syzbot


kernel BUG in clear_inode

Status: upstream: reported C repro on 2023/05/25 23:24
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+6d7e822afebcc5b4c30c@syzkaller.appspotmail.com
First crash: 747d, last: 2d22h
Fix bisection: failed (error log, bisect log)
  
Bug presence (3)
Date Name Commit Repro Result
2025/05/08 linux-6.1.y (ToT) ac7079a42ea5 C [report] kernel BUG in clear_inode
2024/11/22 upstream (ToT) 28eb75e178d3 C [report] kernel BUG in clear_inode
2025/05/08 upstream (ToT) d76bb1ebb558 C Didn't crash
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in clear_inode (2) jfs C inconclusive 986 16h09m 225d 28/28 fixed on 2025/06/10 16:19
linux-5.15 kernel BUG in clear_inode (3) origin:upstream missing-backport C done 21 2d22h 201d 0/3 upstream: reported C repro on 2024/11/22 00:29
linux-5.15 kernel BUG in clear_inode 1 772d 772d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:07
linux-5.15 kernel BUG in clear_inode (2) 2 327d 406d 0/3 auto-obsoleted due to no activity on 2024/10/27 05:50
upstream kernel BUG in clear_inode btrfs C 12 234d 375d 28/28 fixed on 2024/10/22 11:57
upstream kernel BUG at fs/inode.c:LINE! (2) fs C done unreliable 322 399d 1747d 25/28 fixed on 2024/05/21 07:00
Fix bisection attempts (13)
Created Duration User Patch Repo Result
2025/05/29 23:27 1h42m fix candidate upstream OK (0) job log
2024/11/05 13:41 2h07m fix candidate upstream OK (0) job log
2024/10/15 00:20 0m bisect fix linux-6.1.y error job log
2024/09/05 01:41 2h22m bisect fix linux-6.1.y OK (0) job log log
2024/07/25 07:07 2h48m bisect fix linux-6.1.y OK (0) job log log
2024/06/09 13:34 2h18m bisect fix linux-6.1.y OK (0) job log log
2024/05/09 12:01 2h03m bisect fix linux-6.1.y OK (0) job log log
2024/03/23 10:11 3h02m bisect fix linux-6.1.y OK (0) job log log
2024/02/22 01:27 2h17m bisect fix linux-6.1.y OK (0) job log log
2024/01/12 18:13 2h12m bisect fix linux-6.1.y OK (0) job log log
2023/12/12 16:42 2h06m bisect fix linux-6.1.y OK (0) job log log
2023/11/11 18:21 2h13m bisect fix linux-6.1.y OK (0) job log log
2023/10/09 02:47 2h04m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
loop0: detected capacity change from 0 to 32768
read_mapping_page failed!
ERROR: (device loop0): txCommit: 
ERROR: (device loop0): remounting filesystem as read-only
------------[ cut here ]------------
kernel BUG at fs/inode.c:650!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 4249 Comm: syz-executor724 Not tainted 6.1.141-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:clear_inode+0x128/0x150 fs/inode.c:650
Code: e8 dd f3 99 ff 43 80 3c 27 00 74 08 4c 89 f7 e8 0e 6d eb ff 49 c7 06 60 00 00 00 5b 41 5c 41 5d 41 5e 41 5f c3 e8 b8 f3 99 ff <0f> 0b e8 b1 f3 99 ff 0f 0b e8 aa f3 99 ff 0f 0b e8 a3 f3 99 ff 0f
RSP: 0018:ffffc90003d177f0 EFLAGS: 00010093
RAX: ffffffff81e6e2b8 RBX: ffff888073efa930 RCX: ffff88802de39dc0
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000003
R10: fffff520007a2edc R11: 1ffff920007a2edc R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888073efab60 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3cc3951130 CR3: 000000007e6b4000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 jfs_evict_inode+0xad/0x430 fs/jfs/inode.c:166
 evict+0x485/0x870 fs/inode.c:705
 __dentry_kill+0x431/0x650 fs/dcache.c:611
 shrink_dentry_list+0x39b/0x6a0 fs/dcache.c:1206
 shrink_dcache_parent+0xa8/0x3c0 fs/dcache.c:-1
 do_one_tree+0x23/0xe0 fs/dcache.c:1687
 shrink_dcache_for_umount+0x65/0x110 fs/dcache.c:1704
 generic_shutdown_super+0x63/0x340 fs/super.c:473
 kill_block_super+0x7c/0xe0 fs/super.c:1470
 deactivate_locked_super+0x93/0xf0 fs/super.c:332
 cleanup_mnt+0x463/0x4f0 fs/namespace.c:1182
 task_work_run+0x1ca/0x250 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0x936/0x2400 kernel/exit.c:871
 do_group_exit+0x217/0x2d0 kernel/exit.c:1021
 __do_sys_exit_group kernel/exit.c:1032 [inline]
 __se_sys_exit_group kernel/exit.c:1030 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1030
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f3cc38d0f89
Code: Unable to access opcode bytes at 0x7f3cc38d0f5f.
RSP: 002b:00007ffd17f1da28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f3cc38d0f89
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007f3cc3953370 R08: ffffffffffffffb8 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000246 R12: 00007f3cc3953370
R13: 0000000000000000 R14: 00007f3cc39540e0 R15: 00007f3cc389f270
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:clear_inode+0x128/0x150 fs/inode.c:650
Code: e8 dd f3 99 ff 43 80 3c 27 00 74 08 4c 89 f7 e8 0e 6d eb ff 49 c7 06 60 00 00 00 5b 41 5c 41 5d 41 5e 41 5f c3 e8 b8 f3 99 ff <0f> 0b e8 b1 f3 99 ff 0f 0b e8 aa f3 99 ff 0f 0b e8 a3 f3 99 ff 0f
RSP: 0018:ffffc90003d177f0 EFLAGS: 00010093
RAX: ffffffff81e6e2b8 RBX: ffff888073efa930 RCX: ffff88802de39dc0
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000003
R10: fffff520007a2edc R11: 1ffff920007a2edc R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888073efab60 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3cc3951130 CR3: 000000007e6b4000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/08 07:55 linux-6.1.y 58485ff1a74f 4826c28e .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan kernel BUG in clear_inode
2024/11/22 00:45 linux-6.1.y b67dc5c9ade9 4b25d554 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in clear_inode
2024/07/31 20:47 linux-6.1.y c1cec4dad96b 6fde257d .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in clear_inode
2023/07/03 10:41 linux-6.1.y 0f4ac6b4c5f0 bfc47836 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in clear_inode
2023/08/20 05:06 linux-6.1.y 6c44e13dc284 d216d8a0 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in clear_inode
2025/06/08 07:06 linux-6.1.y 58485ff1a74f 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in clear_inode
2024/12/07 05:26 linux-6.1.y e4d90d63d385 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in clear_inode
2024/11/21 22:31 linux-6.1.y b67dc5c9ade9 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in clear_inode
2024/04/05 09:21 linux-6.1.y 347385861c50 0ee3535e .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in clear_inode
2023/06/26 00:13 linux-6.1.y e84a4e368abe 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in clear_inode
2024/12/02 06:41 linux-6.1.y e4d90d63d385 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in clear_inode
2023/07/04 08:13 linux-6.1.y 0f4ac6b4c5f0 6e553898 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in clear_inode
2023/06/25 11:54 linux-6.1.y e84a4e368abe 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in clear_inode
2023/06/25 03:56 linux-6.1.y e84a4e368abe 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in clear_inode
2023/05/29 10:18 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in clear_inode
2023/05/25 23:23 linux-6.1.y a343b0dd87b4 0513b3e6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in clear_inode
2023/07/19 06:08 linux-6.1.y 61fd484b2cf6 022df2bb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in clear_inode
2023/06/12 11:41 linux-6.1.y 2f3918bc53fb 49519f06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in clear_inode
2023/05/29 10:44 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in clear_inode
2023/05/29 09:53 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in clear_inode
* Struck through repros no longer work on HEAD.