syzbot
WARNING in hfsplus_free_extents
Status:
upstream: reported C repro on 2022/12/19 07:06
Subsystems:
hfsplus
[Documentation on labels]
Reported-by: syzbot+50ac7d3932d9115a84da@syzkaller.appspotmail.com
First crash: 1315d, last: 1238d
Sample crash report:
Bluetooth: hci3: command 0x0406 tx timeout
Bluetooth: hci2: command 0x0406 tx timeout
Bluetooth: hci4: command 0x0406 tx timeout
------------[ cut here ]------------
Bluetooth: hci1: command 0x0406 tx timeout
WARNING: CPU: 1 PID: 14705 at fs/hfsplus/extents.c:346 hfsplus_free_extents.cold+0x27/0x44 fs/hfsplus/extents.c:346
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 14705 Comm: syz-executor335 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
panic+0x26a/0x50e kernel/panic.c:186
__warn.cold+0x20/0x5a kernel/panic.c:541
report_bug+0x262/0x2b0 lib/bug.c:183
fixup_bug arch/x86/kernel/traps.c:178 [inline]
fixup_bug arch/x86/kernel/traps.c:173 [inline]
do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296
invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038
RIP: 0010:hfsplus_free_extents.cold+0x27/0x44 fs/hfsplus/extents.c:346
Code: 9c 04 fa e8 b7 43 6c f9 48 c7 c7 e0 74 7d 88 e8 16 75 fd ff e9 b7 a6 04 fa e8 a1 43 6c f9 48 c7 c7 40 74 7d 88 e8 00 75 fd ff <0f> 0b e9 1b a5 04 fa e8 89 43 6c f9 48 c7 c7 e0 74 7d 88 e8 e8 74
RSP: 0018:ffff8880b4eef7f0 EFLAGS: 00010282
RAX: 0000000000000024 RBX: ffff8880868d80d8 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed10169ddef0
RBP: 0000000000000001 R08: 0000000000000024 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880b3e00080
R13: ffff8880879c8c00 R14: ffff88809dd9c500 R15: 0000000000000000
hfsplus_file_truncate+0xd96/0x1040 fs/hfsplus/extents.c:591
hfsplus_setattr+0x1e7/0x310 fs/hfsplus/inode.c:263
notify_change+0x70b/0xfc0 fs/attr.c:334
do_truncate+0x134/0x1f0 fs/open.c:63
handle_truncate fs/namei.c:3009 [inline]
do_last fs/namei.c:3427 [inline]
path_openat+0x2308/0x2df0 fs/namei.c:3537
do_filp_open+0x18c/0x3f0 fs/namei.c:3567
do_sys_open+0x3b3/0x520 fs/open.c:1085
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7feb2e3c1699
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007feb2db60278 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007feb2e43f7a0 RCX: 00007feb2e3c1699
RDX: 0000000000000000 RSI: 0000000000143242 RDI: 0000000020000000
RBP: 00007feb2e40bc3c R08: 65732f636f72702f R09: 65732f636f72702f
R10: 00000000000005f2 R11: 0000000000000246 R12: 00007feb2db60280
R13: 8000000000000000 R14: 000000031cdb59c6 R15: 00007feb2e43f7a8
Kernel Offset: disabled
Rebooting in 86400 seconds..
* Struck through repros no longer work on HEAD.