syzbot


kernel BUG at fs/notify/dnotify/dnotify.c:LINE!

Status: fixed on 2017/11/28 03:36
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+90f69089b33f69001096a6aab6d3630eae0089f7@syzkaller.appspotmail.com
Fix commit: b3a006600582 dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()
First crash: 2416d, last: 2329d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 kernel BUG at fs/notify/dnotify/dnotify.c:LINE! C error 1 920d 1233d 0/1 upstream: reported C repro on 2020/11/11 16:55
linux-4.14 kernel BUG at fs/notify/dnotify/dnotify.c:LINE! C error 3 762d 1265d 0/1 upstream: reported C repro on 2020/10/11 14:27
upstream kernel BUG at fs/notify/dnotify/dnotify.c:LINE! (2) fuse C inconclusive 2 1216d 1222d 19/26 fixed on 2021/03/10 01:48

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/notify/dnotify/dnotify.c:131!
invalid opcode: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 16774 Comm: syz-executor2 Not tainted 4.14.0-rc8+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801ceade3c0 task.stack: ffff8801d07e8000
RIP: 0010:dnotify_free_mark+0x4b/0x60 fs/notify/dnotify/dnotify.c:131
RSP: 0018:ffff8801d07ef910 EFLAGS: 00010246
RAX: 0000000000010000 RBX: ffff8801bee7e000 RCX: ffffc90002457000
RDX: 0000000000010000 RSI: ffffffff81bca17b RDI: ffff8801bee7e078
RBP: ffff8801d07ef918 R08: 0000000000000001 R09: 0000000000000000
R10: ffffffff8729f640 R11: 0000000000000000 R12: ffff8801bee7e000
R13: ffffffff85124d80 R14: ffff8801d07efa50 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f77d5b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000008090020 CR3: 00000001cf1da000 CR4: 00000000001426e0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 fsnotify_final_mark_destroy+0x7d/0xc0 fs/notify/mark.c:202
 fsnotify_put_mark+0x469/0x730 fs/notify/mark.c:215
 fcntl_dirnotify+0xa12/0xb90 fs/notify/dnotify/dnotify.c:371
 do_fcntl+0x9e0/0x1050 fs/fcntl.c:413
 C_SYSC_fcntl64 fs/fcntl.c:669 [inline]
 compat_SyS_fcntl64+0x3fc/0x4b0 fs/fcntl.c:607
 do_syscall_32_irqs_on arch/x86/entry/common.c:329 [inline]
 do_fast_syscall_32+0x3f2/0xf05 arch/x86/entry/common.c:391
 entry_SYSENTER_compat+0x51/0x60 arch/x86/entry/entry_64_compat.S:125
RIP: 0023:0xf7fd9c79
RSP: 002b:00000000f77d501c EFLAGS: 00000296 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000000402
RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: ea 03 80 3c 02 00 75 25 48 83 7b 78 00 75 17 e8 7c fd b0 ff 48 8b 3d 85 e7 7f 04 48 89 de e8 1d a1 e5 ff 5b 5d c3 e8 65 fd b0 ff <0f> 0b e8 8e dc e5 ff eb d4 66 90 66 2e 0f 1f 84 00 00 00 00 00 
RIP: dnotify_free_mark+0x4b/0x60 fs/notify/dnotify/dnotify.c:131 RSP: ffff8801d07ef910
---[ end trace d47c1424d4c37c1a ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/11/12 02:21 upstream b39545684a90 e0a2b195 .config console log report ci-upstream-kasan-gce
2017/11/08 00:52 upstream fbc3edf7d773 9547ae3a .config console log report ci-upstream-kasan-gce
2017/11/03 16:44 upstream 866ba84ea30f e930d6f6 .config console log report ci-upstream-kasan-gce
2017/10/28 06:44 upstream 11224e1fc40a 80c74880 .config console log report ci-upstream-kasan-gce
2017/10/22 08:30 upstream b5ac3beb5a9f ab829b1b .config console log report ci-upstream-kasan-gce
2017/09/30 00:08 upstream 99637e4268ea c26ea367 .config console log report ci-upstream-kasan-gce
2017/09/12 13:16 upstream c971aa3693e1 0bd6a0a5 .config console log report ci-upstream-kasan-gce
2017/08/23 12:35 upstream 98b9f8a45499 f238fbd4 .config console log report ci-upstream-kasan-gce
2017/11/02 14:42 upstream 3a99df9a3d14 dab7524e .config console log report ci-upstream-kasan-gce-386
2017/10/26 07:47 upstream 4ed590271a65 6fd57ceb .config console log report ci-upstream-kasan-gce-386
2017/10/23 20:22 upstream 6cff0a118f23 92f543f0 .config console log report ci-upstream-kasan-gce-386
2017/09/27 10:00 upstream dc972a67cc54 c26ea367 .config console log report ci-upstream-kasan-gce-386
2017/10/27 22:16 mmots 0f611fb6dcc0 e0a2b195 .config console log report ci-upstream-mmots-kasan-gce
2017/10/26 19:25 linux-next 36ef71cae353 e511d9f8 .config console log report skylake-linux-next-kasan-qemu
2017/10/17 12:08 linux-next 49827b977a2e 441d64d9 .config console log report ci-upstream-next-kasan-gce
2017/09/19 04:47 linux-next 840cc455c5f5 92f543f0 .config console log report ci-upstream-next-kasan-gce
2017/09/18 18:12 linux-next fc2e8b1a47c1 2bab8ad8 .config console log report skylake-linux-next-kasan-qemu
2017/09/05 19:59 linux-next 744c56def809 0ed1da4a .config console log report skylake-linux-next-kasan-qemu
2017/08/17 08:28 linux-next bb70832dd42b f238fbd4 .config console log report skylake-linux-next-kasan-qemu
* Struck through repros no longer work on HEAD.