syzbot


kernel BUG in dnotify_free_mark

Status: upstream: reported C repro on 2023/07/30 07:52
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+2f4aa3239150dd006e44@syzkaller.appspotmail.com
First crash: 984d, last: 8h02m
Fix commit to backport (bisect log) :
tree: upstream
commit 4ad5c924df6cd6d85708fa23f9d9a2b78a2e428e
Author: Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
Date: Fri Sep 22 10:07:59 2023 +0000

  fs/ntfs3: Allow repeated call to ntfs3_put_sbi

  
Bug presence (3)
Date Name Commit Repro Result
2023/10/28 linux-6.1.y (ToT) 32c9cdbe383c C [report] kernel BUG in dnotify_free_mark
2023/07/30 upstream (ToT) d31e3792919e C [report] kernel BUG in dnotify_free_mark
2023/10/28 upstream (ToT) 2af9b20dbb39 C Didn't crash
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in dnotify_free_mark ntfs3 -1 C error done 22993 241d 1259d 29/29 fixed on 2025/11/17 09:14
linux-5.15 kernel BUG in dnotify_free_mark missing-backport origin:upstream -1 C done 608 40d 630d 0/3 upstream: reported C repro on 2024/07/18 09:21
linux-6.6 kernel BUG in dnotify_free_mark origin:lts-only -1 C inconclusive 137 66d 254d 0/2 upstream: reported C repro on 2025/07/29 04:21
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/11/23 13:40 3h54m fix candidate upstream OK (1) job log
2023/09/29 04:09 1h18m bisect fix linux-6.1.y OK (0) job log log
marked invalid by web-security-scanner@google.com

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/notify/dnotify/dnotify.c:136!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: events_unbound fsnotify_mark_destroy_workfn
RIP: 0010:dnotify_free_mark+0x53/0x60 fs/notify/dnotify/dnotify.c:136
Code: 4c 89 f7 e8 1f c5 df ff 49 83 3e 00 75 17 e8 f4 b9 8e ff 48 8b 3d ad 55 2c 0c 48 89 de 5b 41 5e e9 72 fb de ff e8 dd b9 8e ff <0f> 0b 00 00 cc cc 00 00 cc cc 00 00 cc 55 41 57 41 56 41 55 41 54
RSP: 0018:ffffc900000e7b68 EFLAGS: 00010293
RAX: ffffffff81f3bab3 RBX: ffff88807a224000 RCX: ffff88813fe78000
RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffff88807a224000
RBP: ffffc900000e7c30 R08: ffffffff90af72ff R09: 1ffffffff215ee5f
R10: dffffc0000000000 R11: fffffbfff215ee60 R12: 1ffff1100f444802
R13: dffffc0000000000 R14: ffff88807a224080 R15: ffffffff8a9a2ae8
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f37963ee000 CR3: 0000000028e33000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 fsnotify_final_mark_destroy fs/notify/mark.c:304 [inline]
 fsnotify_mark_destroy_workfn+0x257/0x2f0 fs/notify/mark.c:928
 process_one_work+0x8a2/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaa2/0x1270 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:dnotify_free_mark+0x53/0x60 fs/notify/dnotify/dnotify.c:136
Code: 4c 89 f7 e8 1f c5 df ff 49 83 3e 00 75 17 e8 f4 b9 8e ff 48 8b 3d ad 55 2c 0c 48 89 de 5b 41 5e e9 72 fb de ff e8 dd b9 8e ff <0f> 0b 00 00 cc cc 00 00 cc cc 00 00 cc 55 41 57 41 56 41 55 41 54
RSP: 0018:ffffc900000e7b68 EFLAGS: 00010293
RAX: ffffffff81f3bab3 RBX: ffff88807a224000 RCX: ffff88813fe78000
RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffff88807a224000
RBP: ffffc900000e7c30 R08: ffffffff90af72ff R09: 1ffffffff215ee5f
R10: dffffc0000000000 R11: fffffbfff215ee60 R12: 1ffff1100f444802
R13: dffffc0000000000 R14: ffff88807a224080 R15: ffffffff8a9a2ae8
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055db7aef21a8 CR3: 0000000030f57000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2618):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/09 19:30 linux-6.1.y 1989cd3d56e2 38c8e246 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2025/02/19 13:20 linux-6.1.y 0cbb5f65e52f 9a14138f .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2024/11/09 12:28 linux-6.1.y d7039b844a1c 6b856513 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2024/04/20 03:45 linux-6.1.y 6741e066ec76 af24b050 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2023/07/30 07:52 linux-6.1.y d2a6dc4eaf6d 92476829 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2025/12/28 13:03 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
2025/12/23 05:45 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
2026/04/09 03:59 linux-6.1.y 1989cd3d56e2 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/08 16:08 linux-6.1.y 1989cd3d56e2 d9b7f621 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/08 00:59 linux-6.1.y 1989cd3d56e2 2c961e87 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 12:58 linux-6.1.y 1989cd3d56e2 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 12:58 linux-6.1.y 1989cd3d56e2 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 08:33 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/06 05:12 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/03 00:05 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/02 11:56 linux-6.1.y 1989cd3d56e2 91bc79b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/01 23:35 linux-6.1.y 1989cd3d56e2 0cb124d5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/01 11:59 linux-6.1.y 1989cd3d56e2 9a1f7828 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/31 23:13 linux-6.1.y 1989cd3d56e2 fb8b2c26 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/31 11:06 linux-6.1.y 1989cd3d56e2 aeea1c72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 22:44 linux-6.1.y 1989cd3d56e2 d0af506e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 10:39 linux-6.1.y 1989cd3d56e2 dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 10:37 linux-6.1.y 1989cd3d56e2 dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/28 15:30 linux-6.1.y 1989cd3d56e2 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/28 03:20 linux-6.1.y 1989cd3d56e2 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/27 14:40 linux-6.1.y 1989cd3d56e2 74a13a23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/26 13:36 linux-6.1.y 1989cd3d56e2 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/26 13:35 linux-6.1.y 1989cd3d56e2 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/25 23:05 linux-6.1.y 1989cd3d56e2 c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/25 13:45 linux-6.1.y 1989cd3d56e2 8ee77f7d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/24 15:04 linux-6.1.y f2ddafa93a25 74e70d19 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/24 02:46 linux-6.1.y f2ddafa93a25 baf8bf12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/23 14:35 linux-6.1.y f2ddafa93a25 4933dba2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/23 14:35 linux-6.1.y f2ddafa93a25 4933dba2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/22 23:30 linux-6.1.y f2ddafa93a25 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/21 05:38 linux-6.1.y f2ddafa93a25 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/20 17:36 linux-6.1.y f2ddafa93a25 ac6f1dff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/20 05:02 linux-6.1.y f2ddafa93a25 2f245add .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/19 13:14 linux-6.1.y f2ddafa93a25 bd6dcb30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/18 13:47 linux-6.1.y f2ddafa93a25 0199f9a1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/18 13:46 linux-6.1.y f2ddafa93a25 0199f9a1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/17 22:41 linux-6.1.y f2ddafa93a25 c8810548 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/17 10:04 linux-6.1.y f2ddafa93a25 c01bca74 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/16 22:45 linux-6.1.y f2ddafa93a25 0737c18f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/16 22:40 linux-6.1.y f2ddafa93a25 0737c18f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/12 12:57 linux-6.1.y f2ddafa93a25 4efadf07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/11 20:03 linux-6.1.y f2ddafa93a25 2d88ab01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/11 16:42 linux-6.1.y f2ddafa93a25 2d88ab01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/11 03:56 linux-6.1.y f2ddafa93a25 86914af9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/11 03:55 linux-6.1.y f2ddafa93a25 86914af9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/10 16:14 linux-6.1.y f2ddafa93a25 4683d576 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/10 03:25 linux-6.1.y f2ddafa93a25 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/02/03 01:38 linux-6.1.y cd9b81672742 d78927dd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
* Struck through repros no longer work on HEAD.