syzbot


kernel BUG in ntfs_attr_vcn_to_lcn_nolock

Status: upstream: reported C repro on 2022/12/24 17:52
Subsystems: ntfs
[Documentation on labels]
Reported-by: syzbot+8aa668aa8643d7c000dd@syzkaller.appspotmail.com
First crash: 728d, last: 659d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 kernel BUG in ntfs_attr_vcn_to_lcn_nolock ntfs C error 4 702d 736d 0/1 upstream: reported C repro on 2022/12/16 07:22
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/03/03 19:49 21m bisect fix linux-4.14.y OK (0) job log log
2023/02/01 15:31 28m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
ntfs: volume version 3.1.
------------[ cut here ]------------
kernel BUG at fs/ntfs/attrib.c:353!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 7997 Comm: syz-executor348 Not tainted 4.14.302-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
task: ffff888095a762c0 task.stack: ffff888091a20000
RIP: 0010:ntfs_attr_vcn_to_lcn_nolock+0x171/0x3a0 fs/ntfs/attrib.c:353
RSP: 0018:ffff888091a27d10 EFLAGS: 00010297
RAX: ffff888095a762c0 RBX: 0000000000000001 RCX: 000000000000000b
RDX: 0000000000000000 RSI: fffffffff9b52000 RDI: ffff88808df81788
RBP: ffff88808df81740 R08: ffffffff8b9ca628 R09: 00000000000587c0
R10: ffff888095a76b48 R11: ffff888095a762c0 R12: fffffffff9b52000
R13: 0000000000000000 R14: 000000000000000b R15: ffff88808df81a08
FS:  0000555555a38300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f636e240520 CR3: 00000000b339a000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ntfs_bmap+0x27a/0x530 fs/ntfs/aops.c:1604
 ioctl_fibmap fs/ioctl.c:66 [inline]
 file_ioctl fs/ioctl.c:492 [inline]
 do_vfs_ioctl+0xc60/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x5e/0xd3
RIP: 0033:0x7f636e268339
RSP: 002b:00007fffa698fa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f636e268339
RDX: 0000000020000040 RSI: 0000000000000001 RDI: 0000000000000004
RBP: 00007f636e227bd0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f636e227c60
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: ea 03 80 3c 02 00 0f 85 03 02 00 00 4c 8b bd 80 00 00 00 e9 3d ff ff ff e8 3d 90 44 ff 0f 0b e8 36 90 44 ff 0f 0b e8 2f 90 44 ff <0f> 0b e8 28 90 44 ff 49 83 ff fe 0f 85 85 01 00 00 e8 19 90 44 
RIP: ntfs_attr_vcn_to_lcn_nolock+0x171/0x3a0 fs/ntfs/attrib.c:353 RSP: ffff888091a27d10
---[ end trace b52f5ef44230e688 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/12/24 17:52 linux-4.14.y c4215ee4771b 9da18ae8 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-4-14 kernel BUG in ntfs_attr_vcn_to_lcn_nolock
* Struck through repros no longer work on HEAD.