syzbot

 sign-in | mailing list | source | docs
🐞 Open [731]
🐞 Fixed [113]
🐞 Invalid [685]
⬇ Missing Backports [75]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

kernel BUG in reiserfs_cut_from_item

Status: upstream: reported C repro on 2023/05/17 06:05
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+17a2a95e28075c63e42f@syzkaller.appspotmail.com
First crash: 681d, last: 25d
Fix commit to backport (bisect log) :
tree: upstream
commit fb6f20ecb121cef4d7946f834a6ee867c4e21b4a
Author: Jan Kara <jack@suse.cz>
Date: Thu Oct 17 10:28:23 2024 +0000

  reiserfs: The last commit

  
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2024/12/14 linux-6.1.y (ToT) e4d90d63d385 C [report] kernel BUG in reiserfs_cut_from_item
2023/08/31 upstream (ToT) ef2a0b7cdbc5 C [report] UBSAN: array-index-out-of-bounds in do_journal_end
2024/12/14 upstream (ToT) 4800575d8c0b C Didn't crash
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in reiserfs_cut_from_item origin:upstream missing-backport C error 65 4d13h 658d 0/3 upstream: reported C repro on 2023/06/09 13:59
upstream kernel BUG in reiserfs_cut_from_item reiserfs C error done 57 445d 812d 0/28 auto-obsoleted due to no activity on 2024/04/16 05:18
▶ ▼ Fix bisection attempts (8)
Created Duration User Patch Repo Result
2025/01/12 21:10 9h36m fix candidate upstream OK (1) job log
2024/10/14 23:08 0m bisect fix linux-6.1.y error job log
2024/08/29 06:06 2h13m bisect fix linux-6.1.y OK (0) job log log
2024/07/20 20:29 2h37m bisect fix linux-6.1.y OK (0) job log log
2024/06/07 05:15 2h30m bisect fix linux-6.1.y OK (0) job log log
2024/03/23 04:42 3h48m bisect fix linux-6.1.y OK (0) job log log
2024/02/21 22:03 2h10m bisect fix linux-6.1.y OK (0) job log log
2023/12/23 08:53 3h13m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
| 0| *3.6* [2 5 0x0 SD], item_len 44, item_location 4052, free_space(entry_count) 65535 |
	mode | size | nlinks | first direct | mtime
	0100700 |     11 |  1 | 0 | 1741038699
===================================================================
REISERFS panic (device loop0): PAP-5580 reiserfs_cut_from_item: item to convert does not exist ([2 5 0x1 IND])
------------[ cut here ]------------
kernel BUG at fs/reiserfs/prints.c:390!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 4246 Comm: syz-executor295 Not tainted 6.1.129-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:__reiserfs_panic+0x13a/0x140 fs/reiserfs/prints.c:390
Code: c7 c1 80 a0 1e 8b 48 0f 44 c8 48 0f 44 d8 48 c7 c7 40 a1 1e 8b 4c 89 fe 48 89 da 4d 89 f0 49 c7 c1 80 73 54 97 e8 46 81 83 08 <0f> 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4
RSP: 0018:ffffc90003cc7100 EFLAGS: 00010246
RAX: 000000000000006e RBX: ffffffff8b1ec060 RCX: c6dea3d75a8b3000
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc90003cc71f0 R08: ffffffff816e6edc R09: fffff52000798dc1
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8b1ec080
R13: ffffc90003cc7120 R14: ffffffff8cbf2b67 R15: ffff88814ac6c6a8
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d150812068 CR3: 000000000d08e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_cut_from_item+0x215d/0x2580 fs/reiserfs/stree.c:1729
 reiserfs_do_truncate+0xa12/0x15b0 fs/reiserfs/stree.c:1973
 reiserfs_truncate_file+0x4d6/0x810 fs/reiserfs/inode.c:2310
 reiserfs_file_release+0x8c6/0xaa0 fs/reiserfs/file.c:109
 __fput+0x3f6/0x8d0 fs/file_table.c:320
 task_work_run+0x246/0x300 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0xa6e/0x26a0 kernel/exit.c:871
 do_group_exit+0x202/0x2b0 kernel/exit.c:1021
 __do_sys_exit_group kernel/exit.c:1032 [inline]
 __se_sys_exit_group kernel/exit.c:1030 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1030
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f478328aef9
Code: Unable to access opcode bytes at 0x7f478328aecf.
RSP: 002b:00007ffc1cd70188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f478328aef9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f47833062b0 R08: ffffffffffffffb8 R09: 00007ffc1cd703a8
R10: 00007ffc1cd703a8 R11: 0000000000000246 R12: 00007f47833062b0
R13: 0000000000000000 R14: 00007f4783307020 R15: 00007f4783259a50
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__reiserfs_panic+0x13a/0x140 fs/reiserfs/prints.c:390
Code: c7 c1 80 a0 1e 8b 48 0f 44 c8 48 0f 44 d8 48 c7 c7 40 a1 1e 8b 4c 89 fe 48 89 da 4d 89 f0 49 c7 c1 80 73 54 97 e8 46 81 83 08 <0f> 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4
RSP: 0018:ffffc90003cc7100 EFLAGS: 00010246
RAX: 000000000000006e RBX: ffffffff8b1ec060 RCX: c6dea3d75a8b3000
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc90003cc71f0 R08: ffffffff816e6edc R09: fffff52000798dc1
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8b1ec080
R13: ffffc90003cc7120 R14: ffffffff8cbf2b67 R15: ffff88814ac6c6a8
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d150812068 CR3: 000000000d08e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (37):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/03/03 21:51 linux-6.1.y 3a8358583626 c3901742 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/06/23 21:39 linux-6.1.y e84a4e368abe 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/10/12 04:20 linux-6.1.y 082280fe94a0 83165b57 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/06/16 15:50 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2025/03/03 21:13 linux-6.1.y 3a8358583626 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2024/05/07 12:47 linux-6.1.y 909ba1f1b414 cb2dcc0e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2024/04/16 03:17 linux-6.1.y cd5d98c0556c 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2024/03/29 08:41 linux-6.1.y e5cd595e23c1 c52bcb23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2024/01/09 00:37 linux-6.1.y 38fb82ecd144 4c0fd4bb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/11/11 01:33 linux-6.1.y fb2635ac69ab d80eec66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/10/27 15:34 linux-6.1.y 32c9cdbe383c 3c418d72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/10/11 06:01 linux-6.1.y 082280fe94a0 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/09/28 09:02 linux-6.1.y d23900f974e0 c2ab1e5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/09/23 20:20 linux-6.1.y d23900f974e0 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2024/04/17 15:42 linux-6.1.y 6741e066ec76 acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/04/16 04:51 linux-6.1.y cd5d98c0556c 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/01/12 01:48 linux-6.1.y 7c58bfa711cb dda5a988 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/01/05 00:01 linux-6.1.y a507f147e6f0 28c42cff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/11/23 04:29 linux-6.1.y 69e434a1cb21 fc59b78e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/11/02 23:43 linux-6.1.y 4a61839152cc c4ac074c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/10/27 18:50 linux-6.1.y 32c9cdbe383c 3c418d72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/08/20 14:06 linux-6.1.y 6c44e13dc284 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/08/18 16:29 linux-6.1.y 6c44e13dc284 acb1ba71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/07/15 08:02 linux-6.1.y 61fd484b2cf6 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/07/14 23:50 linux-6.1.y 61fd484b2cf6 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/07/04 05:05 linux-6.1.y 0f4ac6b4c5f0 6e553898 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/06/23 17:17 linux-6.1.y e84a4e368abe 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/06/16 10:43 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/05/31 18:13 linux-6.1.y d2869ace6eeb 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/05/31 08:19 linux-6.1.y d2869ace6eeb 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/05/17 06:05 linux-6.1.y bf4ad6fa4e53 11c89444 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in reiserfs_cut_from_item
2023/08/19 00:21 linux-6.1.y 6c44e13dc284 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/19 18:36 linux-6.1.y a456e1743881 022df2bb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/11 05:05 linux-6.1.y 61fd484b2cf6 52ae002a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/05 23:28 linux-6.1.y 61fd484b2cf6 ba5dba36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/30 16:46 linux-6.1.y a1c449d00ff8 af3053d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/16 12:04 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in reiserfs_cut_from_item
* Struck through repros no longer work on HEAD.