syzbot


kernel BUG in txLock

Status: fixed on 2024/02/16 19:40
Subsystems: jfs
[Documentation on labels]
Reported-by: syzbot+451384fb192454e258de@syzkaller.appspotmail.com
Fix commit: 6f861765464f fs: Block writes to mounted block devices
First crash: 428d, last: 306d
Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: kernel BUG in txLock (log)
Repro: C syz .config
  
Fix bisection: fixed by (bisect log) :
commit 6f861765464f43a71462d52026fbddfc858239a5
Author: Jan Kara <jack@suse.cz>
Date: Wed Nov 1 17:43:10 2023 +0000

  fs: Block writes to mounted block devices

  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [jfs?] kernel BUG in txLock 1 (3) 2024/02/13 10:24
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in txLock 1 426d 426d 0/3 auto-obsoleted due to no activity on 2023/12/16 09:17
upstream kernel BUG in txLock (2) jfs C error 4 24d 223d 0/28 upstream: reported C repro on 2024/03/28 08:26
Last patch testing requests (8)
Created Duration User Patch Repo Result
2024/02/02 01:11 21m retest repro upstream OK log
2024/01/19 11:47 19m retest repro upstream OK log
2024/01/19 11:47 22m retest repro upstream OK log
2024/01/19 04:37 16m retest repro upstream OK log
2024/01/05 03:50 18m retest repro upstream report log
2024/01/05 03:50 15m retest repro upstream report log
2023/09/21 08:16 12m retest repro upstream report log
2023/09/21 08:16 10m retest repro upstream report log
Fix bisection attempts (3)
Created Duration User Patch Repo Result
2024/02/13 03:36 5h58m bisect fix upstream OK (1) job log
2023/11/23 23:09 1h49m bisect fix upstream OK (0) job log log
2023/10/21 11:27 1h55m bisect fix upstream OK (0) job log log

Sample crash report:
Locker's tblock: ffffc900025d8210: 00000004 00000024 00000023 00000000
Tlock: ffffc900028090d8: 00020004 20208040 197ac4d8 ffff8880
Tlock: ffffc900028090e8: 68fb96b0 ffff8880 03140000 05002000
Tlock: ffffc900028090f8: 03060a00 0000050d 00000000 00000000
Tlock: ffffc90002809108: 00000000 00000000 00000000 00000000
Tlock: ffffc90002809118: 00000000 00000000
------------[ cut here ]------------
kernel BUG at fs/jfs/jfs_txnmgr.c:834!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 5152 Comm: syz-executor162 Not tainted 6.7.0-rc4-syzkaller-00039-g9ace34a8e446 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
RIP: 0010:txLock+0x1ddd/0x2120 fs/jfs/jfs_txnmgr.c:834
Code: 89 e9 41 b8 04 00 00 00 b9 10 00 00 00 6a 00 ba 01 00 00 00 48 c7 c6 e0 42 0b 8b 48 c7 c7 20 42 0b 8b 6a 48 e8 94 37 65 01 90 <0f> 0b 48 8b 7c 24 20 e8 27 f0 e0 fe e9 2d f5 ff ff 4c 89 ff e8 da
RSP: 0018:ffffc9000458f420 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffffff8d53dda0 RCX: ffffffff8462795c
RDX: fffff520008b1e59 RSI: ffffffff84627a13 RDI: 0000000000000006
RBP: ffffc900028090d8 R08: 0000000000000006 R09: 0000000000000050
R10: 0000000000000048 R11: 0000000000000001 R12: 0000000000000003
R13: 0000000000000010 R14: ffffc900028090da R15: ffff8880197ac4d8
FS:  00007fa4aea726c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa4aea72d58 CR3: 000000001ee30000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 dtSplitRoot+0x491/0x1760 fs/jfs/jfs_dtree.c:1919
 dtSplitUp+0x1298/0x5850 fs/jfs/jfs_dtree.c:985
 dtInsert+0x872/0xb00 fs/jfs/jfs_dtree.c:863
 jfs_create+0x63c/0xb40 fs/jfs/namei.c:137
 vfs_create fs/namei.c:3179 [inline]
 vfs_create+0x4bf/0x730 fs/namei.c:3163
 do_mknodat+0x3d1/0x5d0 fs/namei.c:4034
 __do_sys_mknodat fs/namei.c:4062 [inline]
 __se_sys_mknodat fs/namei.c:4059 [inline]
 __x64_sys_mknodat+0xad/0xe0 fs/namei.c:4059
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fa4aead6c59
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa4aea72218 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
RAX: ffffffffffffffda RBX: 00007fa4aeb646d8 RCX: 00007fa4aead6c59
RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
RBP: 00007fa4aeb646d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000700 R11: 0000000000000246 R12: 00007fa4aeb2b06b
R13: 0030656c69662f2e R14: 7261637369646f6e R15: 6573726168636f69
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:txLock+0x1ddd/0x2120 fs/jfs/jfs_txnmgr.c:834
Code: 89 e9 41 b8 04 00 00 00 b9 10 00 00 00 6a 00 ba 01 00 00 00 48 c7 c6 e0 42 0b 8b 48 c7 c7 20 42 0b 8b 6a 48 e8 94 37 65 01 90 <0f> 0b 48 8b 7c 24 20 e8 27 f0 e0 fe e9 2d f5 ff ff 4c 89 ff e8 da
RSP: 0018:ffffc9000458f420 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffffff8d53dda0 RCX: ffffffff8462795c
RDX: fffff520008b1e59 RSI: ffffffff84627a13 RDI: 0000000000000006
RBP: ffffc900028090d8 R08: 0000000000000006 R09: 0000000000000050
R10: 0000000000000048 R11: 0000000000000001 R12: 0000000000000003
R13: 0000000000000010 R14: ffffc900028090da R15: ffff8880197ac4d8
FS:  00007fa4aea726c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa4aea72d58 CR3: 000000001ee30000 CR4: 0000000000350ef0

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/12/08 03:49 upstream 9ace34a8e446 28b24332 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root kernel BUG in txLock
2023/12/07 07:34 upstream bee0e7762ad2 e3299f55 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root kernel BUG in txLock
2023/12/22 03:35 upstream a4aebe936554 4f9530a3 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-badwrites-root kernel BUG in txLock
2023/12/20 18:13 upstream 55cb5f43689d 3ad490ea .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-badwrites-root kernel BUG in txLock
2023/09/06 12:18 upstream 65d6e954e378 0b6286dc .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in txLock
2023/09/05 16:00 upstream 3f86ed6ec0b3 0b6286dc .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in txLock
2023/09/07 07:49 upstream 744a759492b5 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in txLock
2023/09/07 02:10 upstream 744a759492b5 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in txLock
2023/09/06 11:48 upstream 65d6e954e378 0b6286dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in txLock
2023/09/05 15:34 upstream 3f86ed6ec0b3 0b6286dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in txLock
* Struck through repros no longer work on HEAD.