syzbot


WARNING in jbd2_journal_update_sb_log_tail

Status: upstream: reported C repro on 2024/09/29 17:12
Subsystems: ext4 ocfs2
[Documentation on labels]
Reported-by: syzbot+96ee12698391289383dd@syzkaller.appspotmail.com
First crash: 56d, last: 12h59m
Cause bisection: introduced by (bisect log) :
commit a09decff5c32060639a685581c380f51b14e1fc2
Author: Kai Li <li.kai4@h3c.com>
Date: Sat Jan 11 02:25:42 2020 +0000

  jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal

Crash: WARNING in jbd2_journal_update_sb_log_tail (log)
Repro: C syz .config
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [ext4?] [ocfs2?] WARNING in jbd2_journal_update_sb_log_tail 1 (4) 2024/10/09 12:32
Last patch testing requests (3)
Created Duration User Patch Repo Result
2024/11/07 06:20 12m retest repro upstream report log
2024/10/23 06:04 13m retest repro upstream report log
2024/09/30 09:00 19m lizhi.xu@windriver.com patch upstream OK log

Sample crash report:
(syz-executor287,5223,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
(syz-executor287,5223,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
JBD2: Ignoring recovery information on journal
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5223 at fs/jbd2/journal.c:1887 jbd2_journal_update_sb_log_tail+0x2ba/0x360 fs/jbd2/journal.c:1887
Modules linked in:
CPU: 1 UID: 0 PID: 5223 Comm: syz-executor287 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:jbd2_journal_update_sb_log_tail+0x2ba/0x360 fs/jbd2/journal.c:1887
Code: 20 ff 41 80 3c 2c 00 74 08 4c 89 ff e8 5f 92 86 ff 41 80 27 f7 4c 89 f7 e8 c3 d8 51 09 31 ed e9 72 fe ff ff e8 f7 03 20 ff 90 <0f> 0b 90 41 80 3c 2c 00 75 d5 eb db 44 89 f1 80 e1 07 80 c1 03 38
RSP: 0018:ffffc90003c86d70 EFLAGS: 00010293
RAX: ffffffff8274e229 RBX: 0000000000000000 RCX: ffff88802c469e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff8274e1f9 R09: fffff52000790d9c
R10: dffffc0000000000 R11: fffff52000790d9c R12: 1ffff11005f04400
R13: ffff88802e52301c R14: ffff88802f8220b0 R15: ffff88802f822000
FS:  0000555576a91380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005563e50c0e50 CR3: 0000000028b52000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 journal_reset fs/jbd2/journal.c:1779 [inline]
 jbd2_journal_load+0x708/0xbc0 fs/jbd2/journal.c:2109
 ocfs2_journal_load+0xed/0x6d0 fs/ocfs2/journal.c:1143
 ocfs2_check_volume fs/ocfs2/super.c:2421 [inline]
 ocfs2_mount_volume+0xc12/0x1940 fs/ocfs2/super.c:1817
 ocfs2_fill_super+0x475a/0x5750 fs/ocfs2/super.c:1084
 mount_bdev+0x20a/0x2d0 fs/super.c:1679
 legacy_get_tree+0xee/0x190 fs/fs_context.c:662
 vfs_get_tree+0x90/0x2b0 fs/super.c:1800
 do_new_mount+0x2be/0xb40 fs/namespace.c:3507
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4055 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4032
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff9e260b12a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc9f850298 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffc9f8502b0 RCX: 00007ff9e260b12a
RDX: 0000000020004740 RSI: 0000000020004780 RDI: 00007ffc9f8502b0
RBP: 0000000000000004 R08: 00007ffc9f8502f0 R09: 0000000000004701
R10: 000000000100000a R11: 0000000000000282 R12: 000000000100000a
R13: 00007ffc9f8502f0 R14: 0000000000000003 R15: 0000000001000000
 </TASK>

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/09 06:00 upstream 5b7c893ed5ed 402f1df0 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in jbd2_journal_update_sb_log_tail
2024/09/25 17:10 upstream 684a64bf32b6 0b45cac3 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
2024/11/20 17:40 upstream bf9aa14fc523 4fca1650 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
2024/11/20 15:48 upstream bf9aa14fc523 4fca1650 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
2024/11/18 12:32 upstream adc218676eef e7bb5d6e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
2024/11/17 17:34 upstream 4a5df3796467 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
2024/11/17 15:19 upstream 4a5df3796467 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
2024/11/17 10:58 upstream 4a5df3796467 cfe3a04a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
2024/11/14 08:39 upstream 0a9b9d17f3a7 a8c99394 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
2024/09/25 17:02 upstream 684a64bf32b6 0b45cac3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in jbd2_journal_update_sb_log_tail
* Struck through repros no longer work on HEAD.