syzbot

 sign-in | mailing list | source | docs
🐞 Open [559] 🐞 Fixed [64] 🐞 Invalid [207] ⬇ Missing Backports [38] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel BUG in reiserfs_cut_from_item

Status: upstream: reported C repro on 2023/05/17 06:05
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+17a2a95e28075c63e42f@syzkaller.appspotmail.com
First crash: 345d, last: 9d07h
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/08/31 upstream (ToT) ef2a0b7cdbc5 C [report] UBSAN: array-index-out-of-bounds in do_journal_end
2024/04/12 upstream (ToT) 8f2c057754b2 C Failed due to an error; will retry later
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in reiserfs_cut_from_item origin:upstream C error 28 2d12h 322d 0/3 upstream: reported C repro on 2023/06/09 13:59
upstream kernel BUG in reiserfs_cut_from_item reiserfs C error done 57 109d 476d 0/26 auto-obsoleted due to no activity on 2024/04/16 05:18
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2024/03/23 04:42 3h48m bisect fix linux-6.1.y job log (0) log
2024/02/21 22:03 2h10m bisect fix linux-6.1.y job log (0) log
2023/12/23 08:53 3h13m bisect fix linux-6.1.y job log (0) log

Sample crash report:
REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck?
------------[ cut here ]------------
kernel BUG at fs/reiserfs/stree.c:1568!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 9388 Comm: syz-executor123 Not tainted 6.1.35-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
RIP: 0010:maybe_indirect_to_direct fs/reiserfs/stree.c:1568 [inline]
RIP: 0010:reiserfs_cut_from_item+0x231e/0x2580 fs/reiserfs/stree.c:1694
Code: 44 89 e1 80 e1 07 38 c1 0f 8c 5c f5 ff ff be 04 00 00 00 4c 89 e7 e8 01 50 b4 ff 48 8b 54 24 28 e9 45 f5 ff ff e8 32 06 5e ff <0f> 0b e8 2b 06 5e ff 0f 0b e8 24 06 5e ff 0f 0b e8 6d b5 57 08 e8
RSP: 0018:ffffc9000489f320 EFLAGS: 00010293
RAX: ffffffff822bd05e RBX: 0000000000000000 RCX: ffff88807342d940
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000e00
RBP: ffffc9000489f850 R08: ffffffff822bb364 R09: ffffffff822b35b9
R10: 0000000000000002 R11: ffff88807342d940 R12: 0000000000000e00
R13: 1ffff1100e009958 R14: 0000000000001000 R15: ffff88802210e678
FS:  00007f001ea67700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f001ea67000 CR3: 000000001f5d7000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_do_truncate+0xa12/0x15b0 fs/reiserfs/stree.c:1973
 reiserfs_truncate_file+0x4d6/0x810 fs/reiserfs/inode.c:2310
 reiserfs_setattr+0xc57/0x11c0 fs/reiserfs/inode.c:3395
 notify_change+0xdcd/0x1080 fs/attr.c:482
 do_truncate+0x21c/0x300 fs/open.c:65
 do_sys_ftruncate+0x2e2/0x380 fs/open.c:193
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f0026ae4cd9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f001ea671f8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007f0026b63798 RCX: 00007f0026ae4cd9
RDX: 00007f0026ae4cd9 RSI: 0000000000000e00 RDI: 0000000000000006
RBP: 00007f0026b63790 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0026b6379c
R13: 00007fff1a8b369f R14: 00007f001ea67300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:maybe_indirect_to_direct fs/reiserfs/stree.c:1568 [inline]
RIP: 0010:reiserfs_cut_from_item+0x231e/0x2580 fs/reiserfs/stree.c:1694
Code: 44 89 e1 80 e1 07 38 c1 0f 8c 5c f5 ff ff be 04 00 00 00 4c 89 e7 e8 01 50 b4 ff 48 8b 54 24 28 e9 45 f5 ff ff e8 32 06 5e ff <0f> 0b e8 2b 06 5e ff 0f 0b e8 24 06 5e ff 0f 0b e8 6d b5 57 08 e8
RSP: 0018:ffffc9000489f320 EFLAGS: 00010293
RAX: ffffffff822bd05e RBX: 0000000000000000 RCX: ffff88807342d940
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000e00
RBP: ffffc9000489f850 R08: ffffffff822bb364 R09: ffffffff822b35b9
R10: 0000000000000002 R11: ffff88807342d940 R12: 0000000000000e00
R13: 1ffff1100e009958 R14: 0000000000001000 R15: ffff88802210e678
FS:  00007f001ea67700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff1a8e39b0 CR3: 000000001f5d7000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (34):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/23 21:39 linux-6.1.y e84a4e368abe 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/10/12 04:20 linux-6.1.y 082280fe94a0 83165b57 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/06/16 15:50 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/04/16 03:17 linux-6.1.y cd5d98c0556c 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2024/03/29 08:41 linux-6.1.y e5cd595e23c1 c52bcb23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2024/01/09 00:37 linux-6.1.y 38fb82ecd144 4c0fd4bb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/11/11 01:33 linux-6.1.y fb2635ac69ab d80eec66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/10/27 15:34 linux-6.1.y 32c9cdbe383c 3c418d72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/10/11 06:01 linux-6.1.y 082280fe94a0 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/09/28 09:02 linux-6.1.y d23900f974e0 c2ab1e5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/09/23 20:20 linux-6.1.y d23900f974e0 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2024/04/17 15:42 linux-6.1.y 6741e066ec76 acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/04/16 04:51 linux-6.1.y cd5d98c0556c 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/01/12 01:48 linux-6.1.y 7c58bfa711cb dda5a988 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/01/05 00:01 linux-6.1.y a507f147e6f0 28c42cff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/11/23 04:29 linux-6.1.y 69e434a1cb21 fc59b78e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/11/02 23:43 linux-6.1.y 4a61839152cc c4ac074c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/10/27 18:50 linux-6.1.y 32c9cdbe383c 3c418d72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/08/20 14:06 linux-6.1.y 6c44e13dc284 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/08/18 16:29 linux-6.1.y 6c44e13dc284 acb1ba71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/07/15 08:02 linux-6.1.y 61fd484b2cf6 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/07/14 23:50 linux-6.1.y 61fd484b2cf6 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/07/04 05:05 linux-6.1.y 0f4ac6b4c5f0 6e553898 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/06/23 17:17 linux-6.1.y e84a4e368abe 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/06/16 10:43 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/05/31 18:13 linux-6.1.y d2869ace6eeb 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/05/31 08:19 linux-6.1.y d2869ace6eeb 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/05/17 06:05 linux-6.1.y bf4ad6fa4e53 11c89444 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/08/19 00:21 linux-6.1.y 6c44e13dc284 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/19 18:36 linux-6.1.y a456e1743881 022df2bb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/11 05:05 linux-6.1.y 61fd484b2cf6 52ae002a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/05 23:28 linux-6.1.y 61fd484b2cf6 ba5dba36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/30 16:46 linux-6.1.y a1c449d00ff8 af3053d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/16 12:04 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
* Struck through repros no longer work on HEAD.