syzbot


KASAN: wild-memory-access Read in hfsplus_bnode_dump

Status: upstream: reported C repro on 2023/04/17 05:34
Subsystems: hfs
[Documentation on labels]
Reported-by: syzbot+f687659f3c2acfa34201@syzkaller.appspotmail.com
First crash: 589d, last: 17m
Cause bisection: failed (error log, bisect log)
  
Fix bisection: failed (error log, bisect log)
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [hfs?] KASAN: wild-memory-access Read in hfsplus_bnode_dump 0 (2) 2023/05/25 20:03
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 KASAN: wild-memory-access Read in hfsplus_bnode_dump origin:upstream C error 15 16d 513d 0/3 upstream: reported C repro on 2023/06/26 13:24
Last patch testing requests (10)
Created Duration User Patch Repo Result
2024/07/28 23:42 20m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2024/07/28 23:42 22m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2024/07/28 23:42 19m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2024/07/28 23:34 17m retest repro upstream OK log
2024/06/07 21:54 4h25m retest repro upstream OK log
2024/06/07 21:56 12m retest repro upstream report log
2024/06/07 21:56 13m retest repro upstream report log
2024/04/08 21:25 23m retest repro upstream error
2024/03/06 21:15 19m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2024/02/21 20:26 11m retest repro upstream report log
Fix bisection attempts (3)
Created Duration User Patch Repo Result
2023/10/07 08:15 21m bisect fix upstream error job log
2023/09/03 04:58 1h24m bisect fix upstream OK (0) job log log
2023/06/26 23:43 1h02m bisect fix upstream OK (0) job log log

Sample crash report:
loop0: detected capacity change from 0 to 1024
hfsplus: request for non-existent node 128 in B*Tree
hfsplus: request for non-existent node 128 in B*Tree
==================================================================
BUG: KASAN: wild-memory-access in memcpy_from_page include/linux/highmem.h:423 [inline]
BUG: KASAN: wild-memory-access in hfsplus_bnode_read fs/hfsplus/bnode.c:32 [inline]
BUG: KASAN: wild-memory-access in hfsplus_bnode_read_u16 fs/hfsplus/bnode.c:45 [inline]
BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0 fs/hfsplus/bnode.c:305
Read of size 2 at addr 000508800000103e by task syz-executor406/5218

CPU: 0 UID: 0 PID: 5218 Comm: syz-executor406 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119
 print_report+0xe8/0x550 mm/kasan/report.c:491
 kasan_report+0x143/0x180 mm/kasan/report.c:601
 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189
 __asan_memcpy+0x29/0x70 mm/kasan/shadow.c:105
 memcpy_from_page include/linux/highmem.h:423 [inline]
 hfsplus_bnode_read fs/hfsplus/bnode.c:32 [inline]
 hfsplus_bnode_read_u16 fs/hfsplus/bnode.c:45 [inline]
 hfsplus_bnode_dump+0x403/0xbb0 fs/hfsplus/bnode.c:305
 hfsplus_brec_remove+0x42c/0x4f0 fs/hfsplus/brec.c:229
 __hfsplus_delete_attr+0x275/0x450 fs/hfsplus/attributes.c:299
 hfsplus_delete_all_attrs+0x26b/0x3d0 fs/hfsplus/attributes.c:378
 hfsplus_delete_cat+0xb33/0xf80 fs/hfsplus/catalog.c:425
 hfsplus_unlink+0x363/0x790 fs/hfsplus/dir.c:385
 vfs_unlink+0x365/0x650 fs/namei.c:4422
 do_unlinkat+0x4ae/0x830 fs/namei.c:4486
 __do_sys_unlink fs/namei.c:4534 [inline]
 __se_sys_unlink fs/namei.c:4532 [inline]
 __x64_sys_unlink+0x47/0x50 fs/namei.c:4532
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fde4fd0da59
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe10030d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fde4fd0da59
RDX: 00007fde4fd0ca51 RSI: 0000000000000000 RDI: 0000000020000000
RBP: 00007fde4fd815f0 R08: 000000000000067a R09: 0000555586d0e4c0
R10: 00007ffe10030bd0 R11: 0000000000000246 R12: 00007ffe10030d30
R13: 00007ffe10030f58 R14: 431bde82d7b634db R15: 00007fde4fd5603b
 </TASK>
==================================================================

Crashes (185):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/08/13 03:34 upstream d74da846046a 7b0f4b46 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/05/21 03:39 upstream daa121128a2d c0f1611a .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/02/07 13:12 upstream 6d280f4d760e 6404acf9 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/06/17 15:23 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ac2193b4b460 f429ab00 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in hfsplus_bnode_dump
2024/05/21 03:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci fda5695d692c c0f1611a .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in hfsplus_bnode_dump
2024/02/04 21:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 41bccc98fb79 a67b2c42 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 KASAN: use-after-free Read in hfsplus_bnode_dump
2023/10/11 18:14 upstream 1c8b86a3799f 83165b57 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-smack-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2023/05/25 20:03 upstream 933174ae28ba 0513b3e6 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/15 14:38 upstream cfaaa7d010d1 f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/04 06:26 upstream b9021de3ec2f f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/21 06:06 upstream 8f7c8b88bda4 4b25d554 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/20 00:59 upstream 158f238aa69d 7d02db5a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/19 20:34 upstream 158f238aa69d 7d02db5a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/19 11:15 upstream 9fb2cfa4635a 571351cb .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/19 02:12 upstream 9fb2cfa4635a 571351cb .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/18 16:10 upstream adc218676eef e7bb5d6e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/18 05:45 upstream f66d6acccbc0 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/18 01:36 upstream f66d6acccbc0 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/17 14:02 upstream 4a5df3796467 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/17 06:56 upstream 4a5df3796467 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/17 03:08 upstream e8bdb3c8be08 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/16 09:06 upstream f868cd251776 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/15 15:58 upstream cfaaa7d010d1 eeafb645 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/15 10:52 upstream cfaaa7d010d1 f6ede3a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/15 00:11 upstream cfaaa7d010d1 77f3eeb7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/14 10:33 upstream 0a9b9d17f3a7 a8c99394 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/13 22:15 upstream f1b785f4c787 4dfba277 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/13 17:46 upstream f1b785f4c787 4dfba277 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/13 11:03 upstream 3022e9d00ebe 62026c85 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/12 03:52 upstream 2d5404caa8c7 75bb1b32 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/11 16:58 upstream 2d5404caa8c7 0c4b1325 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/11 14:42 upstream 2d5404caa8c7 0c4b1325 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/11 05:11 upstream a9cda7c0ffed 6b856513 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/10 00:37 upstream da4373fbcf00 6b856513 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/09 08:02 upstream f1dce1f09380 6b856513 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/07 23:53 upstream ff7afaeca1a1 867e44df .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/07 21:47 upstream ff7afaeca1a1 867e44df .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/07 20:24 upstream ff7afaeca1a1 867e44df .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/07 15:35 upstream ff7afaeca1a1 867e44df .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/07 06:35 upstream 7758b206117d df3dc63b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/07 04:21 upstream 7758b206117d df3dc63b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/06 07:20 upstream 2e1b3cc9d7f7 3a465482 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/05 23:30 upstream 2e1b3cc9d7f7 da38b4c9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/05 19:24 upstream 2e1b3cc9d7f7 da38b4c9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/05 18:56 upstream 2e1b3cc9d7f7 da38b4c9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/05 10:30 upstream 557329bcecc2 509da429 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/05 05:06 upstream 557329bcecc2 509da429 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/04 15:59 upstream 59b723cd2adb 0754ea12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/03 23:20 upstream b9021de3ec2f f00eed24 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/03 21:12 upstream b9021de3ec2f f00eed24 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/03 06:11 upstream 3e5e6c9900c3 f00eed24 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/02 11:23 upstream 11066801dd4b f00eed24 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/01 18:42 upstream 6c52d4da1c74 f00eed24 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/01 10:43 upstream 90602c251cda 96eb609f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2023/04/11 17:45 upstream 0d3eb744aed4 49faf98d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/13 15:36 linux-next 929beafbe7ac 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/11 08:31 linux-next 929beafbe7ac 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: wild-memory-access Read in hfsplus_bnode_dump
2024/11/05 11:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 46f782153ea2 509da429 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in hfsplus_bnode_dump
2024/09/20 11:30 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5f5673607153 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: unable to handle kernel paging request in hfsplus_bnode_dump
2024/02/04 21:24 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 41bccc98fb79 a67b2c42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 KASAN: use-after-free Read in hfsplus_bnode_dump
* Struck through repros no longer work on HEAD.