syzbot


kernel BUG in reiserfs_cut_from_item

Status: upstream: reported C repro on 2023/06/09 13:59
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+f62df49d6b037e4d80c0@syzkaller.appspotmail.com
First crash: 483d, last: 11d
Fix bisection: failed (error log, bisect log)
  
Bug presence (1)
Date Name Commit Repro Result
2024/07/22 upstream (ToT) 7846b618e0a4 C [report] kernel BUG in reiserfs_cut_from_item
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in reiserfs_cut_from_item origin:upstream C 35 36d 506d 0/3 upstream: reported C repro on 2023/05/17 06:05
upstream kernel BUG in reiserfs_cut_from_item reiserfs C error done 57 270d 636d 0/28 auto-obsoleted due to no activity on 2024/04/16 05:18

Sample crash report:
-------------------------------------------------------------------------------
| 0| *3.6* [2 5 0x0 SD], item_len 44, item_location 4052, free_space(entry_count) 65535 |
	mode | size | nlinks | first direct | mtime
	0100000 |   3840 |  1 | 0 | 1721573159
===================================================================
REISERFS panic (device loop0): PAP-5580 reiserfs_cut_from_item: item to convert does not exist ([2 5 0x1 IND])
------------[ cut here ]------------
kernel BUG at fs/reiserfs/prints.c:390!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 3501 Comm: syz-executor170 Not tainted 5.15.163-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:__reiserfs_panic+0x13a/0x140 fs/reiserfs/prints.c:390
Code: c7 c1 c0 63 9b 8a 48 0f 44 c8 48 0f 44 d8 48 c7 c7 80 64 9b 8a 4c 89 fe 48 89 da 4d 89 f0 49 c7 c1 20 70 51 91 e8 f6 26 0f 08 <0f> 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4
RSP: 0018:ffffc900025671a0 EFLAGS: 00010246
RAX: 000000000000006e RBX: ffffffff8a9b82a0 RCX: aa065615be077d00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc90002567290 R08: ffffffff8166868c R09: fffff520004acd75
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8a9b82c0
R13: ffffc900025671c0 R14: ffffffff8c17c094 R15: ffff888015ff66a8
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f32253a1db8 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_cut_from_item+0x213e/0x2560 fs/reiserfs/stree.c:1729
 reiserfs_do_truncate+0xa12/0x15b0 fs/reiserfs/stree.c:1973
 reiserfs_truncate_file+0x638/0xda0 fs/reiserfs/inode.c:2318
 reiserfs_file_release+0x8c6/0xaa0 fs/reiserfs/file.c:109
 __fput+0x3fe/0x8e0 fs/file_table.c:280
 task_work_run+0x129/0x1a0 kernel/task_work.c:164
 exit_task_work include/linux/task_work.h:32 [inline]
 do_exit+0x6a3/0x2480 kernel/exit.c:874
 do_group_exit+0x144/0x310 kernel/exit.c:996
 __do_sys_exit_group kernel/exit.c:1007 [inline]
 __se_sys_exit_group kernel/exit.c:1005 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1005
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f3225357b89
Code: Unable to access opcode bytes at RIP 0x7f3225357b5f.
RSP: 002b:00007ffc941f5d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3225357b89
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f32253d32d0 R08: ffffffffffffffb8 R09: 00005555568c64c0
R10: 00005555568c64c0 R11: 0000000000000246 R12: 00007f32253d32d0
R13: 0000000000000000 R14: 00007f32253d4040 R15: 00007f3225325da0
 </TASK>
Modules linked in:
---[ end trace d122d151453212d7 ]---
RIP: 0010:__reiserfs_panic+0x13a/0x140 fs/reiserfs/prints.c:390
Code: c7 c1 c0 63 9b 8a 48 0f 44 c8 48 0f 44 d8 48 c7 c7 80 64 9b 8a 4c 89 fe 48 89 da 4d 89 f0 49 c7 c1 20 70 51 91 e8 f6 26 0f 08 <0f> 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4
RSP: 0018:ffffc900025671a0 EFLAGS: 00010246
RAX: 000000000000006e RBX: ffffffff8a9b82a0 RCX: aa065615be077d00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc90002567290 R08: ffffffff8166868c R09: fffff520004acd75
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8a9b82c0
R13: ffffc900025671c0 R14: ffffffff8c17c094 R15: ffff888015ff66a8
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f32253a1db8 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (52):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/21 14:46 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 12:38 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/01/21 13:12 linux-5.15.y ddcaf4999061 9bd8dcda .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/10 09:52 linux-5.15.y 7349e40704a0 9018a337 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/09/18 18:07 linux-5.15.y 3a5928702e71 c673ca06 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/04/06 20:55 linux-5.15.y 9465fef4ae35 ca620dd8 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/08/15 17:02 linux-5.15.y 24c4de4069cb 39990d51 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/09/23 05:04 linux-5.15.y 3a5928702e71 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/09/09 02:12 linux-5.15.y 14e468424d3e 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/08/11 00:48 linux-5.15.y 7e89efd3ae1c 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/28 21:33 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/28 21:32 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/28 21:23 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/28 21:22 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 20:45 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 11:41 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 11:40 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 11:40 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 11:40 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/08 18:17 linux-5.15.y f45bea23c39c cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/04/24 10:15 linux-5.15.y c52b9710c83d 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/04/23 14:33 linux-5.15.y c52b9710c83d 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/04/16 16:09 linux-5.15.y fa3df276cd36 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/04/05 05:08 linux-5.15.y 9465fef4ae35 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/12/07 19:37 linux-5.15.y 9b91d36ba301 0a02ce36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/12/06 19:40 linux-5.15.y 9b91d36ba301 e3299f55 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/12/06 03:08 linux-5.15.y 9b91d36ba301 858d62d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/10/27 15:28 linux-5.15.y 12952a23a5da 3c418d72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/10/19 15:34 linux-5.15.y 02e21884dcf2 42e1d524 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/05/05 22:15 linux-5.15.y 284087d4f7d5 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/01/21 11:18 linux-5.15.y ddcaf4999061 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/01/11 09:05 linux-5.15.y 26c690eff0a5 00f3cc59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/10/10 06:50 linux-5.15.y 1edcec18cfb7 c9be5398 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/09/29 15:49 linux-5.15.y b911329317b4 8e26a358 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/19 10:48 linux-5.15.y d54cfc420586 022df2bb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/26 20:39 linux-5.15.y f67653019430 4cd5bb25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/21 23:28 linux-5.15.y f67653019430 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/16 11:03 linux-5.15.y 471e639e59d1 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/15 18:37 linux-5.15.y 471e639e59d1 90d4044e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/15 04:25 linux-5.15.y 471e639e59d1 76decb82 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/09 13:58 linux-5.15.y 7349e40704a0 058b3a5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/08/26 21:17 linux-5.15.y 5ddfe5cc8716 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/05 05:58 linux-5.15.y 4af60700a60c 80298b6f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/20 00:46 linux-5.15.y 471e639e59d1 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/09 17:08 linux-5.15.y 7349e40704a0 9018a337 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
* Struck through repros no longer work on HEAD.