syzbot


WARNING: kmalloc bug in bfs_fill_super

Status: fixed on 2018/11/12 21:25
Subsystems: bfs
[Documentation on labels]
Reported-by: syzbot+71c6b5d68e91149fc8a4@syzkaller.appspotmail.com
Fix commit: 9f2df09a33aa bfs: add sanity check at bfs_fill_super()
First crash: 2439d, last: 2395d
Discussions (16)
Title Replies (including bot) Last reply
[PATCH 4.19 000/110] 4.19.6-stable review 142 (142) 2018/12/14 17:42
[PATCH 4.14 000/100] 4.14.85-stable review 116 (116) 2018/12/03 11:38
[PATCH 3.18 00/83] 3.18.128-stable review 97 (97) 2018/12/02 20:32
[PATCH 4.9 00/92] 4.9.142-stable review 102 (102) 2018/11/30 22:28
[PATCH 4.4 00/86] 4.4.166-stable review 92 (92) 2018/11/30 22:27
[PATCH AUTOSEL 3.18 1/9] bfs: add sanity check at bfs_fill_super() 24 (24) 2018/11/22 21:01
[PATCH AUTOSEL 4.18 01/39] bfs: add sanity check at bfs_fill_super() 41 (41) 2018/11/22 19:35
[PATCH AUTOSEL 4.9 01/17] bfs: add sanity check at bfs_fill_super() 20 (20) 2018/11/22 15:53
Re: [patch 14/15] bfs: add sanity check at bfs_fill_super() 1 (1) 2018/11/15 22:36
[PATCH AUTOSEL 4.4 01/11] bfs: add sanity check at bfs_fill_super() 11 (11) 2018/11/13 05:52
[PATCH AUTOSEL 4.14 01/26] bfs: add sanity check at bfs_fill_super() 26 (26) 2018/11/13 05:51
[PATCH AUTOSEL 4.19 01/44] bfs: add sanity check at bfs_fill_super() 44 (44) 2018/11/13 05:49
Re: [PATCH] BFS: tighten sanity checks at bfs_fill_super(). 1 (1) 2018/06/15 20:53
Re: [PATCH] bfs: add sanity check at bfs_fill_super(). 18 (18) 2018/06/15 10:45
[PATCH] bfs: add sanity check at bfs_fill_super(). 3 (3) 2018/05/10 00:53
WARNING: kmalloc bug in bfs_fill_super 2 (3) 2018/05/01 10:45

Sample crash report:
BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
WARNING: CPU: 0 PID: 4514 at mm/slab_common.c:996 kmalloc_slab+0x56/0x70 mm/slab_common.c:996
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 4514 Comm: syzkaller583443 Not tainted 4.17.0-rc1+ #8
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 panic+0x22f/0x4de kernel/panic.c:184
 __warn.cold.8+0x163/0x1b3 kernel/panic.c:536
 report_bug+0x252/0x2d0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x1de/0x490 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:315
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:992
RIP: 0010:kmalloc_slab+0x56/0x70 mm/slab_common.c:996
RSP: 0018:ffff8801ace578d0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00000000007fffff RCX: ffffffff8221978b
RDX: 1ffff10039b387a4 RSI: 0000000000000000 RDI: 0000000000800000
RBP: ffff8801ace578d0 R08: ffff8801ac57e3c0 R09: ffffed003b5c4f90
R10: ffffed003b5c4f90 R11: ffff8801dae27c87 R12: ffff8801b3d37004
R13: 0000000000000000 R14: ffff8801cd9c3d00 R15: 00000000014080c0
 __do_kmalloc mm/slab.c:3713 [inline]
 __kmalloc+0x25/0x760 mm/slab.c:3727
 kmalloc include/linux/slab.h:517 [inline]
 kzalloc include/linux/slab.h:701 [inline]
 bfs_fill_super+0x45f/0xef0 fs/bfs/inode.c:362
 mount_bdev+0x30c/0x3e0 fs/super.c:1165
 bfs_mount+0x34/0x40 fs/bfs/inode.c:465
 mount_fs+0xae/0x328 fs/super.c:1268
 vfs_kern_mount.part.34+0xd4/0x4d0 fs/namespace.c:1037
 vfs_kern_mount fs/namespace.c:1027 [inline]
 do_new_mount fs/namespace.c:2517 [inline]
 do_mount+0x564/0x3070 fs/namespace.c:2847
 ksys_mount+0x12d/0x140 fs/namespace.c:3063
 __do_sys_mount fs/namespace.c:3077 [inline]
 __se_sys_mount fs/namespace.c:3074 [inline]
 __x64_sys_mount+0xbe/0x150 fs/namespace.c:3074
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x442dfa
RSP: 002b:00007ffe959db7f8 EFLAGS: 00000217 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000001c00 RCX: 0000000000442dfa
RDX: 0000000020000040 RSI: 0000000020000100 RDI: 00007ffe959db800
RBP: 0000000000000003 R08: 0000000000000000 R09: 000000000000000a
R10: 0000000000804000 R11: 0000000000000217 R12: 0000000000000004
R13: 0000000000401cf0 R14: 0000000000000000 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (147):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/20 14:18 upstream 87ef12027b9b cc402841 .config console log report syz C ci-upstream-kasan-gce-root
2018/04/03 08:16 upstream 86bbbebac193 676bd07e .config console log report syz C ci-upstream-kasan-gce-root
2018/03/30 19:34 upstream 9dd2326890d8 8fbce0e4 .config console log report syz C ci-upstream-kasan-gce-root
2018/05/14 03:37 upstream 66e1c94db3cd 481f030c .config console log report ci-upstream-kasan-gce-root
2018/05/13 11:26 upstream ccda3c4b7777 c05b619d .config console log report ci-upstream-kasan-gce-root
2018/05/13 05:00 upstream 427fbe89261d e726f42b .config console log report ci-upstream-kasan-gce-root
2018/05/12 23:20 upstream 427fbe89261d e726f42b .config console log report ci-upstream-kasan-gce-root
2018/05/12 12:41 upstream f0ab773f5c96 e726f42b .config console log report ci-upstream-kasan-gce-root
2018/05/12 02:39 upstream 41e3e1082367 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/11 19:18 upstream 41e3e1082367 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/11 08:01 upstream 008464a9360e 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/09 08:59 upstream 036db8bd9637 12c7428a .config console log report ci-upstream-kasan-gce-root
2018/05/08 05:52 upstream f142f08bf7ec 045bbd4a .config console log report ci-upstream-kasan-gce-root
2018/05/07 22:32 upstream 75bc37fefc44 9e0846e8 .config console log report ci-upstream-kasan-gce-root
2018/05/07 20:01 upstream 75bc37fefc44 9e0846e8 .config console log report ci-upstream-kasan-gce-root
2018/05/07 18:56 upstream 75bc37fefc44 9e0846e8 .config console log report ci-upstream-kasan-gce-root
2018/05/07 14:50 upstream 75bc37fefc44 a211da1a .config console log report ci-upstream-kasan-gce-root
2018/05/07 04:26 upstream 701e39d05119 a211da1a .config console log report ci-upstream-kasan-gce-root
2018/05/06 18:42 upstream ee946c36be21 6c18ddb0 .config console log report ci-upstream-kasan-gce-root
2018/05/06 08:06 upstream ee946c36be21 78b251cb .config console log report ci-upstream-kasan-gce-root
2018/05/05 21:43 upstream c1c07416cdd4 6a0382b5 .config console log report ci-upstream-kasan-gce-root
2018/05/05 05:02 upstream 625e2001e99e 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/05 02:03 upstream 625e2001e99e 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/04 12:12 upstream 150426981426 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/03 06:40 upstream f4ef6a438cee 9ce14f4b .config console log report ci-upstream-kasan-gce-root
2018/05/02 23:46 upstream 2d618bdf7163 d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/02 18:26 upstream 2d618bdf7163 d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/02 04:43 upstream f2125992e7cb d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/02 02:36 upstream f2125992e7cb d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/02 00:43 upstream fff75eb2a08c d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/01 19:32 upstream fff75eb2a08c d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/05/01 14:20 upstream fff75eb2a08c d5b114b4 .config console log report ci-upstream-kasan-gce-root
2018/04/30 17:50 upstream 6da6c0db5316 06db3cec .config console log report ci-upstream-kasan-gce-root
2018/04/30 11:04 upstream 6da6c0db5316 06db3cec .config console log report ci-upstream-kasan-gce-root
2018/04/30 09:21 upstream 6da6c0db5316 06db3cec .config console log report ci-upstream-kasan-gce-root
2018/04/30 01:33 upstream c61a56ababa4 bb79c6ab .config console log report ci-upstream-kasan-gce-root
2018/04/29 20:28 upstream c61a56ababa4 bb79c6ab .config console log report ci-upstream-kasan-gce-root
2018/04/29 17:52 upstream cdface520934 bb79c6ab .config console log report ci-upstream-kasan-gce-root
2018/04/29 16:04 upstream cdface520934 d5a5d045 .config console log report ci-upstream-kasan-gce-root
2018/04/28 22:03 upstream bf8f5de17442 d5a5d045 .config console log report ci-upstream-kasan-gce-root
2018/04/28 07:02 upstream 46dc111dfe47 d5a5d045 .config console log report ci-upstream-kasan-gce-root
2018/04/28 03:39 upstream 46dc111dfe47 d5a5d045 .config console log report ci-upstream-kasan-gce-root
2018/04/27 20:04 upstream d8a332730e75 7785e404 .config console log report ci-upstream-kasan-gce-root
2018/04/27 18:04 upstream 0644f186fc9d 7785e404 .config console log report ci-upstream-kasan-gce-root
2018/04/27 05:00 upstream 0644f186fc9d 73417389 .config console log report ci-upstream-kasan-gce-root
2018/04/26 07:11 upstream 26ed24e429d8 73417389 .config console log report ci-upstream-kasan-gce-root
2018/04/25 21:46 upstream 3be4aaf4e2d3 73417389 .config console log report ci-upstream-kasan-gce-root
2018/04/25 18:53 upstream 3be4aaf4e2d3 73417389 .config console log report ci-upstream-kasan-gce-root
2018/04/23 04:41 upstream 5ec83b22a2dd d23fcf6c .config console log report ci-upstream-kasan-gce-root
2018/04/21 23:05 upstream 5e7c7806111a d23fcf6c .config console log report ci-upstream-kasan-gce-root
2018/03/30 19:21 upstream 9dd2326890d8 8fbce0e4 .config console log report ci-upstream-kasan-gce-root
* Struck through repros no longer work on HEAD.