syzbot


kernel BUG in may_open

Status: upstream: reported C repro on 2025/04/02 13:46
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+5d8e79d323a13aa0b248@syzkaller.appspotmail.com
Fix commit: anon_inode: use a proper mode internally
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 43d, last: now
Cause bisection: failed (error log, bisect log)
  
Discussions (4)
Title Replies (including bot) Last reply
[PATCH 0/9] fs: harden anon inodes 31 (31) 2025/04/21 08:35
[PATCH] anon_inode: use a proper mode internally 6 (6) 2025/04/07 13:50
[PATCH 2/2] vfs: Fix anon_inode triggering VFS_BUG_ON_INODE in may_open() 8 (8) 2025/04/04 09:09
[syzbot] [fs?] kernel BUG in may_open 1 (2) 2025/04/02 21:02

Sample crash report:
VFS_BUG_ON_INODE(1) encountered for inode ffff8880228bf758
------------[ cut here ]------------
kernel BUG at fs/namei.c:3467!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 5821 Comm: syz-executor102 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
RIP: 0010:may_open+0x462/0x470 fs/namei.c:3467
Code: 38 c1 0f 8c 9b fe ff ff 4c 89 ff e8 48 72 ec ff e9 8e fe ff ff e8 7e a3 8c ff 4c 89 f7 48 c7 c6 40 04 79 8b e8 bf e9 f4 fe 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90003fc7940 EFLAGS: 00010246
RAX: 000000000000003a RBX: dffffc0000000000 RCX: 9cee96a29b7da400
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffffff8e097920 R08: ffffc90003fc7627 R09: 1ffff920007f8ec4
R10: dffffc0000000000 R11: fffff520007f8ec5 R12: ffffc90003fc7c20
R13: 00000000000fffff R14: ffff8880228bf758 R15: 0000000000000006
FS:  0000555581c0e380(0000) GS:ffff888126100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f32b09d8753 CR3: 00000000768cc000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 do_open fs/namei.c:3878 [inline]
 path_openat+0x2d91/0x3830 fs/namei.c:4039
 do_filp_open+0x1fa/0x410 fs/namei.c:4066
 do_sys_openat2+0x121/0x1c0 fs/open.c:1429
 do_sys_open fs/open.c:1444 [inline]
 __do_sys_openat fs/open.c:1460 [inline]
 __se_sys_openat fs/open.c:1455 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1455
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f32b097bae1
Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 8a 85 07 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 93 00 00 00 48 8b 54 24 28 64 48 2b 14 25
RSP: 002b:00007ffefe0be450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f32b097bae1
RDX: 0000000000000002 RSI: 00007ffefe0be4f0 RDI: 00000000ffffff9c
RBP: 00007ffefe0be4f0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 00002000000001c0
R13: 00002000000001c4 R14: 0000000000000001 R15: 0000000000000001
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:may_open+0x462/0x470 fs/namei.c:3467
Code: 38 c1 0f 8c 9b fe ff ff 4c 89 ff e8 48 72 ec ff e9 8e fe ff ff e8 7e a3 8c ff 4c 89 f7 48 c7 c6 40 04 79 8b e8 bf e9 f4 fe 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90003fc7940 EFLAGS: 00010246
RAX: 000000000000003a RBX: dffffc0000000000 RCX: 9cee96a29b7da400
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffffff8e097920 R08: ffffc90003fc7627 R09: 1ffff920007f8ec4
R10: dffffc0000000000 R11: fffff520007f8ec5 R12: ffffc90003fc7c20
R13: 00000000000fffff R14: ffff8880228bf758 R15: 0000000000000006
FS:  0000555581c0e380(0000) GS:ffff888126100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f32b09d8753 CR3: 00000000768cc000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (91167):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/09 09:19 upstream 2c89c1b655c0 bb813bcc .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/08 13:01 upstream d76bb1ebb558 dbf35fa1 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in may_open
2025/05/04 08:05 upstream 2a239ffbebb5 b0714e37 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/04/29 04:13 upstream f15d97df5afa aeb6ec69 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in may_open
2025/04/18 21:05 upstream fc96b232f8e7 2a20f901 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs kernel BUG in may_open
2025/04/02 00:07 upstream 08733088b566 d863cf4b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/08 13:10 upstream d76bb1ebb558 dbf35fa1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/08 08:18 upstream d76bb1ebb558 dbf35fa1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/06 19:03 upstream 0d8d44db295c 350f4ffc .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/06 03:05 upstream 01f95500a162 ae98e6b9 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/05 09:50 upstream 92a09c47464d 6ca47dd8 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/05 00:11 upstream 081bc61f9312 b0714e37 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/03 22:56 upstream 95d3481af6dc b0714e37 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/03 18:25 upstream 95d3481af6dc b0714e37 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/01 22:13 upstream 4f79eaa2ceac 51b137cd .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/01 11:12 upstream 7a13c14ee59d ce7952f4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/01 09:50 upstream 7a13c14ee59d ce7952f4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/01 08:51 upstream 7a13c14ee59d ce7952f4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/01 07:57 upstream 7a13c14ee59d ce7952f4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-snapshot-upstream-root kernel BUG in may_open
2025/04/30 19:51 upstream b6ea1680d0ac 937aafd7 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/04/13 23:25 upstream 5aaaedb0cb54 0bd6db41 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/04/05 00:29 upstream e48e99b6edf4 1c4febdb .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/04/04 05:55 upstream 06a22366d6a1 1740c707 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/04/03 12:25 upstream a1b5bd45d4ee 996a9618 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/12 04:03 upstream 82f2b0b97b36 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/12 02:56 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/12 02:36 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/12 01:58 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/05/12 01:33 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/12 01:10 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/05/12 00:21 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/11 23:47 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/11 23:17 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/11 22:59 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/11 22:43 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/11 22:19 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/11 20:52 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/11 20:32 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/11 20:15 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/05/11 19:59 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/11 19:41 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/11 19:25 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/11 19:12 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/11 19:04 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/11 18:22 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/11 18:14 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/11 17:41 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/11 17:10 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/11 16:13 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/09 15:41 upstream 9c69f8884904 bb813bcc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in may_open
2025/05/03 23:13 upstream 95d3481af6dc b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto kernel BUG in may_open
2025/05/11 10:11 upstream 345030986df8 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in may_open
2025/05/12 03:24 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/12 00:41 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/11 23:59 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/11 22:03 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/11 21:10 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/11 18:45 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/11 17:18 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/09 11:23 upstream 9c69f8884904 3af71fd3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/03/29 13:40 upstream 7d06015d936c d3999433 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/11 22:31 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 21:24 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 18:55 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 18:35 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 18:06 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 17:56 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 17:47 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 17:32 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 16:52 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 16:44 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 16:36 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/11 16:28 upstream 3ce9925823c7 77908e5f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/04/14 13:05 linux-next 01c6df60d5d4 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in may_open
2025/05/12 04:15 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c32f8dc5aaf9 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in may_open
2025/05/12 03:43 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c32f8dc5aaf9 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in may_open
2025/05/12 03:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c32f8dc5aaf9 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in may_open
2025/05/12 02:20 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c32f8dc5aaf9 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in may_open
2025/05/11 21:44 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c32f8dc5aaf9 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in may_open
* Struck through repros no longer work on HEAD.