From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-il1-f198.google.com (mail-il1-f198.google.com [209.85.166.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D68862DFA46 for ; Thu, 13 Nov 2025 22:48:04 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.166.198 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1763074087; cv=none; b=cYglCmH2C7MllMQLsXK3bGITj87rZrMD/wO95rIjaAQQgOTSzXoe3QTr/Z5eSj+yIUvggjnZJAwokDLbjQzw3Y/KgYmjJhVIFIuTkAZWO4n+lQ8ZmZxamER+j7RPY4Lsu/YrRX4m3QjWmJro2LUpt/DZoTwAjThHo6r0vdmjm7k= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1763074087; c=relaxed/simple; bh=7fU0Bq/TaOR3dZhlHJ9U5upNWwkv6jjE6tjuCiCUV10=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To: Content-Type; b=HstPkQxfnOCeM4SmHhU/yvQxA5tK7rQG9nkXEMAe2A2Ol4q1Uk2TtB7JGVpk3ijMo75X1sOsH/XSp/4hVhcEkPCCMvGyHbEOIrd0FROjc/bs6QvUGWIbt44gU3yIQdQ4v9Udsbt37MKEVQXtdtjlXM9P6bTuvXM/4Gk5werdBr0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.166.198 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-il1-f198.google.com with SMTP id e9e14a558f8ab-433312ee468so14754065ab.1 for ; Thu, 13 Nov 2025 14:48:04 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763074084; x=1763678884; h=to:from:subject:message-id:in-reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=MkAINW27qJvhksazjjnauPiG3r3ArYmzpsDuCLzmfVU=; b=S8PjiqpnSVwxGjArXi5IWIG4XOAk2a4Ob3X3LJf76Jn5WCzpetuPd0PyKGFobBvnzf yMKid3q5nFjIrT1VA9OVS/kF6IOApbVt65Y4VmKOtdkTs8TPidVVdS45xC5EqCYI0s2E ewx33pfaEcreOdoZgcavr91IXilH3g1Y4iHI9hFf6iolAyINOugbqXjXIJyI6/NhFbI6 AYGvqibaF4DUTSQPxZI5d9fEvClCXs8QrdGJA1Xrz636XkcZohlntjmVzMhRD+PNAzd/ /aPFvNUqjhpRl6WNKEp+rO5vqiaiHD3FyYsNyBclJ3oMuMD0NDexJsF4SX+9pOpgYNpO +cyw== X-Gm-Message-State: AOJu0YxEeO9ux1qae5tlx2Z9f2+ftupSbJwpWEEqUtAO/ICxKn50lKcf BE02tGQqbzXVCvKERy2RXhbg6FqZwDhpYVoJKMU3OVYLc/QL2jAuD5vfsaedZCclAKMUp0cwCQt 9Oqme/GrQbKL/qsVq6/TX4/B+saZxf2vy/7ZG/9ylE2r5UqR5kvL5wgBfiNA= X-Google-Smtp-Source: AGHT+IFLYQMqtf27D98ICpM2cfCG4+In0L7Tc/PT7fC6iee3E9TtoEiFAeluZkcDJ/iEUbksGCIbpnEBaEybADn/93YGdgjiMjNl Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6e02:1fe5:b0:433:2400:2eef with SMTP id e9e14a558f8ab-4348c7664admr22576035ab.13.1763074084038; Thu, 13 Nov 2025 14:48:04 -0800 (PST) Date: Thu, 13 Nov 2025 14:48:04 -0800 In-Reply-To: X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <69166024.a70a0220.3124cb.0035.GAE@google.com> Subject: Re: [syzbot] [ext4?] KASAN: slab-out-of-bounds Read in ext4_search_dir From: syzbot To: linux-kernel@vger.kernel.org, rpthibeault@gmail.com, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" Hello, syzbot has tested the proposed patch but the reproducer is still triggering an issue: INFO: task hung in bdev_release INFO: task udevd:5853 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22952 pid:5853 tgid:5853 ppid:4730 task_flags:0x400140 flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:760 bdev_release+0x1a9/0x650 block/bdev.c:1128 blkdev_release+0x15/0x20 block/fops.c:709 __fput+0x44c/0xa70 fs/file_table.c:468 fput_close_sync+0x119/0x200 fs/file_table.c:573 __do_sys_close fs/open.c:1589 [inline] __se_sys_close fs/open.c:1574 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1574 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f75dfaa7407 RSP: 002b:00007ffee7019520 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 00007f75e0285880 RCX: 00007f75dfaa7407 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 RBP: 00007f75e02856e8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 INFO: task syz.3.281:6689 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.281 state:D stack:25736 pid:6689 tgid:6688 ppid:5743 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:760 loop_reread_partitions drivers/block/loop.c:448 [inline] loop_set_status+0xaa1/0xe30 drivers/block/loop.c:1293 loop_set_status_old drivers/block/loop.c:1380 [inline] lo_ioctl+0x9e9/0x1c60 drivers/block/loop.c:1570 blkdev_ioctl+0x5af/0x6d0 block/ioctl.c:705 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc10af8eec9 RSP: 002b:00007fc10a5fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc10b1e5fa0 RCX: 00007fc10af8eec9 RDX: 0000200000000300 RSI: 0000000000004c02 RDI: 0000000000000003 RBP: 00007fc10b011f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc10b1e6038 R14: 00007fc10b1e5fa0 R15: 00007ffc7e3d2b48 INFO: task syz.0.283:6697 blocked for more than 151 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.283 state:D stack:25640 pid:6697 tgid:6690 ppid:5734 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:760 bdev_open+0xe0/0xd30 block/bdev.c:945 bdev_file_open_by_dev+0x1be/0x240 block/bdev.c:1059 setup_bdev_super+0x5a/0x5b0 fs/super.c:1609 get_tree_bdev_flags+0x366/0x4d0 fs/super.c:1689 vfs_get_tree+0x92/0x2b0 fs/super.c:1751 fc_mount fs/namespace.c:1208 [inline] do_new_mount_fc fs/namespace.c:3651 [inline] do_new_mount+0x302/0xa10 fs/namespace.c:3727 do_mount fs/namespace.c:4050 [inline] __do_sys_mount fs/namespace.c:4238 [inline] __se_sys_mount+0x313/0x410 fs/namespace.c:4215 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f646db9066a RSP: 002b:00007f646e99ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f646e99cef0 RCX: 00007f646db9066a Tested on: commit: 9b9e4370 Merge tag 'slab-for-6.18-rc6' of git://git.ke.. git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=15a9c914580000 kernel config: https://syzkaller.appspot.com/x/.config?x=486aa0235ebabcac dashboard link: https://syzkaller.appspot.com/bug?extid=3ee481e21fd75e14c397 compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 patch: https://syzkaller.appspot.com/x/patch.diff?x=1649c914580000