syzbot


kernel BUG at fs/reiserfs/lock.c:LINE!

Status: auto-closed as invalid on 2020/02/01 11:28
Reported-by: syzbot+48047f9b249207f449ce@syzkaller.appspotmail.com
First crash: 2041d, last: 1875d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at fs/reiserfs/lock.c:LINE! reiserfs 13 2040d 2326d 0/28 auto-closed as invalid on 2019/10/19 15:58
linux-4.14 kernel BUG at fs/reiserfs/lock.c:LINE! 1 1752d 1752d 0/1 auto-closed as invalid on 2020/06/02 22:04
linux-4.19 kernel BUG at fs/reiserfs/lock.c:LINE! (2) C done 2 1736d 1736d 1/1 fixed on 2020/03/21 18:15

Sample crash report:
REISERFS warning (device loop4):  reiserfs_fill_super: Cannot allocate memory for journal device name
------------[ cut here ]------------
kernel BUG at fs/reiserfs/lock.c:44!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 610 Comm: syz-executor.4 Not tainted 4.19.76 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:reiserfs_write_unlock+0xeb/0x110 fs/reiserfs/lock.c:44
Code: 5d c3 e8 78 56 89 ff 48 8d 7b 28 48 c7 83 a8 00 00 00 00 00 00 00 e8 84 52 11 05 e8 5f 56 89 ff 5b 41 5c 5d c3 e8 55 56 89 ff <0f> 0b e8 ae e9 bf ff eb a1 e8 c7 e9 bf ff e9 33 ff ff ff e8 bd e9
RSP: 0018:ffff888026107a88 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff888098eb6040 RCX: ffffc9000a567000
RDX: 0000000000040000 RSI: ffffffff81e20c9b RDI: ffff888098eb60e8
RBP: ffff888026107a98 R08: 0000000000000065 R09: ffffed1015d25079
R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: 00000000ffffffea
R13: ffff88805595a800 R14: ffff888026107c38 R15: ffff888098eb6040
FS:  00007fbae27f7700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc26e34d50 CR3: 000000008d20a000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 reiserfs_fill_super+0x2b51/0x2eb0 fs/reiserfs/super.c:2219
 mount_bdev+0x304/0x3c0 fs/super.c:1158
 get_super_block+0x35/0x40 fs/reiserfs/super.c:2605
 mount_fs+0xa8/0x31f fs/super.c:1261
 vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
 vfs_kern_mount fs/namespace.c:951 [inline]
 do_new_mount fs/namespace.c:2469 [inline]
 do_mount+0x53e/0x2bc0 fs/namespace.c:2799
 ksys_mount+0xdb/0x150 fs/namespace.c:3015
 __do_sys_mount fs/namespace.c:3029 [inline]
 __se_sys_mount fs/namespace.c:3026 [inline]
 __x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c47a
Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00
RSP: 002b:00007fbae27f6a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fbae27f6b40 RCX: 000000000045c47a
RDX: 00007fbae27f6ae0 RSI: 0000000020000080 RDI: 00007fbae27f6b00
RBP: 0000000000000000 R08: 00007fbae27f6b40 R09: 00007fbae27f6ae0
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
R13: 00000000004c8ea4 R14: 00000000004e0318 R15: 0000000000000003
Modules linked in:
kobject: 'loop2' (00000000aa1cac7e): kobject_uevent_env
kobject: 'nr0' (00000000f5629eb8): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'loop2' (00000000aa1cac7e): fill_kobj_path: path = '/devices/virtual/block/loop2'
kobject: 'loop5' (00000000bacd8405): kobject_uevent_env
---[ end trace 757b2352b54c1fee ]---
kobject: 'nr0' (00000000f5629eb8): kobject_uevent_env
kobject: 'nr0' (00000000f5629eb8): fill_kobj_path: path = '/devices/virtual/net/nr0'
RIP: 0010:reiserfs_write_unlock+0xeb/0x110 fs/reiserfs/lock.c:44
kobject: 'loop5' (00000000bacd8405): fill_kobj_path: path = '/devices/virtual/block/loop5'
Code: 5d c3 e8 78 56 89 ff 48 8d 7b 28 48 c7 83 a8 00 00 00 00 00 00 00 e8 84 52 11 05 e8 5f 56 89 ff 5b 41 5c 5d c3 e8 55 56 89 ff <0f> 0b e8 ae e9 bf ff eb a1 e8 c7 e9 bf ff e9 33 ff ff ff e8 bd e9
kobject: 'queues' (000000007f2c91c6): kobject_add_internal: parent: 'nr0', set: '<NULL>'
kobject: 'loop1' (00000000e5f8dd8f): kobject_uevent_env
RSP: 0018:ffff888026107a88 EFLAGS: 00010246
kobject: 'loop1' (00000000e5f8dd8f): fill_kobj_path: path = '/devices/virtual/block/loop1'
kobject: 'loop0' (000000001c810ad5): kobject_uevent_env
RAX: 0000000000040000 RBX: ffff888098eb6040 RCX: ffffc9000a567000
kobject: 'loop0' (000000001c810ad5): fill_kobj_path: path = '/devices/virtual/block/loop0'
kobject: 'loop4' (000000005d367b52): kobject_uevent_env
kobject: 'loop4' (000000005d367b52): fill_kobj_path: path = '/devices/virtual/block/loop4'
RDX: 0000000000040000 RSI: ffffffff81e20c9b RDI: ffff888098eb60e8
kobject: 'queues' (000000007f2c91c6): kobject_uevent_env
RBP: ffff888026107a98 R08: 0000000000000065 R09: ffffed1015d25079
R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: 00000000ffffffea
R13: ffff88805595a800 R14: ffff888026107c38 R15: ffff888098eb6040
kobject: 'queues' (000000007f2c91c6): kobject_uevent_env: filter function caused the event to drop!
FS:  00007fbae27f7700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kobject: 'rx-0' (00000000e26c8a79): kobject_add_internal: parent: 'queues', set: 'queues'
CR2: 00007ffd097dfbac CR3: 000000008d20a000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
kobject: 'rx-0' (00000000e26c8a79): kobject_uevent_env

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/04 11:27 linux-4.19.y 555161ee1b7a fc17ba49 .config console log report ci2-linux-4-19
2019/09/12 18:36 linux-4.19.y ee809c7e0895 0b7672ee .config console log report ci2-linux-4-19
2019/08/10 22:09 linux-4.19.y 893af1c79e42 acb51638 .config console log report ci2-linux-4-19
2019/06/12 08:24 linux-4.19.y 768292d05361 ea2f4006 .config console log report ci2-linux-4-19
2019/04/21 12:04 linux-4.19.y c98875d930e9 b0e8efcb .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.