linux-fsdevel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* Re: Re:
@ 2006-02-17  2:20 Janine C. Kennedy
  0 siblings, 0 replies; 45+ messages in thread
From: Janine C. Kennedy @ 2006-02-17  2:20 UTC (permalink / raw)
  To: linux-fsdevel


Hey linux-fsdevel@vger.kernel.org,

Get what you need now.

2 minute from Zero obligation. B@D CR3EDIIT ok.

$335k for 325 pm, v r just    Givingo        away

----- ------------------- ---------

COPY the Address below and paste in your BROoWSER:

lowestpay.net

----- ------ ---- ---- ------- --------


shrinking sensation, Watson,=20.
Far down within some shadowy lake,.
In order that the race might live and grow.=20.
Deep in my breast -- the Negro mother.=20.
Deep in my breast -- the Negro mother.=20.


TTYL,
Linda Smith

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: Re:
@ 2006-02-19  6:37 Geoffrey Z. Black, III
  0 siblings, 0 replies; 45+ messages in thread
From: Geoffrey Z. Black, III @ 2006-02-19  6:37 UTC (permalink / raw)
  To: linux-fsdevel


How are you,

The Smart Way to REE FII NANC3.

No up-front cost or obligation.

$335k for 325 pm, v r just    Givingo        away

----- ------------------- ---------

COPY the Address below and paste in your BROoWSER:

lowestpay.net

----- ------ ---- ---- ------- --------


Of Life immense in passion, pulse, and power,=20.
Beaten and mistreated for the work that I gave -- =20.
companies that just lately have gone outside to find CEOs=20.
At times I was pleased, to annoy him, to tickle him, to teach him to do so=
mersaults.
Gnarled, twisted, and curled, the nails yellow and claw-like, it is as if,=

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2006-02-20 19:13 Hank Baez
  0 siblings, 0 replies; 45+ messages in thread
From: Hank Baez @ 2006-02-20 19:13 UTC (permalink / raw)
  To: linux-fsdevel

Hey whats up,

What's Die abra really like? Ever wonder what it it feels like to take Nio=
 agra? If you have Erei ctile disa function. then go for it.

Do you have anxiety over your ercetion??Are you not able to keep ercetion?=
? Have Vaigra...Get TIGeRAu as low as $ 1.56 per paill on our site.

--------------------------------

copy the address below and paste in i your web browser:

anacrogynous.herownpc.com/?zz=3Dlowcost

--------------------------------

vali d  for 24 hirs.


A sour Scotswoman called Hooch..
And the chair is becoming quite mucky and damp..
Through gazing on the unquiet sky;.
Now, through my children, young and free,=20.
just talking about heaven..

Regards,

Peggy Labovitz

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: Re:
@ 2006-03-06 10:20 Mariana Schulz
  0 siblings, 0 replies; 45+ messages in thread
From: Mariana Schulz @ 2006-03-06 10:20 UTC (permalink / raw)
  To: linux-fsdevel

Hey,

Np        Pres_cr!pt!0n       required.

We offer a         MoNeYYY-bAcK       guar#anteeu.

------------------------------------------------------------------------

copy the address below and paste in e your web browser:

amidstream.coralstrategy.com

------------------------------------------------------------------------


Of a tear that runs down an angel's face..
shrinking sensation, Watson, .
when you stand before the serpents in the Zoo, and see the slithery, .
All of us dragged the kid into the street and Ronnie pressed the kid's .
Remember how the strong in struggle and strife .

Goodbye,

Terence Lewis

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2006-03-11 21:21 Catalina K. Molina, VI
  0 siblings, 0 replies; 45+ messages in thread
From: Catalina K. Molina, VI @ 2006-03-11 21:21 UTC (permalink / raw)
  To: linux-fsdevel


Hello,

Pri_vate    Onl_ine    ord_ering.

Full of    he@lth?   Then don't    cl!ck. 

------------------------------------------------------------------------

copy the address below and paste in u your web browser:

beret.candyball.net

------------------------------------------------------------------------


Some grinning morn --.
Something there is more immortal even than the stars, .
A lizard named Ed is asleep in his bed,.
Beaten and mistreated for the work that I gave --  .
Soakin' in the rain..

Bye,

Eugene Arroyo

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2006-03-14 15:11 Della
  0 siblings, 0 replies; 45+ messages in thread
From: Della @ 2006-03-14 15:11 UTC (permalink / raw)
  To: linux-fsdevel

Hello linux-fsdevel@vger.kernel.org,

Flawless   \/i@Gra   Offerings.

We are the bes't available nowadays.

************************************************************************

copy the address below and paste in i your web browser:

billowy.beecomrad.net

************************************************************************


Weep not, child,=20.
Trouble is, most companies aren't very good at leadership development. "Lo=
ok at all the=20.
he refused to associate himself with any investigation which did not tend =
towards the unusual..
And nigh at hand, only a very little above,=20.
Form complete is worthier far;=20.

TTYL,

Hiram Boykin

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2011-03-17 16:22 Steve French
  0 siblings, 0 replies; 45+ messages in thread
From: Steve French @ 2011-03-17 16:22 UTC (permalink / raw)
  To: linux-cifs-u79uwXL29TY76Z2rM5mHXA; +Cc: linux-fsdevel, Christoph Hellwig

Ignore this version of the patch.  Had a typo in  [PATCH] consistently
use smb_buf_length as be32 for cifs (try 2).

On Thu, Mar 17, 2011 at 10:53 AM, Steve French <smfrench-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>    [CIFS] consistently use smb_buf_length as be32 for cifs (try 2)
>
>        There is one big endian field in the cifs protocol, the RFC1001
>        length, which cifs code (unlike in the smb2 code) had been handling as
>        u32 until the last possible moment, when it was converted to be32 (its
>        native form) before sending on the wire.   To remove the last sparse
>        endian warning, and to make this consistent with the smb2
>        implementation  (which always treats the fields in their
>        native size and endianness), convert all uses of smb_buf_length to
>        be32.
>
>        This version incorporates Christoph's comment about
>        using be32_add_cpu
>
>    CC: Christoph Hellwig <hch-wEGCiKHe2LqWVfeAwA7xHQ@public.gmane.org>
>    Signed-off-by: Steve French <sfrench-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>
>
> diff --git a/fs/cifs/cifsencrypt.c b/fs/cifs/cifsencrypt.c
> index 5e71531..5bb4b09 100644
> --- a/fs/cifs/cifsencrypt.c
> +++ b/fs/cifs/cifsencrypt.c
> @@ -59,7 +59,7 @@ static int cifs_calculate_signature(const struct
> smb_hdr *cifs_pdu,
>                server->session_key.response, server->session_key.len);
>
>        crypto_shash_update(&server->secmech.sdescmd5->shash,
> -               cifs_pdu->Protocol, cifs_pdu->smb_buf_length);
> +               cifs_pdu->Protocol, be32_to_cpu(cifs_pdu->smb_buf_length));
>
>        rc = crypto_shash_final(&server->secmech.sdescmd5->shash, signature);
>
> diff --git a/fs/cifs/cifspdu.h b/fs/cifs/cifspdu.h
> index b5c8cc5..eac95e2 100644
> --- a/fs/cifs/cifspdu.h
> +++ b/fs/cifs/cifspdu.h
> @@ -397,9 +397,9 @@
>  #define GETU32(var)  (*((__u32 *)var)) /* BB check for endian issues */
>
>  struct smb_hdr {
> -       __u32 smb_buf_length;   /* big endian on wire *//* BB length is only two
> -               or three bytes - with one or two byte type preceding it that are
> -               zero - we could mask the type byte off just in case BB */
> +       __be32 smb_buf_length;  /* BB length is only two (rarely three) bytes,
> +               with one or two byte "type" preceding it that will be
> +               zero - we could mask the type byte off */
>        __u8 Protocol[4];
>        __u8 Command;
>        union {
> diff --git a/fs/cifs/cifssmb.c b/fs/cifs/cifssmb.c
> index 3c72e66..cc3e04f 100644
> --- a/fs/cifs/cifssmb.c
> +++ b/fs/cifs/cifssmb.c
> @@ -357,6 +357,13 @@ vt2_err:
>        return -EINVAL;
>  }
>
> +static void inc_rfc1001_len(void *pSMB, int count)
> +{
> +       struct smb_hdr *psmb = (struct smb_hdr *)pSMB;
> +
> +       be32_add_cpu(&pSMB->hdr.smb_buf_length, count);
> +}
> +
>  int
>  CIFSSMBNegotiate(unsigned int xid, struct cifs_ses *ses)
>  {
> @@ -409,7 +416,7 @@ CIFSSMBNegotiate(unsigned int xid, struct cifs_ses *ses)
>                count += strlen(protocols[i].name) + 1;
>                /* null at end of source and target buffers anyway */
>        }
> -       pSMB->hdr.smb_buf_length += count;
> +       inc_rfc1001_len(pSMB, count);
>        pSMB->ByteCount = cpu_to_le16(count);
>
>        rc = SendReceive(xid, ses, (struct smb_hdr *) pSMB,
> @@ -730,7 +737,7 @@ CIFSSMBEcho(struct TCP_Server_Info *server)
>        put_unaligned_le16(1, &smb->EchoCount);
>        put_bcc_le(1, &smb->hdr);
>        smb->Data[0] = 'a';
> -       smb->hdr.smb_buf_length += 3;
> +       inc_rfc1001_len(smb, 3);
>
>        rc = cifs_call_async(server, (struct smb_hdr *)smb,
>                                cifs_echo_callback, server);
> @@ -848,7 +855,7 @@ PsxDelete:
>        pSMB->TotalParameterCount = pSMB->ParameterCount;
>        pSMB->InformationLevel = cpu_to_le16(SMB_POSIX_UNLINK);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -894,7 +901,7 @@ DelFileRetry:
>        pSMB->SearchAttributes =
>            cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM);
>        pSMB->BufferFormat = 0x04;
> -       pSMB->hdr.smb_buf_length += name_len + 1;
> +       inc_rfc1001_len(pSMB, name_len + 1);
>        pSMB->ByteCount = cpu_to_le16(name_len + 1);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -938,7 +945,7 @@ RmDirRetry:
>        }
>
>        pSMB->BufferFormat = 0x04;
> -       pSMB->hdr.smb_buf_length += name_len + 1;
> +       inc_rfc1001_len(pSMB, name_len + 1);
>        pSMB->ByteCount = cpu_to_le16(name_len + 1);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -981,7 +988,7 @@ MkDirRetry:
>        }
>
>        pSMB->BufferFormat = 0x04;
> -       pSMB->hdr.smb_buf_length += name_len + 1;
> +       inc_rfc1001_len(pSMB, name_len + 1);
>        pSMB->ByteCount = cpu_to_le16(name_len + 1);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -1059,7 +1066,7 @@ PsxCreat:
>        pSMB->TotalParameterCount = pSMB->ParameterCount;
>        pSMB->InformationLevel = cpu_to_le16(SMB_POSIX_OPEN);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -1224,7 +1231,7 @@ OldOpenRetry:
>        pSMB->Sattr = cpu_to_le16(ATTR_HIDDEN | ATTR_SYSTEM | ATTR_DIRECTORY);
>        pSMB->OpenFunction = cpu_to_le16(convert_disposition(openDisposition));
>        count += name_len;
> -       pSMB->hdr.smb_buf_length += count;
> +       inc_rfc1001_len(pSMB, count);
>
>        pSMB->ByteCount = cpu_to_le16(count);
>        /* long_op set to 1 to allow for oplock break timeouts */
> @@ -1337,7 +1344,7 @@ openRetry:
>            SECURITY_CONTEXT_TRACKING | SECURITY_EFFECTIVE_ONLY;
>
>        count += name_len;
> -       pSMB->hdr.smb_buf_length += count;
> +       inc_rfc1001_len(pSMB, count);
>
>        pSMB->ByteCount = cpu_to_le16(count);
>        /* long_op set to 1 to allow for oplock break timeouts */
> @@ -1422,7 +1429,7 @@ CIFSSMBRead(const int xid, struct cifs_tcon
> *tcon, const int netfid,
>        }
>
>        iov[0].iov_base = (char *)pSMB;
> -       iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;
> +       iov[0].iov_len = be32_to_cpu(pSMB->hdr.smb_buf_length) + 4;
>        rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovecs */,
>                         &resp_buf_type, CIFS_LOG_ERROR);
>        cifs_stats_inc(&tcon->stats.cifs_stats.num_reads);
> @@ -1556,7 +1563,7 @@ CIFSSMBWrite(const int xid, struct cifs_tcon *tcon,
>
>        pSMB->DataLengthLow = cpu_to_le16(bytes_sent & 0xFFFF);
>        pSMB->DataLengthHigh = cpu_to_le16(bytes_sent >> 16);
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>
>        if (wct == 14)
>                pSMB->ByteCount = cpu_to_le16(byte_count);
> @@ -1640,11 +1647,12 @@ CIFSSMBWrite2(const int xid, struct cifs_tcon *tcon,
>
>        pSMB->DataLengthLow = cpu_to_le16(count & 0xFFFF);
>        pSMB->DataLengthHigh = cpu_to_le16(count >> 16);
> -       smb_hdr_len = pSMB->hdr.smb_buf_length + 1; /* hdr + 1 byte pad */
> +       /* header + 1 byte pad */
> +       smb_hdr_len = be32_to_cpu(pSMB->hdr.smb_buf_length) + 1;
>        if (wct == 14)
> -               pSMB->hdr.smb_buf_length += count+1;
> +               inc_rfc1001_len(pSMB, count + 1);
>        else /* wct == 12 */
> -               pSMB->hdr.smb_buf_length += count+5; /* smb data starts later */
> +               inc_rfc1001_len(pSMB, count + 5); /* smb data starts later */
>        if (wct == 14)
>                pSMB->ByteCount = cpu_to_le16(count + 1);
>        else /* wct == 12 */ /* bigger pad, smaller smb hdr, keep offset ok */ {
> @@ -1744,7 +1752,7 @@ CIFSSMBLock(const int xid, struct cifs_tcon *tcon,
>                /* oplock break */
>                count = 0;
>        }
> -       pSMB->hdr.smb_buf_length += count;
> +       inc_rfc1001_len(pSMB, count);
>        pSMB->ByteCount = cpu_to_le16(count);
>
>        if (waitFlag) {
> @@ -1835,14 +1843,14 @@ CIFSSMBPosixLock(const int xid, struct cifs_tcon *tcon,
>        pSMB->Fid = smb_file_id;
>        pSMB->InformationLevel = cpu_to_le16(SMB_SET_POSIX_LOCK);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        if (waitFlag) {
>                rc = SendReceiveBlockingLock(xid, tcon, (struct smb_hdr *) pSMB,
>                        (struct smb_hdr *) pSMBr, &bytes_returned);
>        } else {
>                iov[0].iov_base = (char *)pSMB;
> -               iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;
> +               iov[0].iov_len = be32_to_cpu(pSMB->hdr.smb_buf_length) + 4;
>                rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovecs */,
>                                &resp_buf_type, timeout);
>                pSMB = NULL; /* request buf already freed by SendReceive2. Do
> @@ -2008,7 +2016,7 @@ renameRetry:
>        }
>
>        count = 1 /* 1st signature byte */  + name_len + name_len2;
> -       pSMB->hdr.smb_buf_length += count;
> +       inc_rfc1001_len(pSMB, count);
>        pSMB->ByteCount = cpu_to_le16(count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -2088,7 +2096,7 @@ int CIFSSMBRenameOpenFile(const int xid, struct
> cifs_tcon *pTcon,
>        pSMB->InformationLevel =
>                cpu_to_le16(SMB_SET_FILE_RENAME_INFORMATION);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, pTcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -2155,7 +2163,7 @@ copyRetry:
>        }
>
>        count = 1 /* 1st signature byte */  + name_len + name_len2;
> -       pSMB->hdr.smb_buf_length += count;
> +       inc_rfc1001_len(pSMB, count);
>        pSMB->ByteCount = cpu_to_le16(count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -2245,7 +2253,7 @@ createSymLinkRetry:
>        pSMB->DataOffset = cpu_to_le16(offset);
>        pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_LINK);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -2331,7 +2339,7 @@ createHardLinkRetry:
>        pSMB->DataOffset = cpu_to_le16(offset);
>        pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_HLINK);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -2402,7 +2410,7 @@ winCreateHardLinkRetry:
>        }
>
>        count = 1 /* string type byte */  + name_len + name_len2;
> -       pSMB->hdr.smb_buf_length += count;
> +       inc_rfc1001_len(pSMB, count);
>        pSMB->ByteCount = cpu_to_le16(count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -2473,7 +2481,7 @@ querySymLinkRetry:
>        pSMB->ParameterCount = pSMB->TotalParameterCount;
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_UNIX_LINK);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -2820,7 +2828,7 @@ queryAclRetry:
>        pSMB->ParameterCount = pSMB->TotalParameterCount;
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_POSIX_ACL);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -2914,7 +2922,7 @@ setAclRetry:
>        pSMB->ParameterCount = cpu_to_le16(params);
>        pSMB->TotalParameterCount = pSMB->ParameterCount;
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -2972,7 +2980,7 @@ GetExtAttrRetry:
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_ATTR_FLAGS);
>        pSMB->Pad = 0;
>        pSMB->Fid = netfid;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->t2.ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -3130,9 +3138,9 @@ CIFSSMBGetCIFSACL(const int xid, struct
> cifs_tcon *tcon, __u16 fid,
>        pSMB->AclFlags = cpu_to_le32(CIFS_ACL_OWNER | CIFS_ACL_GROUP |
>                                     CIFS_ACL_DACL);
>        pSMB->ByteCount = cpu_to_le16(11); /* 3 bytes pad + 8 bytes parm */
> -       pSMB->hdr.smb_buf_length += 11;
> +       inc_rfc1001_len(pSMB, 11);
>        iov[0].iov_base = (char *)pSMB;
> -       iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;
> +       iov[0].iov_len = be32_to_cpu(pSMB->hdr.smb_buf_length) + 4;
>
>        rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovec */, &buf_type,
>                         0);
> @@ -3241,10 +3249,9 @@ setCifsAclRetry:
>                memcpy((char *) &pSMBr->hdr.Protocol + data_offset,
>                        (char *) pntsd,
>                        acllen);
> -               pSMB->hdr.smb_buf_length += (byte_count + data_count);
> -
> +               inc_rfc1001_len(pSMB, byte_count + data_count);
>        } else
> -               pSMB->hdr.smb_buf_length += byte_count;
> +               inc_rfc1001_len(pSMB, byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -3295,7 +3302,7 @@ QInfRetry:
>        }
>        pSMB->BufferFormat = 0x04;
>        name_len++; /* account for buffer type byte */
> -       pSMB->hdr.smb_buf_length += (__u16) name_len;
> +       inc_rfc1001_len(pSMB, (__u16)name_len);
>        pSMB->ByteCount = cpu_to_le16(name_len);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -3370,7 +3377,7 @@ QFileInfoRetry:
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_ALL_INFO);
>        pSMB->Pad = 0;
>        pSMB->Fid = netfid;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -3457,7 +3464,7 @@ QPathInfoRetry:
>        else
>                pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_ALL_INFO);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -3538,7 +3545,7 @@ UnixQFileInfoRetry:
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_UNIX_BASIC);
>        pSMB->Pad = 0;
>        pSMB->Fid = netfid;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -3623,7 +3630,7 @@ UnixQPathInfoRetry:
>        pSMB->ParameterCount = pSMB->TotalParameterCount;
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_UNIX_BASIC);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -3737,7 +3744,7 @@ findFirstRetry:
>
>        /* BB what should we set StorageType to? Does it matter? BB */
>        pSMB->SearchStorageType = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -3866,7 +3873,7 @@ int CIFSFindNext(const int xid, struct cifs_tcon *tcon,
>        byte_count = params + 1 /* pad */ ;
>        pSMB->TotalParameterCount = cpu_to_le16(params);
>        pSMB->ParameterCount = pSMB->TotalParameterCount;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4028,7 +4035,7 @@ GetInodeNumberRetry:
>        pSMB->ParameterCount = pSMB->TotalParameterCount;
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_INTERNAL_INFO);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4252,7 +4259,7 @@ getDFSRetry:
>        pSMB->ParameterCount = cpu_to_le16(params);
>        pSMB->TotalParameterCount = pSMB->ParameterCount;
>        pSMB->MaxReferralLevel = cpu_to_le16(3);
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, ses, (struct smb_hdr *) pSMB,
> @@ -4326,7 +4333,7 @@ oldQFSInfoRetry:
>        pSMB->Reserved3 = 0;
>        pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
>        pSMB->InformationLevel = cpu_to_le16(SMB_INFO_ALLOCATION);
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4405,7 +4412,7 @@ QFSInfoRetry:
>        pSMB->Reserved3 = 0;
>        pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_SIZE_INFO);
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4485,7 +4492,7 @@ QFSAttributeRetry:
>        pSMB->Reserved3 = 0;
>        pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_ATTRIBUTE_INFO);
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4556,7 +4563,7 @@ QFSDeviceRetry:
>        pSMB->Reserved3 = 0;
>        pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_DEVICE_INFO);
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4625,7 +4632,7 @@ QFSUnixRetry:
>        pSMB->Reserved3 = 0;
>        pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_CIFS_UNIX_INFO);
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4708,7 +4715,7 @@ SETFSUnixRetry:
>        pSMB->ClientUnixMinor = cpu_to_le16(CIFS_UNIX_MINOR_VERSION);
>        pSMB->ClientUnixCap = cpu_to_le64(cap);
>
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4770,7 +4777,7 @@ QFSPosixRetry:
>        pSMB->Reserved3 = 0;
>        pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
>        pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_POSIX_FS_INFO);
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4896,7 +4903,7 @@ SetEOFRetry:
>        pSMB->ParameterCount = cpu_to_le16(params);
>        pSMB->TotalParameterCount = pSMB->ParameterCount;
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        parm_data->FileSize = cpu_to_le64(size);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -4975,7 +4982,7 @@ CIFSSMBSetFileSize(const int xid, struct
> cifs_tcon *tcon, __u64 size,
>                                cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO);
>        }
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
>        if (rc) {
> @@ -5043,7 +5050,7 @@ CIFSSMBSetFileInfo(const int xid, struct cifs_tcon *tcon,
>        else
>                pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        memcpy(data_offset, data, sizeof(FILE_BASIC_INFO));
>        rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
> @@ -5102,7 +5109,7 @@ CIFSSMBSetFileDisposition(const int xid, struct
> cifs_tcon *tcon,
>        pSMB->Fid = fid;
>        pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_DISPOSITION_INFO);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        *data_offset = delete_file ? 1 : 0;
>        rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
> @@ -5175,7 +5182,7 @@ SetTimesRetry:
>        else
>                pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        memcpy(data_offset, data, sizeof(FILE_BASIC_INFO));
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -5227,7 +5234,7 @@ SetAttrLgcyRetry:
>        }
>        pSMB->attr = cpu_to_le16(dos_attrs);
>        pSMB->BufferFormat = 0x04;
> -       pSMB->hdr.smb_buf_length += name_len + 1;
> +       inc_rfc1001_len(pSMB, name_len + 1);
>        pSMB->ByteCount = cpu_to_le16(name_len + 1);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> @@ -5332,7 +5339,7 @@ CIFSSMBUnixSetFileInfo(const int xid, struct
> cifs_tcon *tcon,
>        pSMB->Fid = fid;
>        pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_BASIC);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        cifs_fill_unix_set_info(data_offset, args);
> @@ -5408,7 +5415,7 @@ setPermsRetry:
>        pSMB->TotalDataCount = pSMB->DataCount;
>        pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_BASIC);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>
>        cifs_fill_unix_set_info(data_offset, args);
>
> @@ -5493,7 +5500,7 @@ QAllEAsRetry:
>        pSMB->ParameterCount = pSMB->TotalParameterCount;
>        pSMB->InformationLevel = cpu_to_le16(SMB_INFO_QUERY_ALL_EAS);
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
> @@ -5706,7 +5713,7 @@ SetEARetry:
>        pSMB->ParameterCount = cpu_to_le16(params);
>        pSMB->TotalParameterCount = pSMB->ParameterCount;
>        pSMB->Reserved4 = 0;
> -       pSMB->hdr.smb_buf_length += byte_count;
> +       inc_rfc1001_len(pSMB, byte_count);
>        pSMB->ByteCount = cpu_to_le16(byte_count);
>        rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
>                         (struct smb_hdr *) pSMBr, &bytes_returned, 0);
> diff --git a/fs/cifs/connect.c b/fs/cifs/connect.c
> index c19f00a..19d7898 100644
> --- a/fs/cifs/connect.c
> +++ b/fs/cifs/connect.c
> @@ -320,12 +320,12 @@ static int coalesce_t2(struct smb_hdr *psecond,
> struct smb_hdr *pTargetSMB)
>        byte_count += total_in_buf2;
>        put_bcc_le(byte_count, pTargetSMB);
>
> -       byte_count = pTargetSMB->smb_buf_length;
> +       byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
>        byte_count += total_in_buf2;
>
>        /* BB also add check that we are not beyond maximum buffer size */
>
> -       pTargetSMB->smb_buf_length = byte_count;
> +       pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
>
>        if (remaining == total_in_buf2) {
>                cFYI(1, "found the last secondary response");
> @@ -490,8 +490,7 @@ incomplete_rcv:
>                /* Note that FC 1001 length is big endian on the wire,
>                but we convert it here so it is always manipulated
>                as host byte order */
> -               pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
> -               smb_buffer->smb_buf_length = pdu_length;
> +               pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
>
>                cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
>
> @@ -2299,7 +2298,7 @@ ip_rfc1001_connect(struct TCP_Server_Info *server)
>                smb_buf = (struct smb_hdr *)ses_init_buf;
>
>                /* sizeof RFC1002_SESSION_REQUEST with no scope */
> -               smb_buf->smb_buf_length = 0x81000044;
> +               smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
>                rc = smb_send(server, smb_buf, 0x44);
>                kfree(ses_init_buf);
>                /*
> @@ -3097,7 +3096,8 @@ CIFSTCon(unsigned int xid, struct cifs_ses *ses,
>        bcc_ptr += strlen("?????");
>        bcc_ptr += 1;
>        count = bcc_ptr - &pSMB->Password[0];
> -       pSMB->hdr.smb_buf_length += count;
> +       pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
> +                                       pSMB->hdr.smb_buf_length) + count);
>        pSMB->ByteCount = cpu_to_le16(count);
>
>        rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
> diff --git a/fs/cifs/misc.c b/fs/cifs/misc.c
> index 1640a6e..6863acf 100644
> --- a/fs/cifs/misc.c
> +++ b/fs/cifs/misc.c
> @@ -304,12 +304,10 @@ header_assemble(struct smb_hdr *buffer, char
> smb_command /* command */ ,
>
>        memset(temp, 0, 256); /* bigger than MAX_CIFS_HDR_SIZE */
>
> -       buffer->smb_buf_length =
> +       buffer->smb_buf_length = cpu_to_be32(
>            (2 * word_count) + sizeof(struct smb_hdr) -
>            4 /*  RFC 1001 length field does not count */  +
> -           2 /* for bcc field itself */ ;
> -       /* Note that this is the only network field that has to be converted
> -          to big endian and it is done just before we send it */
> +           2 /* for bcc field itself */) ;
>
>        buffer->Protocol[0] = 0xFF;
>        buffer->Protocol[1] = 'S';
> @@ -424,7 +422,7 @@ check_smb_hdr(struct smb_hdr *smb, __u16 mid)
>  int
>  checkSMB(struct smb_hdr *smb, __u16 mid, unsigned int length)
>  {
> -       __u32 len = smb->smb_buf_length;
> +       __u32 len = be32_to_cpu(smb->smb_buf_length);
>        __u32 clc_len;  /* calculated length */
>        cFYI(0, "checkSMB Length: 0x%x, smb_buf_length: 0x%x", length, len);
>
> diff --git a/fs/cifs/sess.c b/fs/cifs/sess.c
> index e982890..6b140e1 100644
> --- a/fs/cifs/sess.c
> +++ b/fs/cifs/sess.c
> @@ -634,7 +634,7 @@ ssetup_ntlmssp_authenticate:
>        and rest of bcc area. This allows us to avoid
>        a large buffer 17K allocation */
>        iov[0].iov_base = (char *)pSMB;
> -       iov[0].iov_len = smb_buf->smb_buf_length + 4;
> +       iov[0].iov_len = be32_to_cpu(smb_buf->smb_buf_length) + 4;
>
>        /* setting this here allows the code at the end of the function
>           to free the request buffer if there's an error */
> @@ -872,7 +872,8 @@ ssetup_ntlmssp_authenticate:
>        iov[2].iov_len = (long) bcc_ptr - (long) str_area;
>
>        count = iov[1].iov_len + iov[2].iov_len;
> -       smb_buf->smb_buf_length += count;
> +       smb_buf->smb_buf_length =
> +               cpu_to_be32(be32_to_cpu(smb_buf->smb_buf_length) + count);
>
>        put_bcc_le(count, smb_buf);
>
> diff --git a/fs/cifs/transport.c b/fs/cifs/transport.c
> index 1a2930d..fd43ac6 100644
> --- a/fs/cifs/transport.c
> +++ b/fs/cifs/transport.c
> @@ -129,7 +129,7 @@ smb_sendv(struct TCP_Server_Info *server, struct
> kvec *iov, int n_vec)
>        unsigned int len = iov[0].iov_len;
>        unsigned int total_len;
>        int first_vec = 0;
> -       unsigned int smb_buf_length = smb_buffer->smb_buf_length;
> +       unsigned int smb_buf_length = be32_to_cpu(smb_buffer->smb_buf_length);
>        struct socket *ssocket = server->ssocket;
>
>        if (ssocket == NULL)
> @@ -144,17 +144,10 @@ smb_sendv(struct TCP_Server_Info *server, struct
> kvec *iov, int n_vec)
>        else
>                smb_msg.msg_flags = MSG_NOSIGNAL;
>
> -       /* smb header is converted in header_assemble. bcc and rest of SMB word
> -          area, and byte area if necessary, is converted to littleendian in
> -          cifssmb.c and RFC1001 len is converted to bigendian in smb_send
> -          Flags2 is converted in SendReceive */
> -
> -
>        total_len = 0;
>        for (i = 0; i < n_vec; i++)
>                total_len += iov[i].iov_len;
>
> -       smb_buffer->smb_buf_length = cpu_to_be32(smb_buffer->smb_buf_length);
>        cFYI(1, "Sending smb:  total_len %d", total_len);
>        dump_smb(smb_buffer, len);
>
> @@ -243,7 +236,7 @@ smb_sendv(struct TCP_Server_Info *server, struct
> kvec *iov, int n_vec)
>
>        /* Don't want to modify the buffer as a
>           side effect of this call. */
> -       smb_buffer->smb_buf_length = smb_buf_length;
> +       smb_buffer->smb_buf_length = cpu_to_be32(smb_buf_length);
>
>        return rc;
>  }
> @@ -402,7 +395,7 @@ cifs_call_async(struct TCP_Server_Info *server,
> struct smb_hdr *in_buf,
>  #ifdef CONFIG_CIFS_STATS2
>        atomic_inc(&server->inSend);
>  #endif
> -       rc = smb_send(server, in_buf, in_buf->smb_buf_length);
> +       rc = smb_send(server, in_buf, be32_to_cpu(in_buf->smb_buf_length));
>  #ifdef CONFIG_CIFS_STATS2
>        atomic_dec(&server->inSend);
>        mid->when_sent = jiffies;
> @@ -437,7 +430,7 @@ SendReceiveNoRsp(const unsigned int xid, struct
> cifs_ses *ses,
>        int resp_buf_type;
>
>        iov[0].iov_base = (char *)in_buf;
> -       iov[0].iov_len = in_buf->smb_buf_length + 4;
> +       iov[0].iov_len = be32_to_cpu(in_buf->smb_buf_length) + 4;
>        flags |= CIFS_NO_RESP;
>        rc = SendReceive2(xid, ses, iov, 1, &resp_buf_type, flags);
>        cFYI(DBG2, "SendRcvNoRsp flags %d rc %d", flags, rc);
> @@ -503,7 +496,7 @@ send_nt_cancel(struct TCP_Server_Info *server,
> struct smb_hdr *in_buf,
>        int rc = 0;
>
>        /* -4 for RFC1001 length and +2 for BCC field */
> -       in_buf->smb_buf_length = sizeof(struct smb_hdr) - 4  + 2;
> +       in_buf->smb_buf_length = cpu_to_be32(sizeof(struct smb_hdr) - 4  + 2);
>        in_buf->Command = SMB_COM_NT_CANCEL;
>        in_buf->WordCount = 0;
>        put_bcc_le(0, in_buf);
> @@ -514,7 +507,7 @@ send_nt_cancel(struct TCP_Server_Info *server,
> struct smb_hdr *in_buf,
>                mutex_unlock(&server->srv_mutex);
>                return rc;
>        }
> -       rc = smb_send(server, in_buf, in_buf->smb_buf_length);
> +       rc = smb_send(server, in_buf, be32_to_cpu(in_buf->smb_buf_length));
>        mutex_unlock(&server->srv_mutex);
>
>        cFYI(1, "issued NT_CANCEL for mid %u, rc = %d",
> @@ -627,7 +620,7 @@ SendReceive2(const unsigned int xid, struct cifs_ses *ses,
>                return rc;
>        }
>
> -       receive_len = midQ->resp_buf->smb_buf_length;
> +       receive_len = be32_to_cpu(midQ->resp_buf->smb_buf_length);
>
>        if (receive_len > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE) {
>                cERROR(1, "Frame too large received.  Length: %d  Xid: %d",
> @@ -713,9 +706,10 @@ SendReceive(const unsigned int xid, struct cifs_ses *ses,
>           to the same server. We may make this configurable later or
>           use ses->maxReq */
>
> -       if (in_buf->smb_buf_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) {
> +       if (be32_to_cpu(in_buf->smb_buf_length) > CIFSMaxBufSize +
> +                       MAX_CIFS_HDR_SIZE - 4) {
>                cERROR(1, "Illegal length, greater than maximum frame, %d",
> -                          in_buf->smb_buf_length);
> +                          be32_to_cpu(in_buf->smb_buf_length));
>                return -EIO;
>        }
>
> @@ -748,7 +742,7 @@ SendReceive(const unsigned int xid, struct cifs_ses *ses,
>  #ifdef CONFIG_CIFS_STATS2
>        atomic_inc(&ses->server->inSend);
>  #endif
> -       rc = smb_send(ses->server, in_buf, in_buf->smb_buf_length);
> +       rc = smb_send(ses->server, in_buf, be32_to_cpu(in_buf->smb_buf_length));
>  #ifdef CONFIG_CIFS_STATS2
>        atomic_dec(&ses->server->inSend);
>        midQ->when_sent = jiffies;
> @@ -783,7 +777,7 @@ SendReceive(const unsigned int xid, struct cifs_ses *ses,
>                return rc;
>        }
>
> -       receive_len = midQ->resp_buf->smb_buf_length;
> +       receive_len = be32_to_cpu(midQ->resp_buf->smb_buf_length);
>
>        if (receive_len > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE) {
>                cERROR(1, "Frame too large received.  Length: %d  Xid: %d",
> @@ -796,7 +790,7 @@ SendReceive(const unsigned int xid, struct cifs_ses *ses,
>
>        if (midQ->resp_buf && out_buf
>            && (midQ->midState == MID_RESPONSE_RECEIVED)) {
> -               out_buf->smb_buf_length = receive_len;
> +               out_buf->smb_buf_length = cpu_to_be32(receive_len);
>                memcpy((char *)out_buf + 4,
>                       (char *)midQ->resp_buf + 4,
>                       receive_len);
> @@ -815,7 +809,7 @@ SendReceive(const unsigned int xid, struct cifs_ses *ses,
>                        }
>                }
>
> -               *pbytes_returned = out_buf->smb_buf_length;
> +               *pbytes_returned = be32_to_cpu(out_buf->smb_buf_length);
>
>                /* BB special case reconnect tid and uid here? */
>                rc = map_smb_to_linux_error(out_buf, 0 /* no log */ );
> @@ -892,9 +886,10 @@ SendReceiveBlockingLock(const unsigned int xid,
> struct cifs_tcon *tcon,
>           to the same server. We may make this configurable later or
>           use ses->maxReq */
>
> -       if (in_buf->smb_buf_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) {
> +       if (be32_to_cpu(in_buf->smb_buf_length) > CIFSMaxBufSize +
> +                       MAX_CIFS_HDR_SIZE - 4) {
>                cERROR(1, "Illegal length, greater than maximum frame, %d",
> -                          in_buf->smb_buf_length);
> +                          be32_to_cpu(in_buf->smb_buf_length));
>                return -EIO;
>        }
>
> @@ -925,7 +920,7 @@ SendReceiveBlockingLock(const unsigned int xid,
> struct cifs_tcon *tcon,
>  #ifdef CONFIG_CIFS_STATS2
>        atomic_inc(&ses->server->inSend);
>  #endif
> -       rc = smb_send(ses->server, in_buf, in_buf->smb_buf_length);
> +       rc = smb_send(ses->server, in_buf, be32_to_cpu(in_buf->smb_buf_length));
>  #ifdef CONFIG_CIFS_STATS2
>        atomic_dec(&ses->server->inSend);
>        midQ->when_sent = jiffies;
> @@ -992,7 +987,7 @@ SendReceiveBlockingLock(const unsigned int xid,
> struct cifs_tcon *tcon,
>        if (rc != 0)
>                return rc;
>
> -       receive_len = midQ->resp_buf->smb_buf_length;
> +       receive_len = be32_to_cpu(midQ->resp_buf->smb_buf_length);
>        if (receive_len > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE) {
>                cERROR(1, "Frame too large received.  Length: %d  Xid: %d",
>                        receive_len, xid);
> @@ -1008,7 +1003,7 @@ SendReceiveBlockingLock(const unsigned int xid,
> struct cifs_tcon *tcon,
>                goto out;
>        }
>
> -       out_buf->smb_buf_length = receive_len;
> +       out_buf->smb_buf_length = cpu_to_be32(receive_len);
>        memcpy((char *)out_buf + 4,
>               (char *)midQ->resp_buf + 4,
>               receive_len);
> @@ -1027,7 +1022,7 @@ SendReceiveBlockingLock(const unsigned int xid,
> struct cifs_tcon *tcon,
>                }
>        }
>
> -       *pbytes_returned = out_buf->smb_buf_length;
> +       *pbytes_returned = be32_to_cpu(out_buf->smb_buf_length);
>
>        /* BB special case reconnect tid and uid here? */
>        rc = map_smb_to_linux_error(out_buf, 0 /* no log */ );
>
> --
> Thanks,
>
> Steve
>



-- 
Thanks,

Steve

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2012-02-15 21:17 Irish Lotto
  0 siblings, 0 replies; 45+ messages in thread
From: Irish Lotto @ 2012-02-15 21:17 UTC (permalink / raw)




You won £750,000 GBP. Send Name, Age, occupation, Country.
--
To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
  2013-04-04 17:23 ` Fwd: Michael Fox
@ 2013-04-04 17:43   ` Michael Fox
  0 siblings, 0 replies; 45+ messages in thread
From: Michael Fox @ 2013-04-04 17:43 UTC (permalink / raw)
  To: linux-fsdevel

After reboot I tried running 'fsck -f' but no additional data 'The
volume appears to be OK'. Output looks like:

m@air:~$ sudo fsck -fd /dev/sda5
fsck from util-linux 2.20.1
** /dev/sda5
        Using cacheBlockSize=32K cacheTotalBlock=1024 cacheSize=32768K.
** Checking HFS Plus volume.
** Checking Extents Overflow file.
** Checking Catalog file.
** Checking multi-linked files.
** Checking Catalog hierarchy.
** Checking Extended Attributes file.
** Checking volume bitmap.
** Checking volume information.
** The volume Macintosh HD appears to be OK.


On Thu, Apr 4, 2013 at 10:23 AM, Michael Fox <415fox@gmail.com> wrote:
> I get a crash coming from hfsplus driver. It seems related to a fixed
> bug it might be that this fix needs to be applied elsewhere:
>
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aac4e4198eff7f9551d586c55342403d49249d95
>
> Because I do get the 'hfs: recoff %d too large' message, but
> hfsplus_bnode_read is being called from hfsplus_bref_find and the fix
> was only applied when it's being called by hfs_brec_keylen
>
> My kernel is ubuntu mainline: Linux air 3.8.2-030802-generic
> #201303031906 SMP Mon Mar 4 00:07:09 UTC 2013 x86_64 x86_64 x86_64
> GNU/Linux
>
> The dmesg shows:
>
> [119866.587029] hfs: recoff 28514 too large
> [119866.587072] general protection fault: 0000 [#1] SMP
> [119866.588590] Modules linked in: nls_utf8 hfsplus snd_hda_codec_hdmi
> snd_hda_codec_cirrus ip6table_filter ip6_tables ebtable_nat ebtables
> pci_stub vboxpci(OF) vboxnetadp(OF) vboxnetflt(OF) hid_microsoft
> ipt_MASQUERADE iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4
> nf_defrag_ipv4 xt_state nf_conntrack ipt_REJECT xt_CHECKSUM
> iptable_mangle xt_tcpudp iptable_filter ip_tables x_tables bridge
> vboxdrv(OF) stp llc asix usbnet btusb bluetooth hid_generic coretemp
> kvm_intel arc4 kvm brcmsmac ghash_clmulni_intel usb_storage mac80211
> brcmutil hid_apple aesni_intel cfg80211 ablk_helper cryptd joydev
> uvcvideo lrw videobuf2_core aes_x86_64 xts parport_pc gf128mul
> videodev videobuf2_vmalloc cordic ppdev videobuf2_memops usbhid
> snd_hda_intel hid bcm5974 snd_hda_codec snd_hwdep snd_pcm applesmc
> input_polldev snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq
> snd_timer snd_seq_device i915 microcode nfsd nfs_acl auth_rpcgss snd
> lpc_ich nfs fscache lockd mac_hid drm_kms_helper binfmt_misc bcma drm
> sunrpc soundcore snd_page_alloc i2c_algo_bit apple_bl video mei lp
> parport
> [119866.600901] CPU 0
> [119866.600936] Pid: 17859, comm: updatedb.mlocat Tainted: GF
> O 3.8.2-030802-generic #201303031906 Apple Inc.
> MacBookAir4,2/Mac-742912EFDBEE19B3
> [119866.606181] RIP: 0010:[<ffffffff8135c8b2>]  [<ffffffff8135c8b2>]
> memcpy+0x12/0x110
> [119866.607605] RSP: 0018:ffff880106cf1a80  EFLAGS: 00010202
> [119866.609008] RAX: ffff880106cf1b04 RBX: ffff880106cf1b04 RCX:
> 0000000000000001
> [119866.610431] RDX: 0000000000000001 RSI: 0005080000000fff RDI:
> ffff880106cf1b04
> [119866.611871] RBP: ffff880106cf1ad8 R08: 0000000000000009 R09:
> ffff880000000000
> [119866.613320] R10: 0000000000000a31 R11: 0000000000000a30 R12:
> 0000000000000004
> [119866.614796] R13: 0000000000000001 R14: 0000000000000001 R15:
> ffff88005fc25780
> [119866.616282] FS:  00007facc122c700(0000) GS:ffff88016fa00000(0000)
> knlGS:0000000000000000
> [119866.617809] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [119866.619344] CR2: 00007facc1253000 CR3: 0000000169bf9000 CR4:
> 00000000000407f0
> [119866.620906] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
> 0000000000000000
> [119866.622476] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7:
> 0000000000000400
> [119866.624048] Process updatedb.mlocat (pid: 17859, threadinfo
> ffff880106cf0000, task ffff88013d082e80)
> [119866.625649] Stack:
> [119866.627238]  ffffffffa07ceb9f ffff880000000000 0000160000000000
> 0000000000000009
> [119866.628879]  0000000000000001 ffff88016a339320 ffff88005fc25780
> 0000000000000003
> [119866.630527]  0000000000008d3e ffff880106cf1b58 ffff880005499000
> ffff880106cf1b38
> [119866.632181] Call Trace:
> [119866.633810]  [<ffffffffa07ceb9f>] ? hfsplus_bnode_read+0x9f/0x120 [hfsplus]
> [119866.635462]  [<ffffffffa07d12c9>] hfsplus_brec_find+0x79/0x150 [hfsplus]
> [119866.637123]  [<ffffffff816e9ecd>] ? mutex_lock+0x1d/0x50
> [119866.638785]  [<ffffffff811ad220>] ? fillonedir+0xf0/0xf0
> [119866.640443]  [<ffffffffa07cd237>] hfsplus_readdir+0xc7/0x4b0 [hfsplus]
> [119866.642117]  [<ffffffff8115b5cf>] ? do_anonymous_page.isra.35+0x23f/0x2f0
> [119866.643801]  [<ffffffff81191cc9>] ? memcg_check_events+0x29/0x50
> [119866.645499]  [<ffffffff812d877c>] ? security_inode_permission+0x1c/0x30
> [119866.647217]  [<ffffffff811a65f8>] ? __inode_permission+0x48/0xd0
> [119866.648950]  [<ffffffff812d8d19>] ? security_file_open+0x79/0x80
> [119866.650675]  [<ffffffff81087d8a>] ? lg_local_unlock+0x1a/0x20
> [119866.652395]  [<ffffffff811ba0d9>] ? mntput_no_expire+0x49/0x160
> [119866.654111]  [<ffffffff811ba216>] ? mntput+0x26/0x40
> [119866.655799]  [<ffffffff811a4c82>] ? path_put+0x22/0x30
> [119866.657439]  [<ffffffff811a4d0d>] ? terminate_walk+0x3d/0x50
> [119866.659082]  [<ffffffff811a998c>] ? do_last+0x25c/0x820
> [119866.660732]  [<ffffffff811aa003>] ? path_openat+0xb3/0x4d0
> [119866.662386]  [<ffffffff811a6599>] ? putname+0x29/0x40
> [119866.664043]  [<ffffffff811aa793>] ? user_path_at_empty+0x63/0xa0
> [119866.665709]  [<ffffffff81311b94>] ? apparmor_inode_getattr+0x54/0x60
> [119866.667383]  [<ffffffff811ad220>] ? fillonedir+0xf0/0xf0
> [119866.669066]  [<ffffffff811ad100>] vfs_readdir+0xb0/0xe0
> [119866.670752]  [<ffffffff811a00aa>] ? sys_newfstat+0x2a/0x40
> [119866.672434]  [<ffffffff811ad43e>] sys_getdents+0x8e/0x110
> [119866.674027]  [<ffffffff816f511d>] system_call_fastpath+0x1a/0x1f
> [119866.675572] Code: 4e 48 83 c4 08 5b 5d c3 90 e8 fb fd ff ff eb e6
> 90 90 90 90 90 90 90 90 90 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3
> 48 a5 89 d1 <f3> a4 c3 20 4c 8b 06 4c 8b 4e 08 4c 8b 56 10 4c 8b 5e 18
> 48 8d
> [119866.680657] RIP  [<ffffffff8135c8b2>] memcpy+0x12/0x110
> [119866.683372]  RSP <ffff880106cf1a80>
> [119866.706034] ---[ end trace 9082f8a67f156e96 ]---
>
> I can't reproduce it. It just came out of the blue.
>
> Output of ver_linux is:
>
> root@air:/var/log# /usr/src/linux-headers-3.8.2-030802-generic/scripts/ver_linux
> If some fields are empty or look unusual you may have an old version.
> Compare to the current minimal requirements in Documentation/Changes.
>
> Linux air 3.8.2-030802-generic #201303031906 SMP Mon Mar 4 00:07:09
> UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
>
> Gnu C                  4.7
> Gnu make               3.81
> binutils               2.22.90.20120924
> util-linux             2.20.1
> mount                  support
> module-init-tools      3.16
> e2fsprogs              1.42.5
> PPP                    2.4.5
> Linux C Library        2.15
> Dynamic linker (ldd)   2.15
> Procps                 3.3.3
> Net-tools              1.60
> Kbd                    1.15.3
> Sh-utils               8.13
> wireless-tools         30
> Modules Loaded         nls_utf8 hfsplus snd_hda_codec_hdmi
> snd_hda_codec_cirrus ip6table_filter ip6_tables ebtable_nat ebtables
> pci_stub vboxpci vboxnetadp vboxnetflt hid_microsoft ipt_MASQUERADE
> iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4
> xt_state nf_conntrack ipt_REJECT xt_CHECKSUM iptable_mangle xt_tcpudp
> iptable_filter ip_tables x_tables bridge vboxdrv stp llc asix usbnet
> btusb bluetooth hid_generic coretemp kvm_intel arc4 kvm brcmsmac
> ghash_clmulni_intel usb_storage mac80211 brcmutil hid_apple
> aesni_intel cfg80211 ablk_helper cryptd joydev uvcvideo lrw
> videobuf2_core aes_x86_64 xts parport_pc gf128mul videodev
> videobuf2_vmalloc cordic ppdev videobuf2_memops usbhid snd_hda_intel
> hid bcm5974 snd_hda_codec snd_hwdep snd_pcm applesmc input_polldev
> snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer
> snd_seq_device i915 microcode nfsd nfs_acl auth_rpcgss snd lpc_ich nfs
> fscache lockd mac_hid drm_kms_helper binfmt_misc bcma drm sunrpc
> soundcore snd_page_alloc i2c_algo_bit apple_bl video mei lp parport
>
> Here's a form that's suggested to fill out:
>
> [1.] One line summary of the problem:
>
> hfsplus volume suddenly inaccessable after 'hfs: recoff %d too large'
>
>
> [2.] Full description of the problem/report:
>
> Suddenly my screen is replaced by a stack trace and a general protection fault.
>
> I had an OSX filesystem mounted and linked from my home directory. It looks like
>
> updatedb.mlocat was scanning the file systems at the time.
>
>
> [3.] Keywords (i.e., modules, networking, kernel):
> hfsplus
>
> [4.] Kernel version (from /proc/version):
> Linux version 3.8.2-030802-generic (root@gomeisa) (gcc version 4.6.3
> (Ubuntu/Linaro 4.6.3-1ubuntu5) ) #201303031906 SMP Mon Mar 4 00:07:09
> UTC 2013
>
>
> [5.] Output of Oops.. message (if applicable) with symbolic information
>
> [119866.587029] hfs: recoff 28514 too large
> [119866.587072] general protection fault: 0000 [#1] SMP
> [119866.588590] Modules linked in: nls_utf8 hfsplus snd_hda_codec_hdmi
> snd_hda_codec_cirrus ip6table_filter ip6_tables ebtable_nat ebtables
> pci_stub vboxpci(OF) vboxnetadp(OF) vboxnetflt(OF) hid_microsoft
> ipt_MASQUERADE iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4
> nf_defrag_ipv4 xt_state nf_conntrack ipt_REJECT xt_CHECKSUM
> iptable_mangle xt_tcpudp iptable_filter ip_tables x_tables bridge
> vboxdrv(OF) stp llc asix usbnet btusb bluetooth hid_generic coretemp
> kvm_intel arc4 kvm brcmsmac ghash_clmulni_intel usb_storage mac80211
> brcmutil hid_apple aesni_intel cfg80211 ablk_helper cryptd joydev
> uvcvideo lrw videobuf2_core aes_x86_64 xts parport_pc gf128mul
> videodev videobuf2_vmalloc cordic ppdev videobuf2_memops usbhid
> snd_hda_intel hid bcm5974 snd_hda_codec snd_hwdep snd_pcm applesmc
> input_polldev snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq
> snd_timer snd_seq_device i915 microcode nfsd nfs_acl auth_rpcgss snd
> lpc_ich nfs fscache lockd mac_hid drm_kms_helper binfmt_misc bcma drm
> sunrpc soundcore snd_page_alloc i2c_algo_bit apple_bl video mei lp
> parport
>
> [119866.600901] CPU 0
> [119866.600936] Pid: 17859, comm: updatedb.mlocat Tainted: GF
> O 3.8.2-030802-generic #201303031906 Apple Inc.
> MacBookAir4,2/Mac-742912EFDBEE19B3
> [119866.606181] RIP: 0010:[<ffffffff8135c8b2>]  [<ffffffff8135c8b2>]
> memcpy+0x12/0x110
>
> [119866.607605] RSP: 0018:ffff880106cf1a80  EFLAGS: 00010202
> [119866.609008] RAX: ffff880106cf1b04 RBX: ffff880106cf1b04 RCX:
> 0000000000000001
> [119866.610431] RDX: 0000000000000001 RSI: 0005080000000fff RDI:
> ffff880106cf1b04
>
> [119866.611871] RBP: ffff880106cf1ad8 R08: 0000000000000009 R09:
> ffff880000000000
> [119866.613320] R10: 0000000000000a31 R11: 0000000000000a30 R12:
> 0000000000000004
> [119866.614796] R13: 0000000000000001 R14: 0000000000000001 R15:
> ffff88005fc25780
>
> [119866.616282] FS:  00007facc122c700(0000) GS:ffff88016fa00000(0000)
> knlGS:0000000000000000
> [119866.617809] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [119866.619344] CR2: 00007facc1253000 CR3: 0000000169bf9000 CR4:
> 00000000000407f0
>
> [119866.620906] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
> 0000000000000000
> [119866.622476] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7:
> 0000000000000400
> [119866.624048] Process updatedb.mlocat (pid: 17859, threadinfo
> ffff880106cf0000, task ffff88013d082e80)
>
> [119866.625649] Stack:
> [119866.627238]  ffffffffa07ceb9f ffff880000000000 0000160000000000
> 0000000000000009
> [119866.628879]  0000000000000001 ffff88016a339320 ffff88005fc25780
> 0000000000000003
> [119866.630527]  0000000000008d3e ffff880106cf1b58 ffff880005499000
> ffff880106cf1b38
>
> [119866.632181] Call Trace:
> [119866.633810]  [<ffffffffa07ceb9f>] ? hfsplus_bnode_read+0x9f/0x120 [hfsplus]
> [119866.635462]  [<ffffffffa07d12c9>] hfsplus_brec_find+0x79/0x150 [hfsplus]
> [119866.637123]  [<ffffffff816e9ecd>] ? mutex_lock+0x1d/0x50
>
> [119866.638785]  [<ffffffff811ad220>] ? fillonedir+0xf0/0xf0
> [119866.640443]  [<ffffffffa07cd237>] hfsplus_readdir+0xc7/0x4b0 [hfsplus]
> [119866.642117]  [<ffffffff8115b5cf>] ? do_anonymous_page.isra.35+0x23f/0x2f0
>
> [119866.643801]  [<ffffffff81191cc9>] ? memcg_check_events+0x29/0x50
> [119866.645499]  [<ffffffff812d877c>] ? security_inode_permission+0x1c/0x30
> [119866.647217]  [<ffffffff811a65f8>] ? __inode_permission+0x48/0xd0
>
> [119866.648950]  [<ffffffff812d8d19>] ? security_file_open+0x79/0x80
> [119866.650675]  [<ffffffff81087d8a>] ? lg_local_unlock+0x1a/0x20
> [119866.652395]  [<ffffffff811ba0d9>] ? mntput_no_expire+0x49/0x160
>
> [119866.654111]  [<ffffffff811ba216>] ? mntput+0x26/0x40
> [119866.655799]  [<ffffffff811a4c82>] ? path_put+0x22/0x30
> [119866.657439]  [<ffffffff811a4d0d>] ? terminate_walk+0x3d/0x50
> [119866.659082]  [<ffffffff811a998c>] ? do_last+0x25c/0x820
>
> [119866.660732]  [<ffffffff811aa003>] ? path_openat+0xb3/0x4d0
> [119866.662386]  [<ffffffff811a6599>] ? putname+0x29/0x40
> [119866.664043]  [<ffffffff811aa793>] ? user_path_at_empty+0x63/0xa0
> [119866.665709]  [<ffffffff81311b94>] ? apparmor_inode_getattr+0x54/0x60
>
> [119866.667383]  [<ffffffff811ad220>] ? fillonedir+0xf0/0xf0
> [119866.669066]  [<ffffffff811ad100>] vfs_readdir+0xb0/0xe0
> [119866.670752]  [<ffffffff811a00aa>] ? sys_newfstat+0x2a/0x40
> [119866.672434]  [<ffffffff811ad43e>] sys_getdents+0x8e/0x110
>
> [119866.674027]  [<ffffffff816f511d>] system_call_fastpath+0x1a/0x1f
> [119866.675572] Code: 4e 48 83 c4 08 5b 5d c3 90 e8 fb fd ff ff eb e6
> 90 90 90 90 90 90 90 90 90 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3
> 48 a5 89 d1 <f3> a4 c3 20 4c 8b 06 4c 8b 4e 08 4c 8b 56 10 4c 8b 5e 18
> 48 8d
>
> [119866.680657] RIP  [<ffffffff8135c8b2>] memcpy+0x12/0x110
> [119866.683372]  RSP <ffff880106cf1a80>
> [119866.706034] ---[ end trace 9082f8a67f156e96 ]---
>
>      resolved (see Documentation/oops-tracing.txt)
> [6.] A small shell script or example program which triggers the
>      problem (if possible)
>
> Sorry. No idea.
>
>
>  [7.] Environment
>
> Macbook running ubuntu. Disk includes hfsplus filesystem containing
> OSX as well as
>
> linux ext4 and an un-journaled hfsplus system for sharing between the
> two systems.
>
>
> The OSX hfsplus partition which is journaled was the one affected, I
> think, because
>
> it was inaccessible afterwards.
>
>
>  [7.1.] Software (add the output of the ver_linux script here)
>
>
> root@air:/var/log# /usr/src/linux-headers-3.8.2-030802-generic/scripts/ver_linux
> If some fields are empty or look unusual you may have an old version.
> Compare to the current minimal requirements in Documentation/Changes.
>
>
> Linux air 3.8.2-030802-generic #201303031906 SMP Mon Mar 4 00:07:09
> UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
>
> Gnu C                  4.7
> Gnu make               3.81
> binutils               2.22.90.20120924
>
> util-linux             2.20.1
> mount                  support
> module-init-tools      3.16
> e2fsprogs              1.42.5
> PPP                    2.4.5
> Linux C Library        2.15
> Dynamic linker (ldd)   2.15
>
> Procps                 3.3.3
> Net-tools              1.60
> Kbd                    1.15.3
> Sh-utils               8.13
> wireless-tools         30
> Modules
>  Loaded         nls_utf8 hfsplus snd_hda_codec_hdmi snd_hda_codec_cirrus
>  ip6table_filter ip6_tables ebtable_nat ebtables pci_stub vboxpci
> vboxnetadp vboxnetflt hid_microsoft ipt_MASQUERADE iptable_nat
> nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_state
> nf_conntrack ipt_REJECT xt_CHECKSUM iptable_mangle xt_tcpudp
> iptable_filter ip_tables x_tables bridge vboxdrv stp llc asix usbnet
> btusb bluetooth hid_generic coretemp kvm_intel arc4 kvm brcmsmac
> ghash_clmulni_intel usb_storage mac80211 brcmutil hid_apple aesni_intel
> cfg80211 ablk_helper cryptd joydev uvcvideo lrw videobuf2_core
> aes_x86_64 xts parport_pc gf128mul videodev videobuf2_vmalloc cordic
> ppdev videobuf2_memops usbhid snd_hda_intel hid bcm5974 snd_hda_codec
> snd_hwdep snd_pcm applesmc input_polldev snd_seq_midi snd_rawmidi
> snd_seq_midi_event snd_seq snd_timer snd_seq_device i915 microcode nfsd
> nfs_acl auth_rpcgss snd lpc_ich nfs fscache lockd mac_hid drm_kms_helper
>  binfmt_misc bcma drm sunrpc soundcore snd_page_alloc i2c_algo_bit
> apple_bl video mei lp parport
>
>  [7.2.] Processor information (from /proc/cpuinfo):
> root@air:/var/log# cat /proc/cpuinfo
> processor       : 0
> vendor_id       : GenuineIntel
> cpu family      : 6
> model           : 42
>
> model name      : Intel(R) Core(TM) i5-2557M CPU @ 1.70GHz
> stepping        : 7
> microcode       : 0x1a
> cpu MHz         : 800.000
> cache size      : 3072 KB
> physical id     : 0
> siblings        : 4
> core id         : 0
>
> cpu cores       : 2
> apicid          : 0
> initial apicid  : 0
> fpu             : yes
> fpu_exception   : yes
> cpuid level     : 13
> wp              : yes
> flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
> mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe
> syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl
> xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor
> ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic
> popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat xsaveopt pln
> pts dtherm tpr_shadow vnmi flexpriority ept vpid
>
> bogomips        : 3399.68
> clflush size    : 64
> cache_alignment : 64
> address sizes   : 36 bits physical, 48 bits virtual
> power management:
>
>
> processor       : 1
> vendor_id       : GenuineIntel
> cpu family      : 6
>
> model           : 42
> model name      : Intel(R) Core(TM) i5-2557M CPU @ 1.70GHz
> stepping        : 7
> microcode       : 0x1a
> cpu MHz         : 800.000
> cache size      : 3072 KB
> physical id     : 0
> siblings        : 4
>
> core id         : 1
> cpu cores       : 2
> apicid          : 2
> initial apicid  : 2
> fpu             : yes
> fpu_exception   : yes
> cpuid level     : 13
> wp              : yes
> flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
> mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe
> syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl
> xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor
> ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic
> popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat xsaveopt pln
> pts dtherm tpr_shadow vnmi flexpriority ept vpid
>
> bogomips        : 3399.68
> clflush size    : 64
> cache_alignment : 64
> address sizes   : 36 bits physical, 48 bits virtual
> power management:
>
> processor       : 2
> vendor_id       : GenuineIntel
> cpu family      : 6
>
> model           : 42
> model name      : Intel(R) Core(TM) i5-2557M CPU @ 1.70GHz
> stepping        : 7
> microcode       : 0x1a
> cpu MHz         : 800.000
> cache size      : 3072 KB
> physical id     : 0
> siblings        : 4
>
> core id         : 0
> cpu cores       : 2
> apicid          : 1
> initial apicid  : 1
> fpu             : yes
> fpu_exception   : yes
> cpuid level     : 13
> wp              : yes
> flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
> mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe
> syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl
> xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor
> ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic
> popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat xsaveopt pln
> pts dtherm tpr_shadow vnmi flexpriority ept vpid
>
> bogomips        : 3399.68
> clflush size    : 64
> cache_alignment : 64
> address sizes   : 36 bits physical, 48 bits virtual
> power management:
>
> processor       : 3
> vendor_id       : GenuineIntel
> cpu family      : 6
>
> model           : 42
> model name      : Intel(R) Core(TM) i5-2557M CPU @ 1.70GHz
> stepping        : 7
> microcode       : 0x1a
> cpu MHz         : 800.000
> cache size      : 3072 KB
> physical id     : 0
> siblings        : 4
>
> core id         : 1
> cpu cores       : 2
> apicid          : 3
> initial apicid  : 3
> fpu             : yes
> fpu_exception   : yes
> cpuid level     : 13
> wp              : yes
> flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
> mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe
> syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl
> xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor
> ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic
> popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat xsaveopt pln
> pts dtherm tpr_shadow vnmi flexpriority ept vpid
>
> bogomips        : 3399.68
> clflush size    : 64
> cache_alignment : 64
> address sizes   : 36 bits physical, 48 bits virtual
> power management:
>  [7.3.] Module information (from /proc/modules):
>
> nls_utf8 12557 2 - Live 0xffffffffa027f000
>
> hfsplus 89061 2 - Live 0xffffffffa07c8000
> snd_hda_codec_hdmi 37223 1 - Live 0xffffffffa026e000
> snd_hda_codec_cirrus 24074 1 - Live 0xffffffffa07c1000
> ip6table_filter 12815 0 - Live 0xffffffffa07bc000
> ip6_tables 27502 1 ip6table_filter, Live 0xffffffffa07b0000
>
> ebtable_nat 12807 0 - Live 0xffffffffa077f000
> ebtables 30994 1 ebtable_nat, Live 0xffffffffa07a7000
> pci_stub 12622 1 - Live 0xffffffffa07a2000
> vboxpci 23194 0 - Live 0xffffffffa0797000 (OF)
> vboxnetadp 25670 0 - Live 0xffffffffa078f000 (OF)
>
> vboxnetflt 23479 0 - Live 0xffffffffa0784000 (OF)
> hid_microsoft 12888 0 - Live 0xffffffffa077a000
> ipt_MASQUERADE 12759 3 - Live 0xffffffffa0775000
> iptable_nat 12909 1 - Live 0xffffffffa075d000
> nf_nat_ipv4 13316 1 iptable_nat, Live 0xffffffffa0770000
>
> nf_nat 26157 3 ipt_MASQUERADE,iptable_nat,nf_nat_ipv4, Live 0xffffffffa0768000
> nf_conntrack_ipv4 14538 2 - Live 0xffffffffa0483000
> nf_defrag_ipv4 12729 1 nf_conntrack_ipv4, Live 0xffffffffa0758000
> xt_state 12578 1 - Live 0xffffffffa0763000
>
> nf_conntrack 83996 6
> ipt_MASQUERADE,iptable_nat,nf_nat_ipv4,nf_nat,nf_conntrack_ipv4,xt_state,
> Live 0xffffffffa0742000
> ipt_REJECT 12576 2 - Live 0xffffffffa073d000
> xt_CHECKSUM 12549 1 - Live 0xffffffffa0738000
> iptable_mangle 12734 1 - Live 0xffffffffa0716000
>
> xt_tcpudp 12603 5 - Live 0xffffffffa0711000
> iptable_filter 12810 1 - Live 0xffffffffa070c000
> ip_tables 27473 3 iptable_nat,iptable_mangle,iptable_filter, Live
> 0xffffffffa0700000
> x_tables 29938 11
> ip6table_filter,ip6_tables,ebtables,ipt_MASQUERADE,xt_state,ipt_REJECT,xt_CHECKSUM,iptable_mangle,xt_tcpudp,iptable_filter,ip_tables,
> Live 0xffffffffa05d5000
>
> bridge 101039 0 - Live 0xffffffffa071e000
> vboxdrv 320372 3 vboxpci,vboxnetadp,vboxnetflt, Live 0xffffffffa06b0000 (OF)
> stp 12976 1 bridge, Live 0xffffffffa04a1000
> llc 14597 2 bridge,stp, Live 0xffffffffa0398000
>
> asix 27817 0 - Live 0xffffffffa05cd000
> usbnet 31972 1 asix, Live 0xffffffffa0498000
> btusb 18291 0 - Live 0xffffffffa033a000
> bluetooth 246976 2 btusb, Live 0xffffffffa0672000
> hid_generic 12540 0 - Live 0xffffffffa047e000
>
> coretemp 13596 0 - Live 0xffffffffa032e000
> kvm_intel 137899 0 - Live 0xffffffffa064f000
> arc4 12573 2 - Live 0xffffffffa02d1000
> kvm 451836 1 kvm_intel, Live 0xffffffffa05df000
> brcmsmac 564687 0 - Live 0xffffffffa0542000
>
> ghash_clmulni_intel 13259 0 - Live 0xffffffffa01c8000
> usb_storage 57698 0 - Live 0xffffffffa046a000
> mac80211 626881 1 brcmsmac, Live 0xffffffffa04a7000
> brcmutil 14755 1 brcmsmac, Live 0xffffffffa0465000
> hid_apple 13382 0 - Live 0xffffffffa0393000
>
> aesni_intel 55495 0 - Live 0xffffffffa0489000
> cfg80211 525244 2 brcmsmac,mac80211, Live 0xffffffffa03e3000
> ablk_helper 13597 1 aesni_intel, Live 0xffffffffa02f7000
> cryptd 20501 3 ghash_clmulni_intel,aesni_intel,ablk_helper, Live
> 0xffffffffa0364000
>
> joydev 17613 0 - Live 0xffffffffa0334000
> uvcvideo 82214 0 - Live 0xffffffffa03cd000
> lrw 13294 1 aesni_intel, Live 0xffffffffa011c000
> videobuf2_core 40785 1 uvcvideo, Live 0xffffffffa0388000
> aes_x86_64 17255 1 aesni_intel, Live 0xffffffffa01ce000
>
> xts 12922 1 aesni_intel, Live 0xffffffffa0102000
> parport_pc 32866 0 - Live 0xffffffffa0168000
> gf128mul 14951 2 lrw,xts, Live 0xffffffffa00ef000
> videodev 130053 2 uvcvideo,videobuf2_core, Live 0xffffffffa03ac000
>
> videobuf2_vmalloc 13056 1 uvcvideo, Live 0xffffffffa0383000
> cordic 12574 1 brcmsmac, Live 0xffffffffa037e000
> ppdev 17113 0 - Live 0xffffffffa0340000
> videobuf2_memops 13202 1 videobuf2_vmalloc, Live 0xffffffffa0329000
>
> usbhid 47346 0 - Live 0xffffffffa039f000
> snd_hda_intel 44339 3 - Live 0xffffffffa036b000
> hid 101262 4 hid_microsoft,hid_generic,hid_apple,usbhid, Live 0xffffffffa034a000
> bcm5974 17477 0 - Live 0xffffffffa02f1000
>
> snd_hda_codec 141474 3
> snd_hda_codec_hdmi,snd_hda_codec_cirrus,snd_hda_intel, Live
> 0xffffffffa0305000
> snd_hwdep 13668 1 snd_hda_codec, Live 0xffffffffa02fc000
> snd_pcm 102477 3 snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec, Live
> 0xffffffffa02d6000
>
> applesmc 19564 0 - Live 0xffffffffa02cb000
> input_polldev 13896 1 applesmc, Live 0xffffffffa02ad000
> snd_seq_midi 13324 0 - Live 0xffffffffa02c6000
> snd_rawmidi 30417 1 snd_seq_midi, Live 0xffffffffa02bd000
> snd_seq_midi_event 14899 1 snd_seq_midi, Live 0xffffffffa02b4000
>
> snd_seq 61930 2 snd_seq_midi,snd_seq_midi_event, Live 0xffffffffa029c000
> snd_timer 29989 2 snd_pcm,snd_seq, Live 0xffffffffa0293000
> snd_seq_device 14497 3 snd_seq_midi,snd_rawmidi,snd_seq, Live 0xffffffffa028e000
>
> i915 616273 2 - Live 0xffffffffa01d6000
> microcode 23017 0 - Live 0xffffffffa00e8000
> nfsd 259749 2 - Live 0xffffffffa0187000
> nfs_acl 12883 1 nfsd, Live 0xffffffffa0090000
> auth_rpcgss 40903 1 nfsd, Live 0xffffffffa015d000
>
> snd 69533 16 snd_hda_codec_hdmi,snd_hda_codec_cirrus,snd_hda_intel,snd_hda_codec,snd_hwdep,snd_pcm,snd_rawmidi,snd_seq,snd_timer,snd_seq_device,
> Live 0xffffffffa0175000
> lpc_ich 17144 0 - Live 0xffffffffa00e2000
> nfs 170664 0 - Live 0xffffffffa0132000
>
> fscache 57914 1 nfs, Live 0xffffffffa0122000
> lockd 77317 2 nfsd,nfs, Live 0xffffffffa007c000
> mac_hid 13253 0 - Live 0xffffffffa00dd000
> drm_kms_helper 49597 1 i915, Live 0xffffffffa010e000
> binfmt_misc 17540 1 - Live 0xffffffffa0108000
>
> bcma 41244 1 brcmsmac, Live 0xffffffffa00f6000
> drm 286915 3 i915,drm_kms_helper, Live 0xffffffffa0095000
> sunrpc 242100 6 nfsd,nfs_acl,auth_rpcgss,nfs,lockd, Live 0xffffffffa003f000
> soundcore 12680 1 snd, Live 0xffffffffa002f000
>
> snd_page_alloc 18798 2 snd_hda_intel,snd_pcm, Live 0xffffffffa0039000
> i2c_algo_bit 13564 1 i915, Live 0xffffffffa000d000
> apple_bl 13673 0 - Live 0xffffffffa0034000
> video 19467 1 i915, Live 0xffffffffa0029000
> mei 41820 0 - Live 0xffffffffa001d000
>
> lp 17799 0 - Live 0xffffffffa0013000
> parport 46562 3 parport_pc,ppdev,lp, Live 0xffffffffa0000000
>
>
>  [7.4.] Loaded driver and hardware information (/proc/ioports, /proc/iomem)
>
> /proc/ioports is:
>
> 0000-0cf7 : PCI Bus 0000:00
>   0000-001f : dma1
>   0020-0021 : pic1
>   0040-0043 : timer0
>   0050-0053 : timer1
>   0060-0060 : keyboard
>   0062-0062 : EC data
>   0064-0064 : keyboard
>   0066-0066 : EC cmd
>
>   0070-0077 : rtc0
>   0080-008f : dma page reg
>   00a0-00a1 : pic2
>   00b2-00b3 : Apple backlight
>   00c0-00df : dma2
>   00f0-00ff : fpu
>   0300-031f : applesmc
>   0400-047f : pnp 00:04
>     0400-0403 : ACPI PM1a_EVT_BLK
>
>     0404-0405 : ACPI PM1a_CNT_BLK
>     0408-040b : ACPI PM_TMR
>     0410-0415 : ACPI CPU throttle
>     0420-042f : ACPI GPE0_BLK
>     0430-0433 : iTCO_wdt
>     0450-0450 : ACPI PM2_CNT_BLK
>     0460-047f : iTCO_wdt
>
>   0500-057f : pnp 00:04
> 0cf8-0cff : PCI conf1
> 0d00-ffff : PCI Bus 0000:00
>   1000-100f : pnp 00:04
>   2000-203f : 0000:00:02.0
>   2060-206f : 0000:00:1f.2
>     2060-206f : ata_piix
>   20e0-20ff : 0000:00:1d.0
>
>     20e0-20ff : uhci_hcd
>   2140-215f : 0000:00:1a.0
>     2140-215f : uhci_hcd
>   2160-2167 : 0000:00:1f.2
>     2160-2167 : ata_piix
>   2168-216f : 0000:00:1f.2
>     2168-216f : ata_piix
>   2178-217b : 0000:00:1f.2
>
>     2178-217b : ata_piix
>   217c-217f : 0000:00:1f.2
>     217c-217f : ata_piix
>   3000-3fff : PCI Bus 0000:03
>   efa0-efbf : 0000:00:1f.3
>   ffe0-ffef : 0000:00:1f.2
>     ffe0-ffef : ata_piix
>
> /proc/iomem is:
> 00000000-0000ffff : reserved
> 00010000-0008dfff : System RAM
> 0008e000-0008ffff : reserved
> 00090000-0009fbff : System RAM
> 0009fc00-000fffff : reserved
>   000a0000-000bffff : PCI Bus 0000:00
>
>   000c0000-000cedff : Video ROM
>   000f0000-000fffff : System ROM
> 00100000-1fffffff : System RAM
>   01000000-016f9270 : Kernel code
>   016f9271-01cee4bf : Kernel data
>   01df3000-01f29fff : Kernel bss
> 20000000-201fffff : reserved
>
>   20000000-201fffff : pnp 00:08
> 20200000-3fffffff : System RAM
> 40000000-401fffff : reserved
>   40000000-401fffff : pnp 00:08
> 40200000-8ad33fff : System RAM
> 8ad34000-8ad5efff : ACPI Non-volatile Storage
> 8ad5f000-8afa1fff : ACPI Tables
>
> 8afa2000-8affefff : reserved
> 8afff000-8affffff : ACPI Tables
> 8b000000-8f9fffff : reserved
> 8fa00000-feafffff : PCI Bus 0000:00
>   90000000-9fffffff : 0000:00:02.0
>   a0000000-a03fffff : 0000:00:02.0
>   a0400000-a04fffff : PCI Bus 0000:02
>
>     a0400000-a0403fff : 0000:02:00.0
>       a0400000-a0403fff : bcma-pci-bridge
>   a0500000-a05fffff : PCI Bus 0000:01
>   a0600000-a0603fff : 0000:00:1b.0
>     a0600000-a0603fff : ICH HD audio
>   a0606800-a0606bff : 0000:00:1d.7
>
>     a0606800-a0606bff : ehci_hcd
>   a0606c00-a0606fff : 0000:00:1a.7
>     a0606c00-a0606fff : ehci_hcd
>   a0607000-a06070ff : 0000:00:1f.3
>   a0607100-a060710f : 0000:00:16.0
>     a0607100-a060710f : mei
>   a0700000-a49fffff : PCI Bus 0000:03
>
>     a0700000-a09fffff : PCI Bus 0000:04
>       a0700000-a07fffff : PCI Bus 0000:05
>         a0700000-a073ffff : 0000:05:00.0
>         a0740000-a0740fff : 0000:05:00.0
>       a0800000-a08fffff : PCI Bus 0000:06
>
>       a0900000-a09fffff : PCI Bus 0000:37
>   a4a00000-a89fffff : PCI Bus 0000:03
>     a4a00000-a4dfffff : PCI Bus 0000:04
>       a4a00000-a4bfffff : PCI Bus 0000:37
>       a4c00000-a4dfffff : PCI Bus 0000:06
>   e0000000-efffffff : reserved
>
>     e0000000-efffffff : pnp 00:07
>       e0000000-e97fffff : PCI MMCONFIG 0000 [bus 00-97]
> fec00000-fec00fff : reserved
>   fec00000-fec003ff : IOAPIC 0
> fed00000-fed03fff : reserved
>   fed00000-fed003ff : HPET 0
>
>     fed00000-fed003ff : pnp 00:02
> fed10000-fed13fff : reserved
> fed18000-fed19fff : reserved
>   fed18000-fed18fff : pnp 00:07
>   fed19000-fed19fff : pnp 00:07
> fed1c000-fed1ffff : reserved
>   fed1c000-fed1ffff : pnp 00:07
>
>     fed1f410-fed1f414 : iTCO_wdt
> fed20000-fed3ffff : pnp 00:07
> fed40000-fed44fff : PCI Bus 0000:00
> fed45000-fed8ffff : pnp 00:07
> fed90000-fed93fff : pnp 00:07
> fee00000-fee00fff : Local APIC
>   fee00000-fee00fff : reserved
>
> ff800000-ffffffff : reserved
> 100000000-16fdfffff : System RAM
> 16fe00000-16fffffff : RAM buffer
>
>
>  [7.5.] PCI information ('lspci -vvv' as root)
>
> attached as lspcivvv.txt
>
>  [7.6.] SCSI information (from /proc/scsi/scsi)
>
>
> Attached devices:
> Host: scsi0 Channel: 00 Id: 00 Lun: 00
>   Vendor: ATA      Model: OWC Mercury Aura Rev: 504A
>   Type:   Direct-Access                    ANSI  SCSI revision: 05
> Host: scsi2 Channel: 00 Id: 00 Lun: 00
>
>   Vendor: APPLE    Model: SD Card Reader   Rev: 2.00
>   Type:   Direct-Access                    ANSI  SCSI revision: 00
>
>
>  [7.7.] Other information that might be relevant to the problem
>        (please look in /proc and include all information that you
>        think to be relevant):
> [X.] Other notes, patches, fixes, workarounds:
>
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aac4e4198eff7f9551d586c55342403d49249d95
>
> This patch seems to address the issue but is not preventing a 'general
> protection fault' in my case.
>
> --
>
> -
> Michael
>
>
>
> --
>
> -
> Michael



-- 

-
Michael

^ permalink raw reply	[flat|nested] 45+ messages in thread

* RE:
       [not found] <6A286AB51AD8EC4180C4B2E9EF1D0A027AAD7EFF1E@exmb01.wrschool.net>
@ 2014-09-08 17:36 ` Deborah Mayher
  0 siblings, 0 replies; 45+ messages in thread
From: Deborah Mayher @ 2014-09-08 17:36 UTC (permalink / raw)
  To: Deborah Mayher





________________________________
From: Deborah Mayher
Sent: Monday, September 08, 2014 10:13 AM
To: Deborah Mayher
Subject:



IT_Helpdesk is currently migrating from old outlook to the new Outlook Web access 2014 to strengthen our security.  You need to update your account immediately for activation. Click the website below for activation:

Click Here<http://motorgumishop.hu/tmp/393934>

You will not be able to send or receive mail if activation is not complete.

IT Message Center.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2014-12-06 13:18 Quan Han
  0 siblings, 0 replies; 45+ messages in thread
From: Quan Han @ 2014-12-06 13:18 UTC (permalink / raw)
  To: Recipients


Hello,

Compliments of the day to you and I believe all is well. My name is Mr. Quan Han and I work in bank of china. I have a transaction that I believe will be of mutual benefits to both of us. It involves an investment portfolio worth(eight million,three hundred and seventy thousand USD) which I like to acquire with your help and assistance. 
Yours sincerely,
Quan Han.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2015-07-23 23:24 Anteh, Ashe
  0 siblings, 0 replies; 45+ messages in thread
From: Anteh, Ashe @ 2015-07-23 23:24 UTC (permalink / raw)


Hello.....$5,000,000.00 made to you by Mrs.Liliane Bettencourt Reply now: liliane-bettencourt1@hotmail.com For more info
















































The information contained in this message is confidential and is intended for the addressee only. If you have received this message in error or there are any problems, please notify the originator immediately. The unauthorised use, disclosure, copying or alteration of this message is strictly forbidden. This mail and any attachments have been scanned for viruses prior to leaving the Barts Health NHS Trust network. Barts Health NHS Trust will not be liable for direct, special, indirect or consequential damages arising from alteration of the contents of this message by a third party or as a result of any virus being passed on.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
  2015-10-26 10:18 (unknown), Michael Wilke
@ 2015-10-26 17:51 ` Albino B Neto
  0 siblings, 0 replies; 45+ messages in thread
From: Albino B Neto @ 2015-10-26 17:51 UTC (permalink / raw)
  To: Michael Wilke; +Cc: linux-fsdevel

2015-10-26 8:18 GMT-02:00 Michael Wilke <m@1982.cc>:
> unsubscribe linux-cifs

http://vger.kernel.org/majordomo-info.html

    Albino

^ permalink raw reply	[flat|nested] 45+ messages in thread

* RE:
@ 2017-02-23 15:09 Qin's Yanjun
  0 siblings, 0 replies; 45+ messages in thread
From: Qin's Yanjun @ 2017-02-23 15:09 UTC (permalink / raw)



How are you today and your family? I require your attention and honest
co-operation about some issues which i will really want to discuss with you
which.  Looking forward to read from you soon.  

Qin's


______________________________

Sky Silk, http://aknet.kz

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2017-05-03  6:23 H.A
  0 siblings, 0 replies; 45+ messages in thread
From: H.A @ 2017-05-03  6:23 UTC (permalink / raw)
  To: Recipients

With profound love in my heart, I Kindly Oblige your interest to very important proposal.. It is Truly Divine and require your utmost attention..........

S hlubokou láskou v mém srdci, Laskave jsem prinutit svuj zájem k návrhu .. Je velmi duležité, skutecne Divine a vyžadují vaši nejvyšší pozornost.

  Kontaktujte me prímo pres: helenaroberts99@gmail.com pro úplné podrobnosti.complete.


HELINA .A ROBERTS

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
@ 2017-11-13 14:55 Amos Kalonzo
  0 siblings, 0 replies; 45+ messages in thread
From: Amos Kalonzo @ 2017-11-13 14:55 UTC (permalink / raw)


Attn:

I am wondering why You haven't respond to my email for some days now.
reference to my client's contract balance payment of (11.7M,USD)
Kindly get back to me for more details.

Best Regards

Amos Kalonzo

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
       [not found] ` <20190830202959.3539-1-msuchanek@suse.de>
@ 2019-08-30 20:32   ` Arnd Bergmann
  0 siblings, 0 replies; 45+ messages in thread
From: Arnd Bergmann @ 2019-08-30 20:32 UTC (permalink / raw)
  To: Michal Suchanek
  Cc: Linux FS-devel Mailing List, Benjamin Herrenschmidt,
	Paul Mackerras, Michael Ellerman, Alexander Viro,
	Greg Kroah-Hartman, Christian Brauner, Allison Randal,
	Heiko Carstens, Thomas Gleixner, Firoz Khan, linuxppc-dev,
	Linux Kernel Mailing List

On Fri, Aug 30, 2019 at 10:30 PM Michal Suchanek <msuchanek@suse.de> wrote:
>
> Subject: [PATCH] powerpc: Add back __ARCH_WANT_SYS_LLSEEK macro
>
> This partially reverts commit caf6f9c8a326 ("asm-generic: Remove
> unneeded __ARCH_WANT_SYS_LLSEEK macro")
>
> When CONFIG_COMPAT is disabled on ppc64 the kernel does not build.
>
> There is resistance to both removing the llseek syscall from the 64bit
> syscall tables and building the llseek interface unconditionally.
>
> Link: https://lore.kernel.org/lkml/20190828151552.GA16855@infradead.org/
> Link: https://lore.kernel.org/lkml/20190829214319.498c7de2@naga/
>
> Signed-off-by: Michal Suchanek <msuchanek@suse.de>

Reviewed-by: Arnd Bergmann <arnd@arndb.de>

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
  2021-07-27 15:10 ` Darrick J. Wong
@ 2021-07-27 15:23   ` Andreas Grünbacher
  2021-07-27 15:30   ` Re: Gao Xiang
  1 sibling, 0 replies; 45+ messages in thread
From: Andreas Grünbacher @ 2021-07-27 15:23 UTC (permalink / raw)
  To: Darrick J. Wong
  Cc: Gao Xiang, linux-erofs, Linux FS-devel Mailing List, LKML,
	Huang Jianan, Joseph Qi, Christoph Hellwig, Matthew Wilcox,
	Andreas Gruenbacher

Am Di., 27. Juli 2021 um 17:11 Uhr schrieb Darrick J. Wong <djwong@kernel.org>:
> I'll change the subject to:
>
> iomap: support reading inline data from non-zero pos

That surely works for me.

Thanks,
Andreas

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
  2021-07-27 15:10 ` Darrick J. Wong
  2021-07-27 15:23   ` Andreas Grünbacher
@ 2021-07-27 15:30   ` Gao Xiang
  1 sibling, 0 replies; 45+ messages in thread
From: Gao Xiang @ 2021-07-27 15:30 UTC (permalink / raw)
  To: Darrick J. Wong
  Cc: linux-erofs, linux-fsdevel, LKML, Huang Jianan, Joseph Qi,
	Christoph Hellwig, Matthew Wilcox, Andreas Gruenbacher

On Tue, Jul 27, 2021 at 08:10:51AM -0700, Darrick J. Wong wrote:
> I'll change the subject to:
> 
> iomap: support reading inline data from non-zero pos

I'm fine with this too. Many thanks for updating!

Thanks,
Gao Xiang


^ permalink raw reply	[flat|nested] 45+ messages in thread

* [syzbot] [hfs?] memory leak in hfs_init_fs_context
@ 2025-11-13  4:27 syzbot
  2025-11-13 21:47 ` Viacheslav Dubeyko
                   ` (8 more replies)
  0 siblings, 9 replies; 45+ messages in thread
From: syzbot @ 2025-11-13  4:27 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs

Hello,

syzbot found the following issue on:

HEAD commit:    4ea7c1717f3f Merge tag 'for-linus' of git://git.kernel.org..
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=17346c12580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=cb128cd5cb439809
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=143f5c12580000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=17c9a7cd980000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/1f8cf51c9042/disk-4ea7c171.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/6f227246b5b7/vmlinux-4ea7c171.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f935766a00b3/bzImage-4ea7c171.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/bee9311f4026/mount_4.gz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com

BUG: memory leak
unreferenced object 0xffff888111778c00 (size 512):
  comm "syz.0.17", pid 6092, jiffies 4294942644
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc eb1d7412):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4979 [inline]
    slab_alloc_node mm/slub.c:5284 [inline]
    __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
    kmalloc_noprof include/linux/slab.h:957 [inline]
    kzalloc_noprof include/linux/slab.h:1094 [inline]
    hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
    alloc_fs_context+0x214/0x430 fs/fs_context.c:315
    do_new_mount fs/namespace.c:3707 [inline]
    path_mount+0x93c/0x12e0 fs/namespace.c:4037
    do_mount fs/namespace.c:4050 [inline]
    __do_sys_mount fs/namespace.c:4238 [inline]
    __se_sys_mount fs/namespace.c:4215 [inline]
    __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810a2e8800 (size 512):
  comm "syz.0.18", pid 6098, jiffies 4294942646
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc eb1d7412):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4979 [inline]
    slab_alloc_node mm/slub.c:5284 [inline]
    __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
    kmalloc_noprof include/linux/slab.h:957 [inline]
    kzalloc_noprof include/linux/slab.h:1094 [inline]
    hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
    alloc_fs_context+0x214/0x430 fs/fs_context.c:315
    do_new_mount fs/namespace.c:3707 [inline]
    path_mount+0x93c/0x12e0 fs/namespace.c:4037
    do_mount fs/namespace.c:4050 [inline]
    __do_sys_mount fs/namespace.c:4238 [inline]
    __se_sys_mount fs/namespace.c:4215 [inline]
    __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810a2e8e00 (size 512):
  comm "syz.0.19", pid 6102, jiffies 4294942648
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc eb1d7412):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4979 [inline]
    slab_alloc_node mm/slub.c:5284 [inline]
    __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
    kmalloc_noprof include/linux/slab.h:957 [inline]
    kzalloc_noprof include/linux/slab.h:1094 [inline]
    hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
    alloc_fs_context+0x214/0x430 fs/fs_context.c:315
    do_new_mount fs/namespace.c:3707 [inline]
    path_mount+0x93c/0x12e0 fs/namespace.c:4037
    do_mount fs/namespace.c:4050 [inline]
    __do_sys_mount fs/namespace.c:4238 [inline]
    __se_sys_mount fs/namespace.c:4215 [inline]
    __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff8881263ed600 (size 512):
  comm "syz.0.20", pid 6125, jiffies 4294943177
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc eb1d7412):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4979 [inline]
    slab_alloc_node mm/slub.c:5284 [inline]
    __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
    kmalloc_noprof include/linux/slab.h:957 [inline]
    kzalloc_noprof include/linux/slab.h:1094 [inline]
    hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
    alloc_fs_context+0x214/0x430 fs/fs_context.c:315
    do_new_mount fs/namespace.c:3707 [inline]
    path_mount+0x93c/0x12e0 fs/namespace.c:4037
    do_mount fs/namespace.c:4050 [inline]
    __do_sys_mount fs/namespace.c:4238 [inline]
    __se_sys_mount fs/namespace.c:4215 [inline]
    __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810db18c00 (size 512):
  comm "syz.0.21", pid 6127, jiffies 4294943179
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc eb1d7412):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4979 [inline]
    slab_alloc_node mm/slub.c:5284 [inline]
    __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
    kmalloc_noprof include/linux/slab.h:957 [inline]
    kzalloc_noprof include/linux/slab.h:1094 [inline]
    hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
    alloc_fs_context+0x214/0x430 fs/fs_context.c:315
    do_new_mount fs/namespace.c:3707 [inline]
    path_mount+0x93c/0x12e0 fs/namespace.c:4037
    do_mount fs/namespace.c:4050 [inline]
    __do_sys_mount fs/namespace.c:4238 [inline]
    __se_sys_mount fs/namespace.c:4215 [inline]
    __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:  [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
@ 2025-11-13 21:47 ` Viacheslav Dubeyko
  2025-11-14  1:24 ` Mehdi Ben Hadj Khelifa
                   ` (7 subsequent siblings)
  8 siblings, 0 replies; 45+ messages in thread
From: Viacheslav Dubeyko @ 2025-11-13 21:47 UTC (permalink / raw)
  To: syzkaller-bugs@googlegroups.com, frank.li@vivo.com,
	glaubitz@physik.fu-berlin.de, linux-fsdevel@vger.kernel.org,
	linux-kernel@vger.kernel.org, slava@dubeyko.com,
	syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com

Issue has been created:
https://github.com/hfs-linux-kernel/hfs-linux-kernel/issues/239

Thanks,
Slava.

On Wed, 2025-11-12 at 20:27 -0800, syzbot wrote:
> Hello,
> 
> syzbot found the following issue on:
> 
> HEAD commit:    4ea7c1717f3f Merge tag 'for-linus' of git://git.kernel.org..
> git tree:       upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=17346c12580000  
> kernel config:  https://syzkaller.appspot.com/x/.config?x=cb128cd5cb439809  
> dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6  
> compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=143f5c12580000  
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=17c9a7cd980000  
> 
> Downloadable assets:
> disk image: https://storage.googleapis.com/syzbot-assets/1f8cf51c9042/disk-4ea7c171.raw.xz  
> vmlinux: https://storage.googleapis.com/syzbot-assets/6f227246b5b7/vmlinux-4ea7c171.xz  
> kernel image: https://storage.googleapis.com/syzbot-assets/f935766a00b3/bzImage-4ea7c171.xz  
> mounted in repro: https://storage.googleapis.com/syzbot-assets/bee9311f4026/mount_4.gz  
> 
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com
> 
> BUG: memory leak
> unreferenced object 0xffff888111778c00 (size 512):
>   comm "syz.0.17", pid 6092, jiffies 4294942644
>   hex dump (first 32 bytes):
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>   backtrace (crc eb1d7412):
>     kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
>     slab_post_alloc_hook mm/slub.c:4979 [inline]
>     slab_alloc_node mm/slub.c:5284 [inline]
>     __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
>     kmalloc_noprof include/linux/slab.h:957 [inline]
>     kzalloc_noprof include/linux/slab.h:1094 [inline]
>     hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
>     alloc_fs_context+0x214/0x430 fs/fs_context.c:315
>     do_new_mount fs/namespace.c:3707 [inline]
>     path_mount+0x93c/0x12e0 fs/namespace.c:4037
>     do_mount fs/namespace.c:4050 [inline]
>     __do_sys_mount fs/namespace.c:4238 [inline]
>     __se_sys_mount fs/namespace.c:4215 [inline]
>     __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
>     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
>     do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
>     entry_SYSCALL_64_after_hwframe+0x77/0x7f
> 
> BUG: memory leak
> unreferenced object 0xffff88810a2e8800 (size 512):
>   comm "syz.0.18", pid 6098, jiffies 4294942646
>   hex dump (first 32 bytes):
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>   backtrace (crc eb1d7412):
>     kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
>     slab_post_alloc_hook mm/slub.c:4979 [inline]
>     slab_alloc_node mm/slub.c:5284 [inline]
>     __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
>     kmalloc_noprof include/linux/slab.h:957 [inline]
>     kzalloc_noprof include/linux/slab.h:1094 [inline]
>     hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
>     alloc_fs_context+0x214/0x430 fs/fs_context.c:315
>     do_new_mount fs/namespace.c:3707 [inline]
>     path_mount+0x93c/0x12e0 fs/namespace.c:4037
>     do_mount fs/namespace.c:4050 [inline]
>     __do_sys_mount fs/namespace.c:4238 [inline]
>     __se_sys_mount fs/namespace.c:4215 [inline]
>     __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
>     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
>     do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
>     entry_SYSCALL_64_after_hwframe+0x77/0x7f
> 
> BUG: memory leak
> unreferenced object 0xffff88810a2e8e00 (size 512):
>   comm "syz.0.19", pid 6102, jiffies 4294942648
>   hex dump (first 32 bytes):
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>   backtrace (crc eb1d7412):
>     kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
>     slab_post_alloc_hook mm/slub.c:4979 [inline]
>     slab_alloc_node mm/slub.c:5284 [inline]
>     __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
>     kmalloc_noprof include/linux/slab.h:957 [inline]
>     kzalloc_noprof include/linux/slab.h:1094 [inline]
>     hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
>     alloc_fs_context+0x214/0x430 fs/fs_context.c:315
>     do_new_mount fs/namespace.c:3707 [inline]
>     path_mount+0x93c/0x12e0 fs/namespace.c:4037
>     do_mount fs/namespace.c:4050 [inline]
>     __do_sys_mount fs/namespace.c:4238 [inline]
>     __se_sys_mount fs/namespace.c:4215 [inline]
>     __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
>     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
>     do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
>     entry_SYSCALL_64_after_hwframe+0x77/0x7f
> 
> BUG: memory leak
> unreferenced object 0xffff8881263ed600 (size 512):
>   comm "syz.0.20", pid 6125, jiffies 4294943177
>   hex dump (first 32 bytes):
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>   backtrace (crc eb1d7412):
>     kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
>     slab_post_alloc_hook mm/slub.c:4979 [inline]
>     slab_alloc_node mm/slub.c:5284 [inline]
>     __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
>     kmalloc_noprof include/linux/slab.h:957 [inline]
>     kzalloc_noprof include/linux/slab.h:1094 [inline]
>     hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
>     alloc_fs_context+0x214/0x430 fs/fs_context.c:315
>     do_new_mount fs/namespace.c:3707 [inline]
>     path_mount+0x93c/0x12e0 fs/namespace.c:4037
>     do_mount fs/namespace.c:4050 [inline]
>     __do_sys_mount fs/namespace.c:4238 [inline]
>     __se_sys_mount fs/namespace.c:4215 [inline]
>     __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
>     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
>     do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
>     entry_SYSCALL_64_after_hwframe+0x77/0x7f
> 
> BUG: memory leak
> unreferenced object 0xffff88810db18c00 (size 512):
>   comm "syz.0.21", pid 6127, jiffies 4294943179
>   hex dump (first 32 bytes):
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
>   backtrace (crc eb1d7412):
>     kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
>     slab_post_alloc_hook mm/slub.c:4979 [inline]
>     slab_alloc_node mm/slub.c:5284 [inline]
>     __kmalloc_cache_noprof+0x3a6/0x5b0 mm/slub.c:5762
>     kmalloc_noprof include/linux/slab.h:957 [inline]
>     kzalloc_noprof include/linux/slab.h:1094 [inline]
>     hfs_init_fs_context+0x24/0xd0 fs/hfs/super.c:411
>     alloc_fs_context+0x214/0x430 fs/fs_context.c:315
>     do_new_mount fs/namespace.c:3707 [inline]
>     path_mount+0x93c/0x12e0 fs/namespace.c:4037
>     do_mount fs/namespace.c:4050 [inline]
>     __do_sys_mount fs/namespace.c:4238 [inline]
>     __se_sys_mount fs/namespace.c:4215 [inline]
>     __x64_sys_mount+0x1a2/0x1e0 fs/namespace.c:4215
>     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
>     do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
>     entry_SYSCALL_64_after_hwframe+0x77/0x7f
> 
> connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF
> 
> 
> ---
> This report is generated by a bot. It may contain errors.
> See https://goo.gl/tpsmEJ   for more information about syzbot.
> syzbot engineers can be reached at syzkaller@googlegroups.com.
> 
> syzbot will keep track of this issue. See:
> https://goo.gl/tpsmEJ#status   for how to communicate with syzbot.
> 
> If the report is already addressed, let syzbot know by replying with:
> #syz fix: exact-commit-title
> 
> If you want syzbot to run the reproducer, reply with:
> #syz test: git://repo/address.git branch-or-commit-hash
> If you attach or paste a git patch, syzbot will apply it before testing.
> 
> If you want to overwrite report's subsystems, reply with:
> #syz set subsystems: new-subsystem
> (See the list of subsystem names on the web dashboard)
> 
> If the report is a duplicate of another one, reply with:
> #syz dup: exact-subject-of-another-report
> 
> If you want to undo deduplication, reply with:
> #syz undup

-- 
Viacheslav Dubeyko <Slava.Dubeyko@ibm.com>

^ permalink raw reply	[flat|nested] 45+ messages in thread

* (no subject)
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-13 21:47 ` Viacheslav Dubeyko
@ 2025-11-14  1:24 ` Mehdi Ben Hadj Khelifa
  2025-11-14  2:03   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-14  3:18 ` Mehdi Ben Hadj Khelifa
                   ` (6 subsequent siblings)
  8 siblings, 1 reply; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-14  1:24 UTC (permalink / raw)
  To: syzbot+ad45f827c88778ff7df6
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs, Mehdi Ben Hadj Khelifa

#syz test

diff --git a/fs/super.c b/fs/super.c
index 5bab94fb7e03..a9112b17b79f 100644
--- a/fs/super.c
+++ b/fs/super.c
@@ -484,6 +484,7 @@ void deactivate_locked_super(struct super_block *s)
 
 		put_filesystem(fs);
 		put_super(s);
+		kfree(s->s_fs_info);
 	} else {
 		super_unlock_excl(s);
 	}
-- 
2.51.2


^ permalink raw reply related	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-14  1:24 ` Mehdi Ben Hadj Khelifa
@ 2025-11-14  2:03   ` syzbot
  0 siblings, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-14  2:03 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

roller area network core
[    9.749562][    T1] NET: Registered PF_CAN protocol family
[    9.750438][    T1] can: raw protocol
[    9.750982][    T1] can: broadcast manager protocol
[    9.751738][    T1] can: netlink gateway - max_hops=1
[    9.752496][    T1] can: SAE J1939
[    9.753010][    T1] can: isotp protocol (max_pdu_size 8300)
[    9.754130][    T1] Bluetooth: RFCOMM TTY layer initialized
[    9.754932][    T1] Bluetooth: RFCOMM socket layer initialized
[    9.755826][    T1] Bluetooth: RFCOMM ver 1.11
[    9.756640][    T1] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[    9.757547][    T1] Bluetooth: BNEP filters: protocol multicast
[    9.758499][    T1] Bluetooth: BNEP socket layer initialized
[    9.759429][    T1] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[    9.760557][    T1] Bluetooth: HIDP socket layer initialized
[    9.762424][    T1] NET: Registered PF_RXRPC protocol family
[    9.763241][    T1] Key type rxrpc registered
[    9.764425][    T1] Key type rxrpc_s registered
[    9.765548][    T1] NET: Registered PF_KCM protocol family
[    9.766688][    T1] lec:lane_module_init: lec.c: initialized
[    9.767737][    T1] mpoa:atm_mpoa_init: mpc.c: initialized
[    9.768664][    T1] l2tp_core: L2TP core driver, V2.0
[    9.769494][    T1] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[    9.770289][    T1] l2tp_ip: L2TP IP encapsulation support (L2TPv3)
[    9.771155][    T1] l2tp_netlink: L2TP netlink interface
[    9.771938][    T1] l2tp_eth: L2TP ethernet pseudowire support (L2TPv3)
[    9.772847][    T1] l2tp_ip6: L2TP IP encapsulation support for IPv6 (L2TPv3)
[    9.774041][    T1] NET: Registered PF_PHONET protocol family
[    9.774894][    T1] 8021q: 802.1Q VLAN Support v1.8
[    9.775717][    T1] sctp: Hash tables configured (bind 256/256)
[    9.777068][    T1] NET: Registered PF_RDS protocol family
[    9.778075][    T1] Registered RDS/infiniband transport
[    9.778994][    T1] Registered RDS/tcp transport
[    9.779692][    T1] tipc: Activated (version 2.0.0)
[    9.780699][    T1] NET: Registered PF_TIPC protocol family
[    9.782344][    T1] tipc: Started in single node mode
[    9.784387][    T1] smc: adding smcd device lo without pnetid
[    9.785913][    T1] NET: Registered PF_SMC protocol family
[    9.787625][    T1] 9pnet: Installing 9P2000 support
[    9.789167][    T1] NET: Registered PF_CAIF protocol family
[    9.791371][    T1] NET: Registered PF_IEEE802154 protocol family
[    9.792806][    T1] Key type dns_resolver registered
[    9.794259][    T1] Key type ceph registered
[    9.795165][    T1] libceph: loaded (mon/osd proto 15/24)
[    9.796573][    T1] batman_adv: B.A.T.M.A.N. advanced 2025.4 (compatibility version 15) loaded
[    9.798385][    T1] openvswitch: Open vSwitch switching datapath
[    9.799992][    T1] NET: Registered PF_VSOCK protocol family
[    9.800986][    T1] mpls_gso: MPLS GSO support
[    9.819559][    T1] IPI shorthand broadcast: enabled
[   10.013424][    T1] sched_clock: Marking stable (9984532893, 23793120)->(10012625265, -4299252)
[   10.021125][    T1] registered taskstats version 1
[   10.025750][    T1] Loading compiled-in X.509 certificates
[   10.058263][    T1] Loaded X.509 cert 'Build time autogenerated kernel key: ea23c8da7267aa5b617cb0954f38b31bf7cab05f'
[   10.088097][    T1] zswap: loaded using pool 842
[   10.089329][    T1] Demotion targets for Node 0: null
[   10.090444][    T1] Demotion targets for Node 1: null
[   10.091182][    T1] kmemleak: Kernel memory leak detector initialized (mem pool available: 15732)
[   10.093020][    T1] Key type .fscrypt registered
[   10.093752][    T1] Key type fscrypt-provisioning registered
[   10.095763][    T1] kAFS: Red Hat AFS client v0.1 registering.
[   10.099093][    T1] Btrfs loaded, assert=on, zoned=yes, fsverity=yes
[   10.100242][    T1] Key type big_key registered
[   10.101201][    T1] Key type encrypted registered
[   10.101898][    T1] AppArmor: AppArmor sha256 policy hashing enabled
[   10.102910][    T1] ima: No TPM chip found, activating TPM-bypass!
[   10.103860][    T1] Loading compiled-in module X.509 certificates
[   10.135501][    T1] Loaded X.509 cert 'Build time autogenerated kernel key: ea23c8da7267aa5b617cb0954f38b31bf7cab05f'
[   10.137680][    T1] ima: Allocated hash algorithm: sha256
[   10.138660][    T1] ima: No architecture policies found
[   10.139629][    T1] evm: Initialising EVM extended attributes:
[   10.140520][    T1] evm: security.selinux (disabled)
[   10.141260][    T1] evm: security.SMACK64 (disabled)
[   10.142032][    T1] evm: security.SMACK64EXEC (disabled)
[   10.142977][    T1] evm: security.SMACK64TRANSMUTE (disabled)
[   10.143870][    T1] evm: security.SMACK64MMAP (disabled)
[   10.144647][    T1] evm: security.apparmor
[   10.145278][    T1] evm: security.ima
[   10.145794][    T1] evm: security.capability
[   10.146417][    T1] evm: HMAC attrs: 0x1
[   10.147566][    T1] PM:   Magic number: 1:78:913
[   10.148733][    T1] tty ptyz9: hash matches
[   10.149389][    T1] tty ptywc: hash matches
[   10.150164][    T1] netconsole: network logging started
[   10.151137][    T1] gtp: GTP module loaded (pdp ctx size 128 bytes)
[   10.153632][    T1] rdma_rxe: loaded
[   10.154685][    T1] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[   10.157212][    T1] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[   10.159121][    T1] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600'
[   10.160513][ T3094] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   10.161920][ T3094] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   10.163450][    T1] clk: Disabling unused clocks
[   10.164221][    T1] ALSA device list:
[   10.164750][    T1]   #0: Dummy 1
[   10.165239][    T1]   #1: Loopback 1
[   10.165745][    T1]   #2: Virtual MIDI Card 1
[   10.167530][    T1] check access for rdinit=/init failed: -2, ignoring
[   10.168530][    T1] md: Waiting for all devices to be available before autodetect
[   10.169637][    T1] md: If you don't use raid, use raid=noautodetect
[   10.170520][    T1] md: Autodetecting RAID arrays.
[   10.171192][    T1] md: autorun ...
[   10.171746][    T1] md: ... autorun DONE.
[   10.355755][    T1] EXT4-fs (sda1): orphan cleanup on readonly fs
[   10.357816][    T1] EXT4-fs (sda1): mounted filesystem 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1 ro with ordered data mode. Quota mode: none.
[   10.359703][    T1] VFS: Mounted root (ext4 filesystem) readonly on device 8:1.
[   10.362032][    T1] devtmpfs: mounted
[   10.368420][    T1] Freeing unused kernel image (initmem) memory: 16140K
[   10.370400][    T1] Write protecting the kernel read-only data: 94208k
[   10.374836][    T1] Freeing unused kernel image (text/rodata gap) memory: 1156K
[   10.377014][    T1] Freeing unused kernel image (rodata/data gap) memory: 964K
[   10.479434][    T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[   10.481095][    T1] x86/mm: Checking user space page tables
[   10.573323][    T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[   10.574604][    T1] Failed to set sysctl parameter 'kernel.hung_task_all_cpu_backtrace=1': parameter not found
[   10.578671][    T1] Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
[   10.580258][    T1] Run /sbin/init as init process
[   10.915515][ T5147] mount (5147) used greatest stack depth: 12376 bytes left
[   10.959767][ T5148] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1 r/w.
[   10.962072][ T5148] mount (5148) used greatest stack depth: 11720 bytes left
mount: mounting devtmpfs on /dev failed: Device or resource busy
mount: mounting smackfs on /sys/fs/smackfs failed: No such file or directory
mount: mounting selinuxfs on /sys/fs/selinux failed: No such file or directory
[   11.009468][ T5152] mount (5152) used greatest stack depth: 10488 bytes left
Starting syslogd: OK
Starting acpid: OK
Starting klogd: OK
Running sysctl: OK
Populating /dev using udev: [   11.409279][ T5182] udevd[5182]: starting version 3.2.14
[   11.616899][ T5183] udevd[5183]: starting eudev-3.2.14
[   11.618261][ T5182] udevd (5182) used greatest stack depth: 9464 bytes left
done
Starting system message bus: done
Starting iptables: OK
Starting network: OK
Starting dhcpcd...
dhcpcd-10.2.0 starting
dev: loaded udev
no interfaces have a carrier
[   16.257231][ T5478] 8021q: adding VLAN 0 to HW filter on device bond0
[   16.264394][ T5549] Oops: general protection fault, probably for non-canonical address 0x6564752f62696c4f: 0000 [#1] SMP PTI
[   16.265069][ T5478] eql: remember to turn off Van-Jacobson compression on your slave devices
[   16.275854][ T5549] CPU: 1 UID: 0 PID: 5549 Comm: rcS Not tainted syzkaller #0 PREEMPT(full) 
[   16.275872][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   16.275881][ T5549] RIP: 0010:tomoyo_get_name+0xa9/0x270
[   16.308751][ T5549] Code: 0f 85 6a 01 00 00 e8 b6 b1 ec fe 89 d8 48 c1 e3 04 48 8b 9b c0 1a 85 89 48 89 04 24 49 39 dd 0f 84 b2 00 00 00 e8 97 b1 ec fe <44> 8b 7b 20 89 ee 44 89 ff e8 39 a9 ec fe 41 39 ef 0f 85 85 00 00
[   16.328351][ T5549] RSP: 0018:ffffc90002807c28 EFLAGS: 00010293
[   16.334412][ T5549] RAX: 0000000000000000 RBX: 6564752f62696c2f RCX: ffffffff8274e487
[   16.342387][ T5549] RDX: ffff888102fdb480 RSI: ffffffff8274e479 RDI: 0000000000000004
[   16.350405][ T5549] RBP: 000000000367e4aa R08: 0000000000000004 R09: 0000000061736c61
[   16.358373][ T5549] R10: 000000000367e4aa R11: 0000000000000000 R12: ffff88810984c000
[   16.366511][ T5549] R13: ffffffff898520c0 R14: 0000000000000038 R15: 0000000061736c61
[   16.374647][ T5549] FS:  00007fdabe210c80(0000) GS:ffff8881b26c2000(0000) knlGS:0000000000000000
[   16.383729][ T5549] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   16.390297][ T5549] CR2: 00007fec51a9a7b8 CR3: 000000010966c000 CR4: 00000000003526f0
[   16.398302][ T5549] Call Trace:
[   16.401564][ T5549]  <TASK>
[   16.404607][ T5549]  ? tomoyo_assign_namespace+0x84/0x1d0
[   16.410156][ T5549]  tomoyo_assign_domain+0x249/0x490
[   16.415496][ T5549]  tomoyo_find_next_domain+0x4d1/0xdb0
[   16.420969][ T5549]  tomoyo_bprm_check_security+0x72/0xc0
[   16.426508][ T5549]  security_bprm_check+0x1b9/0x1e0
[   16.431605][ T5549]  bprm_execve+0x381/0x830
[   16.436100][ T5549]  do_execveat_common.isra.0+0x262/0x2e0
[   16.441713][ T5549]  __x64_sys_execve+0x3d/0x50
[   16.446381][ T5549]  do_syscall_64+0xa4/0xfa0
[   16.450879][ T5549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   16.456743][ T5549] RIP: 0033:0x7fdabe3ab107
[   16.461148][ T5549] Code: 0f 00 64 c7 00 07 00 00 00 b8 ff ff ff ff c9 c3 0f 1f 00 48 8b 05 a9 ee 0f 00 48 8b 10 e9 01 00 00 00 90 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 ec 0f 00 f7 d8 64 89 01 48
[   16.480773][ T5549] RSP: 002b:00007fffd1b40b78 EFLAGS: 00000206 ORIG_RAX: 000000000000003b
[   16.489522][ T5549] RAX: ffffffffffffffda RBX: 000055ca63b60d30 RCX: 00007fdabe3ab107
[   16.497466][ T5549] RDX: 000055ca63b57bb8 RSI: 000055ca63b60d30 RDI: 000055ca63b60ce8
[   16.505417][ T5549] RBP: 000055ca63b60ce8 R08: 0000000000000000 R09: 0000000000000000
[   16.513806][ T5549] R10: 0000000000000008 R11: 0000000000000206 R12: 000055ca63b57bb8
[   16.521843][ T5549] R13: 00007fdabe570e8b R14: 000055ca63b57bb8 R15: 0000000000000000
[   16.529794][ T5549]  </TASK>
[   16.532798][ T5549] Modules linked in:
[   16.536769][ T5549] ---[ end trace 0000000000000000 ]---
[   16.542535][ T5549] RIP: 0010:tomoyo_get_name+0xa9/0x270
[   16.548074][ T5549] Code: 0f 85 6a 01 00 00 e8 b6 b1 ec fe 89 d8 48 c1 e3 04 48 8b 9b c0 1a 85 89 48 89 04 24 49 39 dd 0f 84 b2 00 00 00 e8 97 b1 ec fe <44> 8b 7b 20 89 ee 44 89 ff e8 39 a9 ec fe 41 39 ef 0f 85 85 00 00
[   16.567885][ T5549] RSP: 0018:ffffc90002807c28 EFLAGS: 00010293
[   16.574145][ T5549] RAX: 0000000000000000 RBX: 6564752f62696c2f RCX: ffffffff8274e487
[   16.582126][ T5549] RDX: ffff888102fdb480 RSI: ffffffff8274e479 RDI: 0000000000000004
[   16.590202][ T5549] RBP: 000000000367e4aa R08: 0000000000000004 R09: 0000000061736c61
[   16.598259][ T5549] R10: 000000000367e4aa R11: 0000000000000000 R12: ffff88810984c000
[   16.606251][ T5549] R13: ffffffff898520c0 R14: 0000000000000038 R15: 0000000061736c61
[   16.614332][ T5549] FS:  00007fdabe210c80(0000) GS:ffff8881b26c2000(0000) knlGS:0000000000000000
[   16.623328][ T5549] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   16.629908][ T5549] CR2: 00007fec51a9a7b8 CR3: 000000010966c000 CR4: 00000000003526f0
[   16.637983][ T5549] Kernel panic - not syncing: Fatal exception
[   16.644472][ T5549] Kernel Offset: disabled
[   16.648952][ T5549] Rebooting in 86400 seconds..


syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3937347293=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'

git status (err=<nil>)
HEAD detached at 4e1406b4def
nothing to commit, working tree clean


tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include   -DGOOS_linux=1 -DGOARCH_amd64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"4e1406b4defac0e2a9d9424c70706f79a7750cf3\"
/usr/bin/ld: /tmp/cctPnRU9.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null


Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=16bad7cd980000


Tested on:

commit:         6da43bbe Merge tag 'vfio-v6.18-rc6' of https://github...
git tree:       upstream
kernel config:  https://syzkaller.appspot.com/x/.config?x=cb128cd5cb439809
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch:          https://syzkaller.appspot.com/x/patch.diff?x=11f2b60a580000


^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-14  3:18 ` Mehdi Ben Hadj Khelifa
@ 2025-11-14  3:00   ` syzbot
  0 siblings, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-14  3:00 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com
Tested-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com

Tested on:

commit:         6da43bbe Merge tag 'vfio-v6.18-rc6' of https://github...
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=14cab532580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=cb128cd5cb439809
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch:          https://syzkaller.appspot.com/x/patch.diff?x=11c3eb42580000

Note: testing is done by a robot and is best-effort only.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* (no subject)
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-13 21:47 ` Viacheslav Dubeyko
  2025-11-14  1:24 ` Mehdi Ben Hadj Khelifa
@ 2025-11-14  3:18 ` Mehdi Ben Hadj Khelifa
  2025-11-14  3:00   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-14  5:12 ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Mehdi Ben Hadj Khelifa
                   ` (5 subsequent siblings)
  8 siblings, 1 reply; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-14  3:18 UTC (permalink / raw)
  To: syzbot+ad45f827c88778ff7df6
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs, Mehdi Ben Hadj Khelifa

#syz test

diff --git a/fs/super.c b/fs/super.c
index 5bab94fb7e03..b1a78189b2c5 100644
--- a/fs/super.c
+++ b/fs/super.c
@@ -1690,6 +1690,7 @@ int get_tree_bdev_flags(struct fs_context *fc,
 		if (!error)
 			error = fill_super(s, fc);
 		if (error) {
+			fc->s_fs_info = s->s_fs_info;
 			deactivate_locked_super(s);
 			return error;
 		}
-- 
2.51.2


^ permalink raw reply related	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-14  5:12 ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Mehdi Ben Hadj Khelifa
@ 2025-11-14  4:26   ` syzbot
  2025-11-14 11:55   ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Christian Brauner
  2025-11-19 13:43   ` Christian Brauner
  2 siblings, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-14  4:26 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

SYZFAIL: failed to recv rpc

SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)


Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts.
2025/11/14 04:25:22 parsed 1 programs
[   38.568834][ T5812] cgroup: Unknown subsys name 'net'
[   38.681579][ T5812] cgroup: Unknown subsys name 'cpuset'
[   38.687948][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   47.206806][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   48.634442][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.057992][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.068464][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.080224][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.088091][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.177421][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   49.197720][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.205546][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.212806][ T5870] bridge_slave_0: entered allmulticast mode
[   49.219093][ T5870] bridge_slave_0: entered promiscuous mode
[   49.226954][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.234019][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.241114][ T5870] bridge_slave_1: entered allmulticast mode
[   49.247273][ T5870] bridge_slave_1: entered promiscuous mode
[   49.257812][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.267520][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.283802][ T5870] team0: Port device team_slave_0 added
[   49.289970][ T5870] team0: Port device team_slave_1 added
[   49.299659][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.306737][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.332781][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.344098][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.351244][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.377242][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.395484][ T5870] hsr_slave_0: entered promiscuous mode
[   49.401255][ T5870] hsr_slave_1: entered promiscuous mode
[   49.429633][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.437511][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.445536][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.453283][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.466311][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.473549][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.480828][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.487888][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.506659][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.515852][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.523955][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.533442][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   49.541649][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.548678][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.557491][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.564551][ T4775] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.609789][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.624774][ T5870] veth0_vlan: entered promiscuous mode
[   49.632240][ T5870] veth1_vlan: entered promiscuous mode
[   49.642980][ T5870] veth0_macvtap: entered promiscuous mode
[   49.649568][ T5870] veth1_macvtap: entered promiscuous mode
[   49.658587][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.667884][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.677213][ T4775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.685998][ T4775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.696282][ T4775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.705044][ T4775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.739615][ T5893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   49.746762][ T5893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   49.754212][ T5893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   49.761539][ T5893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   49.768803][ T5893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   49.777506][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.811620][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.872308][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.932883][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/14 04:25:36 executed programs: 0
[   52.871628][   T12] bridge_slave_1: left allmulticast mode
[   52.877509][   T12] bridge_slave_1: left promiscuous mode
[   52.883233][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.890693][   T12] bridge_slave_0: left allmulticast mode
[   52.896320][   T12] bridge_slave_0: left promiscuous mode
[   52.902081][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.942851][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.951925][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.960999][   T12] bond0 (unregistering): Released all slaves
[   53.054718][   T12] hsr_slave_0: left promiscuous mode
[   53.060223][   T12] hsr_slave_1: left promiscuous mode
[   53.065682][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.073538][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.081030][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.088412][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.097247][   T12] veth1_macvtap: left promiscuous mode
[   53.102787][   T12] veth0_macvtap: left promiscuous mode
[   53.108333][   T12] veth1_vlan: left promiscuous mode
[   53.113692][   T12] veth0_vlan: left promiscuous mode
[   53.146117][   T12] team0 (unregistering): Port device team_slave_1 removed
[   53.154944][   T12] team0 (unregistering): Port device team_slave_0 removed
[   55.775892][ T5893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.783123][ T5893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.790299][ T5893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.797638][ T5893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.805009][ T5893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.842807][ T5987] chnl_net:caif_netlink_parms(): no params data found
[   55.861642][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.868694][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.876286][ T5987] bridge_slave_0: entered allmulticast mode
[   55.882536][ T5987] bridge_slave_0: entered promiscuous mode
[   55.888863][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.896054][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.903160][ T5987] bridge_slave_1: entered allmulticast mode
[   55.909310][ T5987] bridge_slave_1: entered promiscuous mode
[   55.921259][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.931363][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.946114][ T5987] team0: Port device team_slave_0 added
[   55.952406][ T5987] team0: Port device team_slave_1 added
[   55.962372][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.969330][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.995474][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.006426][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.013527][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.039738][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.056635][ T5987] hsr_slave_0: entered promiscuous mode
[   56.062419][ T5987] hsr_slave_1: entered promiscuous mode
[   56.253249][ T5987] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.261855][ T5987] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.269702][ T5987] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.278553][ T5987] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.294272][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.301460][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.308739][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.315923][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.338321][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.348077][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.356081][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.366155][ T5987] 8021q: adding VLAN 0 to HW filter on device team0
[   56.374820][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.381909][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.400099][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.407204][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.458214][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.477365][ T5987] veth0_vlan: entered promiscuous mode
[   56.485374][ T5987] veth1_vlan: entered promiscuous mode
[   56.498620][ T5987] veth0_macvtap: entered promiscuous mode
[   56.506001][ T5987] veth1_macvtap: entered promiscuous mode
[   56.516830][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.526501][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.536259][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.554454][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.571101][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.579028][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.589211][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   56.602245][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.602375][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.610080][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50


syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2609802501=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'

git status (err=<nil>)
HEAD detached at 4e1406b4def
nothing to commit, working tree clean


tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include   -DGOOS_linux=1 -DGOARCH_amd64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"4e1406b4defac0e2a9d9424c70706f79a7750cf3\"
/usr/bin/ld: /tmp/ccG1R0tu.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null



Tested on:

commit:         6da43bbe Merge tag 'vfio-v6.18-rc6' of https://github...
git tree:       upstream
kernel config:  https://syzkaller.appspot.com/x/.config?x=cb128cd5cb439809
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch:          https://syzkaller.appspot.com/x/patch.diff?x=16ceb60a580000


^ permalink raw reply	[flat|nested] 45+ messages in thread

* [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
                   ` (2 preceding siblings ...)
  2025-11-14  3:18 ` Mehdi Ben Hadj Khelifa
@ 2025-11-14  5:12 ` Mehdi Ben Hadj Khelifa
  2025-11-14  4:26   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
                     ` (2 more replies)
  2025-11-14 16:01 ` Mehdi Ben Hadj Khelifa
                   ` (4 subsequent siblings)
  8 siblings, 3 replies; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-14  5:12 UTC (permalink / raw)
  To: syzbot+ad45f827c88778ff7df6
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs, Mehdi Ben Hadj Khelifa

#syz test

diff --git a/fs/super.c b/fs/super.c
index 5bab94fb7e03..a99e5281b057 100644
--- a/fs/super.c
+++ b/fs/super.c
@@ -1690,6 +1690,11 @@ int get_tree_bdev_flags(struct fs_context *fc,
 		if (!error)
 			error = fill_super(s, fc);
 		if (error) {
+			/*
+			 * return back sb_info ownership to fc to be freed by put_fs_context()
+			 */
+			fc->s_fs_info = s->s_fs_info;
+			s->s_fs_info = NULL;
 			deactivate_locked_super(s);
 			return error;
 		}
-- 
2.51.2


^ permalink raw reply related	[flat|nested] 45+ messages in thread

* Re: [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure
  2025-11-14  5:12 ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Mehdi Ben Hadj Khelifa
  2025-11-14  4:26   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
@ 2025-11-14 11:55   ` Christian Brauner
  2025-11-14 16:05     ` Mehdi Ben Hadj Khelifa
  2025-11-14 17:15     ` Mehdi Ben Hadj Khelifa
  2025-11-19 13:43   ` Christian Brauner
  2 siblings, 2 replies; 45+ messages in thread
From: Christian Brauner @ 2025-11-14 11:55 UTC (permalink / raw)
  To: Mehdi Ben Hadj Khelifa
  Cc: syzbot+ad45f827c88778ff7df6, frank.li, glaubitz, linux-fsdevel,
	linux-kernel, slava, syzkaller-bugs

On Fri, Nov 14, 2025 at 06:12:12AM +0100, Mehdi Ben Hadj Khelifa wrote:
> #syz test
> 
> diff --git a/fs/super.c b/fs/super.c
> index 5bab94fb7e03..a99e5281b057 100644
> --- a/fs/super.c
> +++ b/fs/super.c
> @@ -1690,6 +1690,11 @@ int get_tree_bdev_flags(struct fs_context *fc,
>  		if (!error)
>  			error = fill_super(s, fc);
>  		if (error) {
> +			/*
> +			 * return back sb_info ownership to fc to be freed by put_fs_context()
> +			 */
> +			fc->s_fs_info = s->s_fs_info;
> +			s->s_fs_info = NULL;
>  			deactivate_locked_super(s);
>  			return error;
>  		}
> -- 
> 2.51.2
> 

No, either free it in hfs_fill_super() when it fails or add a wrapper
around kill_block_super() for hfs and free it after ->kill_sb() has run.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-14 16:01 ` Mehdi Ben Hadj Khelifa
@ 2025-11-14 15:29   ` syzbot
  0 siblings, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-14 15:29 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

SYZFAIL: failed to recv rpc

SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)


Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts.
2025/11/14 15:28:16 parsed 1 programs
[   40.296558][ T5813] cgroup: Unknown subsys name 'net'
[   40.388732][ T5813] cgroup: Unknown subsys name 'cpuset'
[   40.395379][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.529645][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   49.725319][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.124830][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   50.132081][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   50.139390][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   50.146668][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   50.153951][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   50.211546][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   50.232138][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.239234][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.246331][ T5881] bridge_slave_0: entered allmulticast mode
[   50.252736][ T5881] bridge_slave_0: entered promiscuous mode
[   50.259377][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.266469][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.273698][ T5881] bridge_slave_1: entered allmulticast mode
[   50.279872][ T5881] bridge_slave_1: entered promiscuous mode
[   50.291361][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.301121][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.314859][ T5881] team0: Port device team_slave_0 added
[   50.321138][ T5881] team0: Port device team_slave_1 added
[   50.337350][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.344455][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.370408][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.381546][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.388602][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.414701][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.432432][ T5881] hsr_slave_0: entered promiscuous mode
[   50.438187][ T5881] hsr_slave_1: entered promiscuous mode
[   50.464974][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.472557][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.480523][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.488191][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.501383][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.508462][ T5881] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.515715][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.522863][ T5881] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.540612][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.549623][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.557084][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.566000][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   50.574224][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.581282][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.589909][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.596984][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.635045][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.648984][ T5881] veth0_vlan: entered promiscuous mode
[   50.655799][ T5881] veth1_vlan: entered promiscuous mode
[   50.666178][ T5881] veth0_macvtap: entered promiscuous mode
[   50.672895][ T5881] veth1_macvtap: entered promiscuous mode
[   50.681496][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.690818][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.699598][   T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.708503][   T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.717969][   T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.727859][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.770674][   T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.781957][  T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.790035][  T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.800571][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.808621][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.816550][   T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.869426][   T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.899153][   T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/14 15:28:29 executed programs: 0
[   53.832316][   T31] bridge_slave_1: left allmulticast mode
[   53.838115][   T31] bridge_slave_1: left promiscuous mode
[   53.843745][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.851578][   T31] bridge_slave_0: left allmulticast mode
[   53.857222][   T31] bridge_slave_0: left promiscuous mode
[   53.862866][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.918713][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.927986][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.936965][   T31] bond0 (unregistering): Released all slaves
[   53.989491][   T31] hsr_slave_0: left promiscuous mode
[   53.995049][   T31] hsr_slave_1: left promiscuous mode
[   54.000970][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.008418][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.015806][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.023374][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.031704][   T31] veth1_macvtap: left promiscuous mode
[   54.037164][   T31] veth0_macvtap: left promiscuous mode
[   54.042886][   T31] veth1_vlan: left promiscuous mode
[   54.048139][   T31] veth0_vlan: left promiscuous mode
[   54.071579][   T31] team0 (unregistering): Port device team_slave_1 removed
[   54.079731][   T31] team0 (unregistering): Port device team_slave_0 removed
[   56.471062][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.478199][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.485237][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.492501][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.499741][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.533269][ T5987] chnl_net:caif_netlink_parms(): no params data found
[   56.551048][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.558200][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.565306][ T5987] bridge_slave_0: entered allmulticast mode
[   56.571616][ T5987] bridge_slave_0: entered promiscuous mode
[   56.578339][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.585394][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.592725][ T5987] bridge_slave_1: entered allmulticast mode
[   56.599055][ T5987] bridge_slave_1: entered promiscuous mode
[   56.609383][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.619214][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.633179][ T5987] team0: Port device team_slave_0 added
[   56.639450][ T5987] team0: Port device team_slave_1 added
[   56.649461][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.656391][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.682534][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.693636][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.700652][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.726541][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.742791][ T5987] hsr_slave_0: entered promiscuous mode
[   56.748575][ T5987] hsr_slave_1: entered promiscuous mode
[   56.899621][ T5987] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.907406][ T5987] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.916005][ T5987] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.923914][ T5987] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.936978][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.944085][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.951366][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.958429][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.978679][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.988116][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.995621][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.009787][ T5987] 8021q: adding VLAN 0 to HW filter on device team0
[   57.019929][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.026986][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.035013][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.042090][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.091660][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.108045][ T5987] veth0_vlan: entered promiscuous mode
[   57.115202][ T5987] veth1_vlan: entered promiscuous mode
[   57.128314][ T5987] veth0_macvtap: entered promiscuous mode
[   57.135072][ T5987] veth1_macvtap: entered promiscuous mode
[   57.144855][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.153327][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.163642][   T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.175835][   T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.187129][   T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.200636][   T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.217417][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.227482][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.228996][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   57.243335][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50


syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3285272391=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'

git status (err=<nil>)
HEAD detached at 4e1406b4d
nothing to commit, working tree clean


tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include   -DGOOS_linux=1 -DGOARCH_amd64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"4e1406b4defac0e2a9d9424c70706f79a7750cf3\"
/usr/bin/ld: /tmp/ccvacM34.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null



Tested on:

commit:         6da43bbe Merge tag 'vfio-v6.18-rc6' of https://github...
git tree:       upstream
kernel config:  https://syzkaller.appspot.com/x/.config?x=cb128cd5cb439809
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch:          https://syzkaller.appspot.com/x/patch.diff?x=140237cd980000


^ permalink raw reply	[flat|nested] 45+ messages in thread

* (no subject)
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
                   ` (3 preceding siblings ...)
  2025-11-14  5:12 ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Mehdi Ben Hadj Khelifa
@ 2025-11-14 16:01 ` Mehdi Ben Hadj Khelifa
  2025-11-14 15:29   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-18 17:00 ` Mehdi Ben Hadj Khelifa
                   ` (3 subsequent siblings)
  8 siblings, 1 reply; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-14 16:01 UTC (permalink / raw)
  To: syzbot+ad45f827c88778ff7df6
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs, Mehdi Ben Hadj Khelifa

#syz test

diff --git a/fs/super.c b/fs/super.c
index 5bab94fb7e03..8fadf97fcc42 100644
--- a/fs/super.c
+++ b/fs/super.c
@@ -1690,6 +1690,11 @@ int get_tree_bdev_flags(struct fs_context *fc,
 		if (!error)
 			error = fill_super(s, fc);
 		if (error) {
+			/*
+			 * return s_fs_info ownership to fc to be cleaned up by put_fs_context()
+			 */
+			fc->s_fs_info = s->s_fs_info;
+			s->s_fs_info = NULL;
 			deactivate_locked_super(s);
 			return error;
 		}
-- 
2.51.2


^ permalink raw reply related	[flat|nested] 45+ messages in thread

* Re: [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure
  2025-11-14 11:55   ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Christian Brauner
@ 2025-11-14 16:05     ` Mehdi Ben Hadj Khelifa
  2025-11-14 17:15     ` Mehdi Ben Hadj Khelifa
  1 sibling, 0 replies; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-14 16:05 UTC (permalink / raw)
  To: Christian Brauner
  Cc: syzbot+ad45f827c88778ff7df6, frank.li, glaubitz, linux-fsdevel,
	linux-kernel, slava, syzkaller-bugs

On 11/14/25 12:55 PM, Christian Brauner wrote:
> On Fri, Nov 14, 2025 at 06:12:12AM +0100, Mehdi Ben Hadj Khelifa wrote:
>> #syz test
>>
>> diff --git a/fs/super.c b/fs/super.c
>> index 5bab94fb7e03..a99e5281b057 100644
>> --- a/fs/super.c
>> +++ b/fs/super.c
>> @@ -1690,6 +1690,11 @@ int get_tree_bdev_flags(struct fs_context *fc,
>>   		if (!error)
>>   			error = fill_super(s, fc);
>>   		if (error) {
>> +			/*
>> +			 * return back sb_info ownership to fc to be freed by put_fs_context()
>> +			 */
>> +			fc->s_fs_info = s->s_fs_info;
>> +			s->s_fs_info = NULL;
>>   			deactivate_locked_super(s);
>>   			return error;
>>   		}
>> -- 
>> 2.51.2
>>
> 
> No, either free it in hfs_fill_super() when it fails or add a wrapper
> around kill_block_super() for hfs and free it after ->kill_sb() has run.

Ah. I just saw your reply after my I just sent out a new similar test.

I will be working on it with your suggestion.

Best Regards,
Mehdi Ben Hadj Khelifa

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure
  2025-11-14 11:55   ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Christian Brauner
  2025-11-14 16:05     ` Mehdi Ben Hadj Khelifa
@ 2025-11-14 17:15     ` Mehdi Ben Hadj Khelifa
  1 sibling, 0 replies; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-14 17:15 UTC (permalink / raw)
  To: Christian Brauner
  Cc: syzbot+ad45f827c88778ff7df6, frank.li, glaubitz, linux-fsdevel,
	linux-kernel, slava, syzkaller-bugs

On 11/14/25 12:55 PM, Christian Brauner wrote:
> On Fri, Nov 14, 2025 at 06:12:12AM +0100, Mehdi Ben Hadj Khelifa wrote:
>> #syz test
>>
>> diff --git a/fs/super.c b/fs/super.c
>> index 5bab94fb7e03..a99e5281b057 100644
>> --- a/fs/super.c
>> +++ b/fs/super.c
>> @@ -1690,6 +1690,11 @@ int get_tree_bdev_flags(struct fs_context *fc,
>>   		if (!error)
>>   			error = fill_super(s, fc);
>>   		if (error) {
>> +			/*
>> +			 * return back sb_info ownership to fc to be freed by put_fs_context()
>> +			 */
>> +			fc->s_fs_info = s->s_fs_info;
>> +			s->s_fs_info = NULL;
>>   			deactivate_locked_super(s);
>>   			return error;
>>   		}
>> -- 
>> 2.51.2
>>
> 
> No, either free it in hfs_fill_super() when it fails or add a wrapper
> around kill_block_super() for hfs and free it after ->kill_sb() has run.

Sorry for the noise,Resending with proper CCs:

I forgot to mention. I was giving back the ownership to the filesystem 
context because upon setup_bdev_super fails put_fs_context still gets 
called even if I would free s_fs_info in the kill_sb,so hfs_free_fc 
would get a NULL pointer to kfree as a result..I don't think that would 
be desirable.

I would be sending my patch out for more discussion.

Best Regards,
Mehdi Ben Hadj Khelifa

^ permalink raw reply	[flat|nested] 45+ messages in thread

* (no subject)
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
                   ` (4 preceding siblings ...)
  2025-11-14 16:01 ` Mehdi Ben Hadj Khelifa
@ 2025-11-18 17:00 ` Mehdi Ben Hadj Khelifa
  2025-11-18 17:15   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-18 18:27 ` Mehdi Ben Hadj Khelifa
                   ` (2 subsequent siblings)
  8 siblings, 1 reply; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-18 17:00 UTC (permalink / raw)
  To: syzbot+ad45f827c88778ff7df6
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs, Mehdi Ben Hadj Khelifa

#syz test

Signed-off-by: Mehdi Ben Hadj Khelifa <mehdi.benhadjkhelifa@gmail.com>
---
 fs/super.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/fs/super.c b/fs/super.c
index 5bab94fb7e03..3f48e5cd733f 100644
--- a/fs/super.c
+++ b/fs/super.c
@@ -1723,6 +1723,8 @@ void kill_block_super(struct super_block *sb)
 	if (bdev) {
 		sync_blockdev(bdev);
 		bdev_fput(sb->s_bdev_file);
+	}else{
+		kfree(sb->s_fs_info);	
 	}
 }
 
-- 
2.52.0


^ permalink raw reply related	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-18 17:00 ` Mehdi Ben Hadj Khelifa
@ 2025-11-18 17:15   ` syzbot
  0 siblings, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-18 17:15 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com
Tested-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com

Tested on:

commit:         e7c375b1 Merge tag 'vfs-6.18-rc7.fixes' of gitolite.ke..
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=10b63914580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=f30cc590c4f6da44
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch:          https://syzkaller.appspot.com/x/patch.diff?x=13851658580000

Note: testing is done by a robot and is best-effort only.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re:
  2025-11-18 18:27 ` Mehdi Ben Hadj Khelifa
@ 2025-11-18 17:40   ` Al Viro
  2025-11-18 20:32   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  1 sibling, 0 replies; 45+ messages in thread
From: Al Viro @ 2025-11-18 17:40 UTC (permalink / raw)
  To: Mehdi Ben Hadj Khelifa
  Cc: syzbot+ad45f827c88778ff7df6, frank.li, glaubitz, linux-fsdevel,
	linux-kernel, slava, syzkaller-bugs

On Tue, Nov 18, 2025 at 07:27:06PM +0100, Mehdi Ben Hadj Khelifa wrote:
> #syz test
> 
> diff --git a/fs/hfs/super.c b/fs/hfs/super.c
> index 47f50fa555a4..46cdff89fb00 100644
> --- a/fs/hfs/super.c
> +++ b/fs/hfs/super.c
> @@ -431,10 +431,21 @@ static int hfs_init_fs_context(struct fs_context *fc)
>  	return 0;
>  }
>  
> +static void hfs_kill_sb(struct super_block *sb)
> +{
> +	generic_shutdown_super(sb);
> +	hfs_mdb_put(sb);
> +	if (sb->s_bdev) {
> +		sync_blockdev(sb->s_bdev);
> +		bdev_fput(sb->s_bdev_file);
> +	}
> +
> +}
> +
>  static struct file_system_type hfs_fs_type = {
>  	.owner		= THIS_MODULE,
>  	.name		= "hfs",
> -	.kill_sb	= kill_block_super,
> +	.kill_sb	= hfs_kill_sb,
>  	.fs_flags	= FS_REQUIRES_DEV,
>  	.init_fs_context = hfs_init_fs_context,
>  };

Remove the calls of hfs_mdb_put() from hfs_fill_super() and
hfs_put_super() in addition to that.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* (no subject)
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
                   ` (5 preceding siblings ...)
  2025-11-18 17:00 ` Mehdi Ben Hadj Khelifa
@ 2025-11-18 18:27 ` Mehdi Ben Hadj Khelifa
  2025-11-18 17:40   ` Al Viro
  2025-11-18 20:32   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-18 19:21 ` Mehdi Ben Hadj Khelifa
  2025-11-19  5:31 ` Mehdi Ben Hadj Khelifa
  8 siblings, 2 replies; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-18 18:27 UTC (permalink / raw)
  To: syzbot+ad45f827c88778ff7df6
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs, Mehdi Ben Hadj Khelifa

#syz test

diff --git a/fs/hfs/super.c b/fs/hfs/super.c
index 47f50fa555a4..46cdff89fb00 100644
--- a/fs/hfs/super.c
+++ b/fs/hfs/super.c
@@ -431,10 +431,21 @@ static int hfs_init_fs_context(struct fs_context *fc)
 	return 0;
 }
 
+static void hfs_kill_sb(struct super_block *sb)
+{
+	generic_shutdown_super(sb);
+	hfs_mdb_put(sb);
+	if (sb->s_bdev) {
+		sync_blockdev(sb->s_bdev);
+		bdev_fput(sb->s_bdev_file);
+	}
+
+}
+
 static struct file_system_type hfs_fs_type = {
 	.owner		= THIS_MODULE,
 	.name		= "hfs",
-	.kill_sb	= kill_block_super,
+	.kill_sb	= hfs_kill_sb,
 	.fs_flags	= FS_REQUIRES_DEV,
 	.init_fs_context = hfs_init_fs_context,
 };
-- 
2.52.0


^ permalink raw reply related	[flat|nested] 45+ messages in thread

* (no subject)
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
                   ` (6 preceding siblings ...)
  2025-11-18 18:27 ` Mehdi Ben Hadj Khelifa
@ 2025-11-18 19:21 ` Mehdi Ben Hadj Khelifa
  2025-11-18 20:32   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-19  5:31 ` Mehdi Ben Hadj Khelifa
  8 siblings, 1 reply; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-18 19:21 UTC (permalink / raw)
  To: syzbot+ad45f827c88778ff7df6
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs, Mehdi Ben Hadj Khelifa

#syz test

diff --git a/fs/hfs/super.c b/fs/hfs/super.c
index 47f50fa555a4..06e1c25e47dc 100644
--- a/fs/hfs/super.c
+++ b/fs/hfs/super.c
@@ -49,8 +49,6 @@ static void hfs_put_super(struct super_block *sb)
 {
 	cancel_delayed_work_sync(&HFS_SB(sb)->mdb_work);
 	hfs_mdb_close(sb);
-	/* release the MDB's resources */
-	hfs_mdb_put(sb);
 }
 
 static void flush_mdb(struct work_struct *work)
@@ -383,7 +381,6 @@ static int hfs_fill_super(struct super_block *sb, struct fs_context *fc)
 bail_no_root:
 	pr_err("get root inode failed\n");
 bail:
-	hfs_mdb_put(sb);
 	return res;
 }
 
@@ -431,10 +428,21 @@ static int hfs_init_fs_context(struct fs_context *fc)
 	return 0;
 }
 
+static void hfs_kill_sb(struct super_block *sb)
+{
+	generic_shutdown_super(sb);
+	hfs_mdb_put(sb);
+	if (sb->s_bdev) {
+		sync_blockdev(sb->s_bdev);
+		bdev_fput(sb->s_bdev_file);
+	}
+
+}
+
 static struct file_system_type hfs_fs_type = {
 	.owner		= THIS_MODULE,
 	.name		= "hfs",
-	.kill_sb	= kill_block_super,
+	.kill_sb	= hfs_kill_sb,
 	.fs_flags	= FS_REQUIRES_DEV,
 	.init_fs_context = hfs_init_fs_context,
 };
-- 
2.52.0


^ permalink raw reply related	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-18 18:27 ` Mehdi Ben Hadj Khelifa
  2025-11-18 17:40   ` Al Viro
@ 2025-11-18 20:32   ` syzbot
  1 sibling, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-18 20:32 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com
Tested-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com

Tested on:

commit:         8b690556 Merge tag 'for-linus' of git://git.kernel.org..
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=16ca7884580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=f30cc590c4f6da44
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch:          https://syzkaller.appspot.com/x/patch.diff?x=15e328b4580000

Note: testing is done by a robot and is best-effort only.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-18 19:21 ` Mehdi Ben Hadj Khelifa
@ 2025-11-18 20:32   ` syzbot
  0 siblings, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-18 20:32 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

failed to checkout syzkaller repo: failed to run ["git" "fetch" "--force" "--tags" "8408054c2e598e2818e3e31f22aefcbac3668c43" "4e1406b4defac0e2a9d9424c70706f79a7750cf3"]: exit status 128


Tested on:

commit:         [unknown 
git tree:       upstream
kernel config:  https://syzkaller.appspot.com/x/.config?x=cb128cd5cb439809
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       
patch:          https://syzkaller.appspot.com/x/patch.diff?x=15693212580000


^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-19  5:31 ` Mehdi Ben Hadj Khelifa
@ 2025-11-19  5:19   ` syzbot
  0 siblings, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-19  5:19 UTC (permalink / raw)
  To: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com
Tested-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com

Tested on:

commit:         8b690556 Merge tag 'for-linus' of git://git.kernel.org..
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=14c40742580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=f30cc590c4f6da44
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch:          https://syzkaller.appspot.com/x/patch.diff?x=16949658580000

Note: testing is done by a robot and is best-effort only.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* (no subject)
  2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
                   ` (7 preceding siblings ...)
  2025-11-18 19:21 ` Mehdi Ben Hadj Khelifa
@ 2025-11-19  5:31 ` Mehdi Ben Hadj Khelifa
  2025-11-19  5:19   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  8 siblings, 1 reply; 45+ messages in thread
From: Mehdi Ben Hadj Khelifa @ 2025-11-19  5:31 UTC (permalink / raw)
  To: syzbot+ad45f827c88778ff7df6
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel, slava,
	syzkaller-bugs, Mehdi Ben Hadj Khelifa

#syz test

diff --git a/fs/hfs/super.c b/fs/hfs/super.c
index 47f50fa555a4..06e1c25e47dc 100644
--- a/fs/hfs/super.c
+++ b/fs/hfs/super.c
@@ -49,8 +49,6 @@ static void hfs_put_super(struct super_block *sb)
 {
 	cancel_delayed_work_sync(&HFS_SB(sb)->mdb_work);
 	hfs_mdb_close(sb);
-	/* release the MDB's resources */
-	hfs_mdb_put(sb);
 }
 
 static void flush_mdb(struct work_struct *work)
@@ -383,7 +381,6 @@ static int hfs_fill_super(struct super_block *sb, struct fs_context *fc)
 bail_no_root:
 	pr_err("get root inode failed\n");
 bail:
-	hfs_mdb_put(sb);
 	return res;
 }
 
@@ -431,10 +428,21 @@ static int hfs_init_fs_context(struct fs_context *fc)
 	return 0;
 }
 
+static void hfs_kill_sb(struct super_block *sb)
+{
+	generic_shutdown_super(sb);
+	hfs_mdb_put(sb);
+	if (sb->s_bdev) {
+		sync_blockdev(sb->s_bdev);
+		bdev_fput(sb->s_bdev_file);
+	}
+
+}
+
 static struct file_system_type hfs_fs_type = {
 	.owner		= THIS_MODULE,
 	.name		= "hfs",
-	.kill_sb	= kill_block_super,
+	.kill_sb	= hfs_kill_sb,
 	.fs_flags	= FS_REQUIRES_DEV,
 	.init_fs_context = hfs_init_fs_context,
 };
-- 
2.52.0


^ permalink raw reply related	[flat|nested] 45+ messages in thread

* Re: [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure
  2025-11-14  5:12 ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Mehdi Ben Hadj Khelifa
  2025-11-14  4:26   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2025-11-14 11:55   ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Christian Brauner
@ 2025-11-19 13:43   ` Christian Brauner
  2025-11-19 14:13     ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  2 siblings, 1 reply; 45+ messages in thread
From: Christian Brauner @ 2025-11-19 13:43 UTC (permalink / raw)
  To: Mehdi Ben Hadj Khelifa
  Cc: syzbot+ad45f827c88778ff7df6, frank.li, glaubitz, linux-fsdevel,
	linux-kernel, slava, syzkaller-bugs

On Fri, Nov 14, 2025 at 06:12:12AM +0100, Mehdi Ben Hadj Khelifa wrote:
> #syz test
> 
> diff --git a/fs/super.c b/fs/super.c
> index 5bab94fb7e03..a99e5281b057 100644
> --- a/fs/super.c
> +++ b/fs/super.c
> @@ -1690,6 +1690,11 @@ int get_tree_bdev_flags(struct fs_context *fc,
>  		if (!error)
>  			error = fill_super(s, fc);
>  		if (error) {
> +			/*
> +			 * return back sb_info ownership to fc to be freed by put_fs_context()
> +			 */
> +			fc->s_fs_info = s->s_fs_info;
> +			s->s_fs_info = NULL;
>  			deactivate_locked_super(s);
>  			return error;
>  		}

#syz test: https://github.com/brauner/linux.git work.hfs.fixes

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-19 13:43   ` Christian Brauner
@ 2025-11-19 14:13     ` syzbot
  2025-11-19 14:16       ` Christian Brauner
  0 siblings, 1 reply; 45+ messages in thread
From: syzbot @ 2025-11-19 14:13 UTC (permalink / raw)
  To: brauner, frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

pc

SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)


Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts.
2025/11/19 14:11:52 parsed 1 programs
[   42.022753][ T5811] cgroup: Unknown subsys name 'net'
[   42.175712][ T5811] cgroup: Unknown subsys name 'cpuset'
[   42.182256][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.184013][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.419720][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.816926][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.825249][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.836771][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.844633][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.992800][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.000051][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.007203][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.014500][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.021816][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.104921][ T5895] chnl_net:caif_netlink_parms(): no params data found
[   52.123774][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.130962][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.138313][ T5895] bridge_slave_0: entered allmulticast mode
[   52.144523][ T5895] bridge_slave_0: entered promiscuous mode
[   52.151904][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.159070][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.166257][ T5895] bridge_slave_1: entered allmulticast mode
[   52.172607][ T5895] bridge_slave_1: entered promiscuous mode
[   52.184675][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.194790][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.210335][ T5895] team0: Port device team_slave_0 added
[   52.216530][ T5895] team0: Port device team_slave_1 added
[   52.226332][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.233294][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.259593][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.270857][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.277950][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.304091][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.330778][ T5895] hsr_slave_0: entered promiscuous mode
[   52.337739][ T5895] hsr_slave_1: entered promiscuous mode
[   52.365548][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   52.373816][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   52.382570][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   52.390442][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   52.402050][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.409208][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.416560][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.424189][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.442787][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.452023][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.461111][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.470558][ T5895] 8021q: adding VLAN 0 to HW filter on device team0
[   52.479109][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.486350][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.496004][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.503421][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.520122][ T5895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.531213][ T5895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.567709][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.582539][ T5895] veth0_vlan: entered promiscuous mode
[   52.589714][ T5895] veth1_vlan: entered promiscuous mode
[   52.600093][ T5895] veth0_macvtap: entered promiscuous mode
[   52.606771][ T5895] veth1_macvtap: entered promiscuous mode
[   52.615855][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.625167][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.634137][   T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.642907][   T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.652172][   T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.661018][   T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.696362][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.736176][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.776000][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/19 14:12:05 executed programs: 0
[   52.826029][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.913007][   T35] bridge_slave_1: left allmulticast mode
[   55.924242][   T35] bridge_slave_1: left promiscuous mode
[   55.930898][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.939182][   T35] bridge_slave_0: left allmulticast mode
[   55.945141][   T35] bridge_slave_0: left promiscuous mode
[   55.951004][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.026188][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.036592][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.046139][   T35] bond0 (unregistering): Released all slaves
[   56.106597][   T35] hsr_slave_0: left promiscuous mode
[   56.112214][   T35] hsr_slave_1: left promiscuous mode
[   56.118098][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.126443][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.133898][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.141694][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.150927][   T35] veth1_macvtap: left promiscuous mode
[   56.157067][   T35] veth0_macvtap: left promiscuous mode
[   56.163187][   T35] veth1_vlan: left promiscuous mode
[   56.168965][   T35] veth0_vlan: left promiscuous mode
[   56.196836][   T35] team0 (unregistering): Port device team_slave_1 removed
[   56.205815][   T35] team0 (unregistering): Port device team_slave_0 removed
[   58.084150][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.091289][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.098477][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.105739][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.112872][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.147089][ T5988] chnl_net:caif_netlink_parms(): no params data found
[   58.166338][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.173578][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.180784][ T5988] bridge_slave_0: entered allmulticast mode
[   58.187051][ T5988] bridge_slave_0: entered promiscuous mode
[   58.193583][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.200740][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.207833][ T5988] bridge_slave_1: entered allmulticast mode
[   58.214030][ T5988] bridge_slave_1: entered promiscuous mode
[   58.225238][ T5988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.235910][ T5988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.251413][ T5988] team0: Port device team_slave_0 added
[   58.257776][ T5988] team0: Port device team_slave_1 added
[   58.267463][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.274482][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.300974][ T5988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.311990][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.318969][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.344994][ T5988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.362193][ T5988] hsr_slave_0: entered promiscuous mode
[   58.368062][ T5988] hsr_slave_1: entered promiscuous mode
[   58.548290][ T5988] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.556831][ T5988] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.564665][ T5988] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.572522][ T5988] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.586118][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.593280][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.600654][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.607726][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.630191][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.640402][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.649632][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.659837][ T5988] 8021q: adding VLAN 0 to HW filter on device team0
[   58.669532][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.676712][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.686492][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.693655][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.709390][ T5988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.720129][ T5988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.769091][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.787789][ T5988] veth0_vlan: entered promiscuous mode
[   58.795800][ T5988] veth1_vlan: entered promiscuous mode
[   58.808550][ T5988] veth0_macvtap: entered promiscuous mode
[   58.816434][ T5988] veth1_macvtap: entered promiscuous mode
[   58.826869][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.837590][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.847552][ T2979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.862969][ T2979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.881016][ T2979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.894676][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.903471][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   58.917260][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.925507][ T2979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.934333][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50


syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3582148735=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'

git status (err=<nil>)
HEAD detached at 4e1406b4d
nothing to commit, working tree clean


tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include   -DGOOS_linux=1 -DGOARCH_amd64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"4e1406b4defac0e2a9d9424c70706f79a7750cf3\"
/usr/bin/ld: /tmp/ccMkllK7.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null


Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=10715332580000


Tested on:

commit:         058747ce hfs: ensure sb->s_fs_info is always cleaned up
git tree:       https://github.com/brauner/linux.git work.hfs.fixes
kernel config:  https://syzkaller.appspot.com/x/.config?x=f30cc590c4f6da44
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40

Note: no patches were applied.

^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-19 14:13     ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
@ 2025-11-19 14:16       ` Christian Brauner
  2025-11-19 15:08         ` syzbot
  0 siblings, 1 reply; 45+ messages in thread
From: Christian Brauner @ 2025-11-19 14:16 UTC (permalink / raw)
  To: syzbot
  Cc: frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

On Wed, Nov 19, 2025 at 06:13:08AM -0800, syzbot wrote:
> Hello,
> 
> syzbot tried to test the proposed patch but the build/boot failed:
> 
> pc
> 
> SYZFAIL: failed to recv rpc
> fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
> 
> 
> Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts.
> 2025/11/19 14:11:52 parsed 1 programs
> [   42.022753][ T5811] cgroup: Unknown subsys name 'net'
> [   42.175712][ T5811] cgroup: Unknown subsys name 'cpuset'
> [   42.182256][ T5811] cgroup: Unknown subsys name 'rlimit'
> Setting up swapspace version 1, size = 127995904 bytes
> [   50.184013][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
> [   51.419720][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
> [   51.816926][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
> [   51.825249][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
> [   51.836771][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
> [   51.844633][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
> [   51.992800][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
> [   52.000051][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
> [   52.007203][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
> [   52.014500][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
> [   52.021816][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
> [   52.104921][ T5895] chnl_net:caif_netlink_parms(): no params data found
> [   52.123774][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
> [   52.130962][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
> [   52.138313][ T5895] bridge_slave_0: entered allmulticast mode
> [   52.144523][ T5895] bridge_slave_0: entered promiscuous mode
> [   52.151904][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
> [   52.159070][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
> [   52.166257][ T5895] bridge_slave_1: entered allmulticast mode
> [   52.172607][ T5895] bridge_slave_1: entered promiscuous mode
> [   52.184675][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
> [   52.194790][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
> [   52.210335][ T5895] team0: Port device team_slave_0 added
> [   52.216530][ T5895] team0: Port device team_slave_1 added
> [   52.226332][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0
> [   52.233294][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
> [   52.259593][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
> [   52.270857][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1
> [   52.277950][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
> [   52.304091][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
> [   52.330778][ T5895] hsr_slave_0: entered promiscuous mode
> [   52.337739][ T5895] hsr_slave_1: entered promiscuous mode
> [   52.365548][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0
> [   52.373816][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1
> [   52.382570][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2
> [   52.390442][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3
> [   52.402050][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
> [   52.409208][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state
> [   52.416560][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
> [   52.424189][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state
> [   52.442787][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0
> [   52.452023][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
> [   52.461111][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
> [   52.470558][ T5895] 8021q: adding VLAN 0 to HW filter on device team0
> [   52.479109][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
> [   52.486350][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
> [   52.496004][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state
> [   52.503421][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state
> [   52.520122][ T5895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
> [   52.531213][ T5895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
> [   52.567709][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0
> [   52.582539][ T5895] veth0_vlan: entered promiscuous mode
> [   52.589714][ T5895] veth1_vlan: entered promiscuous mode
> [   52.600093][ T5895] veth0_macvtap: entered promiscuous mode
> [   52.606771][ T5895] veth1_macvtap: entered promiscuous mode
> [   52.615855][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0
> [   52.625167][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1
> [   52.634137][   T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
> [   52.642907][   T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
> [   52.652172][   T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
> [   52.661018][   T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
> [   52.696362][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
> [   52.736176][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
> [   52.776000][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
> 2025/11/19 14:12:05 executed programs: 0
> [   52.826029][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
> [   55.913007][   T35] bridge_slave_1: left allmulticast mode
> [   55.924242][   T35] bridge_slave_1: left promiscuous mode
> [   55.930898][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
> [   55.939182][   T35] bridge_slave_0: left allmulticast mode
> [   55.945141][   T35] bridge_slave_0: left promiscuous mode
> [   55.951004][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
> [   56.026188][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
> [   56.036592][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
> [   56.046139][   T35] bond0 (unregistering): Released all slaves
> [   56.106597][   T35] hsr_slave_0: left promiscuous mode
> [   56.112214][   T35] hsr_slave_1: left promiscuous mode
> [   56.118098][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
> [   56.126443][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
> [   56.133898][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
> [   56.141694][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
> [   56.150927][   T35] veth1_macvtap: left promiscuous mode
> [   56.157067][   T35] veth0_macvtap: left promiscuous mode
> [   56.163187][   T35] veth1_vlan: left promiscuous mode
> [   56.168965][   T35] veth0_vlan: left promiscuous mode
> [   56.196836][   T35] team0 (unregistering): Port device team_slave_1 removed
> [   56.205815][   T35] team0 (unregistering): Port device team_slave_0 removed
> [   58.084150][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
> [   58.091289][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
> [   58.098477][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
> [   58.105739][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
> [   58.112872][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
> [   58.147089][ T5988] chnl_net:caif_netlink_parms(): no params data found
> [   58.166338][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
> [   58.173578][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state
> [   58.180784][ T5988] bridge_slave_0: entered allmulticast mode
> [   58.187051][ T5988] bridge_slave_0: entered promiscuous mode
> [   58.193583][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
> [   58.200740][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state
> [   58.207833][ T5988] bridge_slave_1: entered allmulticast mode
> [   58.214030][ T5988] bridge_slave_1: entered promiscuous mode
> [   58.225238][ T5988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
> [   58.235910][ T5988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
> [   58.251413][ T5988] team0: Port device team_slave_0 added
> [   58.257776][ T5988] team0: Port device team_slave_1 added
> [   58.267463][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_0
> [   58.274482][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
> [   58.300974][ T5988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
> [   58.311990][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_1
> [   58.318969][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
> [   58.344994][ T5988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
> [   58.362193][ T5988] hsr_slave_0: entered promiscuous mode
> [   58.368062][ T5988] hsr_slave_1: entered promiscuous mode
> [   58.548290][ T5988] netdevsim netdevsim0 netdevsim0: renamed from eth0
> [   58.556831][ T5988] netdevsim netdevsim0 netdevsim1: renamed from eth1
> [   58.564665][ T5988] netdevsim netdevsim0 netdevsim2: renamed from eth2
> [   58.572522][ T5988] netdevsim netdevsim0 netdevsim3: renamed from eth3
> [   58.586118][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
> [   58.593280][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state
> [   58.600654][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
> [   58.607726][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state
> [   58.630191][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0
> [   58.640402][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
> [   58.649632][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
> [   58.659837][ T5988] 8021q: adding VLAN 0 to HW filter on device team0
> [   58.669532][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
> [   58.676712][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
> [   58.686492][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
> [   58.693655][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
> [   58.709390][ T5988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
> [   58.720129][ T5988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
> [   58.769091][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0
> [   58.787789][ T5988] veth0_vlan: entered promiscuous mode
> [   58.795800][ T5988] veth1_vlan: entered promiscuous mode
> [   58.808550][ T5988] veth0_macvtap: entered promiscuous mode
> [   58.816434][ T5988] veth1_macvtap: entered promiscuous mode
> [   58.826869][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_0
> [   58.837590][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_1
> [   58.847552][ T2979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
> [   58.862969][ T2979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
> [   58.881016][ T2979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
> [   58.894676][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
> [   58.903471][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
> SYZFAIL: failed to recv rpc
> fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
> [   58.917260][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
> [   58.925507][ T2979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
> [   58.934333][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
> 
> 
> syzkaller build log:
> go env (err=<nil>)
> AR='ar'
> CC='gcc'
> CGO_CFLAGS='-O2 -g'
> CGO_CPPFLAGS=''
> CGO_CXXFLAGS='-O2 -g'
> CGO_ENABLED='1'
> CGO_FFLAGS='-O2 -g'
> CGO_LDFLAGS='-O2 -g'
> CXX='g++'
> GCCGO='gccgo'
> GO111MODULE='auto'
> GOAMD64='v1'
> GOARCH='amd64'
> GOAUTH='netrc'
> GOBIN=''
> GOCACHE='/syzkaller/.cache/go-build'
> GOCACHEPROG=''
> GODEBUG=''
> GOENV='/syzkaller/.config/go/env'
> GOEXE=''
> GOEXPERIMENT=''
> GOFIPS140='off'
> GOFLAGS=''
> GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3582148735=/tmp/go-build -gno-record-gcc-switches'
> GOHOSTARCH='amd64'
> GOHOSTOS='linux'
> GOINSECURE=''
> GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
> GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
> GONOPROXY=''
> GONOSUMDB=''
> GOOS='linux'
> GOPATH='/syzkaller/jobs-2/linux/gopath'
> GOPRIVATE=''
> GOPROXY='https://proxy.golang.org,direct'
> GOROOT='/usr/local/go'
> GOSUMDB='sum.golang.org'
> GOTELEMETRY='local'
> GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
> GOTMPDIR=''
> GOTOOLCHAIN='auto'
> GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
> GOVCS=''
> GOVERSION='go1.24.4'
> GOWORK=''
> PKG_CONFIG='pkg-config'
> 
> git status (err=<nil>)
> HEAD detached at 4e1406b4d
> nothing to commit, working tree clean
> 
> 
> tput: No value for $TERM and no -T specified
> tput: No value for $TERM and no -T specified
> Makefile:31: run command via tools/syz-env for best compatibility, see:
> Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
> go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  ./sys/syz-sysgen
> make .descriptions
> tput: No value for $TERM and no -T specified
> tput: No value for $TERM and no -T specified
> Makefile:31: run command via tools/syz-env for best compatibility, see:
> Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
> bin/syz-sysgen
> touch .descriptions
> GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=4e1406b4defac0e2a9d9424c70706f79a7750cf3 -X github.com/google/syzkaller/prog.gitRevisionDate=20251106-151142"  -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
> mkdir -p ./bin/linux_amd64
> g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
> 	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include   -DGOOS_linux=1 -DGOARCH_amd64=1 \
> 	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"4e1406b4defac0e2a9d9424c70706f79a7750cf3\"
> /usr/bin/ld: /tmp/ccMkllK7.o: in function `Connection::Connect(char const*, char const*)':
> executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
> ./tools/check-syzos.sh 2>/dev/null
> 
> 
> Error text is too large and was truncated, full error text is at:
> https://syzkaller.appspot.com/x/error.txt?x=10715332580000
> 
> 
> Tested on:
> 
> commit:         058747ce hfs: ensure sb->s_fs_info is always cleaned up
> git tree:       https://github.com/brauner/linux.git work.hfs.fixes
> kernel config:  https://syzkaller.appspot.com/x/.config?x=f30cc590c4f6da44
> dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
> compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
> 
> Note: no patches were applied.

Groan, unrelated error.
What do I do? Just restart?

#syz test https://github.com/brauner/linux.git work.hfs.fixes


^ permalink raw reply	[flat|nested] 45+ messages in thread

* Re: [syzbot] [hfs?] memory leak in hfs_init_fs_context
  2025-11-19 14:16       ` Christian Brauner
@ 2025-11-19 15:08         ` syzbot
  0 siblings, 0 replies; 45+ messages in thread
From: syzbot @ 2025-11-19 15:08 UTC (permalink / raw)
  To: brauner, frank.li, glaubitz, linux-fsdevel, linux-kernel,
	mehdi.benhadjkhelifa, slava, syzkaller-bugs

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com
Tested-by: syzbot+ad45f827c88778ff7df6@syzkaller.appspotmail.com

Tested on:

commit:         058747ce hfs: ensure sb->s_fs_info is always cleaned up
git tree:       https://github.com/brauner/linux.git work.hfs.fixes
console output: https://syzkaller.appspot.com/x/log.txt?x=122ab914580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=f30cc590c4f6da44
dashboard link: https://syzkaller.appspot.com/bug?extid=ad45f827c88778ff7df6
compiler:       gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40

Note: no patches were applied.
Note: testing is done by a robot and is best-effort only.

^ permalink raw reply	[flat|nested] 45+ messages in thread

end of thread, other threads:[~2025-11-19 15:08 UTC | newest]

Thread overview: 45+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-11-13  4:27 [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-13 21:47 ` Viacheslav Dubeyko
2025-11-14  1:24 ` Mehdi Ben Hadj Khelifa
2025-11-14  2:03   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-14  3:18 ` Mehdi Ben Hadj Khelifa
2025-11-14  3:00   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-14  5:12 ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Mehdi Ben Hadj Khelifa
2025-11-14  4:26   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-14 11:55   ` [PATCH] fs/super: fix memory leak of s_fs_info on setup_bdev_super failure Christian Brauner
2025-11-14 16:05     ` Mehdi Ben Hadj Khelifa
2025-11-14 17:15     ` Mehdi Ben Hadj Khelifa
2025-11-19 13:43   ` Christian Brauner
2025-11-19 14:13     ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-19 14:16       ` Christian Brauner
2025-11-19 15:08         ` syzbot
2025-11-14 16:01 ` Mehdi Ben Hadj Khelifa
2025-11-14 15:29   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-18 17:00 ` Mehdi Ben Hadj Khelifa
2025-11-18 17:15   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-18 18:27 ` Mehdi Ben Hadj Khelifa
2025-11-18 17:40   ` Al Viro
2025-11-18 20:32   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-18 19:21 ` Mehdi Ben Hadj Khelifa
2025-11-18 20:32   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
2025-11-19  5:31 ` Mehdi Ben Hadj Khelifa
2025-11-19  5:19   ` [syzbot] [hfs?] memory leak in hfs_init_fs_context syzbot
  -- strict thread matches above, loose matches on Subject: below --
2021-07-27  2:59 [PATCH v9] iomap: Support file tail packing Gao Xiang
2021-07-27 15:10 ` Darrick J. Wong
2021-07-27 15:23   ` Andreas Grünbacher
2021-07-27 15:30   ` Re: Gao Xiang
     [not found] <CAK8P3a16=ktJm5B3c5-XS7SqVuHBY5+E2FwVUqbdOdWK-AUgSA@mail.gmail.com>
     [not found] ` <20190830202959.3539-1-msuchanek@suse.de>
2019-08-30 20:32   ` Re: Arnd Bergmann
2017-11-13 14:55 Re: Amos Kalonzo
2017-05-03  6:23 Re: H.A
2017-02-23 15:09 Qin's Yanjun
2015-10-26 10:18 (unknown), Michael Wilke
2015-10-26 17:51 ` Albino B Neto
2015-07-23 23:24 Re: Anteh, Ashe
2014-12-06 13:18 Re: Quan Han
     [not found] <6A286AB51AD8EC4180C4B2E9EF1D0A027AAD7EFF1E@exmb01.wrschool.net>
2014-09-08 17:36 ` Deborah Mayher
     [not found] <CABbL6oa_ckwhbDkB-MVr4C3W_FHRVMmQ=uQ5tZp1RebmYLwdfw@mail.gmail.com>
2013-04-04 17:23 ` Fwd: Michael Fox
2013-04-04 17:43   ` Michael Fox
2012-02-15 21:17 Re: Irish Lotto
2011-03-17 16:22 Re: Steve French
2006-03-14 15:11 Re: Della
2006-03-11 21:21 Re: Catalina K. Molina, VI
2006-03-06 10:20 Re: Mariana Schulz
2006-02-20 19:13 Re: Hank Baez
2006-02-19  6:37 Re: Geoffrey Z. Black, III
2006-02-17  2:20 Re: Janine C. Kennedy

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).