syzbot


KASAN: null-ptr-deref Read in __wait_on_buffer

Status: upstream: reported on 2023/04/14 09:50
Labels: reiserfs (incorrect?)
Reported-by: syzbot+f91110fac7f22eb6284f@syzkaller.appspotmail.com
First crash: 53d, last: 13d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [reiserfs?] KASAN: null-ptr-deref Read in __wait_on_buffer 0 (1) 2023/04/14 09:50

Sample crash report:
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read include/linux/instrumented.h:68 [inline]
BUG: KASAN: null-ptr-deref in _test_bit_acquire include/asm-generic/bitops/instrumented-non-atomic.h:153 [inline]
BUG: KASAN: null-ptr-deref in wait_on_bit_io include/linux/wait_bit.h:99 [inline]
BUG: KASAN: null-ptr-deref in __wait_on_buffer+0x33/0x90 fs/buffer.c:123
Read of size 8 at addr 0000000000000000 by task kworker/1:10/5422

CPU: 1 PID: 5422 Comm: kworker/1:10 Not tainted 6.4.0-rc2-syzkaller-00238-gcbd6ac3837cd #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
Workqueue: reiserfs/loop0 flush_async_commits
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106
 print_report+0xe6/0x540 mm/kasan/report.c:465
 kasan_report+0x176/0x1b0 mm/kasan/report.c:572
 kasan_check_range+0x283/0x290 mm/kasan/generic.c:187
 instrument_atomic_read include/linux/instrumented.h:68 [inline]
 _test_bit_acquire include/asm-generic/bitops/instrumented-non-atomic.h:153 [inline]
 wait_on_bit_io include/linux/wait_bit.h:99 [inline]
 __wait_on_buffer+0x33/0x90 fs/buffer.c:123
 flush_commit_list+0xd8a/0x1bf0 fs/reiserfs/journal.c:1072
 flush_older_commits fs/reiserfs/journal.c:919 [inline]
 flush_commit_list+0x3d1/0x1bf0 fs/reiserfs/journal.c:997
 flush_async_commits+0xa4/0xc0 fs/reiserfs/journal.c:3552
 process_one_work+0x8a0/0x10e0 kernel/workqueue.c:2405
 worker_thread+0xa63/0x1210 kernel/workqueue.c:2552
 kthread+0x2b8/0x350 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2023/05/20 03:08 upstream cbd6ac3837cd 96689200 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: null-ptr-deref Read in __wait_on_buffer
2023/05/18 13:20 upstream 4d6d4c7f541d 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: null-ptr-deref Read in __wait_on_buffer
2023/04/10 09:44 upstream 09a9639e56c0 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: null-ptr-deref Read in __wait_on_buffer
* Struck through repros no longer work on HEAD.