kernel BUG in _ocfs2_free_suballoc_bits

Status: upstream: reported C repro on 2024/11/29 19:55
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+ecd45d8ac70d5d0045a7@syzkaller.appspotmail.com
First crash: 627d, last: 18d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2025/11/02 upstream (ToT) 691d401c7e0e C [report] kernel BUG in _ocfs2_free_suballoc_bits
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in _ocfs2_free_suballoc_bits ocfs2 -1 syz, C inconclusive 292 3d00h 714d 0/29 upstream: reported C repro on 2024/09/03 10:29
linux-6.6 kernel BUG in _ocfs2_free_suballoc_bits origin:upstream -1 syz 1 15d 85d 0/2 upstream: reported syz repro on 2026/05/25 20:59
linux-6.1 kernel BUG in _ocfs2_free_suballoc_bits missing-backport origin:upstream -1 syz, C error 51 17d 660d 0/3 upstream: reported C repro on 2024/10/28 02:52
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/08/01 07:00 16m retest repro linux-5.15.y report log
2026/07/17 19:15 22m retest repro linux-5.15.y report log
2026/07/17 19:15 16m retest repro linux-5.15.y report log
2026/06/07 10:42 24m retest repro linux-5.15.y report log
2026/06/07 10:42 22m retest repro linux-5.15.y report log
2026/06/07 10:42 18m retest repro linux-5.15.y report log
2026/05/11 08:35 26m retest repro linux-5.15.y report log
2026/04/21 10:31 15m retest repro linux-5.15.y report log
2026/04/06 04:27 10m retest repro linux-5.15.y report log
2026/03/23 03:17 24m retest repro linux-5.15.y report log

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:2484!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4284 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:_ocfs2_free_suballoc_bits+0xe9c/0x1060 fs/ocfs2/suballoc.c:2484
Code: ff e8 48 fa 99 fe 49 8b 3f 4c 89 f6 48 8b 54 24 20 48 8b 4c 24 40 4c 8b 44 24 18 e8 8e 8c 00 00 e9 27 01 00 00 e8 04 92 55 fe <0f> 0b e8 fd 91 55 fe 0f 0b 65 44 8b 35 3b db df 7c bf 07 00 00 00
RSP: 0018:ffffc900012ff360 EFLAGS: 00010293
RAX: ffffffff83223a0c RBX: 1ffff1100dec6000 RCX: ffff88802be1bb80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc900012ff4e8 R08: dffffc0000000000 R09: fffffbfff1ad33a6
R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff88806f630878
R13: 0000000000000002 R14: 0000000000000000 R15: ffff88805f1a9000
FS:  0000555595497500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8f42f54000 CR3: 000000002348c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ocfs2_free_suballoc_bits fs/ocfs2/suballoc.c:2521 [inline]
 ocfs2_free_dinode+0xad/0xd0 fs/ocfs2/suballoc.c:2536
 ocfs2_remove_inode fs/ocfs2/inode.c:696 [inline]
 ocfs2_wipe_inode fs/ocfs2/inode.c:818 [inline]
 ocfs2_delete_inode fs/ocfs2/inode.c:1079 [inline]
 ocfs2_evict_inode+0x1b49/0x3e40 fs/ocfs2/inode.c:1216
 evict+0x485/0x870 fs/inode.c:647
 d_delete_notify include/linux/fsnotify.h:267 [inline]
 vfs_rmdir+0x3b4/0x430 fs/namei.c:4170
 do_rmdir+0x295/0x710 fs/namei.c:4218
 __do_sys_unlinkat fs/namei.c:4398 [inline]
 __se_sys_unlinkat fs/namei.c:4392 [inline]
 __x64_sys_unlinkat+0xc0/0xe0 fs/namei.c:4392
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f797021c5a7
Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff81392518 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f797021c5a7
RDX: 0000000000000200 RSI: 00007fff813936c0 RDI: 00000000ffffff9c
RBP: 00007f797029fd7d R08: 00005555954ba66b R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000207 R12: 00007fff813936c0
R13: 00007f797029fd7d R14: 0000000000015044 R15: 00007fff81395880
 </TASK>
Modules linked in:
---[ end trace 6359f198cee7178e ]---
RIP: 0010:_ocfs2_free_suballoc_bits+0xe9c/0x1060 fs/ocfs2/suballoc.c:2484
Code: ff e8 48 fa 99 fe 49 8b 3f 4c 89 f6 48 8b 54 24 20 48 8b 4c 24 40 4c 8b 44 24 18 e8 8e 8c 00 00 e9 27 01 00 00 e8 04 92 55 fe <0f> 0b e8 fd 91 55 fe 0f 0b 65 44 8b 35 3b db df 7c bf 07 00 00 00
RSP: 0018:ffffc900012ff360 EFLAGS: 00010293
RAX: ffffffff83223a0c RBX: 1ffff1100dec6000 RCX: ffff88802be1bb80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc900012ff4e8 R08: dffffc0000000000 R09: fffffbfff1ad33a6
R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff88806f630878
R13: 0000000000000002 R14: 0000000000000000 R15: ffff88805f1a9000
FS:  0000555595497500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c006c07000 CR3: 000000002348c000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/01 21:37 linux-5.15.y cc5ec8769306 2c50b6a9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan kernel BUG in _ocfs2_free_suballoc_bits
2025/05/25 12:06 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/05/25 11:38 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/03/17 01:21 linux-5.15.y 0c935c049b5c e2826670 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/29 22:09 linux-5.15.y 0a51d2d4527b 5df23865 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/29 21:18 linux-5.15.y 0a51d2d4527b 5df23865 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/12/27 06:26 linux-5.15.y 68efe5a6c16a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in _ocfs2_free_suballoc_bits
2025/12/26 20:53 linux-5.15.y 68efe5a6c16a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in _ocfs2_free_suballoc_bits
2025/12/04 00:07 linux-5.15.y cc5ec8769306 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in _ocfs2_free_suballoc_bits
2025/11/01 19:30 linux-5.15.y cc5ec8769306 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in _ocfs2_free_suballoc_bits
2025/06/09 12:53 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in _ocfs2_free_suballoc_bits
2025/01/02 21:05 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan kernel BUG in _ocfs2_free_suballoc_bits
2025/04/06 12:01 linux-5.15.y 0c935c049b5c 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/03/17 00:22 linux-5.15.y 0c935c049b5c e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/03/08 12:27 linux-5.15.y c16c81c81336 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/03/03 08:26 linux-5.15.y c16c81c81336 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/01/13 23:47 linux-5.15.y 4735586da88e 249ceea9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2025/01/06 10:27 linux-5.15.y 91786f140358 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
2024/11/29 19:55 linux-5.15.y 0a51d2d4527b 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in _ocfs2_free_suballoc_bits
* Struck through repros no longer work on HEAD.