All of lore.kernel.org
 help / color / mirror / Atom feed
From: syzbot ci <syzbot+ci5ba1b27c8540e946@syzkaller.appspotmail.com>
To: adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org,
	 linux-kernel@vger.kernel.org, liubaolin12138@163.com,
	liubaolin@kylinos.cn,  tytso@mit.edu
Cc: syzbot@lists.linux.dev, syzkaller-bugs@googlegroups.com
Subject: [syzbot ci] Re: ext4: add sysfs attribute err_report_sec to control s_err_report timer
Date: Tue, 09 Dec 2025 06:31:19 -0800	[thread overview]
Message-ID: <693832b7.050a0220.4004e.002b.GAE@google.com> (raw)
In-Reply-To: <20251209095254.11569-1-liubaolin12138@163.com>

syzbot ci has tested the following series

[v1] ext4: add sysfs attribute err_report_sec to control s_err_report timer
https://lore.kernel.org/all/20251209095254.11569-1-liubaolin12138@163.com
* [PATCH v1] ext4: add sysfs attribute err_report_sec to control s_err_report timer

and found the following issue:
WARNING: ODEBUG bug in ext4_update_super

Full report is available here:
https://ci.syzbot.org/series/0516238c-3b72-42ec-95e0-a3a1100dfe97

***

WARNING: ODEBUG bug in ext4_update_super

tree:      torvalds
URL:       https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux
base:      67a454e6b1c604555c04501c77b7fedc5d98a779
arch:      amd64
compiler:  Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
config:    https://ci.syzbot.org/builds/d05c5a00-1dcc-4a73-9a08-de39905551e0/config
C repro:   https://ci.syzbot.org/findings/f5e1c416-0890-43de-a395-f7444bcf3202/c_repro
syz repro: https://ci.syzbot.org/findings/f5e1c416-0890-43de-a395-f7444bcf3202/syz_repro

EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.17: iget: bad i_size value: 360287970189639680
------------[ cut here ]------------
ODEBUG: assert_init not available (active state 0) object: ffff88816a5866c8 object type: timer_list hint: 0x0
WARNING: lib/debugobjects.c:615 at 0x0, CPU#1: syz.0.17/5984
Modules linked in:
CPU: 1 UID: 0 PID: 5984 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:debug_print_object+0x170/0x1e0 lib/debugobjects.c:612
Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 b7 e0 8f fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 8d 86 e9 0a 48 83 c4 10 5b 41 5c
RSP: 0018:ffffc90004927210 EFLAGS: 00010246
RAX: 1ffffffff16da490 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: ffffffff8bc02f80 RSI: ffffffff8bc02a40 RDI: ffffffff8f8bd1a0
RBP: ffffffff8bc02f80 R08: ffff88816a5866c8 R09: ffffffff8b6d35e0
R10: dffffc0000000000 R11: ffffffff81aeb6f0 R12: 0000000000000000
R13: ffffffff8f8bd1a0 R14: ffff88816a5866c8 R15: ffffffff8b6d2480
FS:  0000555563b84500(0000) GS:ffff8882a9e44000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3e58d73ea0 CR3: 0000000114724000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 debug_object_assert_init+0x2db/0x380 lib/debugobjects.c:1020
 debug_timer_assert_init kernel/time/timer.c:803 [inline]
 debug_assert_init kernel/time/timer.c:848 [inline]
 __mod_timer+0x4a/0xf30 kernel/time/timer.c:1025
 ext4_update_super+0xc23/0x12f0 fs/ext4/super.c:6239
 ext4_commit_super+0x67/0x430 fs/ext4/super.c:6257
 ext4_handle_error+0x65e/0x950 fs/ext4/super.c:718
 __ext4_error_inode+0x328/0x4f0 fs/ext4/super.c:861
 __ext4_iget+0x187b/0x4280 fs/ext4/inode.c:-1
 ext4_orphan_get+0x1e3/0x630 fs/ext4/ialloc.c:1391
 ext4_orphan_cleanup+0xad2/0x1460 fs/ext4/orphan.c:465
 __ext4_fill_super fs/ext4/super.c:5661 [inline]
 ext4_fill_super+0x58e5/0x6240 fs/ext4/super.c:5785
 get_tree_bdev_flags+0x40e/0x4d0 fs/super.c:1691
 vfs_get_tree+0x92/0x2a0 fs/super.c:1751
 fc_mount fs/namespace.c:1199 [inline]
 do_new_mount_fc fs/namespace.c:3636 [inline]
 do_new_mount+0x302/0xa10 fs/namespace.c:3712
 do_mount fs/namespace.c:4035 [inline]
 __do_sys_mount fs/namespace.c:4224 [inline]
 __se_sys_mount+0x313/0x410 fs/namespace.c:4201
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3e58d90f6a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffde744ab68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffde744abf0 RCX: 00007f3e58d90f6a
RDX: 0000200000000880 RSI: 0000200000000500 RDI: 00007ffde744abb0
RBP: 0000200000000880 R08: 00007ffde744abf0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000500
R13: 00007ffde744abb0 R14: 0000000000000524 R15: 00002000000003c0
 </TASK>
----------------
Code disassembly (best guess):
   0:	f8                   	clc
   1:	48 c1 e8 03          	shr    $0x3,%rax
   5:	80 3c 18 00          	cmpb   $0x0,(%rax,%rbx,1)
   9:	74 08                	je     0x13
   b:	4c 89 ff             	mov    %r15,%rdi
   e:	e8 b7 e0 8f fd       	call   0xfd8fe0ca
  13:	4d 8b 0f             	mov    (%r15),%r9
  16:	4c 89 ef             	mov    %r13,%rdi
  19:	48 8b 74 24 08       	mov    0x8(%rsp),%rsi
  1e:	48 89 ea             	mov    %rbp,%rdx
  21:	44 89 e1             	mov    %r12d,%ecx
  24:	4d 89 f0             	mov    %r14,%r8
  27:	ff 34 24             	push   (%rsp)
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	48 83 c4 08          	add    $0x8,%rsp
  33:	ff 05 8d 86 e9 0a    	incl   0xae9868d(%rip)        # 0xae986c6
  39:	48 83 c4 10          	add    $0x10,%rsp
  3d:	5b                   	pop    %rbx
  3e:	41 5c                	pop    %r12


***

If these findings have caused you to resend the series or submit a
separate fix, please add the following tag to your commit message:
  Tested-by: syzbot@syzkaller.appspotmail.com

---
This report is generated by a bot. It may contain errors.
syzbot ci engineers can be reached at syzkaller@googlegroups.com.

      parent reply	other threads:[~2025-12-09 14:31 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-12-09  9:52 [PATCH v1] ext4: add sysfs attribute err_report_sec to control s_err_report timer Baolin Liu
     [not found] ` <21af8d64.9c77.19b0296bb66.Coremail.liubaolin12138@163.com>
2025-12-09 10:13   ` liubaolin
2025-12-16  9:04     ` Zhang Yi
2025-12-17  2:33       ` liubaolin
2025-12-18  1:21         ` Zhang Yi
2025-12-09 14:31 ` syzbot ci [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=693832b7.050a0220.4004e.002b.GAE@google.com \
    --to=syzbot+ci5ba1b27c8540e946@syzkaller.appspotmail.com \
    --cc=adilger.kernel@dilger.ca \
    --cc=linux-ext4@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=liubaolin12138@163.com \
    --cc=liubaolin@kylinos.cn \
    --cc=syzbot@lists.linux.dev \
    --cc=syzkaller-bugs@googlegroups.com \
    --cc=tytso@mit.edu \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.