syzbot


kernel BUG in __ocfs2_flush_truncate_log

Status: upstream: reported on 2025/07/07 06:01
Reported-by: syzbot+435ebc74366bec560db2@syzkaller.appspotmail.com
First crash: 155d, last: 27d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in __ocfs2_flush_truncate_log origin:upstream -1 C error 128 6d19h 259d 0/3 upstream: reported C repro on 2025/03/24 18:56
linux-5.15 kernel BUG in __ocfs2_flush_truncate_log origin:upstream -1 C 107 8d02h 450d 0/3 upstream: reported C repro on 2024/09/15 06:10

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/ocfs2/alloc.c:6012!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 17900 Comm: syz.9.1947 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:__ocfs2_flush_truncate_log+0xf7e/0x10b0 fs/ocfs2/alloc.c:6012
Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 28 fc ff ff 48 89 df e8 f3 4c 93 fe e9 1b fc ff ff e8 19 f1 3b fe 0f 0b e8 12 f1 3b fe <0f> 0b f3 0f 1e fa 65 44 8b 35 40 19 ba 7c bf 07 00 00 00 44 89 f6
RSP: 0018:ffffc900040f75e0 EFLAGS: 00010293
RAX: ffffffff83499e7e RBX: ffff8880515a8000 RCX: ffff88807f4f9e00
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: ffffc900040f77f8 R08: ffffc900040f7567 R09: 1ffff9200081eeac
R10: dffffc0000000000 R11: fffff5200081eead R12: 00000000ffffffff
R13: ffff88805c700878 R14: ffff88805a376a00 R15: ffff88805c107c00
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd95971b90 CR3: 0000000063767000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ocfs2_flush_truncate_log+0x4f/0x60 fs/ocfs2/alloc.c:6077
 ocfs2_sync_fs+0x117/0x310 fs/ocfs2/super.c:402
 sync_filesystem+0x1c2/0x220 fs/sync.c:66
 generic_shutdown_super+0x6f/0x2b0 fs/super.c:666
 kill_block_super+0x44/0x90 fs/super.c:1660
 deactivate_locked_super+0x97/0x100 fs/super.c:481
 cleanup_mnt+0x429/0x4c0 fs/namespace.c:1259
 task_work_run+0x1ce/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0x90b/0x23c0 kernel/exit.c:883
 do_group_exit+0x21b/0x2d0 kernel/exit.c:1024
 get_signal+0x12fc/0x1400 kernel/signal.c:2902
 arch_do_signal_or_restart+0x9c/0x7b0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xf6/0x180 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:302
 do_syscall_64+0x61/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f04ecdc1f85
Code: Unable to access opcode bytes at 0x7f04ecdc1f5b.
RSP: 002b:00007f04edb42f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
RAX: fffffffffffffdfc RBX: 00007f04ecfe5fa0 RCX: 00007f04ecdc1f85
RDX: 00007f04edb42fc0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f04ece11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 00007f04ecfe6038 R14: 00007f04ecfe5fa0 R15: 00007ffd95974b08
 </TASK>
Modules linked in:

---[ end trace 0000000000000000 ]---
RIP: 0010:__ocfs2_flush_truncate_log+0xf7e/0x10b0 fs/ocfs2/alloc.c:6012
Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 28 fc ff ff 48 89 df e8 f3 4c 93 fe e9 1b fc ff ff e8 19 f1 3b fe 0f 0b e8 12 f1 3b fe <0f> 0b f3 0f 1e fa 65 44 8b 35 40 19 ba 7c bf 07 00 00 00 44 89 f6
RSP: 0018:ffffc900040f75e0 EFLAGS: 00010293
RAX: ffffffff83499e7e RBX: ffff8880515a8000 RCX: ffff88807f4f9e00
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: ffffc900040f77f8 R08: ffffc900040f7567 R09: 1ffff9200081eeac
R10: dffffc0000000000 R11: fffff5200081eead R12: 00000000ffffffff
R13: ffff88805c700878 R14: ffff88805a376a00 R15: ffff88805c107c00
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd95971b90 CR3: 0000000063476000 CR4: 00000000003506f0

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/11 21:43 linux-6.6.y 0a805b6ea8cd 4e1406b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in __ocfs2_flush_truncate_log
2025/08/21 17:10 linux-6.6.y bb9c90ab9c5a 3e79b825 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in __ocfs2_flush_truncate_log
2025/07/10 05:33 linux-6.6.y a5df3a702b2c 956bd956 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in __ocfs2_flush_truncate_log
2025/07/07 06:00 linux-6.6.y a5df3a702b2c 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in __ocfs2_flush_truncate_log
* Struck through repros no longer work on HEAD.