syzbot


BUG: unable to handle kernel NULL pointer dereference in f2fs_flush_nat_entries (2)

Status: upstream: reported on 2024/03/27 11:10
Reported-by: syzbot+2b478d899e8c90dd628e@syzkaller.appspotmail.com
First crash: 41d, last: 41d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 BUG: unable to handle kernel NULL pointer dereference in f2fs_flush_nat_entries 2 271d 363d 0/3 auto-obsoleted due to no activity on 2023/11/17 11:52

Sample crash report:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
Mem abort info:
  ESR = 0x0000000086000005
  EC = 0x21: IABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
user pgtable: 4k pages, 48-bit VAs, pgdp=0000000122b15000
[0000000000000000] pgd=0800000129ada003, p4d=0800000129ada003, pud=0000000000000000
Internal error: Oops: 0000000086000005 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 3975 Comm: syz-executor.1 Not tainted 5.15.153-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : 0x0
lr : set_page_dirty+0x23c/0x544 mm/page-writeback.c:2609
sp : ffff80001ab77390
x29: ffff80001ab77390 x28: 1fffff800079ce89 x27: fffffc0003ce7448
x26: 0000000000000000 x25: 1fffff8000757181 x24: dfff800000000000
x23: 0000000000000000 x22: 05ffc00000000007 x21: ffff0000e97845f8
x20: ffff800011b75d58 x19: fffffc0003ab8c00 x18: ffff80001ab76ac8
x17: 0000000000000000 x16: ffff80001197d444 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000000 x9 : ffff0000c9a9b680
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff0000eae31000 x4 : ffff0000f39d2000 x3 : ffff0000eae30f80
x2 : fffffffffffffff0 x1 : 0000000000000000 x0 : fffffc0003ab8c00
Call trace:
 0x0
 get_next_nat_page fs/f2fs/node.c:158 [inline]
 __flush_nat_entry_set fs/f2fs/node.c:3011 [inline]
 f2fs_flush_nat_entries+0xa84/0x1e7c fs/f2fs/node.c:3115
 f2fs_write_checkpoint+0x1050/0x1e3c fs/f2fs/checkpoint.c:1688
 kill_f2fs_super+0x1d4/0x338 fs/f2fs/super.c:4533
 deactivate_locked_super+0xb8/0x13c fs/super.c:335
 deactivate_super+0x108/0x128 fs/super.c:366
 cleanup_mnt+0x3c0/0x474 fs/namespace.c:1143
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1150
 task_work_run+0x130/0x1e4 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 do_notify_resume+0x262c/0x32b8 arch/arm64/kernel/signal.c:946
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline]
 el0_svc+0xfc/0x1f0 arch/arm64/kernel/entry-common.c:609
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: bad PC value
---[ end trace 9177acaf26ec6e5a ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/27 11:09 linux-5.15.y 9465fef4ae35 454571b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: unable to handle kernel NULL pointer dereference in f2fs_flush_nat_entries
* Struck through repros no longer work on HEAD.