syzbot


kernel BUG in jbd2_cleanup_journal_tail

Status: upstream: reported C repro on 2024/09/15 23:09
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+08247eaf130b8e3b3363@syzkaller.appspotmail.com
First crash: 12d, last: 10h09m
Bug presence (1)
Date Name Commit Repro Result
2024/09/16 upstream (ToT) 98f7e32f20d2 C [report] kernel BUG in jbd2_cleanup_journal_tail
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in jbd2_cleanup_journal_tail origin:upstream C 5 10d 10d 0/3 upstream: reported C repro on 2024/09/17 02:30
upstream kernel BUG in jbd2_cleanup_journal_tail ext4 C 11 6h31m 36d 0/28 upstream: reported C repro on 2024/08/23 00:00

Sample crash report:
(syz-executor779,4017,1):ocfs2_check_volume:2429 ERROR: ocfs2 journal load failed! -5
(syz-executor779,4017,1):ocfs2_check_volume:2485 ERROR: status = -5
(syz-executor779,4017,0):ocfs2_mount_volume:1824 ERROR: status = -5
------------[ cut here ]------------
kernel BUG at fs/jbd2/checkpoint.c:333!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4017 Comm: syz-executor779 Not tainted 5.15.167-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : jbd2_cleanup_journal_tail+0x244/0x248 fs/jbd2/checkpoint.c:333
lr : jbd2_cleanup_journal_tail+0x244/0x248 fs/jbd2/checkpoint.c:333
sp : ffff80001d656940
x29: ffff80001d6569c0 x28: 0000000000000000 x27: 1fffe00019820400
x26: 1ffff00003acad2e x25: 1ffff00003acad2c x24: dfff800000000000
x23: ffff700003acad28 x22: 0000000000000000 x21: ffff80001d656960
x20: ffff80001d656970 x19: ffff0000cc102000 x18: ffff80001d6565c0
x17: 0000000000000000 x16: ffff80000824ecc0 x15: 000000000000aee5
x14: ffff80001713e500 x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : ffff0000da5d1b40
x8 : ffff800008eec608 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008305e14
x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 jbd2_cleanup_journal_tail+0x244/0x248 fs/jbd2/checkpoint.c:333
 jbd2_journal_flush+0x2ac/0xaa0 fs/jbd2/journal.c:2486
 ocfs2_journal_shutdown+0x394/0xb84 fs/ocfs2/journal.c:1020
 ocfs2_mount_volume+0x12d8/0x150c fs/ocfs2/super.c:1845
 ocfs2_fill_super+0x2a30/0x498c fs/ocfs2/super.c:1083
 mount_bdev+0x274/0x370 fs/super.c:1398
 ocfs2_mount+0x44/0x58 fs/ocfs2/super.c:1187
 legacy_get_tree+0xd4/0x16c fs/fs_context.c:611
 vfs_get_tree+0x90/0x274 fs/super.c:1528
 do_new_mount+0x278/0x8fc fs/namespace.c:3005
 path_mount+0x594/0x101c fs/namespace.c:3335
 do_mount fs/namespace.c:3348 [inline]
 __do_sys_mount fs/namespace.c:3556 [inline]
 __se_sys_mount fs/namespace.c:3533 [inline]
 __arm64_sys_mount+0x510/0x5e0 fs/namespace.c:3533
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: 97e7a71a 17ffffd7 95c0f55e 97d7662d (d4210000) 
---[ end trace 9a9381583eb48bdb ]---

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/16 00:45 linux-5.15.y 3a5928702e71 08d8a733 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in jbd2_cleanup_journal_tail
2024/09/15 23:20 linux-5.15.y 3a5928702e71 08d8a733 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in jbd2_cleanup_journal_tail
2024/09/16 01:03 linux-5.15.y 3a5928702e71 08d8a733 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in jbd2_cleanup_journal_tail
2024/09/16 01:03 linux-5.15.y 3a5928702e71 08d8a733 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in jbd2_cleanup_journal_tail
2024/09/27 16:08 linux-5.15.y 3a5928702e71 9314348a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in jbd2_cleanup_journal_tail
2024/09/27 16:07 linux-5.15.y 3a5928702e71 9314348a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in jbd2_cleanup_journal_tail
2024/09/15 23:08 linux-5.15.y 3a5928702e71 08d8a733 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in jbd2_cleanup_journal_tail
2024/09/15 23:08 linux-5.15.y 3a5928702e71 08d8a733 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in jbd2_cleanup_journal_tail
* Struck through repros no longer work on HEAD.