syzbot

 sign-in | mailing list | source | docs | 🏰
🐞 Open [1344]
≡ Subsystems
🐞 Fixed [7089]
🐞 Invalid [18666]
⬇ Missing Backports [221]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
✨ AI
💬 Send us feedback

BUG: corrupted list in list_lru_add

Status: auto-obsoleted due to no activity on 2026/05/07 23:09
Subsystems: gfs2 mm
[Documentation on labels]
Reported-by: syzbot+092ef2e75c24d23f33c4@syzkaller.appspotmail.com
First crash: 537d, last: 89d
Cause bisection: the cause commit could be any of (bisect log):
  bfecc4091e07 xfs: allow ro mounts if rtdev or logdev are read-only
  5d894321c49e fs: add atomic write unit max opt to statx
   
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
[syzbot] Monthly gfs2 report (Feb 2026) 0 (1) 2026/02/18 13:20
[PATCH] gfs2: prevent sysfs duplicate name warning on mount 1 (1) 2026/01/09 09:04
[syzbot] [bcachefs?] [mm?] BUG: corrupted list in list_lru_add 0 (2) 2025/09/02 05:13
▶ ▼ Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 BUG: Dentry still in use in unmount -1 C done 1184 1536d 1548d 2/2 fixed on 2022/02/25 03:20
upstream BUG: unable to handle kernel paging request in list_lru_add mm 10 C done done 11367 665d 977d 27/29 fixed on 2024/08/28 10:02
linux-6.1 BUG: unable to handle kernel paging request in list_lru_add 8 2 174d 200d 0/3 auto-obsoleted due to no activity on 2026/02/24 09:53
upstream general protection fault in list_lru_add mm 8 C done 1125 1219d 1507d 22/29 fixed on 2023/02/24 13:51
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/05/07 21:45 38m retest repro linux-next OK log
2026/05/07 21:45 32m retest repro linux-next OK log
2026/05/07 21:45 45m retest repro linux-next OK log
2026/05/07 21:45 30m retest repro linux-next OK log
2026/05/07 10:07 2h17m retest repro linux-next OK log
2026/05/07 10:07 2h11m retest repro linux-next OK log
2026/05/07 10:07 1h36m retest repro linux-next OK log
2026/05/07 10:07 42m retest repro linux-next OK log
2026/02/26 11:51 26m retest repro linux-next error
2026/02/26 11:51 22m retest repro linux-next error

Sample crash report:
 slab gfs2_quotad start ffff88807ee03000 pointer offset 120 size 272
list_add corruption. prev->next should be next (ffff88801dace200), but was ffff88807ee03078. (prev=ffff88807ee03078).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:34!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 18637 Comm: syz.7.2377 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
RIP: 0010:__list_add_valid_or_report+0x123/0x130 lib/list_debug.c:32
Code: e8 b2 83 5f fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 c3 13 82 fd 49 8b 16 48 c7 c7 60 3c 07 8c 48 89 de 4c 89 f1 e8 4e fe 7c fc 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000107858 EFLAGS: 00010246
RAX: 0000000000000075 RBX: ffff88801dace200 RCX: 5639fe52ea8f3e00
RDX: ffffc900111f9000 RSI: 000000000000ac2a RDI: 000000000000ac2b
RBP: 1ffff11003b59c41 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1c7ce48 R12: 1ffff1100fdc060f
R13: dffffc0000000000 R14: ffff88807ee03078 R15: ffff88807ee03078
FS:  00007ff72adef6c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30701ff8 CR3: 0000000098d4a000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 __list_add_valid include/linux/list.h:96 [inline]
 __list_add include/linux/list.h:158 [inline]
 list_add_tail include/linux/list.h:191 [inline]
 list_lru_add+0xf2/0x270 mm/list_lru.c:171
 qd_put+0x114/0x190 fs/gfs2/quota.c:342
 gfs2_quota_unhold+0x137/0x690 fs/gfs2/quota.c:653
 gfs2_dinode_dealloc+0x336/0x3f0 fs/gfs2/inode.c:518
 evict_unlinked_inode fs/gfs2/super.c:1317 [inline]
 gfs2_evict_inode+0xe64/0x1050 fs/gfs2/super.c:1414
 evict+0x61e/0xb10 fs/inode.c:837
 __dentry_kill+0x1a2/0x5e0 fs/dcache.c:670
 finish_dput+0xc9/0x480 fs/dcache.c:879
 __fput+0x691/0xa70 fs/file_table.c:476
 fput_close_sync+0x11f/0x240 fs/file_table.c:573
 __do_sys_close fs/open.c:1573 [inline]
 __se_sys_close fs/open.c:1558 [inline]
 __x64_sys_close+0x7e/0x110 fs/open.c:1558
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff729f9aeb9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ff72adef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 00007ff72a216090 RCX: 00007ff729f9aeb9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 00007ff72a008c1f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ff72a216128 R14: 00007ff72a216090 R15: 00007ffdd448f368
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_add_valid_or_report+0x123/0x130 lib/list_debug.c:32
Code: e8 b2 83 5f fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 c3 13 82 fd 49 8b 16 48 c7 c7 60 3c 07 8c 48 89 de 4c 89 f1 e8 4e fe 7c fc 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000107858 EFLAGS: 00010246
RAX: 0000000000000075 RBX: ffff88801dace200 RCX: 5639fe52ea8f3e00
RDX: ffffc900111f9000 RSI: 000000000000ac2a RDI: 000000000000ac2b
RBP: 1ffff11003b59c41 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1c7ce48 R12: 1ffff1100fdc060f
R13: dffffc0000000000 R14: ffff88807ee03078 R15: ffff88807ee03078
FS:  00007ff72adef6c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30701ff8 CR3: 0000000098d4a000 CR4: 0000000000350ef0

Crashes (401):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/31 17:48 upstream 283073725700 c75a2f6e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in list_lru_add
2026/01/30 07:19 upstream 4d310797262f bfa73b7b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in list_lru_add
2026/01/20 08:22 upstream 24d479d26b25 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root BUG: corrupted list in list_lru_add
2026/01/19 16:23 upstream 24d479d26b25 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in list_lru_add
2026/01/16 10:59 upstream 603c05a1639f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in list_lru_add
2026/01/15 23:52 upstream 603c05a1639f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root BUG: corrupted list in list_lru_add
2026/01/12 22:13 upstream b71e635feefc d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in list_lru_add
2026/01/10 14:22 upstream b6151c4e60e5 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root BUG: corrupted list in list_lru_add
2026/01/05 08:23 upstream 3609fa95fb0f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: corrupted list in list_lru_add
2024/11/18 12:21 upstream adc218676eef e7bb5d6e .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: corrupted list in list_lru_add
2025/12/05 16:22 linux-next 6987d58a9cbc d6526ea3 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root BUG: corrupted list in list_lru_add
2026/02/09 12:19 upstream 05f7e89ab973 df949cd9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in list_lru_add
2026/02/08 21:47 upstream e98f34af6116 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in list_lru_add
2026/02/08 10:02 upstream e7aa57247700 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/02/01 23:30 upstream 9f2693489ef8 6b8752f2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/31 04:07 upstream 283073725700 e01a0ca6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/30 10:10 upstream 4d310797262f bfa73b7b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/30 03:00 upstream 4d310797262f aeb6fdd5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/29 08:24 upstream 8dfce8991b95 b78a7341 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/27 07:27 upstream fcb70a56f4d8 efb3e894 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/26 08:28 upstream 023777797472 55756628 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/26 05:42 upstream 023777797472 55756628 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/25 06:56 upstream 12a0094839d0 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/24 20:18 upstream 12a0094839d0 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/21 20:00 upstream 6c790212c588 6f1aa2f9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/21 00:39 upstream c03e9c42ae8f 2494e18d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/20 12:04 upstream 24d479d26b25 572effc1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/20 00:12 upstream 24d479d26b25 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/18 21:48 upstream e84d960149e7 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/18 06:57 upstream e84d960149e7 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/17 21:20 upstream d3eeb99bbc99 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/17 17:35 upstream d3eeb99bbc99 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/17 03:30 upstream 39d3389331ab d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/16 22:47 upstream 983d014aafb1 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/16 13:54 upstream 983d014aafb1 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/16 13:54 upstream 983d014aafb1 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/13 14:57 upstream b71e635feefc d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/13 00:06 upstream b71e635feefc d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/10 20:03 upstream b6151c4e60e5 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/10 12:57 upstream b6151c4e60e5 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/10 09:59 upstream 372800cb95a3 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/08 02:34 upstream f0b9d8eb98df d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/07 06:40 upstream f0b9d8eb98df d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/07 03:25 upstream f0b9d8eb98df d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/07 00:36 upstream f0b9d8eb98df d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2026/01/06 15:16 upstream 7f98ab9da046 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/09/02 05:12 upstream b320789d6883 807a3b61 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro #1 (corrupt fs)] [mounted in repro #2] ci-upstream-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/12/15 21:06 linux-next 4a5663c04bb6 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/12/07 17:03 linux-next 6987d58a9cbc d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/12/07 14:55 linux-next 6987d58a9cbc d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/12/02 10:50 linux-next 7d31f578f323 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro #1 (corrupt fs)] [mounted in repro #2] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/11/24 04:24 linux-next d724c6f85e80 4fb8ef37 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/11/24 02:04 linux-next d724c6f85e80 4fb8ef37 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/11/23 21:52 linux-next d724c6f85e80 4fb8ef37 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
2025/11/23 19:37 linux-next d724c6f85e80 4fb8ef37 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root KASAN: slab-use-after-free Read in list_lru_add
* Struck through repros no longer work on HEAD.