【OLK-5.10 同步】[syzkaller] KASAN: null-ptr-deref Write in bdi_split_work_to_wbs

```
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
BUG: KASAN: null-ptr-deref in atomic64_sub_and_test include/asm-generic/atomic-instrumented.h:1548 [inline]
BUG: KASAN: null-ptr-deref in atomic_long_sub_and_test include/asm-generic/atomic-long.h:461 [inline]
BUG: KASAN: null-ptr-deref in percpu_ref_put_many include/linux/percpu-refcount.h:321 [inline]
BUG: KASAN: null-ptr-deref in percpu_ref_put include/linux/percpu-refcount.h:338 [inline]
BUG: KASAN: null-ptr-deref in wb_put include/linux/backing-dev-defs.h:265 [inline]
BUG: KASAN: null-ptr-deref in bdi_split_work_to_wbs+0x548/0x860 fs/fs-writeback.c:864
Write of size 8 at addr 0000000000000000 by task syz-executor.0/4110

CPU: 2 PID: 4110 Comm: syz-executor.0 Not tainted 5.10.0-00168-g57a838cc73a6-dirty #1
Hardware name: linux,dummy-virt (DT)
Call trace:
 dump_backtrace+0x0/0x420 arch/arm64/kernel/stacktrace.c:132
 show_stack+0x30/0x3c arch/arm64/kernel/stacktrace.c:196
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1cc/0x240 lib/dump_stack.c:118
 __kasan_report mm/kasan/report.c:546 [inline]
 kasan_report+0x194/0x1b0 mm/kasan/report.c:559
 check_memory_region_inline mm/kasan/generic.c:177 [inline]
 check_memory_region+0xf4/0x1a0 mm/kasan/generic.c:193
 __kasan_check_write+0x38/0x40 mm/kasan/common.c:77
 instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
 atomic64_sub_and_test include/asm-generic/atomic-instrumented.h:1548 [inline]
 atomic_long_sub_and_test include/asm-generic/atomic-long.h:461 [inline]
 percpu_ref_put_many include/linux/percpu-refcount.h:321 [inline]
 percpu_ref_put include/linux/percpu-refcount.h:338 [inline]
 wb_put include/linux/backing-dev-defs.h:265 [inline]
 bdi_split_work_to_wbs+0x548/0x860 fs/fs-writeback.c:864
 __writeback_inodes_sb_nr+0x160/0x1c4 fs/fs-writeback.c:2454
 try_to_writeback_inodes_sb+0x90/0xb0 fs/fs-writeback.c:2503
 ext4_nonda_switch+0x138/0x13c fs/ext4/inode.c:2968
 ext4_da_write_begin+0xf8/0x5f0 fs/ext4/inode.c:2995
 generic_perform_write+0x184/0x370 mm/filemap.c:3629
 ext4_buffered_write_iter+0x14c/0x2a0 fs/ext4/file.c:270
 ext4_file_write_iter+0xcc/0x1fc fs/ext4/file.c:687
 call_write_iter include/linux/fs.h:1961 [inline]
 new_sync_write+0x260/0x370 fs/read_write.c:513
 vfs_write+0x51c/0x61c fs/read_write.c:600
 ksys_write+0xfc/0x200 fs/read_write.c:653
 __do_sys_write fs/read_write.c:665 [inline]
 __se_sys_write fs/read_write.c:662 [inline]
 __arm64_sys_write+0x50/0x60 fs/read_write.c:662
 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:48 [inline]
 el0_svc_common.constprop.0+0xf4/0x414 arch/arm64/kernel/syscall.c:155
 do_el0_svc+0x50/0x12c arch/arm64/kernel/syscall.c:217
 el0_svc+0x20/0x30 arch/arm64/kernel/entry-common.c:353
 el0_sync_handler+0xe4/0x1e0 arch/arm64/kernel/entry-common.c:369
 el0_sync+0x148/0x180 arch/arm64/kernel/entry.S:683
==================================================================
```

GVP openEuler/kernel
Closed

Content Risk Flag

Comments (2)

GVPopenEuler/kernelClosed

Content Risk Flag