From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.1 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id ECDC0C2D0A8 for ; Mon, 28 Sep 2020 20:36:46 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 771BD2080A for ; Mon, 28 Sep 2020 20:36:46 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=aol.com header.i=@aol.com header.b="scQks6tR" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726891AbgI1Ugo (ORCPT ); Mon, 28 Sep 2020 16:36:44 -0400 Received: from sonic301-22.consmr.mail.gq1.yahoo.com ([98.137.64.148]:44520 "EHLO sonic301-22.consmr.mail.gq1.yahoo.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726761AbgI1Ugo (ORCPT ); Mon, 28 Sep 2020 16:36:44 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aol.com; s=a2048; t=1601325403; bh=GZprWnTl+eBHSNmQV5uJKps1Zts7hTFzMj6gKmT4ZWQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From:Subject; b=scQks6tRGlh38KfJC+aBueFBJOcPbF/im7Nac0STjZGih/Op4nqRPgwPOFP4mBx3MHik+BsTNtHC0JYB6u1iHwWZKtIY6q9uzoiIcVQD4FwGNEU5f/VtC5xGOeacFdCFmS7qJrmRzz++wTQ/UFMk4dMlX+BQjGxMw8q7V/nSHmJO+sCvG6f+Hso5pKO5nugrojoFezZkZeOacdYCFPXdXKjaQE971Iw1A3oFK7jH2XHfmx0fr8F5VbnTOcCj7mFTNWdzbDyulNouJYgYW3DjrIsOTXjmuV+mexuX/6ln89q0uppvilRxm8IqSctysljmYy8KEpzk0Fh9h1UBwgSsRg== X-YMail-OSG: qxLJVzQVM1lQSqYJ6MoZ3aW5WK957rVzm2ddGQEjg2ehiZR.ERUCkUBB.xK7sZ_ aW2eDUJjsm7iLn.O1kaR2F2VNLlEWyBYNMs7XjZWS.CmuyZVSCAADky5dr4Po.yuNNklMNKoMqjp DkdZV2ujaWNXrGDYrd7pT6noQNS2ZAW70lt_0kEKbEMHe6SgWX3NIC3fDbo.KT7FYHsSpEwlZnI3 J5CEwM11WUQC6p.0Y2WVqQyv9G.M3I25C5AChyrBu0IjsYCnFY7D6JURCs9sObR1but6K2b2cSet ie0BNXAzPgZToDrVJNgbuBxBgfNQ5p1zrILKR2eHgpsarx2kqHIm3b06BoZ3ddfXtKxbI746Er71 SHgItSCWTgYxX.HlU19Tfc7nERdLL8CpLojpjPU7BozgxxwFL2y7JeeRbanJLtZPMjIxBeED8e8L lZhjds.zeOyqtDxlXML40jBrfw.G4RBK1CXKKsN6CURIKYZ7RLGA5NgFQbRIrmYwlWsaCs7iMPwk k3vpXwTLJfsdoGtlTM29hQYI_m7nCnhTS0Lg4PCnPZ99kRBGQg6lwgUnXa0F9jHnUlS08XJHo4Pg q927lGndaWDjn..2gZ8b8.TGucCUFO8xMNpYrxxeGrESKZoEeWfQ.if5UusmlEh5B3iO2aWp6YR2 JUS8XSzzqeWtX6oeEmLn.XTQSvIPaH7auIRqTTZm6NWZpenFa11.NjF9K1tGqJAdGt3zfAybBwmD 5.bXFtcgXIzhZaHhxKQM48YqVN_dl_yDjyCbCP96v03DtxgKrO2gob8vkRyH6GVHJcWKlfg433Yf BMuyH2hKQFM64CZ4JcxypRIt.2YWtSlvbxO9gYNHU6TgTRdsHQwzIs.hxCqOQgtK2YvVUIf8iZ.V AKH2Sw2kSMq.dVeJ.AdL1D6wkDhEdqVeQaS6fkmg1JrSynb1JJmmX4SEid7bgTBh_RZAFfxBOhdq 3YBRANepO0Pn4x940jgI12uJ85VQv9fk9VDXabsyid8I3MbWe7HzP6hMlMD55j0726YNnxR0.wZS 5L7RuDNpnFev9UpuOCsK0h53BcGYPhsj1PqJqjjHfL.SGiOeiRXQkIlXfEJKJjIk61GPC2LGMKHC E3W.eyZw7Jam6EYLyIlRHfK0TxoIyNXe.8zGrlBT9ytE4VQG6jnm7yxtci5TuiVh.uAByuTqFy6E SiQmoeKGCsbyQ9QLNh_8N9Ce2J6IGN7G9nirvogpfX3UOXBz0AP2gag5Q3wUQR3raivuUJ8GDxpW 7GRsa1tk19MDTx5d.hMKA0O20APOvs2cDVPWnMu6PkhAAhDgdV1VdtmrM3yC76jIU4YGckBXPX6I 70H_6DtoTpVZPArRSnA20A8FLrXwtsMvZYYEPpXiTIT49X6fai9BK97_Uj9MbywQWdws70j4O65Y XtLCnfMftb45kcnRDZUtBDeTQauBa9KUMgLgg5W1pFAh8w6mpnObAej1lHMdELP7Yel73cKqs_V0 MUBxL4IG2Pq9P1tyc7E8Kpor0i_3VChL8hOEumjCPgcXD Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.gq1.yahoo.com with HTTP; Mon, 28 Sep 2020 20:36:43 +0000 Received: by smtp419.mail.ir2.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID 1dcce5b8f69c9421ae96c4d2986bd734; Mon, 28 Sep 2020 20:36:39 +0000 (UTC) Date: Tue, 29 Sep 2020 04:36:30 +0800 From: Gao Xiang To: syzbot Cc: chao@kernel.org, devel@driverdev.osuosl.org, gregkh@linuxfoundation.org, linux-erofs@lists.ozlabs.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com, xiang@kernel.org, yuchao0@huawei.com Subject: Re: kernel BUG at fs/erofs/inode.c:LINE! Message-ID: <20200928203035.GA7770@hsiangkao-HP-ZHAN-66-Pro-G1> References: <0000000000000044ba05b05a9961@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <0000000000000044ba05b05a9961@google.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-Mailer: WebService/1.1.16674 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.aol Apache-HttpAsyncClient/4.1.4 (Java/11.0.7) Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi, On Mon, Sep 28, 2020 at 12:27:24AM -0700, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: d1d2220c Add linux-next specific files for 20200924 > git tree: linux-next > console output: https://syzkaller.appspot.com/x/log.txt?x=166cb7d9900000 > kernel config: https://syzkaller.appspot.com/x/.config?x=254e028a642027c > dashboard link: https://syzkaller.appspot.com/bug?extid=8afc256dce324523609d > compiler: gcc (GCC) 10.1.0-syz 20200507 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=127762c3900000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=124ccf3b900000 > > The issue was bisected to: > > commit 382329a9d8553a98418a6f6e3425f0c288837897 > Author: Gao Xiang > Date: Wed Aug 14 10:37:04 2019 +0000 > > staging: erofs: differentiate unsupported on-disk format if CONFIG_EROFS_DEBUG=y, the kernel will also BUG_ON on currupted images in order to check potential mkfs fault. So it's an expected behavior for now (if syzbot needs some more requirement, e.g. differ from runtime error vs corrupted image error, I can do it if needed.) Thanks, Gao Xiang > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=149889e3900000 > final oops: https://syzkaller.appspot.com/x/report.txt?x=169889e3900000 > console output: https://syzkaller.appspot.com/x/log.txt?x=129889e3900000 > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+8afc256dce324523609d@syzkaller.appspotmail.com > Fixes: 382329a9d855 ("staging: erofs: differentiate unsupported on-disk format") > > erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 > ------------[ cut here ]------------ > kernel BUG at fs/erofs/inode.c:182! > invalid opcode: 0000 [#1] PREEMPT SMP KASAN > CPU: 1 PID: 6895 Comm: syz-executor894 Not tainted 5.9.0-rc6-next-20200924-syzkaller #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > Call Trace: > erofs_fc_fill_super+0xaa3/0x1010 fs/erofs/super.c:382 > get_tree_bdev+0x421/0x740 fs/super.c:1342 > vfs_get_tree+0x89/0x2f0 fs/super.c:1547 > do_new_mount fs/namespace.c:2896 [inline] > path_mount+0x12ae/0x1e70 fs/namespace.c:3227 > __do_sys_mount fs/namespace.c:3438 [inline] > __se_sys_mount fs/namespace.c:3411 [inline] > __x64_sys_mount+0x278/0x2f0 fs/namespace.c:3411 > do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 > entry_SYSCALL_64_after_hwframe+0x44/0xa9 > RIP: 0033:0x446d6a > Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 > RSP: 002b:00007fffa8ef9ef8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 > RAX: ffffffffffffffda RBX: 00007fffa8ef9f50 RCX: 0000000000446d6a > RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffa8ef9f10 > RBP: 00007fffa8ef9f10 R08: 00007fffa8ef9f50 R09: 00007fff00000015 > R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000001 > R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 > Modules linked in: > ---[ end trace 66a5371a9bd8a3b2 ]--- > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > For information about bisection process see: https://goo.gl/tpsmEJ#bisection > syzbot can test patches for this issue, for details see: > https://goo.gl/tpsmEJ#testing-patches From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.8 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 80D94C2D0A8 for ; Mon, 28 Sep 2020 20:38:14 +0000 (UTC) Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 14ED12083B for ; Mon, 28 Sep 2020 20:38:13 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=aol.com header.i=@aol.com header.b="ZVJJJ+yQ" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 14ED12083B Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=aol.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=driverdev-devel-bounces@linuxdriverproject.org Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 983A320336; Mon, 28 Sep 2020 20:38:13 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jyOTmPL4CtJl; Mon, 28 Sep 2020 20:38:07 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by silver.osuosl.org (Postfix) with ESMTP id 41B1E203CE; Mon, 28 Sep 2020 20:38:07 +0000 (UTC) Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) by ash.osuosl.org (Postfix) with ESMTP id D198F1BF355 for ; Mon, 28 Sep 2020 20:38:05 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 818D0203CE for ; Mon, 28 Sep 2020 20:38:05 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eO3B7bQl+xOY for ; Mon, 28 Sep 2020 20:38:02 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from sonic302-22.consmr.mail.gq1.yahoo.com (sonic302-22.consmr.mail.gq1.yahoo.com [98.137.68.148]) by silver.osuosl.org (Postfix) with ESMTPS id 96DDA20117 for ; Mon, 28 Sep 2020 20:38:02 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aol.com; s=a2048; t=1601325482; bh=GZprWnTl+eBHSNmQV5uJKps1Zts7hTFzMj6gKmT4ZWQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From:Subject; b=ZVJJJ+yQ+KR3dNBuJ/amrwqCHhf19H0Ii5HVplUqPqKAXNipeT60DiYPge54rA14LJMoXGV2ymt90/2QFbLatR4Aiye+ng7kZEaalkNVeIfvokX7+J7v0yN4rVNTIMl1/YzQ7tAtUQxOf9DuntvMbwsM7qh+vOnl1E14+6M45aXxEBu+05qYaJfUKEm508rs/ElDjxZOsRhl+EN+Ix95GB9LjFEkjI2dZPRdzRKvRHLqnLkCqn554i3B0GJcOktDtdxhcBhQqcWuQz56q8PylIIwdq2xmp0TuzvKWfrahkKKupDbLFCVFjSETeWYTixW+1gg3mUBUMeWdpD1M/yzjg== X-YMail-OSG: qxLJVzQVM1lQSqYJ6MoZ3aW5WK957rVzm2ddGQEjg2ehiZR.ERUCkUBB.xK7sZ_ aW2eDUJjsm7iLn.O1kaR2F2VNLlEWyBYNMs7XjZWS.CmuyZVSCAADky5dr4Po.yuNNklMNKoMqjp DkdZV2ujaWNXrGDYrd7pT6noQNS2ZAW70lt_0kEKbEMHe6SgWX3NIC3fDbo.KT7FYHsSpEwlZnI3 J5CEwM11WUQC6p.0Y2WVqQyv9G.M3I25C5AChyrBu0IjsYCnFY7D6JURCs9sObR1but6K2b2cSet ie0BNXAzPgZToDrVJNgbuBxBgfNQ5p1zrILKR2eHgpsarx2kqHIm3b06BoZ3ddfXtKxbI746Er71 SHgItSCWTgYxX.HlU19Tfc7nERdLL8CpLojpjPU7BozgxxwFL2y7JeeRbanJLtZPMjIxBeED8e8L lZhjds.zeOyqtDxlXML40jBrfw.G4RBK1CXKKsN6CURIKYZ7RLGA5NgFQbRIrmYwlWsaCs7iMPwk k3vpXwTLJfsdoGtlTM29hQYI_m7nCnhTS0Lg4PCnPZ99kRBGQg6lwgUnXa0F9jHnUlS08XJHo4Pg q927lGndaWDjn..2gZ8b8.TGucCUFO8xMNpYrxxeGrESKZoEeWfQ.if5UusmlEh5B3iO2aWp6YR2 JUS8XSzzqeWtX6oeEmLn.XTQSvIPaH7auIRqTTZm6NWZpenFa11.NjF9K1tGqJAdGt3zfAybBwmD 5.bXFtcgXIzhZaHhxKQM48YqVN_dl_yDjyCbCP96v03DtxgKrO2gob8vkRyH6GVHJcWKlfg433Yf BMuyH2hKQFM64CZ4JcxypRIt.2YWtSlvbxO9gYNHU6TgTRdsHQwzIs.hxCqOQgtK2YvVUIf8iZ.V AKH2Sw2kSMq.dVeJ.AdL1D6wkDhEdqVeQaS6fkmg1JrSynb1JJmmX4SEid7bgTBh_RZAFfxBOhdq 3YBRANepO0Pn4x940jgI12uJ85VQv9fk9VDXabsyid8I3MbWe7HzP6hMlMD55j0726YNnxR0.wZS 5L7RuDNpnFev9UpuOCsK0h53BcGYPhsj1PqJqjjHfL.SGiOeiRXQkIlXfEJKJjIk61GPC2LGMKHC E3W.eyZw7Jam6EYLyIlRHfK0TxoIyNXe.8zGrlBT9ytE4VQG6jnm7yxtci5TuiVh.uAByuTqFy6E SiQmoeKGCsbyQ9QLNh_8N9Ce2J6IGN7G9nirvogpfX3UOXBz0AP2gag5Q3wUQR3raivuUJ8GDxpW 7GRsa1tk19MDTx5d.hMKA0O20APOvs2cDVPWnMu6PkhAAhDgdV1VdtmrM3yC76jIU4YGckBXPX6I 70H_6DtoTpVZPArRSnA20A8FLrXwtsMvZYYEPpXiTIT49X6fai9BK97_Uj9MbywQWdws70j4O65Y XtLCnfMftb45kcnRDZUtBDeTQauBa9KUMgLgg5W1pFAh8w6mpnObAej1lHMdELP7Yel73cKqs_V0 MUBxL4IG2Pq9P1tyc7E8Kpor0i_3VChL8hOEumjCPgcXD Received: from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.gq1.yahoo.com with HTTP; Mon, 28 Sep 2020 20:38:02 +0000 Received: by smtp419.mail.ir2.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID 1dcce5b8f69c9421ae96c4d2986bd734; Mon, 28 Sep 2020 20:36:39 +0000 (UTC) Date: Tue, 29 Sep 2020 04:36:30 +0800 From: Gao Xiang To: syzbot Subject: Re: kernel BUG at fs/erofs/inode.c:LINE! Message-ID: <20200928203035.GA7770@hsiangkao-HP-ZHAN-66-Pro-G1> References: <0000000000000044ba05b05a9961@google.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <0000000000000044ba05b05a9961@google.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-Mailer: WebService/1.1.16674 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.aol Apache-HttpAsyncClient/4.1.4 (Java/11.0.7) X-BeenThere: driverdev-devel@linuxdriverproject.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Linux Driver Project Developer List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: devel@driverdev.osuosl.org, yuchao0@huawei.com, gregkh@linuxfoundation.org, chao@kernel.org, syzkaller-bugs@googlegroups.com, linux-kernel@vger.kernel.org, xiang@kernel.org, linux-erofs@lists.ozlabs.org Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: driverdev-devel-bounces@linuxdriverproject.org Sender: "devel" Hi, On Mon, Sep 28, 2020 at 12:27:24AM -0700, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: d1d2220c Add linux-next specific files for 20200924 > git tree: linux-next > console output: https://syzkaller.appspot.com/x/log.txt?x=166cb7d9900000 > kernel config: https://syzkaller.appspot.com/x/.config?x=254e028a642027c > dashboard link: https://syzkaller.appspot.com/bug?extid=8afc256dce324523609d > compiler: gcc (GCC) 10.1.0-syz 20200507 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=127762c3900000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=124ccf3b900000 > > The issue was bisected to: > > commit 382329a9d8553a98418a6f6e3425f0c288837897 > Author: Gao Xiang > Date: Wed Aug 14 10:37:04 2019 +0000 > > staging: erofs: differentiate unsupported on-disk format if CONFIG_EROFS_DEBUG=y, the kernel will also BUG_ON on currupted images in order to check potential mkfs fault. So it's an expected behavior for now (if syzbot needs some more requirement, e.g. differ from runtime error vs corrupted image error, I can do it if needed.) Thanks, Gao Xiang > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=149889e3900000 > final oops: https://syzkaller.appspot.com/x/report.txt?x=169889e3900000 > console output: https://syzkaller.appspot.com/x/log.txt?x=129889e3900000 > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+8afc256dce324523609d@syzkaller.appspotmail.com > Fixes: 382329a9d855 ("staging: erofs: differentiate unsupported on-disk format") > > erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 > ------------[ cut here ]------------ > kernel BUG at fs/erofs/inode.c:182! > invalid opcode: 0000 [#1] PREEMPT SMP KASAN > CPU: 1 PID: 6895 Comm: syz-executor894 Not tainted 5.9.0-rc6-next-20200924-syzkaller #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > Call Trace: > erofs_fc_fill_super+0xaa3/0x1010 fs/erofs/super.c:382 > get_tree_bdev+0x421/0x740 fs/super.c:1342 > vfs_get_tree+0x89/0x2f0 fs/super.c:1547 > do_new_mount fs/namespace.c:2896 [inline] > path_mount+0x12ae/0x1e70 fs/namespace.c:3227 > __do_sys_mount fs/namespace.c:3438 [inline] > __se_sys_mount fs/namespace.c:3411 [inline] > __x64_sys_mount+0x278/0x2f0 fs/namespace.c:3411 > do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 > entry_SYSCALL_64_after_hwframe+0x44/0xa9 > RIP: 0033:0x446d6a > Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 > RSP: 002b:00007fffa8ef9ef8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 > RAX: ffffffffffffffda RBX: 00007fffa8ef9f50 RCX: 0000000000446d6a > RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffa8ef9f10 > RBP: 00007fffa8ef9f10 R08: 00007fffa8ef9f50 R09: 00007fff00000015 > R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000001 > R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 > Modules linked in: > ---[ end trace 66a5371a9bd8a3b2 ]--- > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > For information about bisection process see: https://goo.gl/tpsmEJ#bisection > syzbot can test patches for this issue, for details see: > https://goo.gl/tpsmEJ#testing-patches _______________________________________________ devel mailing list devel@linuxdriverproject.org http://driverdev.linuxdriverproject.org/mailman/listinfo/driverdev-devel From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.8 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 237A9C2D0A8 for ; Mon, 28 Sep 2020 20:51:57 +0000 (UTC) Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 28DBA2080A for ; Mon, 28 Sep 2020 20:51:55 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=gmx.net header.i=@gmx.net header.b="aX5AEzbs" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 28DBA2080A Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=gmx.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=driverdev-devel-bounces@linuxdriverproject.org Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 988091FEAE; Mon, 28 Sep 2020 20:51:55 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id abc0Gm1AOXaz; Mon, 28 Sep 2020 20:51:46 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by silver.osuosl.org (Postfix) with ESMTP id CF2BB20110; Mon, 28 Sep 2020 20:51:46 +0000 (UTC) Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) by ash.osuosl.org (Postfix) with ESMTP id DBE151BF355 for ; Mon, 28 Sep 2020 20:51:44 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id C5A6820110 for ; Mon, 28 Sep 2020 20:51:44 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iPMb4u8G5Rad for ; Mon, 28 Sep 2020 20:51:43 +0000 (UTC) X-Greylist: delayed 00:20:41 by SQLgrey-1.7.6 Received: from mout-xforward.gmx.net (mout-xforward.gmx.net [82.165.159.41]) by silver.osuosl.org (Postfix) with ESMTPS id 95DCF1FEAE for ; Mon, 28 Sep 2020 20:51:42 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1601326295; bh=EPZL/NujJsVZNPYsfdvjpeJWhp8BnqAniz5B+sF8nzI=; h=X-UI-Sender-Class:Date:From:To:Cc:Subject:References:In-Reply-To; b=aX5AEzbsCG8rlRkQtuOoFpgBR+X74yzMV6i4jS/vTvw5PQ6s+jl+Yd9jhPiXKkZww gKVkoEad0GnWRG/GR3r3Z4PI+50vkm9MuAr9j2jzlRP1NVolFq+3+AVnu19Kp4RD+5 0abmX6C8GaE8NpVW5yKdXDstFaKNPPT14PME8LO4= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from hsiangkao-HP-ZHAN-66-Pro-G1 ([36.63.173.96]) by mail.gmx.com (mrgmx105 [212.227.17.174]) with ESMTPSA (Nemesis) id 1MmUHp-1knq5K3fnt-00iVbp; Mon, 28 Sep 2020 22:30:44 +0200 Date: Tue, 29 Sep 2020 04:30:36 +0800 From: Gao Xiang To: syzbot Subject: Re: kernel BUG at fs/erofs/inode.c:LINE! Message-ID: <20200928203035.GA7770@hsiangkao-HP-ZHAN-66-Pro-G1> References: <0000000000000044ba05b05a9961@google.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <0000000000000044ba05b05a9961@google.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-Provags-ID: V03:K1:qX5JEJtmSwCYlQuaeYftyFY4oOTFZemw3qrihm8qW8JNjstw0Il ux7Uw9mOghzIEWthGeyRlGn0uVYr3HYWLtuoh54hW2ImscDzOMl0JpoAtVL+f+2BWd7jRhA qJ+lw1/pqlfGJiHIwqYK2vcwxQz/4ohFs1mmTXkOhyLrCuyBR1gfYbi+aGsLxqBVbKtB3fH 2XVqpMNtr41bnru93gVfw== X-UI-Out-Filterresults: junk:10;V03:K0:iD+x02DeLRw=:gqgww9l1fmwbBM89NQoBu7MT wd2sIUFrAs0/ThTfzOCfofVME7VLjsXbbtdl6YBqsSFDUEuXS0KFyf8daNO0ds2XIfX+TxOdB Klw/UXfCP9THWNKPQAW5hnLw6T57kdLXdZ44HQuwmGrwG3EXTFW2yZZSKnv2BtT1a3Id0Osni prrhPbzdByrr3SRFCTH4x14zEutpXaWnUwuPsjQb9olXHZjHsOy5sWD7Pz9TM1w/zAnx+LdBT 1xJnuSiFDAgkMrLDmJ7f0/d23KSR6+44lB6v8gl03rWHb3y8d+w+4Sx5EvH2cmysrLa0rDcJN HC5pbvE9SPP78+SyHAmKxqzPTkXTAbxkwla4rQr6aC3zpGQauMXQEp2G9GhOGsn77m22Y0Nt7 k5SJ5bfyuHU6kDqalF8Z3TAVkL/SCGsDSc7JiTyVDJ9Eq+k/Cx4yfdZ0AQEZrca7I2z/7Ymku nprhBOQgDzDYLVJf9b7dTCBDkPuPOzph1b7eChpdVbElkAnFrgcp92lTKB+mvyBLJjAZ7TIPA MwG7J+15f6P2QGle//cQfJMK5GRyoisCnRDtqaj3ZfcOPRx1RviWGhOgHAz5OJncJBV8ZuPW/ Pz4n3nVTP3JiGBdG/SE9lSo1b6+jKjJS4yr1FP+7PNKrkPuF0BkQhflQx/SCLeWR/YmiV0ia6 wtXQXYFUeXi+Nuqk4Lgy5KBZp/HMBW9ox3rrhUfJQjeG2MVE5+jKZAvlJRw6ineokuqQ+AH5D l2LrWp1Phc6AxMmVABKxqknH/RAUKHwWi5Y2OUFlmeUD7AN+7aydef4tFoAkuPxLolCVqG4Mf m7HYJ137p0xs0bdGrwxVXlrpzpTXKTxZt5bjlSguc1+ukIP2hN1mbRZKoGgANL4MnIyoL6kRD /n6jGovt1sXxsDndWJvgR/FOanQa32tljgCelgeMBdTDgbnPrRbegWGo5hBSeH/VcZH1zzSZN PuiOb73gDtM/Q+eUrzKmdGcbVyaJcBGBqutfzyn2GTAZnWSgI5lr0kA7AgtcO4NqZfJ5y5fWs 6T8zmutlRGiRDgVHRMwSgFAGtb5V+p7nYymvgFYBpBPH6m0lrVQRg3KNk1DD3VQ1rb9HGXITC H3b5q+kfDHTxg2r1B3QUrHr8TmhawDgsDJXKQP2I1ElXK/BkZvhxZsWkewywst8IBtoDRacXR 0P6iuiVLbEmXDjQlb7LAS2l23dIhJc8TUqIkOtTQZ9HRWbpYQmcxu8TMuj9RUv5z7fb3AX+IU rfw0ksP3uj6lFDtoQoe3fwdFJNZDksNyEc9TOBLGAWlv9tnxJREhrgfGetwCrX4E0rW8lick4 jjdW7/ X-BeenThere: driverdev-devel@linuxdriverproject.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Linux Driver Project Developer List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: devel@driverdev.osuosl.org, yuchao0@huawei.com, gaoxiang25@huawei.com, gregkh@linuxfoundation.org, chao@kernel.org, syzkaller-bugs@googlegroups.com, linux-kernel@vger.kernel.org, xiang@kernel.org, linux-erofs@lists.ozlabs.org Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: driverdev-devel-bounces@linuxdriverproject.org Sender: "devel" Message-ID: <20200928203036.dC2FHjARXQWq0rA1i7Yo8ZXRi0SpLpGU2KweW2WJqfw@z> Hi, On Mon, Sep 28, 2020 at 12:27:24AM -0700, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: d1d2220c Add linux-next specific files for 20200924 > git tree: linux-next > console output: https://syzkaller.appspot.com/x/log.txt?x=166cb7d9900000 > kernel config: https://syzkaller.appspot.com/x/.config?x=254e028a642027c > dashboard link: https://syzkaller.appspot.com/bug?extid=8afc256dce324523609d > compiler: gcc (GCC) 10.1.0-syz 20200507 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=127762c3900000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=124ccf3b900000 > > The issue was bisected to: > > commit 382329a9d8553a98418a6f6e3425f0c288837897 > Author: Gao Xiang > Date: Wed Aug 14 10:37:04 2019 +0000 > > staging: erofs: differentiate unsupported on-disk format if CONFIG_EROFS_DEBUG = y, the kernel will also BUG_ON on currupted images in order to check potential mkfs fault. So it's an expected behavior for now (if syzbot needs more requirement, e.g. differ from runtime error vs corrupted error, I can do it if needed.) Thanks, Gao Xiang > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=149889e3900000 > final oops: https://syzkaller.appspot.com/x/report.txt?x=169889e3900000 > console output: https://syzkaller.appspot.com/x/log.txt?x=129889e3900000 > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+8afc256dce324523609d@syzkaller.appspotmail.com > Fixes: 382329a9d855 ("staging: erofs: differentiate unsupported on-disk format") > > erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 > ------------[ cut here ]------------ > kernel BUG at fs/erofs/inode.c:182! > invalid opcode: 0000 [#1] PREEMPT SMP KASAN > CPU: 1 PID: 6895 Comm: syz-executor894 Not tainted 5.9.0-rc6-next-20200924-syzkaller #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > Call Trace: > erofs_fc_fill_super+0xaa3/0x1010 fs/erofs/super.c:382 > get_tree_bdev+0x421/0x740 fs/super.c:1342 > vfs_get_tree+0x89/0x2f0 fs/super.c:1547 > do_new_mount fs/namespace.c:2896 [inline] > path_mount+0x12ae/0x1e70 fs/namespace.c:3227 > __do_sys_mount fs/namespace.c:3438 [inline] > __se_sys_mount fs/namespace.c:3411 [inline] > __x64_sys_mount+0x278/0x2f0 fs/namespace.c:3411 > do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 > entry_SYSCALL_64_after_hwframe+0x44/0xa9 > RIP: 0033:0x446d6a > Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 > RSP: 002b:00007fffa8ef9ef8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 > RAX: ffffffffffffffda RBX: 00007fffa8ef9f50 RCX: 0000000000446d6a > RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffa8ef9f10 > RBP: 00007fffa8ef9f10 R08: 00007fffa8ef9f50 R09: 00007fff00000015 > R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000001 > R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 > Modules linked in: > ---[ end trace 66a5371a9bd8a3b2 ]--- > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > For information about bisection process see: https://goo.gl/tpsmEJ#bisection > syzbot can test patches for this issue, for details see: > https://goo.gl/tpsmEJ#testing-patches _______________________________________________ devel mailing list devel@linuxdriverproject.org http://driverdev.linuxdriverproject.org/mailman/listinfo/driverdev-devel From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.4 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id AC790C2D0A8 for ; Mon, 28 Sep 2020 20:37:07 +0000 (UTC) Received: from lists.ozlabs.org (lists.ozlabs.org [203.11.71.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id C3C2A2080A for ; Mon, 28 Sep 2020 20:37:06 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=lists.ozlabs.org header.i=@lists.ozlabs.org header.b="odfVjC1e"; dkim=fail reason="signature verification failed" (2048-bit key) header.d=aol.com header.i=@aol.com header.b="scQks6tR" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org C3C2A2080A Authentication-Results: mail.kernel.org; dmarc=pass (p=none dis=none) header.from=lists.ozlabs.org Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=linux-erofs-bounces+linux-erofs=archiver.kernel.org@lists.ozlabs.org Received: from bilbo.ozlabs.org (lists.ozlabs.org [IPv6:2401:3900:2:1::3]) by lists.ozlabs.org (Postfix) with ESMTP id 4C0Z7h6wmpzDqJQ for ; Tue, 29 Sep 2020 06:37:04 +1000 (AEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=lists.ozlabs.org; s=201707; t=1601325425; bh=Mas9p/r0hRQAt6cOrzfhv0xStHJXFzsSg3H+T9tPeVw=; h=Date:To:Subject:References:In-Reply-To:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc: From; b=odfVjC1e+bCv5wnetMnjB+1sXhXRl/QC06sxk5NsWpDqgYe98RvepA6xKhRnXRAaQ UY4dFivqIez5Parkp3gX14+FEqtJ2jqFyRkuW1LADwBaJZEp4MwJ6CLi0OOPmRdc0H R+cAkU6QLaG+fU8MxC6m0Nw4sSZxInkSCYJRCFnpIWFEjcIPBxMBaRK+Y16elq1krG m5ojBXd9YRXF2dTHReIvtcL9FciD2wBZBCpUBB+uy6qznaQLqwU0cWDH1fQqGMKFnb nEAE4AH4FsI/qSyYzFq0gB/uA+m5JIvye94ovzH3tVLmS0lhc/Z1tHB2heeQtX/ZXB uoxRi+mNNwcvg== Authentication-Results: lists.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=aol.com (client-ip=98.137.64.148; helo=sonic301-22.consmr.mail.gq1.yahoo.com; envelope-from=hsiangkao@aol.com; receiver=) Authentication-Results: lists.ozlabs.org; dmarc=pass (p=reject dis=none) header.from=aol.com Authentication-Results: lists.ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=aol.com header.i=@aol.com header.a=rsa-sha256 header.s=a2048 header.b=scQks6tR; dkim-atps=neutral Received: from sonic301-22.consmr.mail.gq1.yahoo.com (sonic301-22.consmr.mail.gq1.yahoo.com [98.137.64.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 4C0Z7W5ZxSzDqGY for ; Tue, 29 Sep 2020 06:36:47 +1000 (AEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aol.com; s=a2048; t=1601325403; bh=GZprWnTl+eBHSNmQV5uJKps1Zts7hTFzMj6gKmT4ZWQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From:Subject; b=scQks6tRGlh38KfJC+aBueFBJOcPbF/im7Nac0STjZGih/Op4nqRPgwPOFP4mBx3MHik+BsTNtHC0JYB6u1iHwWZKtIY6q9uzoiIcVQD4FwGNEU5f/VtC5xGOeacFdCFmS7qJrmRzz++wTQ/UFMk4dMlX+BQjGxMw8q7V/nSHmJO+sCvG6f+Hso5pKO5nugrojoFezZkZeOacdYCFPXdXKjaQE971Iw1A3oFK7jH2XHfmx0fr8F5VbnTOcCj7mFTNWdzbDyulNouJYgYW3DjrIsOTXjmuV+mexuX/6ln89q0uppvilRxm8IqSctysljmYy8KEpzk0Fh9h1UBwgSsRg== X-YMail-OSG: qxLJVzQVM1lQSqYJ6MoZ3aW5WK957rVzm2ddGQEjg2ehiZR.ERUCkUBB.xK7sZ_ aW2eDUJjsm7iLn.O1kaR2F2VNLlEWyBYNMs7XjZWS.CmuyZVSCAADky5dr4Po.yuNNklMNKoMqjp DkdZV2ujaWNXrGDYrd7pT6noQNS2ZAW70lt_0kEKbEMHe6SgWX3NIC3fDbo.KT7FYHsSpEwlZnI3 J5CEwM11WUQC6p.0Y2WVqQyv9G.M3I25C5AChyrBu0IjsYCnFY7D6JURCs9sObR1but6K2b2cSet ie0BNXAzPgZToDrVJNgbuBxBgfNQ5p1zrILKR2eHgpsarx2kqHIm3b06BoZ3ddfXtKxbI746Er71 SHgItSCWTgYxX.HlU19Tfc7nERdLL8CpLojpjPU7BozgxxwFL2y7JeeRbanJLtZPMjIxBeED8e8L lZhjds.zeOyqtDxlXML40jBrfw.G4RBK1CXKKsN6CURIKYZ7RLGA5NgFQbRIrmYwlWsaCs7iMPwk k3vpXwTLJfsdoGtlTM29hQYI_m7nCnhTS0Lg4PCnPZ99kRBGQg6lwgUnXa0F9jHnUlS08XJHo4Pg q927lGndaWDjn..2gZ8b8.TGucCUFO8xMNpYrxxeGrESKZoEeWfQ.if5UusmlEh5B3iO2aWp6YR2 JUS8XSzzqeWtX6oeEmLn.XTQSvIPaH7auIRqTTZm6NWZpenFa11.NjF9K1tGqJAdGt3zfAybBwmD 5.bXFtcgXIzhZaHhxKQM48YqVN_dl_yDjyCbCP96v03DtxgKrO2gob8vkRyH6GVHJcWKlfg433Yf BMuyH2hKQFM64CZ4JcxypRIt.2YWtSlvbxO9gYNHU6TgTRdsHQwzIs.hxCqOQgtK2YvVUIf8iZ.V AKH2Sw2kSMq.dVeJ.AdL1D6wkDhEdqVeQaS6fkmg1JrSynb1JJmmX4SEid7bgTBh_RZAFfxBOhdq 3YBRANepO0Pn4x940jgI12uJ85VQv9fk9VDXabsyid8I3MbWe7HzP6hMlMD55j0726YNnxR0.wZS 5L7RuDNpnFev9UpuOCsK0h53BcGYPhsj1PqJqjjHfL.SGiOeiRXQkIlXfEJKJjIk61GPC2LGMKHC E3W.eyZw7Jam6EYLyIlRHfK0TxoIyNXe.8zGrlBT9ytE4VQG6jnm7yxtci5TuiVh.uAByuTqFy6E SiQmoeKGCsbyQ9QLNh_8N9Ce2J6IGN7G9nirvogpfX3UOXBz0AP2gag5Q3wUQR3raivuUJ8GDxpW 7GRsa1tk19MDTx5d.hMKA0O20APOvs2cDVPWnMu6PkhAAhDgdV1VdtmrM3yC76jIU4YGckBXPX6I 70H_6DtoTpVZPArRSnA20A8FLrXwtsMvZYYEPpXiTIT49X6fai9BK97_Uj9MbywQWdws70j4O65Y XtLCnfMftb45kcnRDZUtBDeTQauBa9KUMgLgg5W1pFAh8w6mpnObAej1lHMdELP7Yel73cKqs_V0 MUBxL4IG2Pq9P1tyc7E8Kpor0i_3VChL8hOEumjCPgcXD Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.gq1.yahoo.com with HTTP; Mon, 28 Sep 2020 20:36:43 +0000 Received: by smtp419.mail.ir2.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID 1dcce5b8f69c9421ae96c4d2986bd734; Mon, 28 Sep 2020 20:36:39 +0000 (UTC) Date: Tue, 29 Sep 2020 04:36:30 +0800 To: syzbot Subject: Re: kernel BUG at fs/erofs/inode.c:LINE! Message-ID: <20200928203035.GA7770@hsiangkao-HP-ZHAN-66-Pro-G1> References: <0000000000000044ba05b05a9961@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <0000000000000044ba05b05a9961@google.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-Mailer: WebService/1.1.16674 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.aol Apache-HttpAsyncClient/4.1.4 (Java/11.0.7) X-BeenThere: linux-erofs@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development of Linux EROFS file system List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Gao Xiang via Linux-erofs Reply-To: Gao Xiang Cc: devel@driverdev.osuosl.org, gregkh@linuxfoundation.org, syzkaller-bugs@googlegroups.com, linux-kernel@vger.kernel.org, xiang@kernel.org, linux-erofs@lists.ozlabs.org Errors-To: linux-erofs-bounces+linux-erofs=archiver.kernel.org@lists.ozlabs.org Sender: "Linux-erofs" Hi, On Mon, Sep 28, 2020 at 12:27:24AM -0700, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: d1d2220c Add linux-next specific files for 20200924 > git tree: linux-next > console output: https://syzkaller.appspot.com/x/log.txt?x=166cb7d9900000 > kernel config: https://syzkaller.appspot.com/x/.config?x=254e028a642027c > dashboard link: https://syzkaller.appspot.com/bug?extid=8afc256dce324523609d > compiler: gcc (GCC) 10.1.0-syz 20200507 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=127762c3900000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=124ccf3b900000 > > The issue was bisected to: > > commit 382329a9d8553a98418a6f6e3425f0c288837897 > Author: Gao Xiang > Date: Wed Aug 14 10:37:04 2019 +0000 > > staging: erofs: differentiate unsupported on-disk format if CONFIG_EROFS_DEBUG=y, the kernel will also BUG_ON on currupted images in order to check potential mkfs fault. So it's an expected behavior for now (if syzbot needs some more requirement, e.g. differ from runtime error vs corrupted image error, I can do it if needed.) Thanks, Gao Xiang > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=149889e3900000 > final oops: https://syzkaller.appspot.com/x/report.txt?x=169889e3900000 > console output: https://syzkaller.appspot.com/x/log.txt?x=129889e3900000 > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+8afc256dce324523609d@syzkaller.appspotmail.com > Fixes: 382329a9d855 ("staging: erofs: differentiate unsupported on-disk format") > > erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 > ------------[ cut here ]------------ > kernel BUG at fs/erofs/inode.c:182! > invalid opcode: 0000 [#1] PREEMPT SMP KASAN > CPU: 1 PID: 6895 Comm: syz-executor894 Not tainted 5.9.0-rc6-next-20200924-syzkaller #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > Call Trace: > erofs_fc_fill_super+0xaa3/0x1010 fs/erofs/super.c:382 > get_tree_bdev+0x421/0x740 fs/super.c:1342 > vfs_get_tree+0x89/0x2f0 fs/super.c:1547 > do_new_mount fs/namespace.c:2896 [inline] > path_mount+0x12ae/0x1e70 fs/namespace.c:3227 > __do_sys_mount fs/namespace.c:3438 [inline] > __se_sys_mount fs/namespace.c:3411 [inline] > __x64_sys_mount+0x278/0x2f0 fs/namespace.c:3411 > do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 > entry_SYSCALL_64_after_hwframe+0x44/0xa9 > RIP: 0033:0x446d6a > Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 > RSP: 002b:00007fffa8ef9ef8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 > RAX: ffffffffffffffda RBX: 00007fffa8ef9f50 RCX: 0000000000446d6a > RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffa8ef9f10 > RBP: 00007fffa8ef9f10 R08: 00007fffa8ef9f50 R09: 00007fff00000015 > R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000001 > R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 > Modules linked in: > ---[ end trace 66a5371a9bd8a3b2 ]--- > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > For information about bisection process see: https://goo.gl/tpsmEJ#bisection > syzbot can test patches for this issue, for details see: > https://goo.gl/tpsmEJ#testing-patches From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.8 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 19EAEC2D0A8 for ; Mon, 28 Sep 2020 20:53:49 +0000 (UTC) Received: from lists.ozlabs.org (lists.ozlabs.org [203.11.71.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 1D9A42080A for ; Mon, 28 Sep 2020 20:53:48 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=gmx.net header.i=@gmx.net header.b="aX5AEzbs" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 1D9A42080A Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=gmx.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=linux-erofs-bounces+linux-erofs=archiver.kernel.org@lists.ozlabs.org Received: from bilbo.ozlabs.org (lists.ozlabs.org [IPv6:2401:3900:2:1::3]) by lists.ozlabs.org (Postfix) with ESMTP id 4C0ZVy3ZlzzDq5b for ; Tue, 29 Sep 2020 06:53:46 +1000 (AEST) Authentication-Results: lists.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=gmx.com (client-ip=82.165.159.41; helo=mout-xforward.gmx.net; envelope-from=hsiangkao@gmx.com; receiver=) Authentication-Results: lists.ozlabs.org; dmarc=none (p=none dis=none) header.from=gmx.com Authentication-Results: lists.ozlabs.org; dkim=pass (1024-bit key; secure) header.d=gmx.net header.i=@gmx.net header.a=rsa-sha256 header.s=badeba3b8450 header.b=aX5AEzbs; dkim-atps=neutral Received: from mout-xforward.gmx.net (mout-xforward.gmx.net [82.165.159.41]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 4C0ZSj6Sb5zDqKW for ; Tue, 29 Sep 2020 06:51:47 +1000 (AEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1601326295; bh=EPZL/NujJsVZNPYsfdvjpeJWhp8BnqAniz5B+sF8nzI=; h=X-UI-Sender-Class:Date:From:To:Cc:Subject:References:In-Reply-To; b=aX5AEzbsCG8rlRkQtuOoFpgBR+X74yzMV6i4jS/vTvw5PQ6s+jl+Yd9jhPiXKkZww gKVkoEad0GnWRG/GR3r3Z4PI+50vkm9MuAr9j2jzlRP1NVolFq+3+AVnu19Kp4RD+5 0abmX6C8GaE8NpVW5yKdXDstFaKNPPT14PME8LO4= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from hsiangkao-HP-ZHAN-66-Pro-G1 ([36.63.173.96]) by mail.gmx.com (mrgmx105 [212.227.17.174]) with ESMTPSA (Nemesis) id 1MmUHp-1knq5K3fnt-00iVbp; Mon, 28 Sep 2020 22:30:44 +0200 Date: Tue, 29 Sep 2020 04:30:36 +0800 From: Gao Xiang To: syzbot Subject: Re: kernel BUG at fs/erofs/inode.c:LINE! Message-ID: <20200928203035.GA7770@hsiangkao-HP-ZHAN-66-Pro-G1> References: <0000000000000044ba05b05a9961@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <0000000000000044ba05b05a9961@google.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-Provags-ID: V03:K1:qX5JEJtmSwCYlQuaeYftyFY4oOTFZemw3qrihm8qW8JNjstw0Il ux7Uw9mOghzIEWthGeyRlGn0uVYr3HYWLtuoh54hW2ImscDzOMl0JpoAtVL+f+2BWd7jRhA qJ+lw1/pqlfGJiHIwqYK2vcwxQz/4ohFs1mmTXkOhyLrCuyBR1gfYbi+aGsLxqBVbKtB3fH 2XVqpMNtr41bnru93gVfw== X-UI-Out-Filterresults: junk:10;V03:K0:iD+x02DeLRw=:gqgww9l1fmwbBM89NQoBu7MT wd2sIUFrAs0/ThTfzOCfofVME7VLjsXbbtdl6YBqsSFDUEuXS0KFyf8daNO0ds2XIfX+TxOdB Klw/UXfCP9THWNKPQAW5hnLw6T57kdLXdZ44HQuwmGrwG3EXTFW2yZZSKnv2BtT1a3Id0Osni prrhPbzdByrr3SRFCTH4x14zEutpXaWnUwuPsjQb9olXHZjHsOy5sWD7Pz9TM1w/zAnx+LdBT 1xJnuSiFDAgkMrLDmJ7f0/d23KSR6+44lB6v8gl03rWHb3y8d+w+4Sx5EvH2cmysrLa0rDcJN HC5pbvE9SPP78+SyHAmKxqzPTkXTAbxkwla4rQr6aC3zpGQauMXQEp2G9GhOGsn77m22Y0Nt7 k5SJ5bfyuHU6kDqalF8Z3TAVkL/SCGsDSc7JiTyVDJ9Eq+k/Cx4yfdZ0AQEZrca7I2z/7Ymku nprhBOQgDzDYLVJf9b7dTCBDkPuPOzph1b7eChpdVbElkAnFrgcp92lTKB+mvyBLJjAZ7TIPA MwG7J+15f6P2QGle//cQfJMK5GRyoisCnRDtqaj3ZfcOPRx1RviWGhOgHAz5OJncJBV8ZuPW/ Pz4n3nVTP3JiGBdG/SE9lSo1b6+jKjJS4yr1FP+7PNKrkPuF0BkQhflQx/SCLeWR/YmiV0ia6 wtXQXYFUeXi+Nuqk4Lgy5KBZp/HMBW9ox3rrhUfJQjeG2MVE5+jKZAvlJRw6ineokuqQ+AH5D l2LrWp1Phc6AxMmVABKxqknH/RAUKHwWi5Y2OUFlmeUD7AN+7aydef4tFoAkuPxLolCVqG4Mf m7HYJ137p0xs0bdGrwxVXlrpzpTXKTxZt5bjlSguc1+ukIP2hN1mbRZKoGgANL4MnIyoL6kRD /n6jGovt1sXxsDndWJvgR/FOanQa32tljgCelgeMBdTDgbnPrRbegWGo5hBSeH/VcZH1zzSZN PuiOb73gDtM/Q+eUrzKmdGcbVyaJcBGBqutfzyn2GTAZnWSgI5lr0kA7AgtcO4NqZfJ5y5fWs 6T8zmutlRGiRDgVHRMwSgFAGtb5V+p7nYymvgFYBpBPH6m0lrVQRg3KNk1DD3VQ1rb9HGXITC H3b5q+kfDHTxg2r1B3QUrHr8TmhawDgsDJXKQP2I1ElXK/BkZvhxZsWkewywst8IBtoDRacXR 0P6iuiVLbEmXDjQlb7LAS2l23dIhJc8TUqIkOtTQZ9HRWbpYQmcxu8TMuj9RUv5z7fb3AX+IU rfw0ksP3uj6lFDtoQoe3fwdFJNZDksNyEc9TOBLGAWlv9tnxJREhrgfGetwCrX4E0rW8lick4 jjdW7/ Content-Transfer-Encoding: quoted-printable X-BeenThere: linux-erofs@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development of Linux EROFS file system List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: devel@driverdev.osuosl.org, gaoxiang25@huawei.com, gregkh@linuxfoundation.org, syzkaller-bugs@googlegroups.com, linux-kernel@vger.kernel.org, xiang@kernel.org, linux-erofs@lists.ozlabs.org Errors-To: linux-erofs-bounces+linux-erofs=archiver.kernel.org@lists.ozlabs.org Sender: "Linux-erofs" Message-ID: <20200928203036.-KhBijVeGfDI2lve2kWjU4T9fgFePR4pwJNBVxlziBc@z> Hi, On Mon, Sep 28, 2020 at 12:27:24AM -0700, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: d1d2220c Add linux-next specific files for 20200924 > git tree: linux-next > console output: https://syzkaller.appspot.com/x/log.txt?x=3D166cb7d99000= 00 > kernel config: https://syzkaller.appspot.com/x/.config?x=3D254e028a6420= 27c > dashboard link: https://syzkaller.appspot.com/bug?extid=3D8afc256dce3245= 23609d > compiler: gcc (GCC) 10.1.0-syz 20200507 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=3D127762c390= 0000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=3D124ccf3b9000= 00 > > The issue was bisected to: > > commit 382329a9d8553a98418a6f6e3425f0c288837897 > Author: Gao Xiang > Date: Wed Aug 14 10:37:04 2019 +0000 > > staging: erofs: differentiate unsupported on-disk format if CONFIG_EROFS_DEBUG =3D y, the kernel will also BUG_ON on currupted images in order to check potential mkfs fault. So it's an expected behavior for now (if syzbot needs more requirement, e.g. differ from runtime error vs corrupted error, I can do it if needed.) Thanks, Gao Xiang > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=3D149889e39= 00000 > final oops: https://syzkaller.appspot.com/x/report.txt?x=3D169889e39= 00000 > console output: https://syzkaller.appspot.com/x/log.txt?x=3D129889e39000= 00 > > IMPORTANT: if you fix the issue, please add the following tag to the com= mit: > Reported-by: syzbot+8afc256dce324523609d@syzkaller.appspotmail.com > Fixes: 382329a9d855 ("staging: erofs: differentiate unsupported on-disk = format") > > erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36 > ------------[ cut here ]------------ > kernel BUG at fs/erofs/inode.c:182! > invalid opcode: 0000 [#1] PREEMPT SMP KASAN > CPU: 1 PID: 6895 Comm: syz-executor894 Not tainted 5.9.0-rc6-next-202009= 24-syzkaller #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS = Google 01/01/2011 > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 = 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 = 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:000000000000= 0000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > Call Trace: > erofs_fc_fill_super+0xaa3/0x1010 fs/erofs/super.c:382 > get_tree_bdev+0x421/0x740 fs/super.c:1342 > vfs_get_tree+0x89/0x2f0 fs/super.c:1547 > do_new_mount fs/namespace.c:2896 [inline] > path_mount+0x12ae/0x1e70 fs/namespace.c:3227 > __do_sys_mount fs/namespace.c:3438 [inline] > __se_sys_mount fs/namespace.c:3411 [inline] > __x64_sys_mount+0x278/0x2f0 fs/namespace.c:3411 > do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 > entry_SYSCALL_64_after_hwframe+0x44/0xa9 > RIP: 0033:0x446d6a > Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e = 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 = ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 > RSP: 002b:00007fffa8ef9ef8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 > RAX: ffffffffffffffda RBX: 00007fffa8ef9f50 RCX: 0000000000446d6a > RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffa8ef9f10 > RBP: 00007fffa8ef9f10 R08: 00007fffa8ef9f50 R09: 00007fff00000015 > R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000001 > R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 > Modules linked in: > ---[ end trace 66a5371a9bd8a3b2 ]--- > RIP: 0010:erofs_read_inode fs/erofs/inode.c:182 [inline] > RIP: 0010:erofs_fill_inode fs/erofs/inode.c:235 [inline] > RIP: 0010:erofs_iget+0xfd8/0x2390 fs/erofs/inode.c:322 > Code: 00 0f 85 aa 10 00 00 49 8b 7c 24 28 49 89 d8 44 89 e9 48 c7 c2 a0 = 9c ef 88 48 c7 c6 40 9f ef 88 e8 b5 df b0 04 e8 88 5a 07 fe <0f> 0b e8 81 = 5a 07 fe 4c 89 e7 4c 63 e3 e8 b6 61 5b fe e9 ed f0 ff > RSP: 0018:ffffc90001017c10 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000000 > RDX: ffff8880a172e480 RSI: ffffffff836dd6e8 RDI: fffff52000202f72 > RBP: ffff8880a8ca4480 R08: 0000000000000042 R09: ffff8880ae5319a7 > R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880854fd9b8 > R13: 0000000000000000 R14: ffffea0002a32900 R15: 0000000000000000 > FS: 000000000108e880(0000) GS:ffff8880ae500000(0000) knlGS:000000000000= 0000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000000000043eb80 CR3: 00000000a7edb000 CR4: 00000000001506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > For information about bisection process see: https://goo.gl/tpsmEJ#bisec= tion > syzbot can test patches for this issue, for details see: > https://goo.gl/tpsmEJ#testing-patches