syzbot


KASAN: null-ptr-deref Read in drop_buffers (2)

Status: upstream: reported C repro on 2023/08/01 22:44
Subsystems: jfs
[Documentation on labels]
Reported-by: syzbot+d285c6d0b23c6033d520@syzkaller.appspotmail.com
First crash: 273d, last: 58d
Cause bisection: failed (error log, bisect log)
  
Discussions (4)
Title Replies (including bot) Last reply
[syzbot] Monthly jfs report (Mar 2024) 0 (1) 2024/03/06 22:08
[syzbot] Monthly jfs report (Jan 2024) 0 (1) 2024/01/04 12:38
[syzbot] Monthly jfs report (Dec 2023) 0 (1) 2023/12/04 12:38
[syzbot] [bfs?] KASAN: null-ptr-deref Read in drop_buffers (2) 0 (2) 2023/09/12 04:06
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: null-ptr-deref Read in drop_buffers kernfs 5 545d 545d 0/26 auto-obsoleted due to no activity on 2023/02/27 02:04
Last patch testing requests (7)
Created Duration User Patch Repo Result
2024/03/13 22:34 27m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci OK log
2024/01/31 20:05 22m retest repro upstream OK log
2023/10/26 19:04 2h37m osmtendev@gmail.com patch upstream report log
2023/10/26 18:19 28m osmtendev@gmail.com patch upstream report log
2023/10/26 17:09 22m osmtendev@gmail.com patch upstream OK log
2023/10/13 09:22 19m osmtendev@gmail.com patch upstream report log
2023/09/30 04:19 25m retest repro upstream OK log
Fix bisection attempts (3)
Created Duration User Patch Repo Result
2023/12/22 19:26 2h37m bisect fix upstream job log (0) log
2023/11/22 09:17 2h42m bisect fix upstream job log (0) log
2023/10/20 18:56 4h58m bisect fix upstream job log (0) log

Sample crash report:
find_entry called with index = 0
read_mapping_page failed!
ERROR: (device loop0): txCommit: 
ERROR: (device loop0): remounting filesystem as read-only
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read include/linux/instrumented.h:68 [inline]
BUG: KASAN: null-ptr-deref in atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline]
BUG: KASAN: null-ptr-deref in buffer_busy fs/buffer.c:2896 [inline]
BUG: KASAN: null-ptr-deref in drop_buffers+0x6f/0x700 fs/buffer.c:2908
Read of size 4 at addr 0000000000000060 by task syz-executor224/5036

CPU: 1 PID: 5036 Comm: syz-executor224 Not tainted 6.6.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106
 print_report+0xe6/0x540 mm/kasan/report.c:478
 kasan_report+0x175/0x1b0 mm/kasan/report.c:588
 kasan_check_range+0x27e/0x290 mm/kasan/generic.c:187
 instrument_atomic_read include/linux/instrumented.h:68 [inline]
 atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline]
 buffer_busy fs/buffer.c:2896 [inline]
 drop_buffers+0x6f/0x700 fs/buffer.c:2908
 try_to_free_buffers+0x295/0x5f0 fs/buffer.c:2938
 shrink_folio_list+0x271a/0x8870 mm/vmscan.c:2068
 shrink_inactive_list mm/vmscan.c:2614 [inline]
 shrink_list mm/vmscan.c:2855 [inline]
 shrink_lruvec+0x16e6/0x2d30 mm/vmscan.c:6319
 shrink_node_memcgs mm/vmscan.c:6505 [inline]
 shrink_node+0x1176/0x28c0 mm/vmscan.c:6540
 shrink_zones mm/vmscan.c:6779 [inline]
 do_try_to_free_pages+0x717/0x19e0 mm/vmscan.c:6841
 try_to_free_mem_cgroup_pages+0x455/0xa50 mm/vmscan.c:7156
 try_charge_memcg+0x5e1/0x16e0 mm/memcontrol.c:2691
 obj_cgroup_charge_pages mm/memcontrol.c:3105 [inline]
 __memcg_kmem_charge_page+0x21e/0x380 mm/memcontrol.c:3131
 __alloc_pages+0x28b/0x670 mm/page_alloc.c:4443
 __alloc_pages_node include/linux/gfp.h:237 [inline]
 alloc_pages_node include/linux/gfp.h:260 [inline]
 bpf_ringbuf_area_alloc kernel/bpf/ringbuf.c:122 [inline]
 bpf_ringbuf_alloc+0xcb/0x420 kernel/bpf/ringbuf.c:170
 ringbuf_map_alloc+0x1d3/0x2f0 kernel/bpf/ringbuf.c:204
 map_create+0x849/0x1040 kernel/bpf/syscall.c:1207
 __sys_bpf+0x6a2/0x810 kernel/bpf/syscall.c:5317
 __do_sys_bpf kernel/bpf/syscall.c:5439 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5437 [inline]
 __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5437
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7ff75fb611c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc0dbb0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff75fb611c9
RDX: 0000000000000048 RSI: 0000000020000cc0 RDI: 0000000000000000
RBP: 00007ffc0dbb0f4c R08: ffffffffffffffff R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0dbb0fa0
R13: 00007ffc0dbb0f60 R14: 000000000000cf31 R15: 0000000000000001
 </TASK>
==================================================================

Crashes (252):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/09/12 04:05 upstream 0bb80ecc33a8 59da8366 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-smack-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/16 18:59 upstream 052d534373b7 2a7bcc7f .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/02/24 11:01 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc 8d446f15 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/01/17 19:03 upstream 052d534373b7 915053c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/17 17:34 upstream 052d534373b7 915053c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/17 09:18 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: null-ptr-deref Read in drop_buffers
2024/01/17 03:53 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/16 18:50 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/15 19:14 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: null-ptr-deref Read in drop_buffers
2024/01/15 17:33 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/15 15:35 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/15 00:55 upstream 052d534373b7 551587c1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/14 18:50 upstream 052d534373b7 551587c1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/14 11:46 upstream 052d534373b7 551587c1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/13 10:33 upstream 052d534373b7 551587c1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in drop_buffers
2023/09/16 03:36 upstream e42bebf6db29 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: null-ptr-deref Read in drop_buffers
2024/01/17 14:30 upstream 052d534373b7 c9a1c95b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/17 11:11 upstream 052d534373b7 c9a1c95b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/16 22:24 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/16 15:38 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/16 06:14 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/15 13:19 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/14 23:02 upstream 052d534373b7 551587c1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/14 10:32 upstream 052d534373b7 551587c1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/14 04:33 upstream 052d534373b7 551587c1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/13 16:44 upstream 052d534373b7 551587c1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/13 08:19 upstream 23a80d462c67 551587c1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream KASAN: null-ptr-deref Read in drop_buffers
2024/01/16 06:01 upstream 052d534373b7 2a7bcc7f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: null-ptr-deref Read in drop_buffers
2024/01/13 21:35 upstream 052d534373b7 551587c1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: null-ptr-deref Read in drop_buffers
2024/01/13 04:15 upstream 23a80d462c67 551587c1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 KASAN: null-ptr-deref Read in drop_buffers
2024/02/28 22:27 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 381f163531d8 d367cbe5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/28 07:49 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc d367cbe5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/28 05:14 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc d367cbe5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/27 07:26 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc 05e69c83 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/26 12:29 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/26 11:28 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/26 08:34 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/24 10:15 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/23 04:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9abbc24128bc 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/22 19:19 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 59a96b711109 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/22 19:05 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 59a96b711109 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/21 21:35 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 59a96b711109 345111b5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/21 18:43 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e6ac7c55d3ec 345111b5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/21 02:17 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e6ac7c55d3ec 3af7dd65 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/20 19:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e6ac7c55d3ec 3af7dd65 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/19 22:05 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 83d49ede4b18 3af7dd65 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/19 13:51 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 905b00721763 3af7dd65 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/18 14:26 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 905b00721763 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/18 12:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 905b00721763 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/18 11:34 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 905b00721763 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/18 05:28 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 905b00721763 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2024/02/17 21:44 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 905b00721763 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: null-ptr-deref Read in drop_buffers
2023/08/12 09:43 linux-next 21ef7b1e17d0 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in drop_buffers
2023/07/31 11:25 linux-next ec8939156379 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in drop_buffers
2023/07/28 22:37 linux-next d7b3af5a77e8 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: null-ptr-deref Read in drop_buffers
2023/09/14 00:47 upstream 23f108dc9ed2 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 general protection fault in drop_buffers
* Struck through repros no longer work on HEAD.