[v6.1] WARNING in dbAdjTree
0 views
Skip to first unread message
syzbot
Apr 12, 2024, 10:01:38 PMApr 12
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: bf1e3b1cb1e0 Linux 6.1.85
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=135b0adb180000
kernel config: https://syzkaller.appspot.com/x/.config?x=d3e21b90946dbbab
dashboard link: https://syzkaller.appspot.com/bug?extid=fd2a031faefa115b2187
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/75265c862e54/disk-bf1e3b1c.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1d22ca40ea90/vmlinux-bf1e3b1c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a5fcb5ebd870/bzImage-bf1e3b1c.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+fd2a03...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 132 at fs/jfs/jfs_dmap.c:2873 dbAdjTree+0x41b/0x520
Modules linked in:
CPU: 1 PID: 132 Comm: jfsCommit Not tainted 6.1.85-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:dbAdjTree+0x41b/0x520 fs/jfs/jfs_dmap.c:2873
Code: fe eb bd e8 67 b6 84 fe eb 0c e8 60 b6 84 fe eb 05 e8 59 b6 84 fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 45 b6 84 fe <0f> 0b eb e8 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a fc ff ff 48 89
RSP: 0018:ffffc90002edf5d8 EFLAGS: 00010293
RAX: ffffffff8305e0ab RBX: 0000000000000155 RCX: ffff888015ba9dc0
RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
RBP: ffff888076a56018 R08: ffffffff8305dce7 R09: fffff940003b52b1
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000004 R14: ffff888076a56010 R15: 0000000000020056
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff73d5d5000 CR3: 00000000647dd000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
dbJoin+0x255/0x310 fs/jfs/jfs_dmap.c:2841
dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2338
dbFreeDmap fs/jfs/jfs_dmap.c:2087 [inline]
dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2515
xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:2467
jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
evict+0x2a4/0x620 fs/inode.c:666
txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2367
txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]
jfs_lazycommit+0x476/0xb60 fs/jfs/jfs_txnmgr.c:2732
kthread+0x28d/0x320 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
</TASK>
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: bf1e3b1cb1e0 Linux 6.1.85
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=135b0adb180000
kernel config: https://syzkaller.appspot.com/x/.config?x=d3e21b90946dbbab
dashboard link: https://syzkaller.appspot.com/bug?extid=fd2a031faefa115b2187
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/75265c862e54/disk-bf1e3b1c.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1d22ca40ea90/vmlinux-bf1e3b1c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a5fcb5ebd870/bzImage-bf1e3b1c.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+fd2a03...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 132 at fs/jfs/jfs_dmap.c:2873 dbAdjTree+0x41b/0x520
Modules linked in:
CPU: 1 PID: 132 Comm: jfsCommit Not tainted 6.1.85-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:dbAdjTree+0x41b/0x520 fs/jfs/jfs_dmap.c:2873
Code: fe eb bd e8 67 b6 84 fe eb 0c e8 60 b6 84 fe eb 05 e8 59 b6 84 fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 45 b6 84 fe <0f> 0b eb e8 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a fc ff ff 48 89
RSP: 0018:ffffc90002edf5d8 EFLAGS: 00010293
RAX: ffffffff8305e0ab RBX: 0000000000000155 RCX: ffff888015ba9dc0
RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
RBP: ffff888076a56018 R08: ffffffff8305dce7 R09: fffff940003b52b1
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000004 R14: ffff888076a56010 R15: 0000000000020056
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff73d5d5000 CR3: 00000000647dd000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
dbJoin+0x255/0x310 fs/jfs/jfs_dmap.c:2841
dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2338
dbFreeDmap fs/jfs/jfs_dmap.c:2087 [inline]
dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2515
xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:2467
jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
evict+0x2a4/0x620 fs/inode.c:666
txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2367
txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]
jfs_lazycommit+0x476/0xb60 fs/jfs/jfs_txnmgr.c:2732
kthread+0x28d/0x320 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
</TASK>
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Apr 12, 2024, 11:18:47 PMApr 12
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: bf1e3b1cb1e0 Linux 6.1.85
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=14eafbf3180000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10b10bf3180000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/75265c862e54/disk-bf1e3b1c.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1d22ca40ea90/vmlinux-bf1e3b1c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a5fcb5ebd870/bzImage-bf1e3b1c.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/4281c096b82d/mount_0.gz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+fd2a03...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 133 at fs/jfs/jfs_dmap.c:2873 dbAdjTree+0x41b/0x520
Modules linked in:
CPU: 1 PID: 133 Comm: jfsCommit Not tainted 6.1.85-syzkaller #0
RAX: ffffffff8305e0ab RBX: 0000000000000155 RCX: ffff888015f40000
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
HEAD commit: bf1e3b1cb1e0 Linux 6.1.85
git tree: linux-6.1.y
kernel config: https://syzkaller.appspot.com/x/.config?x=d3e21b90946dbbab
dashboard link: https://syzkaller.appspot.com/bug?extid=fd2a031faefa115b2187
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=125907cb180000
dashboard link: https://syzkaller.appspot.com/bug?extid=fd2a031faefa115b2187
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10b10bf3180000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/75265c862e54/disk-bf1e3b1c.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1d22ca40ea90/vmlinux-bf1e3b1c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a5fcb5ebd870/bzImage-bf1e3b1c.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+fd2a03...@syzkaller.appspotmail.com
------------[ cut here ]------------
Modules linked in:
CPU: 1 PID: 133 Comm: jfsCommit Not tainted 6.1.85-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:dbAdjTree+0x41b/0x520 fs/jfs/jfs_dmap.c:2873
Code: fe eb bd e8 67 b6 84 fe eb 0c e8 60 b6 84 fe eb 05 e8 59 b6 84 fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 45 b6 84 fe <0f> 0b eb e8 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a fc ff ff 48 89
RSP: 0018:ffffc90002d5f5d8 EFLAGS: 00010293
RIP: 0010:dbAdjTree+0x41b/0x520 fs/jfs/jfs_dmap.c:2873
Code: fe eb bd e8 67 b6 84 fe eb 0c e8 60 b6 84 fe eb 05 e8 59 b6 84 fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 45 b6 84 fe <0f> 0b eb e8 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a fc ff ff 48 89
RAX: ffffffff8305e0ab RBX: 0000000000000155 RCX: ffff888015f40000
RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
RBP: ffff888076cfd018 R08: ffffffff8305dce7 R09: fffffbfff209305f
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000004 R14: ffff888076cfd010 R15: 0000000000020056
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005609353578b8 CR3: 000000000ce8e000 CR4: 00000000003506e0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
dbJoin+0x255/0x310 fs/jfs/jfs_dmap.c:2841
dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2338
dbFreeDmap fs/jfs/jfs_dmap.c:2087 [inline]
dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2515
xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:2467
jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
evict+0x2a4/0x620 fs/inode.c:666
txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2367
txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]
jfs_lazycommit+0x476/0xb60 fs/jfs/jfs_txnmgr.c:2732
kthread+0x28d/0x320 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
</TASK>
---
If you want syzbot to run the reproducer, reply with:
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
dbJoin+0x255/0x310 fs/jfs/jfs_dmap.c:2841
dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2338
dbFreeDmap fs/jfs/jfs_dmap.c:2087 [inline]
dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2515
xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:2467
jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
evict+0x2a4/0x620 fs/inode.c:666
txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2367
txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]
jfs_lazycommit+0x476/0xb60 fs/jfs/jfs_txnmgr.c:2732
kthread+0x28d/0x320 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
</TASK>
---
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
syzbot
Apr 14, 2024, 3:03:26 AMApr 14
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: fa3df276cd36 Linux 5.15.155
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=102b0f7b180000
kernel config: https://syzkaller.appspot.com/x/.config?x=f12ea3f162537c9c
dashboard link: https://syzkaller.appspot.com/bug?extid=abb7d74b5f4a92db1d75
disk image: https://storage.googleapis.com/syzbot-assets/feaf3fb3f68f/disk-fa3df276.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/537c519f1dd0/vmlinux-fa3df276.xz
kernel image: https://storage.googleapis.com/syzbot-assets/5396ec75d1be/bzImage-fa3df276.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+abb7d7...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 275 at fs/jfs/jfs_dmap.c:2941 dbAdjTree+0x41b/0x520
Modules linked in:
CPU: 0 PID: 275 Comm: jfsCommit Not tainted 5.15.155-syzkaller #0
Code: fe eb bd e8 97 4f 9e fe eb 0c e8 90 4f 9e fe eb 05 e8 89 4f 9e fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 4f 9e fe <0f> 0b eb e8 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a fc ff ff 48 89
RSP: 0018:ffffc90002c975d8 EFLAGS: 00010293
RAX: ffffffff82e20d6b RBX: 0000000000000155 RCX: ffff888019721dc0
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2406
dbFreeDmap fs/jfs/jfs_dmap.c:2155 [inline]
dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2549
xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:3428
txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2401
txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
jfs_lazycommit+0x470/0xc30 fs/jfs/jfs_txnmgr.c:2766
kthread+0x3f6/0x4f0 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
syzbot found the following issue on:
HEAD commit: fa3df276cd36 Linux 5.15.155
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=102b0f7b180000
kernel config: https://syzkaller.appspot.com/x/.config?x=f12ea3f162537c9c
dashboard link: https://syzkaller.appspot.com/bug?extid=abb7d74b5f4a92db1d75
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/feaf3fb3f68f/disk-fa3df276.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/537c519f1dd0/vmlinux-fa3df276.xz
kernel image: https://storage.googleapis.com/syzbot-assets/5396ec75d1be/bzImage-fa3df276.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 275 at fs/jfs/jfs_dmap.c:2941 dbAdjTree+0x41b/0x520
Modules linked in:
CPU: 0 PID: 275 Comm: jfsCommit Not tainted 5.15.155-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:dbAdjTree+0x41b/0x520 fs/jfs/jfs_dmap.c:2941
Code: fe eb bd e8 97 4f 9e fe eb 0c e8 90 4f 9e fe eb 05 e8 89 4f 9e fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 4f 9e fe <0f> 0b eb e8 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a fc ff ff 48 89
RSP: 0018:ffffc90002c975d8 EFLAGS: 00010293
RAX: ffffffff82e20d6b RBX: 0000000000000155 RCX: ffff888019721dc0
RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
RBP: ffff888012a29018 R08: ffffffff82e209a7 R09: fffff94000095149
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000004 R14: ffff888012a29010 R15: 0000000000020056
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f97d5280198 CR3: 000000001bbe8000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
dbJoin+0x255/0x310 fs/jfs/jfs_dmap.c:2909
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2406
dbFreeDmap fs/jfs/jfs_dmap.c:2155 [inline]
dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2549
xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:3428
jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
evict+0x2a4/0x620 fs/inode.c:587
jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2401
txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
jfs_lazycommit+0x470/0xc30 fs/jfs/jfs_txnmgr.c:2766
kthread+0x3f6/0x4f0 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
syzbot
Apr 14, 2024, 9:14:27 AMApr 14
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: fa3df276cd36 Linux 5.15.155
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=16a3cecd180000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=17c08adb180000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/feaf3fb3f68f/disk-fa3df276.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/537c519f1dd0/vmlinux-fa3df276.xz
kernel image: https://storage.googleapis.com/syzbot-assets/5396ec75d1be/bzImage-fa3df276.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/c8abaed6f727/mount_0.gz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+abb7d7...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 276 at fs/jfs/jfs_dmap.c:2941 dbAdjTree+0x41b/0x520
Modules linked in:
CPU: 1 PID: 276 Comm: jfsCommit Not tainted 5.15.155-syzkaller #0
RAX: ffffffff82e20d6b RBX: 0000000000000155 RCX: ffff888019063b80
HEAD commit: fa3df276cd36 Linux 5.15.155
git tree: linux-5.15.y
kernel config: https://syzkaller.appspot.com/x/.config?x=f12ea3f162537c9c
dashboard link: https://syzkaller.appspot.com/bug?extid=abb7d74b5f4a92db1d75
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12bf9f4d180000
dashboard link: https://syzkaller.appspot.com/bug?extid=abb7d74b5f4a92db1d75
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=17c08adb180000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/feaf3fb3f68f/disk-fa3df276.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/537c519f1dd0/vmlinux-fa3df276.xz
kernel image: https://storage.googleapis.com/syzbot-assets/5396ec75d1be/bzImage-fa3df276.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+abb7d7...@syzkaller.appspotmail.com
------------[ cut here ]------------
Modules linked in:
CPU: 1 PID: 276 Comm: jfsCommit Not tainted 5.15.155-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:dbAdjTree+0x41b/0x520 fs/jfs/jfs_dmap.c:2941
Code: fe eb bd e8 97 4f 9e fe eb 0c e8 90 4f 9e fe eb 05 e8 89 4f 9e fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 4f 9e fe <0f> 0b eb e8 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a fc ff ff 48 89
RSP: 0018:ffffc90002b275d8 EFLAGS: 00010293
RIP: 0010:dbAdjTree+0x41b/0x520 fs/jfs/jfs_dmap.c:2941
Code: fe eb bd e8 97 4f 9e fe eb 0c e8 90 4f 9e fe eb 05 e8 89 4f 9e fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 4f 9e fe <0f> 0b eb e8 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a fc ff ff 48 89
RAX: ffffffff82e20d6b RBX: 0000000000000155 RCX: ffff888019063b80
RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
RBP: ffff88801d35d018 R08: ffffffff82e209a7 R09: fffff940000e9ae9
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000004 R14: ffff88801d35d010 R15: 0000000000020056
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f13c7f77130 CR3: 0000000021e37000 CR4: 00000000003506e0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
dbJoin+0x255/0x310 fs/jfs/jfs_dmap.c:2909
dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2406
dbFreeDmap fs/jfs/jfs_dmap.c:2155 [inline]
dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2549
xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:3428
jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
evict+0x2a4/0x620 fs/inode.c:587
txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2401
txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
jfs_lazycommit+0x470/0xc30 fs/jfs/jfs_txnmgr.c:2766
kthread+0x3f6/0x4f0 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
</TASK>
---
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
dbJoin+0x255/0x310 fs/jfs/jfs_dmap.c:2909
dbFreeBits+0x4ef/0xdb0 fs/jfs/jfs_dmap.c:2406
dbFreeDmap fs/jfs/jfs_dmap.c:2155 [inline]
dbFree+0x357/0x670 fs/jfs/jfs_dmap.c:409
txFreeMap+0x966/0xd50 fs/jfs/jfs_txnmgr.c:2549
xtTruncate+0xe58/0x3260 fs/jfs/jfs_xtree.c:3428
jfs_free_zero_link+0x46a/0x6e0 fs/jfs/namei.c:758
jfs_evict_inode+0x35b/0x440 fs/jfs/inode.c:153
evict+0x2a4/0x620 fs/inode.c:587
txUpdateMap+0x825/0x9e0 fs/jfs/jfs_txnmgr.c:2401
txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
jfs_lazycommit+0x470/0xc30 fs/jfs/jfs_txnmgr.c:2766
kthread+0x3f6/0x4f0 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:300
</TASK>
---
Reply all
Reply to author
Forward
0 new messages