syzbot

 sign-in | mailing list | source | docs
🐞 Open [870] ≡ Subsystems 🐞 Fixed [4873] 🐞 Invalid [11626] ⬇ Missing Backports [68] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

general protection fault in prepare_for_delete_or_cut

Status: upstream: reported C repro on 2023/01/06 16:52
Subsystems: reiserfs
[Documentation on labels]
Reported-by: syzbot+e621a445f96fd0e94be4@syzkaller.appspotmail.com
First crash: 328d, last: 2d10h
Cause bisection: failed (error log, bisect log)
  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [reiserfs?] general protection fault in prepare_for_delete_or_cut 0 (1) 2023/01/06 16:52
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 general protection fault in prepare_for_delete_or_cut fat reiserfs C error 3 302d 331d 0/1 upstream: reported C repro on 2023/01/01 21:41
linux-4.14 general protection fault in prepare_for_delete_or_cut reiserfs fat C 2 287d 334d 0/1 upstream: reported C repro on 2022/12/30 06:10
▶ ▼ Last patch testing requests (4)
Created Duration User Patch Repo Result
2023/11/08 13:30 51m retest repro upstream report log
2023/10/22 14:10 18m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2023/08/27 03:13 1h14m retest repro linux-next report log
2023/08/26 21:42 41m retest repro upstream report log
▶ ▼ Fix bisection attempts (4)
Created Duration User Patch Repo Result
2023/10/01 15:32 1h11m bisect fix upstream job log (0) log
2023/08/08 05:23 1h21m bisect fix upstream job log (0) log
2023/04/07 12:11 1h02m bisect fix upstream job log (0) log
2023/03/08 11:23 47m bisect fix upstream job log (0) log

Sample crash report:
REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 533. Fsck?
REISERFS (device loop0): Remounting filesystem read-only
REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 533. Fsck?
general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
CPU: 0 PID: 5023 Comm: syz-executor336 Not tainted 6.6.0-rc7-syzkaller-00039-g4f82870119a4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
RIP: 0010:reiserfs_node_data fs/reiserfs/reiserfs.h:2183 [inline]
RIP: 0010:item_head fs/reiserfs/reiserfs.h:2199 [inline]
RIP: 0010:tp_item_head fs/reiserfs/reiserfs.h:2225 [inline]
RIP: 0010:prepare_for_delete_or_cut+0x18f/0x2240 fs/reiserfs/stree.c:1050
Code: d8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 d0 17 00 00 4c 63 33 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 e7 e8 f2 af b2 ff 4d 8b 3c 24 48 b8 00
RSP: 0018:ffffc90003c57320 EFLAGS: 00010206
RAX: 0000000000000005 RBX: ffffc90003c57ae0 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008
RBP: ffffc90003c574a8 R08: ffffffff82361be2 R09: ffffc90003c57970
R10: 0000000000000002 R11: ffff8880192a0000 R12: 0000000000000028
R13: 0000000000000fcb R14: 0000000000000000 R15: dffffc0000000000
FS:  0000555555d9c380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f269cfde2a9 CR3: 0000000074698000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_cut_from_item+0x3af/0x2580 fs/reiserfs/stree.c:1680
 reiserfs_do_truncate+0x9b9/0x14c0 fs/reiserfs/stree.c:1971
 reiserfs_truncate_file+0x4da/0x820 fs/reiserfs/inode.c:2306
 reiserfs_file_release+0x8ca/0xaa0 fs/reiserfs/file.c:109
 __fput+0x3f8/0x910 fs/file_table.c:384
 __do_sys_close fs/open.c:1572 [inline]
 __se_sys_close+0x15f/0x220 fs/open.c:1557
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa235171b10
Code: ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 80 3d 91 a5 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c
RSP: 002b:00007fff4d804788 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fa235171b10
RDX: 00007fa235172889 RSI: 0000000000000e0e RDI: 0000000000000005
RBP: 00007fff4d8047a0 R08: 00007fff4d804800 R09: 00007fff4d804800
R10: 00007fff4d804800 R11: 0000000000000202 R12: 00007fa2351e75f0
R13: 00007fff4d804988 R14: 0000000000000001 R15: 0000000000000001
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:reiserfs_node_data fs/reiserfs/reiserfs.h:2183 [inline]
RIP: 0010:item_head fs/reiserfs/reiserfs.h:2199 [inline]
RIP: 0010:tp_item_head fs/reiserfs/reiserfs.h:2225 [inline]
RIP: 0010:prepare_for_delete_or_cut+0x18f/0x2240 fs/reiserfs/stree.c:1050
Code: d8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 d0 17 00 00 4c 63 33 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 e7 e8 f2 af b2 ff 4d 8b 3c 24 48 b8 00
RSP: 0018:ffffc90003c57320 EFLAGS: 00010206
RAX: 0000000000000005 RBX: ffffc90003c57ae0 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008
RBP: ffffc90003c574a8 R08: ffffffff82361be2 R09: ffffc90003c57970
R10: 0000000000000002 R11: ffff8880192a0000 R12: 0000000000000028
R13: 0000000000000fcb R14: 0000000000000000 R15: dffffc0000000000
FS:  0000555555d9c380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f269cfde2a9 CR3: 0000000074698000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	48 c1 e8 03          	shr    $0x3,%rax
   4:	49 bf 00 00 00 00 00 	movabs $0xdffffc0000000000,%r15
   b:	fc ff df
   e:	42 0f b6 04 38       	movzbl (%rax,%r15,1),%eax
  13:	84 c0                	test   %al,%al
  15:	0f 85 d0 17 00 00    	jne    0x17eb
  1b:	4c 63 33             	movslq (%rbx),%r14
  1e:	49 83 c4 28          	add    $0x28,%r12
  22:	4c 89 e0             	mov    %r12,%rax
  25:	48 c1 e8 03          	shr    $0x3,%rax
* 29:	42 80 3c 38 00       	cmpb   $0x0,(%rax,%r15,1) <-- trapping instruction
  2e:	74 08                	je     0x38
  30:	4c 89 e7             	mov    %r12,%rdi
  33:	e8 f2 af b2 ff       	call   0xffb2b02a
  38:	4d 8b 3c 24          	mov    (%r12),%r15
  3c:	48                   	rex.W
  3d:	b8                   	.byte 0xb8

Crashes (52):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/10/25 13:24 upstream 4f82870119a4 17e6d526 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/06 16:08 upstream 41c03ba9beea 1dac8c7a .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/14 13:33 upstream b6dad5178cea d2ee9228 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-smack-root general protection fault in prepare_for_delete_or_cut
2023/05/04 08:51 linux-next 92e815cf07ed b5918830 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root general protection fault in prepare_for_delete_or_cut
2023/10/08 14:03 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 19af4a4ed414 5e837c76 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in prepare_for_delete_or_cut
2023/06/28 16:54 upstream b19edac5992d 4cd5bb25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/27 02:48 upstream 6995e2de6891 4cd5bb25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/26 16:22 upstream 6995e2de6891 4cd5bb25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/25 15:40 upstream a92b7d26c743 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/23 21:02 upstream 8a28a0b6f1a1 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/23 09:02 upstream 8a28a0b6f1a1 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/22 19:51 upstream dad9774deaf1 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/19 04:52 upstream 8c1f0c38b310 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/17 00:51 upstream 40f71e7cd3c6 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/14 13:52 upstream b6dad5178cea d2ee9228 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/14 03:56 upstream 15adb51c04cc d2ee9228 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/06/05 10:03 upstream 9561de3a55be a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/26 23:11 upstream 0d85b27b0cc6 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/26 14:57 upstream 9db898594c54 b40ef614 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/21 22:06 upstream e2065b8c1b01 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/20 21:11 upstream d635f6cc934b 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/20 08:06 upstream cbd6ac3837cd 96689200 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/20 00:42 upstream cbd6ac3837cd 96689200 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/18 20:40 upstream 4d6d4c7f541d 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/18 09:43 upstream 1b66c114d161 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/16 03:07 upstream f1fcbaa18b28 71b00cfb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/05/15 22:45 upstream f1fcbaa18b28 c4d362e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/02/06 11:22 upstream 4ec5183ec486 be607b78 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/02/06 07:30 upstream 4ec5183ec486 be607b78 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/02/05 09:24 upstream db27c22251e7 be607b78 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/02/04 11:53 upstream 0136d86b7852 1b2f701a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/02/03 09:14 upstream e7368fd30165 33fc5c09 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/02/02 10:42 upstream 9f266ccaa2f5 9a6f477c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/02/02 00:25 upstream c0b67534c95c 9a6f477c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/31 22:15 upstream 22b8077d0fce b68fb8d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/29 13:42 upstream c96618275234 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/28 18:41 upstream 5af6ce704936 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/28 17:05 upstream 5af6ce704936 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/27 02:16 upstream 7c46948a6e9c 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/26 02:42 upstream 948ef7bb70c4 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root general protection fault in prepare_for_delete_or_cut
2023/01/17 05:26 upstream d532dd102151 a63719e7 .config console log report info ci-qemu-upstream general protection fault in prepare_for_delete_or_cut
2023/01/15 21:26 upstream 7c6984405241 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/14 00:25 upstream d9fc1511728c 529798b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/08 01:49 upstream 0a71553536d2 1dac8c7a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/06 16:09 upstream 1f5abbd77e2c 1dac8c7a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root general protection fault in prepare_for_delete_or_cut
2023/01/06 15:46 upstream 41c03ba9beea 1dac8c7a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/01/05 01:12 upstream 69b41ac87e4a 1dac8c7a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs general protection fault in prepare_for_delete_or_cut
2023/11/27 08:20 upstream d2da77f431ac 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in prepare_for_delete_or_cut
2023/11/25 03:36 upstream fa2b906f5148 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in prepare_for_delete_or_cut
2023/11/21 07:17 upstream 98b1cc82c4af cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386 KMSAN: uninit-value in prepare_for_delete_or_cut
2023/10/08 13:37 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 19af4a4ed414 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in prepare_for_delete_or_cut
* Struck through repros no longer work on HEAD.