Hello,
syzbot found the following issue on:
HEAD commit: 50cbba13faa2 Linux 6.1.159
git tree: linux-6.1.y
console output:
https://syzkaller.appspot.com/x/log.txt?x=109a7e9a580000
kernel config:
https://syzkaller.appspot.com/x/.config?x=31ea1cecaf34f0db
dashboard link:
https://syzkaller.appspot.com/bug?extid=01fb42c5bf1035f98ec3
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image:
https://storage.googleapis.com/syzbot-assets/7ad0bd66715a/disk-50cbba13.raw.xz
vmlinux:
https://storage.googleapis.com/syzbot-assets/3284d626258e/vmlinux-50cbba13.xz
kernel image:
https://storage.googleapis.com/syzbot-assets/a1f92ca7bbfc/Image-50cbba13.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by:
syzbot+01fb42...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5425 at include/linux/jbd2.h:1731 jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
WARNING: CPU: 0 PID: 5425 at include/linux/jbd2.h:1731 jbd2_journal_commit_transaction+0x4340/0x55d8 fs/jbd2/commit.c:413
Modules linked in:
CPU: 0 PID: 5425 Comm: jbd2/loop0-80 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
pc : jbd2_journal_commit_transaction+0x4340/0x55d8 fs/jbd2/commit.c:413
lr : jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
lr : jbd2_journal_commit_transaction+0x4340/0x55d8 fs/jbd2/commit.c:413
sp : ffff800021c57880
x29: ffff800021c57c60 x28: dfff800000000000 x27: 1fffe0001bf300f7
x26: ffff0000df9800b8 x25: ffff0000df9807bc x24: ffff800021c57ba0
x23: ffff800021c57bc0 x22: ffff0000df980000 x21: ffff800021c57a90
x20: ffff0000df980980 x19: dfff800000000000 x18: ffff800011a5bd40
x17: 1fffe00033ee7b7e x16: ffff8000082d3a08 x15: 0000000040000000
x14: 0000000000000002 x13: 1ffff00002a0a0b1 x12: 0000000000ff0100
x11: ff00800008e9ecb8 x10: 0000000000000000 x9 : ffff800008e9ecb8
x8 : ffff0000dc89d340 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000008000000 x0 : 0000000000000000
Call trace:
jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
jbd2_journal_commit_transaction+0x4340/0x55d8 fs/jbd2/commit.c:413
kjournald2+0x36c/0x694 fs/jbd2/journal.c:210
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 40
hardirqs last enabled at (39): [<ffff8000119e52f4>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last enabled at (39): [<ffff8000119e52f4>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (40): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (0): [<ffff8000081887d4>] copy_process+0x1244/0x3670 kernel/fork.c:2296
softirqs last disabled at (0): [<0000000000000000>] 0x0
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5425 at include/linux/jbd2.h:1731 jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
WARNING: CPU: 1 PID: 5425 at include/linux/jbd2.h:1731 jbd2_block_tag_csum_set fs/jbd2/commit.c:361 [inline]
WARNING: CPU: 1 PID: 5425 at include/linux/jbd2.h:1731 jbd2_journal_commit_transaction+0x1e18/0x55d8 fs/jbd2/commit.c:718
Modules linked in:
CPU: 1 PID: 5425 Comm: jbd2/loop0-80 Tainted: G W syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
pc : jbd2_block_tag_csum_set fs/jbd2/commit.c:361 [inline]
pc : jbd2_journal_commit_transaction+0x1e18/0x55d8 fs/jbd2/commit.c:718
lr : jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
lr : jbd2_block_tag_csum_set fs/jbd2/commit.c:361 [inline]
lr : jbd2_journal_commit_transaction+0x1e18/0x55d8 fs/jbd2/commit.c:718
sp : ffff800021c57880
x29: ffff800021c57c60 x28: ffff0000cf754000 x27: ffff0000df9800b0
x26: ffff0000df9800b8 x25: 000000000000001e x24: fffffc0003ee4680
x23: ffff000101047910 x22: ffff0000f4219028 x21: ffff0000df980980
x20: 0000000000000002 x19: dfff800000000000 x18: ffff800011a5bd40
x17: 1fffe00033ee7b7e x16: ffff8000082e9244 x15: 0000000000000000
x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff00800008e9c790 x10: 0000000000000000 x9 : ffff800008e9c790
x8 : ffff0000dc89d340 x7 : ffff800008eb6de0 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082e9358
x2 : ffff800021c57ba0 x1 : 0000000008000000 x0 : 0000000000000000
Call trace:
jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
jbd2_block_tag_csum_set fs/jbd2/commit.c:361 [inline]
jbd2_journal_commit_transaction+0x1e18/0x55d8 fs/jbd2/commit.c:718
kjournald2+0x36c/0x694 fs/jbd2/journal.c:210
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 168
hardirqs last enabled at (167): [<ffff800008a7e100>] bh_lru_install fs/buffer.c:1258 [inline]
hardirqs last enabled at (167): [<ffff800008a7e100>] __find_get_block+0xbe0/0xdfc fs/buffer.c:1309
hardirqs last disabled at (168): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (148): [<ffff8000081aa3e0>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last enabled at (148): [<ffff8000081aa3e0>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624
softirqs last disabled at (43): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5425 at include/linux/jbd2.h:1731 jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
WARNING: CPU: 0 PID: 5425 at include/linux/jbd2.h:1731 jbd2_descriptor_block_csum_set+0x278/0x370 fs/jbd2/journal.c:1044
Modules linked in:
CPU: 0 PID: 5425 Comm: jbd2/loop0-80 Tainted: G W syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
pc : jbd2_descriptor_block_csum_set+0x278/0x370 fs/jbd2/journal.c:1044
lr : jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
lr : jbd2_descriptor_block_csum_set+0x278/0x370 fs/jbd2/journal.c:1044
sp : ffff800021c577c0
x29: ffff800021c57820 x28: ffff0000cf754000 x27: ffff0000df9800b0
x26: ffff800021c577c0 x25: 1ffff0000438aef8 x24: dfff800000000000
x23: ffff0000df980000 x22: 0000000000000000 x21: ffff0000df980980
x20: ffff0000e069de80 x19: ffff0000df980000 x18: ffff800011a5bd40
x17: 1fffe00033ee7b7e x16: ffff8000082e9244 x15: 0000000000000000
x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff00800008eb92f8 x10: 0000000000000000 x9 : ffff800008eb92f8
x8 : ffff0000dc89d340 x7 : ffff800008eb6de0 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082e9358
x2 : ffff800021c57ba0 x1 : 0000000008000000 x0 : 0000000000000000
Call trace:
jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
jbd2_descriptor_block_csum_set+0x278/0x370 fs/jbd2/journal.c:1044
jbd2_journal_commit_transaction+0x19b0/0x55d8 fs/jbd2/commit.c:747
kjournald2+0x36c/0x694 fs/jbd2/journal.c:210
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 280
hardirqs last enabled at (279): [<ffff8000118fa268>] el1_dbg+0x6c/0x80 arch/arm64/kernel/entry-common.c:408
hardirqs last disabled at (280): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (270): [<ffff8000081aa3e0>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last enabled at (270): [<ffff8000081aa3e0>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624
softirqs last disabled at (265): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5425 at include/linux/jbd2.h:1731 jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
WARNING: CPU: 1 PID: 5425 at include/linux/jbd2.h:1731 jbd2_commit_block_csum_set fs/jbd2/commit.c:99 [inline]
WARNING: CPU: 1 PID: 5425 at include/linux/jbd2.h:1731 journal_submit_commit_record+0x65c/0x8d8 fs/jbd2/commit.c:148
Modules linked in:
CPU: 1 PID: 5425 Comm: jbd2/loop0-80 Tainted: G W syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
pc : jbd2_commit_block_csum_set fs/jbd2/commit.c:99 [inline]
pc : journal_submit_commit_record+0x65c/0x8d8 fs/jbd2/commit.c:148
lr : jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
lr : jbd2_commit_block_csum_set fs/jbd2/commit.c:99 [inline]
lr : journal_submit_commit_record+0x65c/0x8d8 fs/jbd2/commit.c:148
sp : ffff800021c57760
x29: ffff800021c57820 x28: ffff70000438aef4 x27: ffff0000f4219a00
x26: ffff0000f4219a10 x25: ffff0000df9800b0 x24: ffff0000df980980
x23: ffff0000e069dbf0 x22: ffff0000df9800b8 x21: ffff0000df980000
x20: ffff0000e069dbc8 x19: dfff800000000000 x18: ffff800011a5bd40
x17: 1fffe00033eebd7e x16: ffff8000082d3a08 x15: 0000000000000000
x14: 0000000000000406 x13: 1ffff00002a0a0b1 x12: 0000000000ff0100
x11: ff00800008ea072c x10: 0000000000000000 x9 : ffff800008ea072c
x8 : ffff0000dc89d340 x7 : ffff800008ea01f8 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : ffff800021c57640 x1 : 0000000008000000 x0 : 0000000000000000
Call trace:
jbd2_journal_has_csum_v2or3 include/linux/jbd2.h:1730 [inline]
jbd2_commit_block_csum_set fs/jbd2/commit.c:99 [inline]
journal_submit_commit_record+0x65c/0x8d8 fs/jbd2/commit.c:148
jbd2_journal_commit_transaction+0x2da0/0x55d8 fs/jbd2/commit.c:916
kjournald2+0x36c/0x694 fs/jbd2/journal.c:210
kthread+0x250/0x2d8 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 340
hardirqs last enabled at (339): [<ffff8000083c0b24>] seqcount_lockdep_reader_access include/linux/seqlock.h:104 [inline]
hardirqs last enabled at (339): [<ffff8000083c0b24>] ktime_get_coarse_real_ts64+0x114/0x244 kernel/time/timekeeping.c:2261
hardirqs last disabled at (340): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (294): [<ffff8000081aa3e0>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last enabled at (294): [<ffff8000081aa3e0>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624
softirqs last disabled at (283): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
---
This report is generated by a bot. It may contain errors.
See
https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at
syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup