (1) 2023/01/18 07:25

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/hfsplus/bnode.c:618!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 41 Comm: kworker/u4:2 Not tainted 6.3.0-rc6-syzkaller-00016-g0d3eb744aed4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
Workqueue: writeback wb_workfn (flush-7:1)
RIP: 0010:hfsplus_bnode_put+0x6b7/0x6d0 fs/hfsplus/bnode.c:618
Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 48 89 df e8 7a cd 81 ff e9 5f fd ff ff e8 e0 0c 2c ff 0f 0b e8 d9 0c 2c ff <0f> 0b e8 d2 0c 2c ff 0f 0b e8 cb 0c 2c ff 0f 0b 66 0f 1f 84 00 00
RSP: 0000:ffffc90000b273a8 EFLAGS: 00010293
RAX: ffffffff825e5c07 RBX: ffff88802bc3ff80 RCX: ffff8880173257c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff825e55d0 R09: ffffed1005787ff1
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802bc3ff00
R13: dffffc0000000000 R14: ffff8880381ac000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020049ee0 CR3: 0000000031f5d000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_btree_write+0x264/0x4c0 fs/hfsplus/btree.c:309
 hfsplus_system_write_inode fs/hfsplus/super.c:136 [inline]
 hfsplus_write_inode+0x4c0/0x5e0 fs/hfsplus/super.c:162
 write_inode fs/fs-writeback.c:1453 [inline]
 __writeback_single_inode+0x69b/0xfb0 fs/fs-writeback.c:1665
 writeback_sb_inodes+0x8ef/0x11d0 fs/fs-writeback.c:1891
 __writeback_inodes_wb+0x11b/0x260 fs/fs-writeback.c:1962
 wb_writeback+0x46c/0xc70 fs/fs-writeback.c:2067
 wb_check_start_all fs/fs-writeback.c:2189 [inline]
 wb_do_writeback fs/fs-writeback.c:2215 [inline]
 wb_workfn+0x98f/0xff0 fs/fs-writeback.c:2248
 process_one_work+0x8a0/0x10e0 kernel/workqueue.c:2390
 worker_thread+0xa63/0x1210 kernel/workqueue.c:2537
 kthread+0x270/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:hfsplus_bnode_put+0x6b7/0x6d0 fs/hfsplus/bnode.c:618
Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 48 89 df e8 7a cd 81 ff e9 5f fd ff ff e8 e0 0c 2c ff 0f 0b e8 d9 0c 2c ff <0f> 0b e8 d2 0c 2c ff 0f 0b e8 cb 0c 2c ff 0f 0b 66 0f 1f 84 00 00
RSP: 0000:ffffc90000b273a8 EFLAGS: 00010293
RAX: ffffffff825e5c07 RBX: ffff88802bc3ff80 RCX: ffff8880173257c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff825e55d0 R09: ffffed1005787ff1
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802bc3ff00
R13: dffffc0000000000 R14: ffff8880381ac000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6e625a80d0 CR3: 00000000763f8000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2023/04/11 15:24 upstream 0d3eb744aed4 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in hfsplus_bnode_put
2023/01/13 15:44 upstream d9fc1511728c 529798b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in hfsplus_bnode_put
* Struck through repros no longer work on HEAD.