syzbot


BUG: corrupted list in gfs2_fill_super

Status: upstream: reported C repro on 2024/06/02 06:20
Subsystems: gfs2
[Documentation on labels]
Reported-by: syzbot+d34c2a269ed512c531b0@syzkaller.appspotmail.com
First crash: 52d, last: 13m
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] [gfs2?] BUG: corrupted list in gfs2_fill_super 1 (4) 2024/07/11 11:00
[syzbot] Monthly gfs2 report (Jul 2024) 0 (1) 2024/07/01 10:27
Last patch testing requests (1)
Created Duration User Patch Repo Result
2024/06/02 09:50 31m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master OK log

Sample crash report:
list_del corruption, ffff88801e354410->prev is LIST_POISON2 (dead000000000122)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 5777 Comm: syz-executor410 Not tainted 6.10.0-rc7-next-20240710-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:__list_del_entry_valid_or_report+0x106/0x140 lib/list_debug.c:59
Code: e8 af 5f d8 06 90 0f 0b 48 c7 c7 80 a0 20 8c 4c 89 fe e8 9d 5f d8 06 90 0f 0b 48 c7 c7 e0 a0 20 8c 4c 89 fe e8 8b 5f d8 06 90 <0f> 0b 48 c7 c7 40 a1 20 8c 4c 89 fe 48 89 d9 e8 76 5f d8 06 90 0f
RSP: 0018:ffffc9000912f928 EFLAGS: 00010246
RAX: 000000000000004e RBX: dead000000000122 RCX: 710a8d5645865200
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 1ffff11005f41d00 R08: ffffffff8173e319 R09: 1ffff92001225ec0
R10: dffffc0000000000 R11: fffff52001225ec1 R12: dffffc0000000000
R13: ffff88801e354400 R14: ffff88802c12a810 R15: ffff88801e354410
FS:  00007fcd932e66c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555827377f8 CR3: 000000002046e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_del_entry_valid include/linux/list.h:124 [inline]
 __list_del_entry include/linux/list.h:215 [inline]
 list_del_rcu include/linux/rculist.h:157 [inline]
 destroy_workqueue+0x7b3/0xc40 kernel/workqueue.c:5847
 gfs2_fill_super+0x128a/0x2500 fs/gfs2/ops_fstype.c:1310
 get_tree_bdev+0x3f7/0x570 fs/super.c:1624
 gfs2_get_tree+0x54/0x220 fs/gfs2/ops_fstype.c:1329
 vfs_get_tree+0x90/0x2a0 fs/super.c:1789
 do_new_mount+0x2be/0xb40 fs/namespace.c:3471
 do_mount fs/namespace.c:3811 [inline]
 __do_sys_mount fs/namespace.c:4019 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:3996
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcd9335b60a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcd932e5fd8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fcd932e5ff0 RCX: 00007fcd9335b60a
RDX: 00000000200124c0 RSI: 0000000020012500 RDI: 00007fcd932e5ff0
RBP: 0000000000000005 R08: 00007fcd932e6030 R09: 00000000000124a5
R10: 0000000000000800 R11: 0000000000000282 R12: 00007fcd932e6030
R13: 0000000000000800 R14: 0000000000000004 R15: 0000000001000000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0x106/0x140 lib/list_debug.c:59
Code: e8 af 5f d8 06 90 0f 0b 48 c7 c7 80 a0 20 8c 4c 89 fe e8 9d 5f d8 06 90 0f 0b 48 c7 c7 e0 a0 20 8c 4c 89 fe e8 8b 5f d8 06 90 <0f> 0b 48 c7 c7 40 a1 20 8c 4c 89 fe 48 89 d9 e8 76 5f d8 06 90 0f
RSP: 0018:ffffc9000912f928 EFLAGS: 00010246

RAX: 000000000000004e RBX: dead000000000122 RCX: 710a8d5645865200
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 1ffff11005f41d00 R08: ffffffff8173e319 R09: 1ffff92001225ec0
R10: dffffc0000000000 R11: fffff52001225ec1 R12: dffffc0000000000
R13: ffff88801e354400 R14: ffff88802c12a810 R15: ffff88801e354410
FS:  00007fcd932e66c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555827377f8 CR3: 000000002046e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (3470):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/11 10:59 linux-next 523b23f0bee3 c699c2eb .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/16 00:08 linux-next 3fe121b62282 efee4ed2 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/15 20:49 linux-next 3fe121b62282 efee4ed2 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/11 08:30 linux-next 523b23f0bee3 c699c2eb .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/06/23 07:04 linux-next f76698bd9a8c edc5149a .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/06/21 12:39 linux-next b992b79ca8bc dac2aa43 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/05/29 18:59 linux-next 9d99040b1bc8 34889ee3 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 23:06 upstream 2c9b3512402e b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/20 21:48 upstream 3c3ff7be9729 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 11:58 upstream 3c3ff7be9729 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/20 05:15 upstream 4305ca0087dd 890ce4f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/20 04:35 upstream d7e78951a8b8 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 01:05 upstream 4305ca0087dd 890ce4f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/19 23:58 upstream 4305ca0087dd 890ce4f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/19 20:59 upstream 720261cfc732 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/19 20:21 upstream 4305ca0087dd 890ce4f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/19 19:14 upstream 720261cfc732 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/19 16:16 upstream 720261cfc732 890ce4f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/19 13:39 upstream 720261cfc732 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/19 08:23 upstream 720261cfc732 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/19 05:21 upstream 68b59730459e ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root BUG: corrupted list in gfs2_fill_super
2024/07/19 05:11 upstream 720261cfc732 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/19 00:08 upstream b1bc554e009e 71884c12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/18 22:26 upstream b1bc554e009e 71884c12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/18 18:03 upstream b1bc554e009e 7403ec00 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root BUG: corrupted list in gfs2_fill_super
2024/07/18 17:52 upstream b1bc554e009e 71884c12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/18 16:10 upstream b1bc554e009e 71884c12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/18 14:37 upstream b1bc554e009e 7403ec00 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root BUG: corrupted list in gfs2_fill_super
2024/07/18 13:23 upstream b1bc554e009e 71884c12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/18 10:12 upstream b1bc554e009e 0f902625 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: corrupted list in gfs2_fill_super
2024/07/20 20:43 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 20:07 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 19:03 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 15:17 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 13:52 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 12:58 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 08:44 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 07:09 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/20 01:56 linux-next 41c196e567fb b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/19 22:31 linux-next 41c196e567fb ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/19 12:17 linux-next 41c196e567fb ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/19 11:03 linux-next 41c196e567fb ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/19 09:28 linux-next 41c196e567fb ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/19 02:41 linux-next 73399b58e5e5 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/19 01:24 linux-next 73399b58e5e5 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/18 12:31 linux-next 73399b58e5e5 7403ec00 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in gfs2_fill_super
2024/07/21 00:52 upstream 2c9b3512402e b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in gfs2_fill_super
2024/07/20 22:55 upstream 2c9b3512402e b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in gfs2_fill_super
2024/07/20 17:39 upstream 3c3ff7be9729 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in gfs2_fill_super
2024/07/20 02:58 upstream d7e78951a8b8 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in gfs2_fill_super
2024/07/19 17:09 upstream 720261cfc732 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in gfs2_fill_super
2024/07/19 14:46 upstream 720261cfc732 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in gfs2_fill_super
2024/07/19 10:55 upstream 720261cfc732 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in gfs2_fill_super
2024/07/18 21:21 upstream b1bc554e009e 71884c12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs KASAN: slab-use-after-free Read in gfs2_fill_super
2024/06/23 01:54 linux-next f76698bd9a8c edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KFENCE: use-after-free in gfs2_fill_super
2024/06/15 01:38 linux-next a957267fa7e9 8d849073 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Write in gfs2_fill_super
* Struck through repros no longer work on HEAD.