syzbot

 sign-in | mailing list | source | docs
🐞 Open [452]
🐞 Fixed [23]
🐞 Invalid [208]
⬇ Missing Backports [17]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

kernel BUG in ocfs2_journal_toggle_dirty

Status: upstream: reported C repro on 2025/12/06 03:13
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+62c442becc6789f0ae17@syzkaller.appspotmail.com
First crash: 130d, last: 8d18h
Fix bisection: the issue occurs on the latest tested release (bisect log)
  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2025/12/06 linux-6.6.y (ToT) 4791134e4aeb C [report] kernel BUG in ocfs2_journal_toggle_dirty
2025/12/06 upstream (ToT) 416f99c3b16f C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in ocfs2_journal_toggle_dirty origin:upstream -1 C error 302 1h40m 386d 0/3 upstream: reported C repro on 2025/03/25 18:45
upstream kernel BUG in ocfs2_journal_toggle_dirty ocfs2 -1 C done error 20 84d 533d 0/29 upstream: reported C repro on 2024/10/28 20:47
linux-5.15 kernel BUG in ocfs2_journal_toggle_dirty origin:upstream -1 C 19 8d03h 10d 0/3 upstream: reported C repro on 2026/04/05 16:10
▶ ▼ Fix bisection attempts (4)
Created Duration User Patch Repo Result
2026/03/26 04:20 1m fix candidate upstream error job log
2026/02/24 01:54 1m fix candidate upstream error job log
2026/01/23 20:32 1m fix candidate upstream error job log
2026/01/08 16:13 2h56m bisect fix linux-6.6.y OK (0) job log

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/ocfs2/journal.c:1034!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 5871 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:ocfs2_journal_toggle_dirty+0x34e/0x350 fs/ocfs2/journal.c:1034
Code: fe ff ff e8 d4 0c 2b 07 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 3f fe ff ff 48 89 df e8 8c 64 84 fe e9 32 fe ff ff e8 92 28 2c fe <0f> 0b f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4
RSP: 0018:ffffc90003287a60 EFLAGS: 00010293
RAX: ffffffff835af78e RBX: 00000000ffffffff RCX: ffff8880272bbc00
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: ffffc90003287b10 R08: ffffffff911c3617 R09: 1ffffffff22386c2
R10: dffffc0000000000 R11: fffffbfff22386c3 R12: 1ffff1100d79270a
R13: ffff88805d558a00 R14: ffff88801fb8c800 R15: ffff88806bc93850
FS:  000055555a0f3500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1dd2ba7000 CR3: 0000000024770000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ocfs2_journal_shutdown+0x536/0xad0 fs/ocfs2/journal.c:1116
 ocfs2_dismount_volume+0x3db/0x8a0 fs/ocfs2/super.c:1910
 generic_shutdown_super+0x134/0x2b0 fs/super.c:693
 kill_block_super+0x44/0x90 fs/super.c:1660
 deactivate_locked_super+0x97/0x100 fs/super.c:481
 cleanup_mnt+0x43b/0x4d0 fs/namespace.c:1259
 task_work_run+0x1d4/0x260 kernel/task_work.c:245
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xe6/0x110 kernel/entry/common.c:177
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:302
 do_syscall_64+0x61/0xa0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7773f9da57
Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffc908c11e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f7774032048 RCX: 00007f7773f9da57
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc908c12a0
RBP: 00007ffc908c12a0 R08: 00007ffc908c22a0 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc908c2330
R13: 00007f7774032048 R14: 0000000000019f32 R15: 00007ffc908c2370
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ocfs2_journal_toggle_dirty+0x34e/0x350 fs/ocfs2/journal.c:1034
Code: fe ff ff e8 d4 0c 2b 07 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 3f fe ff ff 48 89 df e8 8c 64 84 fe e9 32 fe ff ff e8 92 28 2c fe <0f> 0b f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4
RSP: 0018:ffffc90003287a60 EFLAGS: 00010293
RAX: ffffffff835af78e RBX: 00000000ffffffff RCX: ffff8880272bbc00
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: ffffc90003287b10 R08: ffffffff911c3617 R09: 1ffffffff22386c2
R10: dffffc0000000000 R11: fffffbfff22386c3 R12: 1ffff1100d79270a
R13: ffff88805d558a00 R14: ffff88801fb8c800 R15: ffff88806bc93850
FS:  000055555a0f3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002277f7ad2030 CR3: 0000000024770000 CR4: 00000000003506e0

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/05 19:31 linux-6.6.y c09fbcd31ae6 4440e7c2 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro #1 (clean fs)] [mounted in repro #2 (clean fs)] ci2-linux-6-6-kasan kernel BUG in ocfs2_journal_toggle_dirty
2025/12/06 03:12 linux-6.6.y 4791134e4aeb d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-6-kasan kernel BUG in ocfs2_journal_toggle_dirty
2026/04/07 01:16 linux-6.6.y 80de0a958133 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in ocfs2_journal_toggle_dirty
2026/04/05 17:55 linux-6.6.y c09fbcd31ae6 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in ocfs2_journal_toggle_dirty
* Struck through repros no longer work on HEAD.