syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel BUG at fs/reiserfs/prints.c:LINE!

Status: fixed on 2021/02/21 17:18
Reported-by: syzbot+2074595117326f7b9e5a@syzkaller.appspotmail.com
Fix commit: b8590c82b3cc reiserfs: add check for an invalid ih_entry_count
First crash: 1309d, last: 1218d
Fix bisection: fixed by (bisect log) :
commit b8590c82b3ccf9fb4d9f0b0b097be10736869333
Author: Rustam Kovhaev <rkovhaev@gmail.com>
Date: Sun Nov 1 14:09:58 2020 +0000

  reiserfs: add check for an invalid ih_entry_count

  
▶ ▼ Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at fs/reiserfs/journal.c:LINE! reiserfs C done done 1718 111d 2229d 0/26 upstream: reported C repro on 2018/03/31 15:55
linux-4.14 kernel BUG at fs/reiserfs/prints.c:LINE! C done 3 1241d 1321d 1/1 fixed on 2021/01/12 18:45
linux-4.19 kernel BUG at fs/reiserfs/journal.c:LINE! reiserfs C error 139 437d 1324d 0/1 upstream: reported C repro on 2020/09/21 00:32
upstream kernel BUG at fs/reiserfs/prints.c:LINE! reiserfs C done done 5 1245d 1324d 19/26 fixed on 2021/03/10 01:48
▶ ▼ Fix bisection attempts (5)
Created Duration User Patch Repo Result
2021/02/20 10:19 3h18m bisect fix linux-4.19.y job log (1)
2021/02/17 20:04 19m bisect fix linux-4.19.y error job log (0)
2021/02/03 21:56 0m bisect fix linux-4.19.y error job log (0)
2021/01/04 21:19 23m bisect fix linux-4.19.y job log (0) log
2020/11/04 19:49 24m bisect fix linux-4.19.y job log (0) log

Sample crash report:
REISERFS (device loop0): using 3.5.x disk format
REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
REISERFS panic (device loop0): journal-2332 do_journal_end: Trying to log block 8211, which is a log block
------------[ cut here ]------------
kernel BUG at fs/reiserfs/prints.c:390!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 8100 Comm: syz-executor041 Not tainted 4.19.157-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__reiserfs_panic.cold+0x37/0x8a fs/reiserfs/prints.c:390
Code: 79 88 74 6d e8 cf b7 8d ff 4c 89 e9 4c 89 f2 4c 89 e6 49 c7 c0 e0 92 2e 8d 48 c7 c7 60 43 79 88 e8 62 b1 78 ff e8 ae b7 8d ff <0f> 0b e8 a7 b7 8d ff 4d 85 e4 49 c7 c6 a0 41 79 88 75 0a 49 c7 c6
RSP: 0018:ffff8880af3e7a60 EFLAGS: 00010293
RAX: ffff8880af372700 RBX: ffff8880b00369c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff81d717b2 RDI: ffffed1015e7cf3e
RBP: ffff8880af3e7b30 R08: 000000000000006a R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: ffffffff8879ab20
R13: ffffffff8879b380 R14: ffffffff887941a0 R15: 0000000000002016
FS:  0000000000a3f880(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005598da129520 CR3: 00000000a975c000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 do_journal_end+0x3f32/0x4840 fs/reiserfs/journal.c:4149
 reiserfs_sync_fs+0xf8/0x120 fs/reiserfs/super.c:78
 __sync_filesystem fs/sync.c:39 [inline]
 sync_filesystem+0x105/0x250 fs/sync.c:64
 generic_shutdown_super+0x70/0x370 fs/super.c:442
 kill_block_super+0x97/0xf0 fs/super.c:1185
 deactivate_locked_super+0x94/0x160 fs/super.c:329
 deactivate_super+0x174/0x1a0 fs/super.c:360
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
 task_work_run+0x148/0x1c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:193 [inline]
 exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
 do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x448177
Code: 00 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 8d a2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d a2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffe2aa37698 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007ffe2aa38810 RCX: 0000000000448177
RDX: 0000000000400bb0 RSI: 0000000000000002 RDI: 00007ffe2aa37740
RBP: 0000000000010c57 R08: 0000000000000000 R09: 0000000000000009
R10: 0000000000000005 R11: 0000000000000206 R12: 00007ffe2aa387b0
R13: 0000000000a40880 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace 95baa58482e7d3a3 ]---
RIP: 0010:__reiserfs_panic.cold+0x37/0x8a fs/reiserfs/prints.c:390
Code: 79 88 74 6d e8 cf b7 8d ff 4c 89 e9 4c 89 f2 4c 89 e6 49 c7 c0 e0 92 2e 8d 48 c7 c7 60 43 79 88 e8 62 b1 78 ff e8 ae b7 8d ff <0f> 0b e8 a7 b7 8d ff 4d 85 e4 49 c7 c6 a0 41 79 88 75 0a 49 c7 c6
RSP: 0018:ffff8880af3e7a60 EFLAGS: 00010293
RAX: ffff8880af372700 RBX: ffff8880b00369c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff81d717b2 RDI: ffffed1015e7cf3e
RBP: ffff8880af3e7b30 R08: 000000000000006a R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: ffffffff8879ab20
R13: ffffffff8879b380 R14: ffffffff887941a0 R15: 0000000000002016
FS:  0000000000a3f880(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005598da129520 CR3: 00000000a975c000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/12 01:54 linux-4.19.y 31acccdc8774 cca87986 .config console log report syz C ci2-linux-4-19
2020/10/05 19:48 linux-4.19.y b09c34517e1a 1880b4a9 .config console log report syz C ci2-linux-4-19
2020/12/05 20:48 linux-4.19.y daefdc9eb24b 50503117 .config console log report info ci2-linux-4-19
2020/11/09 09:50 linux-4.19.y b94de4d19498 cba33199 .config console log report info ci2-linux-4-19
2020/11/06 21:07 linux-4.19.y b94de4d19498 cba33199 .config console log report info ci2-linux-4-19
* Struck through repros no longer work on HEAD.