From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.167.197 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1794469843; b=W5sQC4P6HPBr5rXoVk4ZvOMDi+qi3jacZhL0sZ1+E7Dfz3cgGvggSGBMQuzvnBcLKowc rFsh7iCb/RsPctp0Aj7ZZdyHAnG/IcQK/JZ5InHIEvtb2COyKvXXlSwy4kYjXQVXQu3mP 3Oc0AOrJnDE+38Z/rtiweonn4B17YerXM3OvN4W0oJmVk8+amjxDlLsfkMEk7zdb9HRTE vdobEh80wRRCpnzTjkC5RdLfh+BWJGLyq+UzZr/BA2uucaciRdeQbdpGIgzCss9GXin7c F22NHviqR3Uj7pCIaW7d/o3c8awj3fAAEaTCtVBaPQezPxxFHcEidvSlkV23dj+wUEQ== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1794469843; h=DMARC-Filter:Received:X-Google-DKIM-Signature:X-Forwarded-Encrypted: X-Gm-Message-State:MIME-Version:X-Received:Date:In-Reply-To: X-Google-Appengine-App-Id:X-Google-Appengine-App-Id-Alias:Message-ID: Subject:From:To:Content-Type; bh=tjgKFT4/p+CvJU6by4XpSqkzIsRiw3CwVavlpfOjBZ4=; b=BeYSWNfLnN0P1ES7L0ADnckpj+2x/130nkkwUC/v9F8NiuO4dEJMcuAI/XpQ3EA3pwNR MfQ42eHT4D6YX2CTnjcd/aH4Tw7auEGZ9xVXztj8fSzjOXERxauPBalzfYYhtj4QsGfQL 39CFuZrZE5w3hQ3c0aeCmkhmeYms31uKoH4oF5l+xGiDvJELKj76O3tgfI8qDZ6AwyOIB EJT8KpDbzKjsFHSu/GSWPj5ygiI8y+7LGw7EeDmyoeV7Hq9k5gYm+AOKlFjx3h/y0tnhd wMg0Sp+QYKIfBQ4D7vAC2HUYablnRXCBfeRXy/7HARJPQwxTa5LCfPmhY+8Me4E8/Lg== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=fail header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.remote-ip=209.85.167.197 Received: from mail-oi1-f197.google.com (mail-oi1-f197.google.com [209.85.167.197]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DD442606A888 for ; Thu, 12 Nov 2026 07:50:42 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org DD442606A888 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oi1-f197.google.com with SMTP id 5614622812f47-4cc89e86e9eso4763297b6e.3 for ; Wed, 11 Nov 2026 23:50:42 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1794469842; x=1795074642; h=content-type:to:from:subject:message-id:in-reply-to:date :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=tjgKFT4/p+CvJU6by4XpSqkzIsRiw3CwVavlpfOjBZ4=; b=l41YYDK2m53x8mm0BgxjLB/RDMMgqh5X/B9DtrE0WpfEhzja2GnqpYvoxQv5ohlbWw w3TwvqP/EHh0WQOp/tyxJi9HEzbBOG+Dz2rWbGjrsJN3fMQ8IXjyVJ3Y+sGaVMsR6+CJ 6qcu9PE772ClXjj2lNu0m/HtkhfSWMrv+17ChwhNtlKwemVxgfg/on3/NZZsQuem0H9n fXSD64Zv2BDz2ikB6o3Ae1iY9TS0gmd14ScxAyDa55tDYU8Qj16sMGRv/+wNKEGa8rWc lB/5mEkWa0Ko9doKwz5PSLsipMouh90ICzbBdA0hpmhyXleZ7aJxohdj1EW+ONHM6COu gTOg== X-Forwarded-Encrypted: i=1; AL+hErF3Z6kcxrPU7kzQExnlt7jxEFVCsEL4tJFSv9mZBeFRe1EIbEkCWlpBGbsuKKiei1dYVozMGPxsIlflQBk=@vger.kernel.org X-Gm-Message-State: APuU4Z/+uwG2PDoZtkWN6YHxNRY6WmtkzFPL8tSgtsKmptpPHE7nbYdr V6D29k3xKPEkNU8evE+kmbipyHh0oCJGdy8rGc1MWf4IU7Hc5g/IIcYDMbO3/T8elhmg8gaAwfo B21+Oxva9Olo0DX+sdKi6INAL2IIrB7yVtga4uzAymH5u0EJQsOocgqO2qzE= X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 X-Received: by 2002:a05:6809:24a:10b0:56b:220d:cc5d with SMTP id 5614622812f47-56b961943b0mr3349644b6e.10.1794469841906; Wed, 11 Nov 2026 23:50:41 -0800 (PST) Date: Wed, 11 Nov 2026 23:50:41 -0800 In-Reply-To: <6af3562b.17ff5aea.1b027f.0196.GAE@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6af56fd1.7afbdece.117ea2.0026.GAE@google.com> Subject: Re: [syzbot] [dm?] WARNING in integrity_commit From: syzbot To: agk@redhat.com, bmarzins@redhat.com, dm-devel@lists.linux.dev, linux-kernel@vger.kernel.org, mpatocka@redhat.com, sashiko-bot@kernel.org, snitzer@kernel.org, stable@vger.kernel.org, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" syzbot has found a reproducer for the following issue on: HEAD commit: 79eb6679ef6a Merge tag 'loongarch-fixes-7.4-1' of git://gi.. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git console output: https://syzkaller.appspot.com/x/log.txt?x=1249a44d580000 kernel config: https://syzkaller.appspot.com/x/.config?x=1cf189394a856f11 dashboard link: https://syzkaller.appspot.com/bug?extid=94dac3c75477e184f0b0 compiler: gcc (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=12adb1a1580000 AI-generated root cause summary: In drivers/md/dm-integrity.c, journal accounting variables (including ic->free_sectors, ic->free_section, and section counts) are initialized exclusively within replay_journal() rather than during target allocation in dm_integrity_ctr(). When a dm-integrity target configured in journal mode ('J') is resumed, dm_integrity_resume() checks whether the on-disk superblock was modified while suspended; if superblock_changed() evaluates to true, it logs an error and jumps to skip_writes, completely bypassing replay_journal(). When the device is subsequently suspended or receives a flush bio, integrity_commit() is scheduled and calls pad_uncommitted(), which validates that total journal sections match the sum of uncommitted, committed, and free sectors; because replay_journal() was skipped, these counters remain zero, causing the invariant check to fail and trigger the WARN_ON. full analysis: https://syzkaller.appspot.com/x/ai_root_cause?x=94dac3c75477e184f0b0 IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+94dac3c75477e184f0b0@syzkaller.appspotmail.com ------------[ cut here ]------------ ic->journal_sections * ic->journal_section_entries != (ic->n_uncommitted_sections + ic->n_committed_sections) * ic->journal_section_entries + ic->free_sectors WARNING: drivers/md/dm-integrity.c:2885 at pad_uncommitted drivers/md/dm-integrity.c:2885 [inline], CPU#1: kworker/1:2/1043 WARNING: drivers/md/dm-integrity.c:2885 at integrity_commit.cold+0x6/0x75 drivers/md/dm-integrity.c:2917, CPU#1: kworker/1:2/1043 Modules linked in: CPU: 1 UID: 0 PID: 1043 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: dm-integrity-commit integrity_commit RIP: 0010:pad_uncommitted drivers/md/dm-integrity.c:2885 [inline] RIP: 0010:integrity_commit.cold+0x6/0x75 drivers/md/dm-integrity.c:2917 Code: ff e9 9d 9d 63 07 48 8b 7c 24 58 e8 11 a2 23 01 e9 e7 fe ff ff 48 8b 7c 24 40 e8 02 a2 23 01 e9 21 ff ff ff e8 88 48 a9 00 90 <0f> 0b 90 41 54 8b 8c 24 d0 00 00 00 89 da 44 89 f6 41 89 d9 45 89 RSP: 0018:ffffc90005497a68 EFLAGS: 00010093 RAX: 0000000000000000 RBX: 0000000000000050 RCX: 0000000000000001 RDX: ffff88802aa08000 RSI: ffffffff81653878 RDI: 0000000000000004 RBP: 0000000000000050 R08: 0000000000000050 R09: 0000000000000000 R10: 0000000000000003 R11: 000000000000776b R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 1ffff92000a92f6a FS: 0000000000000000(0000) GS:ffff8880d4573000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8bc17ba008 CR3: 000000005652c000 CR4: 0000000000352ef0 Call Trace: process_one_work+0xac7/0x1b10 kernel/workqueue.c:3495 process_scheduled_works kernel/workqueue.c:3578 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3659 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245