syzbot


kernel BUG in ocfs2_iget

Status: upstream: reported C repro on 2025/11/01 03:15
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+f48965b346761d2f0ea3@syzkaller.appspotmail.com
First crash: 233d, last: 27d
Fix bisection: failed (error log, bisect log)
  
Bug presence (1)
Date Name Commit Repro Result
2025/11/06 upstream (ToT) dc77806cf3b4 C [report] kernel BUG in ocfs2_iget
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in ocfs2_iget prio:normal ocfs2 -1 C inconclusive 1914 10h20m 675d 0/29 upstream: reported C repro on 2024/08/15 10:47
linux-5.15 kernel BUG in ocfs2_iget missing-backport origin:upstream -1 C error 42 7d06h 575d 0/3 upstream: reported C repro on 2024/11/23 23:28
linux-6.1 kernel BUG in ocfs2_iget origin:upstream -1 C error 48 7d13h 569d 0/3 upstream: reported C repro on 2024/11/29 23:27
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2026/01/21 22:50 7m bisect fix linux-6.6.y error job log
2025/12/02 11:26 1h37m bisect fix linux-6.6.y OK (0) job log log

Sample crash report:
WARNING: The mand mount option has been deprecated and
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
(syz.0.17,5926,1):ocfs2_read_locked_inode:536 ERROR: bug expression: !!(fe->i_flags & cpu_to_le32(OCFS2_SYSTEM_FL)) != !!(args->fi_flags & OCFS2_FI_FLAG_SYSFILE)
(syz.0.17,5926,1):ocfs2_read_locked_inode:536 ERROR: Inode 71: system file state is ambiguous
------------[ cut here ]------------
kernel BUG at fs/ocfs2/inode.c:536!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 5926 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:ocfs2_read_locked_inode fs/ocfs2/inode.c:533 [inline]
RIP: 0010:ocfs2_iget+0x1916/0x19f0 fs/ocfs2/inode.c:159
Code: 00 00 4c 8b 84 24 a0 01 00 00 4c 89 f7 48 c7 c6 1b 99 a4 8c ba 18 02 00 00 48 c7 c1 a0 f3 09 8b e8 0f fb 14 00 41 c6 45 24 f8 <0f> 0b e8 e3 5f 2d fe 0f 0b e8 dc 5f 2d fe 31 f6 65 ff 0d ab e9 a9
RSP: 0018:ffffc9000456ef20 EFLAGS: 00010246
RAX: 4ddf1f2c75ed3c00 RBX: ffffc9000456f060 RCX: 4ddf1f2c75ed3c00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc9000456f190 R08: ffffc9000456eac7 R09: 1ffff920008add58
R10: dffffc0000000000 R11: fffff520008add59 R12: ffff88806c20fe2c
R13: fffff520008addec R14: ffffc9000456f080 R15: 1000000000000000
FS:  000055557b87a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0fb544b7ac CR3: 000000006d194000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 _ocfs2_get_system_file_inode fs/ocfs2/sysfile.c:142 [inline]
 ocfs2_get_system_file_inode+0x39c/0x850 fs/ocfs2/sysfile.c:112
 ocfs2_init_global_system_inodes+0x2f7/0x6d0 fs/ocfs2/super.c:457
 ocfs2_initialize_super fs/ocfs2/super.c:2252 [inline]
 ocfs2_fill_super+0x3c55/0x5010 fs/ocfs2/super.c:994
 mount_bdev+0x221/0x2d0 fs/super.c:1643
 legacy_get_tree+0xea/0x180 fs/fs_context.c:662
 vfs_get_tree+0x8c/0x280 fs/super.c:1764
 do_new_mount+0x24b/0xa40 fs/namespace.c:3386
 do_mount fs/namespace.c:3726 [inline]
 __do_sys_mount fs/namespace.c:3935 [inline]
 __se_sys_mount+0x2e7/0x3d0 fs/namespace.c:3912
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f0fb539e0ca
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcc882c608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffcc882c690 RCX: 00007f0fb539e0ca
RDX: 0000200000004440 RSI: 0000200000000040 RDI: 00007ffcc882c650
RBP: 0000200000004440 R08: 00007ffcc882c690 R09: 0000000000200840
R10: 0000000000200840 R11: 0000000000000246 R12: 0000200000000040
R13: 00007ffcc882c650 R14: 0000000000004446 R15: 0000200000000600
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ocfs2_read_locked_inode fs/ocfs2/inode.c:533 [inline]
RIP: 0010:ocfs2_iget+0x1916/0x19f0 fs/ocfs2/inode.c:159
Code: 00 00 4c 8b 84 24 a0 01 00 00 4c 89 f7 48 c7 c6 1b 99 a4 8c ba 18 02 00 00 48 c7 c1 a0 f3 09 8b e8 0f fb 14 00 41 c6 45 24 f8 <0f> 0b e8 e3 5f 2d fe 0f 0b e8 dc 5f 2d fe 31 f6 65 ff 0d ab e9 a9
RSP: 0018:ffffc9000456ef20 EFLAGS: 00010246
RAX: 4ddf1f2c75ed3c00 RBX: ffffc9000456f060 RCX: 4ddf1f2c75ed3c00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc9000456f190 R08: ffffc9000456eac7 R09: 1ffff920008add58
R10: dffffc0000000000 R11: fffff520008add59 R12: ffff88806c20fe2c
R13: fffff520008addec R14: ffffc9000456f080 R15: 1000000000000000
FS:  000055557b87a500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1556bbc000 CR3: 000000006d194000 CR4: 00000000003506f0

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/25 13:16 linux-6.6.y 0a40c6fbd105 c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-6-kasan kernel BUG in ocfs2_iget
2025/11/01 03:14 linux-6.6.y e5bbb12db2c7 2c50b6a9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-6-kasan kernel BUG in ocfs2_iget
2026/05/25 12:16 linux-6.6.y 0a40c6fbd105 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in ocfs2_iget
2026/05/25 12:16 linux-6.6.y 0a40c6fbd105 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in ocfs2_iget
2025/12/22 05:45 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan kernel BUG in ocfs2_iget
* Struck through repros no longer work on HEAD.