https://bugzilla.kernel.org/show_bug.cgi?id=202879 Jungyeon (jungyeon@xxxxxxxxxx) changed: What |Removed |Added ---------------------------------------------------------------------------- Kernel Version|5.0-rc8 |5.0.0 --- Comment #6 from Jungyeon (jungyeon@xxxxxxxxxx) --- Sorry for my lack of explanation. Yes, LKL is Linux Kernel Library. poc-01.c is a program that calls lists of system calls in userspace and the craft image is a potentially faulty image to test error cases. We are going to release our source code so that you can build the ext4-combined shortly. We needs some clean-up inside the codes before making it public. I'm attaching stack dump at the last. The problem here is that bh is NULL at the first place of this function, so that it leads to an error on J_ASSERT_JH(jh, jh->b_jcount >= 0). To get the stack dump, I temporarily inserted BUG_ON on condition of jh being NULL. Additionally I used Linux version 5.0.0+ for this trace (and in the linked ext4-combined binary) 2534 static void __journal_remove_journal_head(struct buffer_head *bh) 2535 { 2536 struct journal_head *jh = bh2jh(bh); 2537 2538 BUG_ON(jh == NULL); 2539 J_ASSERT_JH(jh, jh->b_jcount >= 0); 2540 J_ASSERT_JH(jh, jh->b_transaction == NULL); 2541 J_ASSERT_JH(jh, jh->b_next_transaction == NULL); 2542 J_ASSERT_JH(jh, jh->b_cp_transaction == NULL); 2543 J_ASSERT_JH(jh, jh->b_jlist == BJ_None); 2544 J_ASSERT_BH(bh, buffer_jbd(bh)); 2545 J_ASSERT_BH(bh, jh2bh(jh) == bh); 2546 BUFFER_TRACE(bh, "remove journal_head"); 2547 if (jh->b_frozen_data) { 2548 printk(KERN_WARNING "%s: freeing b_frozen_data\n", __func__); 2549 jbd2_free(jh->b_frozen_data, bh->b_size); 2550 } - Stack dump [ 0.089081] BUG: failure at fs/jbd2/journal.c:2538/__journal_remove_journal_head()! [ 0.089096] Kernel panic - not syncing: BUG! [ 0.089101] Call Trace: [ 0.089110] (____ptrval____): [<55555559bc94>] .LC81+0x5f/0xfb [ 0.089118] (____ptrval____): [<5555555c6025>] major_names+0x75/0x80 [ 0.089125] (____ptrval____): [<5555555978f4>] .LC11+0x14/0x20 [ 0.089133] (____ptrval____): [<5555556b1e40>] submit_bh+0x40/0x50 [ 0.089141] (____ptrval____): [<55555580286d>] jbd2_journal_put_journal_head+0x6cd/0x6d0 [ 0.089147] (____ptrval____): [<5555557ec6e8>] __jbd2_journal_refile_buffer+0x2d8/0x3c0 [ 0.089153] (____ptrval____): [<5555557f641a>] __jbd2_journal_remove_checkpoint+0x17a/0x2f0 [ 0.089164] (____ptrval____): [<5555557eff12>] jbd2_journal_commit_transaction+0x2fc2/0x3fc0 [ 0.089173] (____ptrval____): [<555555597353>] .LC18+0x3/0x10 [ 0.089181] (____ptrval____): [<5555555b8fb9>] try_to_wake_up+0x169/0x190 [ 0.089190] (____ptrval____): [<5555558031be>] kjournald2+0x34e/0x400 [ 0.089199] (____ptrval____): [<5555555bfd30>] autoremove_wake_function+0x0/0x40 [ 0.089206] (____ptrval____): [<5555555978f4>] .LC11+0x14/0x20 [ 0.089214] (____ptrval____): [<5555555b3acb>] kthread+0x15b/0x170 [ 0.089221] (____ptrval____): [<555555802e70>] kjournald2+0x0/0x400 [ 0.089228] (____ptrval____): [<5555555b3970>] kthread+0x0/0x170 [ 0.089237] (____ptrval____): [<5555555970ab>] uidhash_table+0x3b/0x40 Thanks. -- You are receiving this mail because: You are watching the assignee of the bug.
