syzbot


kernel BUG in ocfs2_journal_toggle_dirty

Status: upstream: reported C repro on 2025/03/25 18:45
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+852b4bb3acd0e4767bbb@syzkaller.appspotmail.com
First crash: 308d, last: 26d
Fix bisection: failed (error log, bisect log)
  
Bug presence (1)
Date Name Commit Repro Result
2025/03/26 upstream (ToT) f6e0150b2003 C [report] kernel BUG in ocfs2_journal_toggle_dirty
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 kernel BUG in ocfs2_journal_toggle_dirty origin:lts-only -1 C error 1 53d 53d 0/2 upstream: reported C repro on 2025/12/06 03:13
upstream kernel BUG in ocfs2_journal_toggle_dirty ocfs2 -1 C done error 20 7d16h 456d 0/29 upstream: reported C repro on 2024/10/28 20:47

Sample crash report:
(syz-executor,4425,0):ocfs2_assign_bh:2414 ERROR: status = -30
(syz-executor,4425,0):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30
(syz-executor,4425,0):ocfs2_shutdown_local_alloc:411 ERROR: status = -30
------------[ cut here ]------------
kernel BUG at fs/ocfs2/journal.c:1001!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4425 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ocfs2_journal_toggle_dirty+0x2fc/0x300 fs/ocfs2/journal.c:1001
lr : ocfs2_journal_toggle_dirty+0x2fc/0x300 fs/ocfs2/journal.c:1001
sp : ffff8000207f7640
x29: ffff8000207f76c0 x28: ffff0000cd8d3800 x27: 1fffe0001c361ced
x26: dfff800000000000 x25: 0000000000000001 x24: 0000000000000000
x23: ffff0000eb808600 x22: 0000000000000000 x21: ffff0000e1b0e768
x20: ffff0000e1b0e740 x19: ffff0000d330c000 x18: ffff800011a5bd40
x17: ffff800018184000 x16: ffff8000082d3a08 x15: ffff800008a26150
x14: ffff8000089a2b8c x13: ffff800008a25dc4 x12: 0000000000ff0100
x11: ff00800009d58c2c x10: 0000000000000000 x9 : ffff800009d58c2c
x8 : ffff0000d3b20000 x7 : ffff80000820edf4 x6 : ffff800008a25dc4
x5 : ffff0000d4e97f38 x4 : ffff8000207f7310 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 ocfs2_journal_toggle_dirty+0x2fc/0x300 fs/ocfs2/journal.c:1001
 ocfs2_journal_shutdown+0x4e8/0xbb8 fs/ocfs2/journal.c:1083
 ocfs2_dismount_volume+0x37c/0x93c fs/ocfs2/super.c:1911
 ocfs2_put_super+0x108/0x390 fs/ocfs2/super.c:1609
 generic_shutdown_super+0x130/0x324 fs/super.c:501
 kill_block_super+0x70/0xdc fs/super.c:1470
 deactivate_locked_super+0xac/0x124 fs/super.c:332
 deactivate_super+0xe8/0x108 fs/super.c:363
 cleanup_mnt+0x37c/0x404 fs/namespace.c:1191
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198
 task_work_run+0x1ec/0x270 kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x2038/0x2b28 arch/arm64/kernel/signal.c:1137
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x98/0x138 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: aa1603e0 97adfffd 17ffff94 979d2936 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/02 13:31 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-1-kasan-arm64 kernel BUG in ocfs2_journal_toggle_dirty
2025/03/25 18:45 linux-6.1.y 344a09659766 875573af .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-1-kasan-arm64 kernel BUG in ocfs2_journal_toggle_dirty
2025/12/31 02:17 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in ocfs2_journal_toggle_dirty
2025/10/27 15:06 linux-6.1.y 8e6e2188d949 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in ocfs2_journal_toggle_dirty
* Struck through repros no longer work on HEAD.