From 9f76654de8a8c573e957c3f6b0877724f8c04bd9 Mon Sep 17 00:00:00 2001
From: David Sterba <dsterba@suse.com>
Date: Tue, 8 Mar 2016 15:43:13 +0100
Subject: [PATCH] btrfs-progs: tests: add image for bko#96971 (bad checksum
 type)

Signed-off-by: David Sterba <dsterba@suse.com>
---
 .../fuzz-tests/images/bko-96971-btrfs-image.raw.xz | Bin 0 -> 6448 bytes
 tests/fuzz-tests/images/bko-96971-btrfs-image.txt  |  69 +++++++++++++++++++++
 2 files changed, 69 insertions(+)
 create mode 100644 tests/fuzz-tests/images/bko-96971-btrfs-image.raw.xz
 create mode 100644 tests/fuzz-tests/images/bko-96971-btrfs-image.txt

diff --git a/tests/fuzz-tests/images/bko-96971-btrfs-image.raw.xz b/tests/fuzz-tests/images/bko-96971-btrfs-image.raw.xz
new file mode 100644
index 0000000000000000000000000000000000000000..21aa33b00acce8d21ebc744f88638ac10149f9c6
GIT binary patch
literal 6448
zcmeI1_fr$@mWSy*G=m}ng7kni=~Y0w^p13-mrw*1=@?4r9qCni2N9){0D^+_UIU?p
zZs;MqGyBW#-1+Xz-PyUjcjo>B@0s&CXU@#?ycqESQ*#^~0_04K3LXwCE+Y;O4)vJn
zPb?Npz+j1k1IA#nC2d$$IW;;TNn5?IDcs1CNaCx*P3G`P0l1V5u4ZHK4=7Yipad`<
z@);4wMq{vMMi2LcZoIwxk`_YY+OzUT{k26g;7hdwB$MGhS6;omvHJRJRjd;t=vyxC
znl$jBz>8#L=-{aS)}r*n#3i0IfbJ)WyD49uG=(m=G*+>XRcoANGwmBiL<ZBLFWCxN
z)Ve><WW2zF7h$GXv(f6We5DwUSckUq44Tz<O+9u@5DTWkrA=%Ai;I%h?GswQtrxeT
zkO)Cg=*x%c)uX2f!4oU>DtP(V50BQH$A2D)Jfv>V5s^C+BRzH6i@3Z`zuhd=PYyLY
zsF;ahG7nS)_~2E;00f;1dWbj5eKVoj5fhv=RONeA9vWV9qs=s8=6QhfZvLdq(r2^C
z52y$!e~kbsR4X_;fhVK?Q^9ySw(RG(px^UYTcAZ&cEmThLPN9Sso26j%K-0~8l3(>
zDi7s->>4FYSVFcMCeyH*XWp;;zHX@sByQ8h4rR7oqdl`;lz(#HZhM?c+|MPQ_Qmx|
zOWgU9hTVzpq8@Egc1;S1GoCS74*iSSh-rJnxYA5yTSL;=bEmQ*ee-Y*|6;cL%_uIt
zLVW~7JidxBc|w!EdWf24Fk8D0rcaLO`%d@oy&O1|DSKdA&h?f;(aJi1P7<avjU6d4
zGv~W*YLVH&7+N+Um&WbrH`=(($yRYm6g!U&nE^bK4|-c20c7<YpAI;a0~*-**O+Z?
zy&@#J8eFKoz0v1=^NaZvi{jO?f$SyEYf|aZ5s>?8tMoCfli#|EN>0;JG3g#9mOAy)
z`<>Y(`7dlbw+dC|?K|Ha>eD--S_Ljk7nip)K_HsYQ(YCIBFaA*aUCb*Ly0bzXfLMr
zk918b&V}%G6M%zLds%9OpQwPNL~#r`Ir~Q*E?)YvA;Jve1DB740W7_W+Mbh<8gAnZ
z>}pH+B9EGhUi&DG&Q=I<4i@NgebXUIJ!23?_`u+GB(ICmi5EQan@;zn-TM#EoQi4l
zb77R4KwF*8m=lt40osM6Ci9(iGU_JVH8K1f4ObE+LkE-PYj4Q|Y|=vH?DAZ!x^@^$
zj3;ozyTUxm*y+1k+rY(WF?SfW!vmts)G?K5&=bEPVxJv3*X}en$IRhFu}Oq~HyYo`
zwaj|j;axlPqLhYnSP&n;iL$4XI-VC~FB#r+NB!v>*?gSuYevcp0~~$Xl>v9Ri+}xS
z6*z6VAE|gx)~WEtrT9~u<$a%~O_g)Q<7huV!NopZ!{jHKMEKS}yrh9W!s1zFbhu?Z
zC8Qu!71o@y#)sm5N_m%LBKx{memR>pihBeyo}L8_1|^?z`CUBhA<ELq!pzlACsDyT
z3@*{hVnT#v4Ts=fH*vq+0xUHyFAmDrpd8ax7bwI~&=xP``S(5JrKL(So=j6!Ys2(y
zw2_P6!Yp#vQQx#{_kU%H0#|Ob1^JD85+P?1VLcB2wS#|fX+0|WrUL98ARI?-;n@dd
zy`6Tng?AhoYb+pwz%$})ZJT2qFev-5b6W%rceNdu8o*S454?KY2lgidt-iktzf4ew
zCr#N0n4r)4-;UTuGUK`M;9Rx?UUZ&Nw4E4@i~?`4bt^4jQ(wtcS-V#ViAveK(LZ8P
zb8X|^XIvnAOx+u^m;Q7r%?wBPaIff`d%x#0yzTLR3X?@j?}9|S?%{S|BZ|z1l|5N!
z=3cI<;RTC`0w$@(#ui2F<GDBWggbzd^+U}M1l#J@isHGiqJeI$Z1_rhht13rjHzy)
zuG%r^4i2z0-kAt#1IVZ-nzaYK;R4q1C>7DPj?8w+qwjr2Ew4Q>+-jc@(#{kznHCU&
zdD&}-As#z@sP}M(q1)!pX=}!&Ql@f_O};~Eb9$vFFYc4x`+C^P^BQUi!>AgT+5VT3
zFW6&8`Zr0&?Tl`tO=e9~f?)=?3e?w&fh-Ng5iIxtA}H`xM<0{DnbfJf@IW-DMhq}W
zB2}^&lM0a?P!WEvx$1W9rLo^kBYw3G4QYI_;yhmcI(~h=i)ryz{`d(}>r%A!x07Ss
z{eTF8(lcSEv=7c@T1wd-A=(?_3{p=X_Ye3?(0Jw_^3dEfdlN0~JdC;svGdikrmS<b
z<<kkx|NVrV)k4k`NC?-B#5Ab>S;khrgx_`6&|5%w{LLi9grsx(3^fL)Ire&CW)Q$}
zqxyirm$e(>glY8`D2iO<)rZeEC7DZMghT%Itu0l=6=wzVFJsEqk7<1%4eLr8TQx2<
zrK&TA$?>@@=*S)IIs*w=LbBAYy2@m4H^}7KOhBadi(f)!qhkrv5hjA9+5>_1!(0ne
z2e{5l2=aUwebtn8d`Mi^AAHk>zU*)lTiC@}ND43ywfmv@h%}-|o-Xqd#Pe2Hl&oUP
zRPYr1U~uNkD6c-@iol|OR9J9u`%tDx{cCMpK|6Lq0sXQEN6N{FSE*gCs$OA)o6Yx1
zk*04r)`hy3Gte(>H%2FC7ic!7E$vOR(X!#`00iy)L5y<quRjI);3Hy6P>o#(eL!|E
zc|>(556i3t6&CM19=4l=v+y^y`$yYB@g1(YZgvBeh=AWj?|K@Z74K)H{Z545eL0|e
z)12T{BisO6+kcd-0Q}}!-)drv`)$oFYiRp~tpub#ZjXHCmfC-+4r?D6XL52FS0*Mj
z@D;EYz2S#C?u$=1;C=3109-g|Zgk{~{w(hss-OKF98pfF{<zw_r=vkOC(%l=V7^3l
zt}GliICmXPmn^-#rsIJuZtmyMx6J44v&!8!C`Wq(*9t{Ho#5OM6GuNbXSGev&a|<5
zOnb^<TRiA@k9E`K2H|bN^i(QLn1ap9cs=~itQqc{T7Rrbn?bDxR2U`GZJ-?yHKYa)
zbrDH#`MqggS<BqK?`@1<ORY>1ZucN|GVXNbcJ5EoAxOz+<PNv2s$_kRiAM3HR=y8*
zZK1FbLcFb@wdX|>TGy6KPVR(vy;AvBf8?DejPH#UBjyXWN}NPCWHIa{OG%cXDl&oS
z@v;YzOb3lJpCPDXD87zx-~nUa)Ne02m$((lY-n@dT#EbW0M7-zLYcuC%^)_n<~+1C
z-Lq{|H-TGUo<0u~Rq0z%itVsydn241D|@IBcsXzOyqjh6f&U4@<Z-^xl$`g&(*&Iw
zzxNd|Pd?ehB{)<TO~;!c<n)kMIG2kzgxJH_w2aO$s+^Tkzi`go=99161sh1u;tdjN
zAJtOjE-1zTo_m#sIF2>;;|OJ8bEA_y<65ooaDn=_Q=daXTo5~V=h8o%BWjbX-_<Gb
z3>ptI@!TpBLe!kREAHuXD&;C<NiqWUWnejTI6d?M&s6GGe%gPX>a@daXh3#%B0gcW
zZr0_7sinEst&GliR=6IJO$-(ery(S-)TFX?0+Mh#+u17Jo|nnKgc5}ig`hc(0=6iL
zcX=6$C|o*nhWPr<@9At>Pfaa)NG6lJ9)KYBQrOvIgy;`e!TzaSuD~+XE{CPj>(cYy
zBk||FO`0)Y-3P-y0;!qv>Ht^VdQkCQ?G@9e3%}|whct(_t2pn0T8@6;&gtE@^DILc
z`F)Op-fQU!ezMk!)NbiQCBOFj0K;6u-8o=3t!%)OyO;!$#q24R>0?ef5`kOLwNd{^
zv1@x_lI4W{Oi`5-td9A9<5*cn*Zh<RRK)8N(EQ2`HuE8WA^s4VFgOF%{uvoYT~01?
zXUbdoJ*KF_z2EM)iDOgImuI$zr*d&1S0Pm82e<-p7nQQlWM!>I7{FLq!coRJUmLYp
ze(*d$()3(l=380JF??x2jz7jt{0b;l6lG&?IY@4TMA*Gr-OYV8-e`skZ?Jga6KMBw
z`NI;Y9lGplLVCk@TxT}$gdGjcozpLn%I=BM_KS8^lSp@jZcanV)+b@Z%ggsO4g32Y
zN1aw1ICr4D02xo`yw8zT<wg89?~nvyj?wmL#-c+{TC!Th$f_~*dQMdqfm3BvqMUz<
zbg!(}R$L;#fCDXX7dzv!m+Sxhy|0ee{E!cK<3qUr<yA=C28rg{!WY+8JrBKdumXv{
zthquDR%gpH?uG-fdYDQVJ#>9OV9hKgi}CAwmH!ii=0?3s>}1c>shV%soo$DJ9ID^h
znj21R&_~qgLoZjxeiB$>GH;J0axt9}7D4Gd6C3k#W={I5B*&j*7ODZvU|&`0K9?nz
z@V)rhRa-|wHQwO`@^4+coSaKqL%sBFi{vpIvuxSC==UDgHj9}P`q3U;Qd2V=_Os#f
zWlaEeM>8b*udbFXdTU(3YQM*W6kZgo){jRX5)z*WIv%af%e>lO0rkF*Ou8MbGoO%Q
zs(LwJ92ghVGraB=1pX98Aomq#>zU!jd2e;ms$gv|ue9n&a0f@-+eG%sd6<w&ktIQe
zu1-@%6yJ)@^7c&284XNwc(K$GHyC9S4^I7Yt;r2++AV7yEqGv_RUGtZca9@*BG-pW
zA^@HGWd8Q6kk=D><n*hMY4t+ow?}v9b-8^D#wf~5nc$r5vOYK^Z^93&A12h}<4+h%
zWK)Tg#Fp9<+U)IrlbQ<Y?+hk|kUecHLI1*9Qci@*HF<b8$xm_wGHiCD<Pw7#f>rf`
z+2x(R!w&g&GT5UK!E=%x%<{v@bs97eMpT4A8^0{BY5bo>(%r{hTM|fR>C8Hvbp8ex
zGrU%!A|dEBD|GExQ&kqZ)R=j3nv%14`L?BgJWV}EZ4%u}Yx$6ZIiU5_R+JA?Mw>4M
z`Z^(kza1UkAkMG_w$OyCD3YZevwIpFE%@L2DH=DLlx!JV>lSWc4v!LC_PIMZ-(`GW
zcp|~w@19YKuk2s~-7YHKB3frB9(^b7W5Kes8yfmN40@dV1>?0!wgFFJK=4!KrZO*#
ze|Ht-jeBVi@zUg{CD$uaf~y8Dp+6L>Y2Sof3O;R>nYENYlT~_ZJaNVUXj8yka|py;
z6sR#(CAY_?N5Y5z?+M9IhWb&?H~^;vslW*wMG~!k6*a<&<=}bZ`^^(&&mE0iGW4xd
z8$b6uXx;iSPZRZv3s+GS(#ScX>N3ZuN_L)`S_wu#SkE(aRt$wX#6~WycA1E{wGQ7w
zNzG#~TAtd_glVU~A&Q#3$c|tJ6tH~N#$5XvTb~%=rnS==leHHrNr}U)4bY@@IX@C5
z-f%eNKgjYFpH<<~Gv3ey|3o2UqY<d=CGtB#(V?NrF=2$ahIraT+eeDrb>g+3-e()5
znBTXo88?#sDCLH=OLT+dgYD;q&}Uvz;Hh4Y=_OIuBdEsfdA9d9V?XXHcl5WULn}ms
zrf1$?MQ^M>2YKk!#6-bAo)R|=R((?MR(j=$@BK)3m+La#KB^9PZS^sShN?>Gk5q0^
z;8?Pix))ZX7Xjsi^hkbrC}5C!vTd)qC7pJZf_#RSrA)EzZkyxvneK@^;-}pK)`+`)
zh)JU0$wcaf%Y8n6&249!)dJz(BGL8RwYVW<dKogGNeL#9>quePRvxK#X?r~)%Ts=o
z>DjhoV7p70h$^mJU_}#;ab|raQ$?syESkC}_Tflz8FKY%`?@Etg%vNq3y#_g)hP(N
z)4^9A=av+2n3uI8`WYS_Omk_Q#*{vpUW~*GW*lyFIQ!JxYTq(jK#hTvY`3dnT;-CF
zV2nkOOO_Y3k7b;ahWim7iKP3Y1dqWa(=lE7!Dm8emPYL{{AdyLkKg!951f3S{}V#g
zU9}1_sc*5>%D1{;T~7d#C>S?9Wg!1HE-kobL%ujbM4FxgoZbuXiRF`0L;b1$AE9iq
zX4Sg_Y$C4EKMA;cHP8)4<n7Xpe4G$_aN-igmxr0*_|K-~9|E}!7yJgl|Hb=%?W_J~
z3je|T{}LpBCHVdo*xzYH|01wgxPt!=E*W`KkA~+ip$pQ%RLRC!RO^VCeO~G|Px=2s
zP5$>{kG}1yCT!XU=l<WMmKVB4$&iMF)1+DP3n)gmj)NO399kGf0{?RJq!H$HgZJ<M
KA~*zQ=KlsAqOGX_

literal 0
HcmV?d00001

diff --git a/tests/fuzz-tests/images/bko-96971-btrfs-image.txt b/tests/fuzz-tests/images/bko-96971-btrfs-image.txt
new file mode 100644
index 0000000..ff85540
--- /dev/null
+++ b/tests/fuzz-tests/images/bko-96971-btrfs-image.txt
@@ -0,0 +1,69 @@
+URL: https://bugzilla.kernel.org/show_bug.cgi?id=96971
+ Lukas Lueg 2015-04-20 23:01:44 UTC
+
+I've identified some problems in the btrfs code and attached a btrfs-image
+which causes the userland tools to crash and the kernel to immediately freeze
+once the filesystem get's mounted and one of the files is accessed. Putting
+the image onto a usb-drive gives you a freeze-on-a-stick :-)
+
+"btrfs check" crashes due to a SIGFPE in count_csum_range(). The culprit is
+struct btrfs_root->fs_info->super_copy->csum_size being 0, which goes
+unchecked before entering a division.  I was not able to identify where the
+kernel crashes (system goes down the tubes), yet the problem is probably the
+same.
+
+"btrfs version" is v3.19.1; bug is also present in latest git (kdave and
+unstable) as of 2015/04/21
+
+
+Full gdb output:
+
+gdb btrfs
+GNU gdb (GDB) Fedora 7.8.2-38.fc21
+Copyright (C) 2014 Free Software Foundation, Inc.
+License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
+This is free software: you are free to change and redistribute it.
+There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
+and "show warranty" for details.
+This GDB was configured as "x86_64-redhat-linux-gnu".
+Type "show configuration" for configuration details.
+For bug reporting instructions, please see:
+<http://www.gnu.org/software/gdb/bugs/>.
+Find the GDB manual and other documentation resources online at:
+<http://www.gnu.org/software/gdb/documentation/>.
+For help, type "help".
+Type "apropos word" to search for commands related to "word"...
+Reading symbols from btrfs...Reading symbols from /usr/lib/debug/usr/sbin/btrfs.debug...done.
+done.
+(gdb) run check btrfs_fukked.bin 
+Starting program: /usr/sbin/btrfs check btrfs_fukked.bin
+[Thread debugging using libthread_db enabled]
+Using host libthread_db library "/lib64/libthread_db.so.1".
+Checking filesystem on btrfs_fukked.bin
+UUID: cdd8684f-9eb1-40a4-91ec-1ed7c3cb444c
+checking extents
+checking free space cache
+checking fs roots
+
+Program received signal SIGFPE, Arithmetic exception.
+count_csum_range (root=<optimized out>, root=<optimized out>, 
+    found=<synthetic pointer>, len=7385088, start=7471104) at cmds-check.c:1455
+1455			csum_end = key.offset + (size / csum_size) * root->sectorsize;
+(gdb) bt
+#0  count_csum_range (root=<optimized out>, root=<optimized out>, 
+    found=<synthetic pointer>, len=7385088, start=7471104) at cmds-check.c:1455
+#1  process_file_extent (active_node=0x7fffffffd710, key=0x7fffffffd680, 
+    slot=11, eb=<optimized out>, root=0x894b10) at cmds-check.c:1551
+#2  process_one_leaf (wc=0x7fffffffd6c0, eb=<optimized out>, root=0x894b10)
+    at cmds-check.c:1617
+#3  walk_down_tree (level=<synthetic pointer>, wc=0x7fffffffd6c0, 
+    path=0x7fffffffd7f0, root=0x894b10) at cmds-check.c:1742
+#4  check_fs_root (wc=0x7fffffffd6c0, root_cache=0x7fffffffdb20, root=0x894b10)
+    at cmds-check.c:3380
+#5  check_fs_roots (root_cache=root_cache@entry=0x7fffffffdb20, root=0x894b10)
+    at cmds-check.c:3516
+#6  0x0000000000428aea in cmd_check (argc=<optimized out>, 
+    argv=<optimized out>) at cmds-check.c:9465
+#7  0x000000000040e5a2 in main (argc=2, argv=0x7fffffffdeb0) at btrfs.c:245
+(gdb) p csum_size
+$2 = 0
-- 
2.7.4