syzbot


WARNING in brelse

Status: upstream: reported C repro on 2022/09/27 11:45
Reported-by: syzbot+2a0fbd1cb355de983130@syzkaller.appspotmail.com
First crash: 61d, last: 17h51m

Cause bisection: failed (bisect log)

Sample crash report:
------------[ cut here ]------------
VFS: brelse: Trying to free free buffer
WARNING: CPU: 0 PID: 0 at fs/buffer.c:1145 __brelse fs/buffer.c:1145 [inline]
WARNING: CPU: 0 PID: 0 at fs/buffer.c:1145 brelse+0x78/0xa0 include/linux/buffer_head.h:326
Modules linked in:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.0-rc3-syzkaller-00288-gb208b9fbbcba #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:__brelse fs/buffer.c:1145 [inline]
RIP: 0010:brelse+0x78/0xa0 include/linux/buffer_head.h:326
Code: df be 04 00 00 00 e8 b7 89 e0 ff f0 ff 0b eb 1c e8 ed 8f 8c ff eb 15 e8 e6 8f 8c ff 48 c7 c7 40 cc 9d 8a 31 c0 e8 f8 2d 54 ff <0f> 0b 5b 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 7c af 48 89 df e8 bf
RSP: 0018:ffffc90000007f18 EFLAGS: 00010046
RAX: 4de680b400039200 RBX: ffff888073951c28 RCX: ffffffff8c8bb880
RDX: 0000000080010002 RSI: 0000000080010002 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff816b9e3d R09: ffffed1017344f13
R10: ffffed1017344f13 R11: 1ffff11017344f12 R12: 0000000000000000
R13: 1ffff1101734840e R14: ffff8880b9a35cf8 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000556d12b3dce0 CR3: 000000001e365000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __invalidate_bh_lrus+0x37/0x3c0 fs/buffer.c:1380
 invalidate_bh_lru+0x66/0xb0 fs/buffer.c:1393
 __flush_smp_call_function_queue+0x2cc/0xcd0 kernel/smp.c:630
 __sysvec_call_function_single+0x62/0x70 arch/x86/kernel/smp.c:248
 sysvec_call_function_single+0x8c/0xb0 arch/x86/kernel/smp.c:243
 </IRQ>
 <TASK>
 asm_sysvec_call_function_single+0x16/0x20 arch/x86/include/asm/idtentry.h:657
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:113 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:572 [inline]
RIP: 0010:acpi_idle_enter+0x43d/0x7e0 drivers/acpi/processor_idle.c:709
Code: ff e8 17 bd 4a f7 48 83 e3 08 44 8b 7c 24 04 0f 85 e8 00 00 00 e8 23 6a 51 f7 66 90 e8 3c b8 4a f7 0f 00 2d 75 05 bb 00 fb f4 <9c> 8f 44 24 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7
RSP: 0018:ffffffff8c807b80 EFLAGS: 000002d3
RAX: ffffffff8a3d27e4 RBX: 0000000000000000 RCX: ffffffff8c8bb880
RDX: 0000000000000000 RSI: ffffffff8a8d87c0 RDI: ffffffff8aed0020
RBP: ffffffff8c807c30 R08: ffffffff8a3d27c9 R09: fffffbfff1917711
R10: fffffbfff1917711 R11: 1ffffffff1917710 R12: ffffffff8c807bc0
R13: dffffc0000000000 R14: ffff888012e51800 R15: 0000000000000001
 cpuidle_enter_state+0x50a/0xf10 drivers/cpuidle/cpuidle.c:239
 cpuidle_enter+0x59/0x90 drivers/cpuidle/cpuidle.c:356
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:236 [inline]
 do_idle+0x3b9/0x640 kernel/sched/idle.c:303
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:400
 rest_init+0x24f/0x270 init/main.c:729
 arch_call_rest_init+0xa/0xa init/main.c:890
 start_kernel+0x49a/0x540 init/main.c:1145
 secondary_startup_64_no_verify+0xcf/0xdb
 </TASK>
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	e8 17 bd 4a f7       	callq  0xf74abd1c
   5:	48 83 e3 08          	and    $0x8,%rbx
   9:	44 8b 7c 24 04       	mov    0x4(%rsp),%r15d
   e:	0f 85 e8 00 00 00    	jne    0xfc
  14:	e8 23 6a 51 f7       	callq  0xf7516a3c
  19:	66 90                	xchg   %ax,%ax
  1b:	e8 3c b8 4a f7       	callq  0xf74ab85c
  20:	0f 00 2d 75 05 bb 00 	verw   0xbb0575(%rip)        # 0xbb059c
  27:	fb                   	sti
  28:	f4                   	hlt
* 29:	9c                   	pushfq <-- trapping instruction
  2a:	8f 44 24 40          	popq   0x40(%rsp)
  2e:	4c 89 e0             	mov    %r12,%rax
  31:	48 c1 e8 03          	shr    $0x3,%rax
  35:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  3a:	74 08                	je     0x44
  3c:	4c 89 e7             	mov    %r12,%rdi

Crashes (38):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-fs 2022/11/06 16:59 upstream b208b9fbbcba 6d752409 .config log report syz C WARNING in brelse
ci2-upstream-fs 2022/10/30 10:29 upstream b229b6ca5abb 2a71366b .config log report syz C WARNING in brelse
ci2-upstream-fs 2022/10/04 01:47 upstream 4fe89d07dcc2 feb56351 .config log report syz C WARNING in brelse
ci2-upstream-fs 2022/09/30 06:59 upstream c3e0e1e23c70 45fd7169 .config log report syz C WARNING in brelse
ci2-upstream-fs 2022/09/27 02:59 upstream f76349cf4145 d59ba983 .config log report syz C WARNING in brelse
ci2-upstream-fs 2022/11/26 09:20 upstream 08ad43d554ba f4470a7b .config log report info WARNING in brelse
ci2-upstream-fs 2022/11/24 01:43 upstream eb7081409f94 52fdf57a .config log report info WARNING in brelse
ci2-upstream-fs 2022/11/23 14:32 upstream eb7081409f94 52fdf57a .config log report info WARNING in brelse
ci-upstream-kasan-gce-smack-root 2022/11/22 17:13 upstream eb7081409f94 1c576c23 .config log report info WARNING in brelse
ci2-upstream-fs 2022/11/19 13:28 upstream ab290eaddc4c 5bb70014 .config log report info WARNING in brelse
ci2-upstream-fs 2022/11/11 05:35 upstream 4bbf3422df78 f42ee5d8 .config log report info WARNING in brelse
ci2-upstream-fs 2022/11/02 10:25 upstream b229b6ca5abb 08977f5d .config log report info WARNING in brelse
ci2-upstream-fs 2022/11/02 05:08 upstream b229b6ca5abb 08977f5d .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/31 22:53 upstream b229b6ca5abb 2a71366b .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/30 03:05 upstream b229b6ca5abb 2a71366b .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/29 23:58 upstream b229b6ca5abb 2a71366b .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/29 07:04 upstream b229b6ca5abb 899d812a .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/28 14:30 upstream b229b6ca5abb 8168b69e .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/27 06:19 upstream 4dc12f37a8e9 86777b7f .config log report info WARNING in brelse
ci-upstream-kasan-gce-smack-root 2022/10/26 17:12 upstream 4dc12f37a8e9 2159e4d2 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/26 16:53 upstream 4dc12f37a8e9 2159e4d2 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/23 23:58 upstream d47136c28015 23bf86af .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/23 22:21 upstream d47136c28015 23bf86af .config log report info WARNING in brelse
ci-upstream-kasan-gce-smack-root 2022/10/22 01:30 upstream e35184f32151 4bfd3c27 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/20 21:16 upstream 493ffd6605b2 a0fd4dab .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/20 11:48 upstream 493ffd6605b2 b31320fc .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/16 12:35 upstream 493ffd6605b2 67cb024c .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/14 04:55 upstream 493ffd6605b2 4954e4b2 .config log report info WARNING in brelse
ci-upstream-kasan-gce-smack-root 2022/10/13 21:40 upstream 55be6084c8e0 adf90437 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/13 12:59 upstream 493ffd6605b2 adf90437 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/13 04:08 upstream 493ffd6605b2 3f6b40a1 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/09 22:37 upstream a6afa4199d3d aea5da89 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/09 22:30 upstream a6afa4199d3d aea5da89 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/09 03:58 upstream a6afa4199d3d aea5da89 .config log report info WARNING in brelse
ci2-upstream-fs 2022/10/08 21:15 upstream 62e6e5940c0c aea5da89 .config log report info WARNING in brelse
ci2-upstream-fs 2022/09/30 12:22 upstream 987a926c1d8a 45fd7169 .config log report info WARNING in brelse
ci2-upstream-fs 2022/09/29 17:31 upstream c3e0e1e23c70 45fd7169 .config log report info WARNING in brelse
ci2-upstream-fs 2022/09/28 03:57 upstream 46452d3786a8 75c78242 .config log report info WARNING in brelse
* Struck through repros no longer work on HEAD.