syzbot


kernel BUG in txAbort (2)

Status: upstream: reported on 2024/04/20 09:23
Reported-by: syzbot+639de1efb7d0477096fa@syzkaller.appspotmail.com
First crash: 168d, last: 7d12h
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in txAbort origin:upstream C 16 3d03h 160d 0/3 upstream: reported C repro on 2024/04/28 14:11
linux-6.1 kernel BUG in txAbort 1 500d 500d 0/3 auto-obsoleted due to no activity on 2023/09/01 20:47
upstream kernel BUG in txUnlock jfs C error 9176 now 735d 0/28 upstream: reported C repro on 2022/10/01 14:27

Sample crash report:
loop3: detected capacity change from 0 to 32768
read_mapping_page failed!
BUG at fs/jfs/jfs_txnmgr.c:2795 assert(mp->nohomeok)
------------[ cut here ]------------
kernel BUG at fs/jfs/jfs_txnmgr.c:2795!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 10949 Comm: syz.3.1328 Not tainted 6.1.111-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:LogSyncRelease fs/jfs/jfs_txnmgr.c:2795 [inline]
RIP: 0010:txAbort+0x5d3/0x5e0 fs/jfs/jfs_txnmgr.c:2621
Code: 83 af 99 07 0f 0b e8 ac 86 7f fe 48 c7 c7 00 ff 44 8b 48 c7 c6 f9 fa 44 8b ba eb 0a 00 00 48 c7 c1 e0 12 45 8b e8 5d af 99 07 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54
RSP: 0018:ffffc9000370f530 EFLAGS: 00010246
RAX: 0000000000000034 RBX: 0000000000000048 RCX: d63be115a5a9ff00
RDX: ffffc9000dc42000 RSI: 000000000003423b RDI: 000000000003423c
RBP: 0000000000000000 R08: ffffffff816e4eac R09: ffffed10171c4f1c
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002882000
R13: ffff88804073d4d8 R14: dffffc0000000000 R15: 0000000000000008
FS:  00007fc590d5f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc49d3f7000 CR3: 0000000076fa5000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 txCommit+0x5d4d/0x6ba0 fs/jfs/jfs_txnmgr.c:1354
 jfs_rename+0x15bd/0x1cb0 fs/jfs/namei.c:1300
 vfs_rename+0xd32/0x10f0 fs/namei.c:4876
 do_renameat2+0xde0/0x1440 fs/namei.c:5029
 __do_sys_renameat2 fs/namei.c:5062 [inline]
 __se_sys_renameat2 fs/namei.c:5059 [inline]
 __x64_sys_renameat2+0xce/0xe0 fs/namei.c:5059
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fc58ff7dff9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc590d5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
RAX: ffffffffffffffda RBX: 00007fc590135f80 RCX: 00007fc58ff7dff9
RDX: 0000000000000005 RSI: 0000000020000380 RDI: 0000000000000005
RBP: 00007fc58fff0296 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fc590135f80 R15: 00007fff71107ec8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:LogSyncRelease fs/jfs/jfs_txnmgr.c:2795 [inline]
RIP: 0010:txAbort+0x5d3/0x5e0 fs/jfs/jfs_txnmgr.c:2621
Code: 83 af 99 07 0f 0b e8 ac 86 7f fe 48 c7 c7 00 ff 44 8b 48 c7 c6 f9 fa 44 8b ba eb 0a 00 00 48 c7 c1 e0 12 45 8b e8 5d af 99 07 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54
RSP: 0018:ffffc9000370f530 EFLAGS: 00010246
RAX: 0000000000000034 RBX: 0000000000000048 RCX: d63be115a5a9ff00
RDX: ffffc9000dc42000 RSI: 000000000003423b RDI: 000000000003423c
RBP: 0000000000000000 R08: ffffffff816e4eac R09: ffffed10171c4f1c
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002882000
R13: ffff88804073d4d8 R14: dffffc0000000000 R15: 0000000000000008
FS:  00007fc590d5f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc4a73fdfb8 CR3: 0000000076fa5000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/28 20:11 linux-6.1.y e526b12bf916 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in txAbort
2024/06/28 06:37 linux-6.1.y 99e6a620de00 6ef39602 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in txAbort
2024/06/28 06:37 linux-6.1.y 99e6a620de00 6ef39602 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in txAbort
2024/06/28 02:24 linux-6.1.y 99e6a620de00 6ef39602 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in txAbort
2024/06/28 02:23 linux-6.1.y 99e6a620de00 6ef39602 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in txAbort
2024/06/28 02:22 linux-6.1.y 99e6a620de00 6ef39602 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in txAbort
2024/06/16 07:27 linux-6.1.y ae9f2a70d69e f429ab00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in txAbort
2024/05/27 23:51 linux-6.1.y 88690811da69 f550015e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in txAbort
2024/04/28 23:59 linux-6.1.y f2295faba5e8 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in txAbort
2024/04/25 22:00 linux-6.1.y 6741e066ec76 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in txAbort
2024/04/20 09:23 linux-6.1.y 6741e066ec76 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in txAbort
* Struck through repros no longer work on HEAD.