syzbot

 sign-in | mailing list | source | docs
🐞 Open [1461]
≡ Subsystems
🐞 Fixed [6817]
🐞 Invalid [17647]
⬇ Missing Backports [225]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

kernel BUG in ocfs2_journal_toggle_dirty

Status: upstream: reported C repro on 2024/10/28 20:47
Subsystems: ocfs2
[Documentation on labels]
Reported-by: syzbot+ea8d1726e1e3367085ce@syzkaller.appspotmail.com
First crash: 430d, last: 29d
Cause bisection: introduced by (bisect log) :
commit 98ded54a33839e7b8f8bed772e01a544f48e33a7
Author: Christoph Hellwig <hch@lst.de>
Date: Wed Mar 30 05:29:10 2022 +0000

  loop: remove the racy bd_inode->i_mapping->nrpages asserts

Crash: BUG: unable to handle kernel NULL pointer dereference in ocfs2_evict_inode (log)
Repro: syz .config
  
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [ocfs2?] kernel BUG in ocfs2_journal_toggle_dirty 0 (3) 2025/02/10 01:16
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 kernel BUG in ocfs2_journal_toggle_dirty origin:lts-only -1 C 1 22d 23d 0/2 upstream: reported C repro on 2025/12/06 03:13
linux-6.1 kernel BUG in ocfs2_journal_toggle_dirty origin:upstream -1 C error 2 62d 278d 0/3 upstream: reported C repro on 2025/03/25 18:45
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2025/12/19 15:46 31m retest repro upstream OK log
2025/12/14 05:41 30m retest repro linux-next OK log
2025/12/14 05:03 20m retest repro upstream OK log
2025/11/23 13:09 19m retest repro upstream OK log
2025/11/09 12:25 20m retest repro upstream report log
2025/10/24 15:41 19m retest repro upstream OK log
2025/10/24 15:41 19m retest repro upstream report log
2025/10/24 15:41 19m retest repro upstream report log
2025/10/24 15:41 19m retest repro upstream OK log
2025/10/10 13:07 2h03m retest repro upstream report log

Sample crash report:
(syz-executor275,6255,0):ocfs2_check_volume:2417 ERROR: status = -30
(syz-executor275,6255,0):ocfs2_check_volume:2429 ERROR: status = -30
(syz-executor275,6255,0):ocfs2_mount_volume:1764 ERROR: status = -30
------------[ cut here ]------------
kernel BUG at fs/ocfs2/journal.c:1012!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 6255 Comm: syz-executor275 Not tainted 6.14.0-rc4-syzkaller-00282-g1973160c90d7 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:ocfs2_journal_toggle_dirty+0x397/0x3a0 fs/ocfs2/journal.c:1012
Code: 69 fe e9 f7 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 2a fe ff ff 48 89 df e8 54 8e 69 fe e9 1d fe ff ff e8 2a 53 02 fe 90 <0f> 0b e8 22 f1 48 08 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000dbcefe0 EFLAGS: 00010293
RAX: ffffffff83bf6bf6 RBX: 00000000ffffffff RCX: ffff8880366b0000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: ffffc9000dbcf0b0 R08: ffffffff83bf6960 R09: 1ffffffff28a9328
R10: dffffc0000000000 R11: fffffbfff28a9329 R12: dffffc0000000000
R13: ffff88804b82b488 R14: ffff888047526600 R15: 1ffff92001b79e04
FS:  000055557bd2a480(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0d08ab1000 CR3: 0000000049414000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ocfs2_journal_shutdown+0x479/0xc10 fs/ocfs2/journal.c:1094
 ocfs2_mount_volume fs/ocfs2/super.c:1785 [inline]
 ocfs2_fill_super+0x68f1/0x74d0 fs/ocfs2/super.c:1083
 get_tree_bdev_flags+0x48c/0x5c0 fs/super.c:1636
 vfs_get_tree+0x90/0x2b0 fs/super.c:1814
 do_new_mount+0x2be/0xb40 fs/namespace.c:3560
 do_mount fs/namespace.c:3900 [inline]
 __do_sys_mount fs/namespace.c:4111 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4088
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0d11807bda
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcf7152578 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffcf7152590 RCX: 00007f0d11807bda
RDX: 0000400000004440 RSI: 0000400000000040 RDI: 00007ffcf7152590
RBP: 0000400000000040 R08: 00007ffcf71525d0 R09: 0000000000004427
R10: 00000000000008c0 R11: 0000000000000282 R12: 0000400000004440
R13: 00007ffcf71525d0 R14: 0000000000000003 R15: 00000000000008c0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ocfs2_journal_toggle_dirty+0x397/0x3a0 fs/ocfs2/journal.c:1012
Code: 69 fe e9 f7 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 2a fe ff ff 48 89 df e8 54 8e 69 fe e9 1d fe ff ff e8 2a 53 02 fe 90 <0f> 0b e8 22 f1 48 08 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000dbcefe0 EFLAGS: 00010293
RAX: ffffffff83bf6bf6 RBX: 00000000ffffffff RCX: ffff8880366b0000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: ffffc9000dbcf0b0 R08: ffffffff83bf6960 R09: 1ffffffff28a9328
R10: dffffc0000000000 R11: fffffbfff28a9329 R12: dffffc0000000000
R13: ffff88804b82b488 R14: ffff888047526600 R15: 1ffff92001b79e04
FS:  000055557bd2a480(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0d08ff5000 CR3: 0000000049414000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/03/02 23:52 upstream 1973160c90d7 c3901742 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/20 10:43 upstream 87a132e73910 50668798 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1 (clean fs)] [mounted in repro #2 (corrupt fs)] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/14 16:42 upstream 128c8f96eb86 fe17639f .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1 (clean fs)] [mounted in repro #2] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/03/26 04:40 upstream 2df0c02dab82 89d30d73 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-upstream-kasan-gce-root kernel BUG in ocfs2_journal_toggle_dirty
2024/12/22 17:16 upstream 48f506ad0b68 d7f584ee .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root kernel BUG in ocfs2_journal_toggle_dirty
2025/10/26 11:31 upstream 72761a7e3122 c0460fcd .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/03/05 08:02 upstream 48a5eed9ad58 c3901742 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/23 20:58 upstream 27102b38b8ca d34966d1 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1 (clean fs)] [mounted in repro #2] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/17 19:42 upstream 0ad2507d5d93 4121cf9d .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/16 17:46 upstream ad1b832bf1cf 40a34ec9 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/15 07:19 upstream 04f41cbf03ec 40a34ec9 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1 (clean fs)] [mounted in repro #2] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/15 06:39 upstream 04f41cbf03ec 40a34ec9 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1 (clean fs)] [mounted in repro #2] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/10 01:15 upstream 69b54314c975 ef44b750 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/02/02 23:36 upstream 69e858e0b8b2 568559e4 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2024/11/13 16:44 upstream f1b785f4c787 4dfba277 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2024/10/30 09:25 upstream c1e939a21eb1 66aeb999 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2024/10/24 20:42 upstream c2ee9f594da8 c08e46d6 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in ocfs2_journal_toggle_dirty
2025/11/30 05:00 linux-next 7d31f578f323 d6526ea3 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-upstream-linux-next-kasan-gce-root kernel BUG in ocfs2_journal_toggle_dirty
2024/11/28 22:26 linux-next f486c8aa16b8 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in ocfs2_journal_toggle_dirty
* Struck through repros no longer work on HEAD.