syzbot


WARNING in fanotify_handle_event (2)

Status: upstream: reported C repro on 2024/11/12 04:21
Subsystems: exfat
[Documentation on labels]
Reported-by: syzbot+318aab2cf26bb7d40228@syzkaller.appspotmail.com
First crash: 232d, last: 9d05h
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [fs?] WARNING in fanotify_handle_event (2) 1 (2) 2024/11/12 11:50
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in fanotify_handle_event fs C done 5 2202d 2201d 12/29 fixed on 2019/07/10 21:40
Last patch testing requests (9)
Created Duration User Patch Repo Result
2025/04/25 09:22 15m retest repro upstream report log
2025/04/25 09:22 15m retest repro upstream report log
2025/04/11 07:48 14m retest repro upstream report log
2025/02/14 06:42 18m retest repro upstream report log
2025/02/14 06:42 18m retest repro upstream report log
2025/01/31 06:20 13m retest repro upstream report log
2024/11/22 06:01 13m retest repro upstream report log
2024/11/22 06:01 13m retest repro upstream report log
2024/11/22 06:01 13m retest repro upstream report log

Sample crash report:
loop0: detected capacity change from 0 to 128
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5315 at fs/notify/fanotify/fanotify.h:216 fanotify_info_copy_name fs/notify/fanotify/fanotify.h:216 [inline]
WARNING: CPU: 0 PID: 5315 at fs/notify/fanotify/fanotify.h:216 fanotify_alloc_name_event fs/notify/fanotify/fanotify.c:680 [inline]
WARNING: CPU: 0 PID: 5315 at fs/notify/fanotify/fanotify.h:216 fanotify_alloc_event fs/notify/fanotify/fanotify.c:845 [inline]
WARNING: CPU: 0 PID: 5315 at fs/notify/fanotify/fanotify.h:216 fanotify_handle_event+0x30fd/0x3d00 fs/notify/fanotify/fanotify.c:976
Modules linked in:
CPU: 0 UID: 0 PID: 5315 Comm: syz-executor379 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:fanotify_info_copy_name fs/notify/fanotify/fanotify.h:216 [inline]
RIP: 0010:fanotify_alloc_name_event fs/notify/fanotify/fanotify.c:680 [inline]
RIP: 0010:fanotify_alloc_event fs/notify/fanotify/fanotify.c:845 [inline]
RIP: 0010:fanotify_handle_event+0x30fd/0x3d00 fs/notify/fanotify/fanotify.c:976
Code: f8 ff ff e8 85 45 77 ff 90 0f 0b 90 e9 3e f9 ff ff e8 77 45 77 ff 90 0f 0b 90 4c 8b 64 24 08 e9 62 fa ff ff e8 64 45 77 ff 90 <0f> 0b 90 e9 f4 fb ff ff e8 56 45 77 ff 90 0f 0b 90 e9 9d fd ff ff
RSP: 0018:ffffc9000d4373e0 EFLAGS: 00010293
RAX: ffffffff824916dc RBX: 0000000000000ffd RCX: ffff88801fba2440
RDX: 0000000000000000 RSI: 0000000000000ffd RDI: 00000000000000ff
RBP: ffffc9000d4375c0 R08: 0000000000000002 R09: 0000000000000000
R10: ffff888043c48038 R11: ffffffff8240c270 R12: 0000000000000ffd
R13: 1ffff92001a86e94 R14: ffffc9000d4377e0 R15: ffff888043c48000
FS:  0000555570e33380(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001000 CR3: 0000000042b75000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 send_to_group fs/notify/fsnotify.c:420 [inline]
 fsnotify+0x140f/0x1a80 fs/notify/fsnotify.c:641
 __fsnotify_parent+0x3fe/0x540 fs/notify/fsnotify.c:287
 fsnotify_parent include/linux/fsnotify.h:96 [inline]
 fsnotify_path include/linux/fsnotify.h:113 [inline]
 fsnotify_file include/linux/fsnotify.h:127 [inline]
 fsnotify_open include/linux/fsnotify.h:471 [inline]
 vfs_open+0x28a/0x340 fs/open.c:1101
 do_open fs/namei.c:3896 [inline]
 path_openat+0x2ee5/0x3830 fs/namei.c:4055
 do_filp_open+0x1fa/0x410 fs/namei.c:4082
 do_open_execat+0x135/0x450 fs/exec.c:780
 alloc_bprm+0x28/0x5b0 fs/exec.c:1405
 do_execveat_common+0x1b3/0x6a0 fs/exec.c:1806
 do_execve fs/exec.c:1929 [inline]
 __do_sys_execve fs/exec.c:2005 [inline]
 __se_sys_execve fs/exec.c:2000 [inline]
 __x64_sys_execve+0x94/0xb0 fs/exec.c:2000
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4b36f29b59
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc3a62fb48 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
RAX: ffffffffffffffda RBX: 00007f4b36f72380 RCX: 00007f4b36f29b59
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440
RBP: 00007f4b36f9e5f0 R08: 0000555570e344c0 R09: 0000555570e344c0
R10: 0000555570e344c0 R11: 0000000000000246 R12: 00007ffc3a62fb70
R13: 00007ffc3a62fd98 R14: 431bde82d7b634db R15: 00007f4b36f7203b
 </TASK>

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/19 00:51 upstream 52da431bf03b ed3e87f7 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-snapshot-upstream-root WARNING in fanotify_handle_event
2024/11/08 05:59 upstream 906bd684e4b1 179b040e .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root WARNING in fanotify_handle_event
2024/11/08 05:20 upstream 906bd684e4b1 179b040e .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root WARNING in fanotify_handle_event
2024/11/08 04:43 upstream 906bd684e4b1 179b040e .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root WARNING in fanotify_handle_event
2025/06/18 23:46 upstream 52da431bf03b ed3e87f7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in fanotify_handle_event
2025/01/08 08:23 upstream 09a0fa92e5b4 f3558dbf .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in fanotify_handle_event
2024/11/08 04:15 upstream 906bd684e4b1 179b040e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in fanotify_handle_event
2025/02/14 11:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a64dcfb451e2 d9a046cf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in fanotify_handle_event
* Struck through repros no longer work on HEAD.