syzbot


WARNING in do_mknodat (4)

Status: upstream: reported on 2025/05/12 19:05
Reported-by: syzbot+d5e7caced7e104629877@syzkaller.appspotmail.com
First crash: 1d01h, last: 1d01h
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in do_mknodat fs 1 873d 817d 0/28 closed as invalid on 2023/02/16 16:02
upstream WARNING in do_mknodat (3) fs 163 5d21h 438d 0/28 moderation: reported on 2024/03/01 11:23
linux-6.1 WARNING in do_mknodat 1 558d 558d 0/3 auto-obsoleted due to no activity on 2024/02/10 13:02
upstream WARNING in do_mknodat (2) fs 11 542d 811d 0/28 auto-obsoleted due to no activity on 2024/02/16 05:28
linux-6.1 WARNING in do_mknodat (2) 39 326d 393d 0/3 auto-obsoleted due to no activity on 2024/08/30 19:08
linux-5.15 WARNING in do_mknodat (3) 7 111d 208d 0/3 auto-obsoleted due to no activity on 2025/05/02 18:42
linux-6.1 WARNING in do_mknodat (3) 27 9d15h 219d 0/3 upstream: reported on 2024/10/06 10:51
linux-5.15 WARNING in do_mknodat (2) 4 347d 524d 0/3 auto-obsoleted due to no activity on 2024/09/08 20:03
linux-5.15 WARNING in do_mknodat 1 635d 635d 0/3 auto-obsoleted due to no activity on 2023/11/25 05:54

Sample crash report:
DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff0000de7a0a90, owner = 0x0, curr 0xffff0000db07d1c0, list empty
WARNING: CPU: 1 PID: 8077 at kernel/locking/rwsem.c:1350 __up_write kernel/locking/rwsem.c:1349 [inline]
WARNING: CPU: 1 PID: 8077 at kernel/locking/rwsem.c:1350 up_write+0x4e8/0x644 kernel/locking/rwsem.c:1604
Modules linked in:
CPU: 1 PID: 8077 Comm: syz.7.1124 Not tainted 5.15.182-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __up_write kernel/locking/rwsem.c:1349 [inline]
pc : up_write+0x4e8/0x644 kernel/locking/rwsem.c:1604
lr : __up_write kernel/locking/rwsem.c:1349 [inline]
lr : up_write+0x4e8/0x644 kernel/locking/rwsem.c:1604
sp : ffff80001ba77c00
x29: ffff80001ba77c10 x28: ffff0000c0fb9100 x27: 0000000000000000
x26: dfff800000000000 x25: 1fffe0001bcf415f x24: ffff0000de7a0ae8
x23: 0000000000000000 x22: 0000000000000000 x21: ffff0000db07d1c0
x20: ffff0000de7a0a90 x19: ffff0000de7a0a90 x18: 0000000000000002
x17: 0000000040000000 x16: ffff8000111a53fc x15: 0000000000000002
x14: 0000000000ff0100 x13: 1ffff0000282a06b x12: 0000000000080000
x11: 000000000002250d x10: ffff800029962000 x9 : 6567a7d0607a1f00
x8 : 6567a7d0607a1f00 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a731dc4
x2 : ffff0001a111cd10 x1 : 0000000100000000 x0 : 00000000000000bd
Call trace:
 __up_write kernel/locking/rwsem.c:1349 [inline]
 up_write+0x4e8/0x644 kernel/locking/rwsem.c:1604
 inode_unlock include/linux/fs.h:792 [inline]
 done_path_create fs/namei.c:3886 [inline]
 do_mknodat+0x484/0x5ac fs/namei.c:4009
 __do_sys_mknodat fs/namei.c:4022 [inline]
 __se_sys_mknodat fs/namei.c:4019 [inline]
 __arm64_sys_mknodat+0xb0/0xcc fs/namei.c:4019
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 674
hardirqs last  enabled at (673): [<ffff80000824410c>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1338 [inline]
hardirqs last  enabled at (673): [<ffff80000824410c>] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:4784
hardirqs last disabled at (674): [<ffff8000111a0cd0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (578): [<ffff80000819d0d8>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (578): [<ffff80000819d0d8>] handle_softirqs+0xa4c/0xbf0 kernel/softirq.c:586
softirqs last disabled at (445): [<ffff80000819d6dc>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (445): [<ffff80000819d6dc>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (445): [<ffff80000819d6dc>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (445): [<ffff80000819d6dc>] __irq_exit_rcu+0x240/0x440 kernel/softirq.c:641
---[ end trace 29673e937f67fed3 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/12 19:04 linux-5.15.y 3b8db0e4f263 f6671af7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in do_mknodat
* Struck through repros no longer work on HEAD.