syzbot

 sign-in | mailing list | source | docs
🐞 Open [1595]
≡ Subsystems
🐞 Fixed [6264]
🐞 Invalid [15872]
⬇ Missing Backports [186]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

KASAN: null-ptr-deref Read in gfs2_drop_inode

Status: upstream: reported C repro on 2025/05/26 11:03
Subsystems: gfs2
[Documentation on labels]
Reported-by: syzbot+b12826218502df019f9d@syzkaller.appspotmail.com
First crash: 7d23h, last: 7m
Cause bisection: introduced by (bisect log) :
commit ae9f3bd8259a0a8f67be2420e66bb05fbb95af48
Author: Andreas Gruenbacher <agruenba@redhat.com>
Date: Sat Apr 5 22:31:37 2025 +0000

  gfs2: replace sd_aspace with sd_inode

Crash: KASAN: null-ptr-deref Read in gfs2_drop_inode (log)
Repro: C syz .config
  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [gfs2?] KASAN: null-ptr-deref Read in gfs2_drop_inode 0 (2) 2025/05/27 03:19

Sample crash report:
BUG: KASAN: null-ptr-deref in instrument_atomic_read include/linux/instrumented.h:68 [inline]
BUG: KASAN: null-ptr-deref in _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
BUG: KASAN: null-ptr-deref in gfs2_drop_inode+0x20c/0x3a0 fs/gfs2/super.c:1052
Read of size 8 at addr 00000000000000a8 by task syz-executor218/5842

CPU: 1 UID: 0 PID: 5842 Comm: syz-executor218 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 kasan_report+0x118/0x150 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x2b0/0x2c0 mm/kasan/generic.c:189
 instrument_atomic_read include/linux/instrumented.h:68 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 gfs2_drop_inode+0x20c/0x3a0 fs/gfs2/super.c:1052
 iput_final fs/inode.c:1868 [inline]
 iput+0x45d/0x9d0 fs/inode.c:1924
 gfs2_fill_super+0x1418/0x2010 fs/gfs2/ops_fstype.c:1314
 get_tree_bdev_flags+0x40e/0x4d0 fs/super.c:1686
 gfs2_get_tree+0x51/0x1e0 fs/gfs2/ops_fstype.c:1333
 vfs_get_tree+0x92/0x2b0 fs/super.c:1809
 do_new_mount+0x24a/0xa40 fs/namespace.c:3882
 do_mount fs/namespace.c:4222 [inline]
 __do_sys_mount fs/namespace.c:4433 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4410
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3cae124f1a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcedf8f748 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffcedf8f760 RCX: 00007f3cae124f1a
RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007ffcedf8f760
RBP: 000020000001f6c0 R08: 00007ffcedf8f7a0 R09: 000000000001f673
R10: 0000000000000000 R11: 0000000000000282 R12: 000020000001f680
R13: 00007ffcedf8f7a0 R14: 0000000000000003 R15: 0000000000000000
 </TASK>
==================================================================

Crashes (611):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/30 03:34 upstream e0797d3b91de 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 02:50 upstream e0797d3b91de 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 02:10 upstream e0797d3b91de 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 01:29 upstream e0797d3b91de 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 22:01 linux-next 2a628f951ed5 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 07:30 linux-next 64d12554715c 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 05:06 linux-next 64d12554715c 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 03:02 linux-next 64d12554715c 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 00:23 linux-next 64d12554715c 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 05:56 linux-next fefff2755f2a 874a1386 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/23 20:28 linux-next 176e917e010c f8cc0c83 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 09:52 upstream f66bc387efbe 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 08:47 upstream f66bc387efbe 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 08:47 upstream f66bc387efbe 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 00:11 upstream e0797d3b91de 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 23:02 upstream e0797d3b91de 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 21:59 upstream e0797d3b91de 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 20:56 upstream e0797d3b91de 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 19:20 upstream e0797d3b91de 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 11:20 upstream 90b83efa6701 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 09:31 upstream 90b83efa6701 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 08:31 upstream 90b83efa6701 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 07:13 upstream 90b83efa6701 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 04:23 upstream feacb1774bd5 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 04:20 upstream feacb1774bd5 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 15:49 upstream feacb1774bd5 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 15:01 upstream feacb1774bd5 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 12:48 upstream feacb1774bd5 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 12:48 upstream feacb1774bd5 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 11:20 upstream 015a99fa7665 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 11:20 upstream 015a99fa7665 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 09:18 upstream 015a99fa7665 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 02:26 upstream 015a99fa7665 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 00:10 upstream 015a99fa7665 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/27 23:06 upstream 015a99fa7665 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/27 19:43 upstream 914873bc7df9 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/27 19:19 upstream 914873bc7df9 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/27 17:09 upstream 914873bc7df9 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/27 14:50 upstream 914873bc7df9 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 06:33 linux-next 3a83b350b5be 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 05:26 linux-next 3a83b350b5be 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/30 04:23 linux-next 3a83b350b5be 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 16:42 linux-next 2a628f951ed5 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 13:09 linux-next 2a628f951ed5 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 13:03 linux-next 2a628f951ed5 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 10:19 linux-next 2a628f951ed5 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 07:19 linux-next 64d12554715c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/29 06:13 linux-next 64d12554715c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 19:48 linux-next 64d12554715c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 08:14 linux-next 64d12554715c 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 06:48 linux-next fefff2755f2a 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 05:28 linux-next fefff2755f2a 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 03:35 linux-next fefff2755f2a 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/28 02:32 linux-next fefff2755f2a 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/27 21:53 linux-next fefff2755f2a 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
2025/05/27 15:50 linux-next fefff2755f2a 874a1386 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in gfs2_drop_inode
* Struck through repros no longer work on HEAD.