syzbot


kernel BUG in reiserfs_cut_from_item

Status: upstream: reported C repro on 2023/06/09 13:59
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+f62df49d6b037e4d80c0@syzkaller.appspotmail.com
First crash: 709d, last: 17h37m
Fix bisection: failed (error log, bisect log)
  
Bug presence (3)
Date Name Commit Repro Result
2024/12/09 linux-5.15.y (ToT) 0a51d2d4527b C [report] kernel BUG in reiserfs_cut_from_item
2024/07/22 upstream (ToT) 7846b618e0a4 C [report] kernel BUG in reiserfs_cut_from_item
2024/12/09 upstream (ToT) fac04efc5c79 C Didn't crash
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in reiserfs_cut_from_item origin:upstream missing-backport C done 37 75d 732d 0/3 upstream: reported C repro on 2023/05/17 06:05
upstream kernel BUG in reiserfs_cut_from_item reiserfs C error done 57 496d 862d 0/28 auto-obsoleted due to no activity on 2024/04/16 05:18
Last patch testing requests (10)
Created Duration User Patch Repo Result
2025/04/23 19:19 10m retest repro linux-5.15.y report log
2025/04/23 19:19 15m retest repro linux-5.15.y report log
2025/04/07 14:36 18m retest repro linux-5.15.y report log
2025/04/07 14:36 20m retest repro linux-5.15.y report log
2025/03/24 10:17 9m retest repro linux-5.15.y report log
2025/02/17 06:01 14m retest repro linux-5.15.y report log
2025/01/26 18:15 22m retest repro linux-5.15.y report log
2025/01/26 18:15 17m retest repro linux-5.15.y report log
2025/01/26 18:15 10m retest repro linux-5.15.y report log
2025/01/26 18:15 17m retest repro linux-5.15.y report log

Sample crash report:
-------------------------------------------------------------------------------
| 1| *3.6* [2 7 0x0 SD], item_len 44, item_location 4008, free_space(entry_count) 65535 |
	mode | size | nlinks | first direct | mtime
	0100000 |    169 |  1 | 0 | 1745716461
===================================================================
REISERFS panic (device loop0): PAP-5580 reiserfs_cut_from_item: item to convert does not exist ([2 7 0x1 IND])
------------[ cut here ]------------
kernel BUG at fs/reiserfs/prints.c:390!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4162 Comm: syz-executor317 Not tainted 5.15.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:__reiserfs_panic+0x13a/0x140 fs/reiserfs/prints.c:390
Code: c7 c1 40 47 1b 8a 48 0f 44 c8 4c 0f 44 f0 48 c7 c7 00 48 1b 8a 4c 89 fe 4c 89 f2 49 89 d8 49 c7 c1 a0 5f 1c 96 e8 16 52 ff ff <0f> 0b 0f 1f 40 00 53 48 89 fb e8 77 a0 e0 f7 48 c7 c7 c0 50 1b 8a
RSP: 0018:ffffc90002def240 EFLAGS: 00010246
RAX: 000000000000006e RBX: ffffffff8baf1b3c RCX: 0cd58bf39097fc00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc90002def330 R08: dffffc0000000000 R09: fffff520005bddad
R10: fffff520005bddad R11: 1ffff920005bddac R12: ffffffff8a1b65e0
R13: ffffc90002def260 R14: ffffffff8a1b65c0 R15: ffff88801e6466a8
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7b3436cb48 CR3: 000000000be8e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_cut_from_item+0x1926/0x1ef0 fs/reiserfs/stree.c:1729
 reiserfs_do_truncate+0xa90/0x13e0 fs/reiserfs/stree.c:1973
 reiserfs_truncate_file+0x632/0xdc0 fs/reiserfs/inode.c:2318
 reiserfs_file_release+0x8e0/0xa50 fs/reiserfs/file.c:109
 __fput+0x234/0x930 fs/file_table.c:311
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x616/0x20a0 kernel/exit.c:874
 do_group_exit+0x12e/0x300 kernel/exit.c:996
 __do_sys_exit_group kernel/exit.c:1007 [inline]
 __se_sys_exit_group kernel/exit.c:1005 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1005
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f7b34322f79
Code: Unable to access opcode bytes at RIP 0x7f7b34322f4f.
RSP: 002b:00007ffd0c7afc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7b34322f79
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f7b3439e2b0 R08: ffffffffffffffb8 R09: 00007ffd0c7afeb8
R10: 00007ffd0c7afeb8 R11: 0000000000000246 R12: 00007f7b3439e2b0
R13: 0000000000000000 R14: 00007f7b3439f020 R15: 00007f7b342f1ac0
 </TASK>
Modules linked in:
---[ end trace f125ca0f0602fde2 ]---
RIP: 0010:__reiserfs_panic+0x13a/0x140 fs/reiserfs/prints.c:390
Code: c7 c1 40 47 1b 8a 48 0f 44 c8 4c 0f 44 f0 48 c7 c7 00 48 1b 8a 4c 89 fe 4c 89 f2 49 89 d8 49 c7 c1 a0 5f 1c 96 e8 16 52 ff ff <0f> 0b 0f 1f 40 00 53 48 89 fb e8 77 a0 e0 f7 48 c7 c7 c0 50 1b 8a
RSP: 0018:ffffc90002def240 EFLAGS: 00010246
RAX: 000000000000006e RBX: ffffffff8baf1b3c RCX: 0cd58bf39097fc00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc90002def330 R08: dffffc0000000000 R09: fffff520005bddad
R10: fffff520005bddad R11: 1ffff920005bddac R12: ffffffff8a1b65e0
R13: ffffc90002def260 R14: ffffffff8a1b65c0 R15: ffff88801e6466a8
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7b3436cb48 CR3: 000000000be8e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (69):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/27 01:14 linux-5.15.y f7347f400572 c6b4fb39 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/12/28 21:24 linux-5.15.y 91786f140358 d3ccff63 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 14:46 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 12:38 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/01/21 13:12 linux-5.15.y ddcaf4999061 9bd8dcda .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/10 09:52 linux-5.15.y 7349e40704a0 9018a337 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/08/15 17:02 linux-5.15.y 24c4de4069cb 39990d51 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2025/05/17 21:20 linux-5.15.y 3b8db0e4f263 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2025/05/04 21:01 linux-5.15.y 16fdf2c7111b b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2025/04/27 00:44 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2025/02/26 11:03 linux-5.15.y c16c81c81336 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/12/29 14:17 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/12/28 20:40 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/12/02 07:09 linux-5.15.y 0a51d2d4527b 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/12/02 07:09 linux-5.15.y 0a51d2d4527b 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/10/21 02:50 linux-5.15.y 584a40a22cb9 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/10/06 13:53 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/09/23 05:04 linux-5.15.y 3a5928702e71 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/09/09 02:12 linux-5.15.y 14e468424d3e 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/08/11 00:48 linux-5.15.y 7e89efd3ae1c 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/28 21:33 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/28 21:32 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/28 21:23 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/28 21:22 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 20:45 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 11:41 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 11:40 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 11:40 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/21 11:40 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/07/08 18:17 linux-5.15.y f45bea23c39c cde64f7d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/04/24 10:15 linux-5.15.y c52b9710c83d 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/04/23 14:33 linux-5.15.y c52b9710c83d 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/04/16 16:09 linux-5.15.y fa3df276cd36 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/04/05 05:08 linux-5.15.y 9465fef4ae35 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/12/07 19:37 linux-5.15.y 9b91d36ba301 0a02ce36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/12/06 19:40 linux-5.15.y 9b91d36ba301 e3299f55 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/12/06 03:08 linux-5.15.y 9b91d36ba301 858d62d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/10/27 15:28 linux-5.15.y 12952a23a5da 3c418d72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/10/19 15:34 linux-5.15.y 02e21884dcf2 42e1d524 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2024/09/18 18:07 linux-5.15.y 3a5928702e71 c673ca06 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/05/05 22:15 linux-5.15.y 284087d4f7d5 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/04/06 20:55 linux-5.15.y 9465fef4ae35 ca620dd8 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/01/21 11:18 linux-5.15.y ddcaf4999061 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2024/01/11 09:05 linux-5.15.y 26c690eff0a5 00f3cc59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/10/10 06:50 linux-5.15.y 1edcec18cfb7 c9be5398 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/09/29 15:49 linux-5.15.y b911329317b4 8e26a358 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/19 10:48 linux-5.15.y d54cfc420586 022df2bb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/26 20:39 linux-5.15.y f67653019430 4cd5bb25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/21 23:28 linux-5.15.y f67653019430 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/16 11:03 linux-5.15.y 471e639e59d1 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/15 18:37 linux-5.15.y 471e639e59d1 90d4044e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/15 04:25 linux-5.15.y 471e639e59d1 76decb82 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/06/09 13:58 linux-5.15.y 7349e40704a0 058b3a5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in reiserfs_cut_from_item
2023/08/26 21:17 linux-5.15.y 5ddfe5cc8716 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/07/05 05:58 linux-5.15.y 4af60700a60c 80298b6f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/20 00:46 linux-5.15.y 471e639e59d1 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
2023/06/09 17:08 linux-5.15.y 7349e40704a0 9018a337 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in reiserfs_cut_from_item
* Struck through repros no longer work on HEAD.