syzbot


kernel BUG in may_open

Status: upstream: reported C repro on 2025/04/02 13:46
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+5d8e79d323a13aa0b248@syzkaller.appspotmail.com
Fix commit: anon_inode: use a proper mode internally
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 50d, last: now
Cause bisection: failed (error log, bisect log)
  
Discussions (4)
Title Replies (including bot) Last reply
[PATCH 0/9] fs: harden anon inodes 31 (31) 2025/04/21 08:35
[PATCH] anon_inode: use a proper mode internally 6 (6) 2025/04/07 13:50
[PATCH 2/2] vfs: Fix anon_inode triggering VFS_BUG_ON_INODE in may_open() 8 (8) 2025/04/04 09:09
[syzbot] [fs?] kernel BUG in may_open 1 (2) 2025/04/02 21:02

Sample crash report:
ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
VFS_BUG_ON_INODE(1) encountered for inode ffff888075225318
------------[ cut here ]------------
kernel BUG at fs/namei.c:3467!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 5821 Comm: syz-executor217 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:may_open+0x462/0x470 fs/namei.c:3467
Code: 38 c1 0f 8c 9b fe ff ff 4c 89 ff e8 b8 6e ec ff e9 8e fe ff ff e8 ce 9f 8c ff 4c 89 f7 48 c7 c6 00 0a 79 8b e8 df c4 f4 fe 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000430f940 EFLAGS: 00010246
RAX: 000000000000003a RBX: dffffc0000000000 RCX: bf56c11bc0cc4e00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffffff8e099de0 R08: ffffc9000430f627 R09: 1ffff92000861ec4
R10: dffffc0000000000 R11: fffff52000861ec5 R12: ffffc9000430fc20
R13: 00000000000fffff R14: ffff888075225318 R15: 0000000000000002
FS:  000055555bd73380(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056510a5a8078 CR3: 000000002c584000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 do_open fs/namei.c:3878 [inline]
 path_openat+0x2d91/0x3830 fs/namei.c:4039
 do_filp_open+0x1fa/0x410 fs/namei.c:4066
 do_sys_openat2+0x121/0x1c0 fs/open.c:1429
 do_sys_open fs/open.c:1444 [inline]
 __do_sys_openat fs/open.c:1460 [inline]
 __se_sys_openat fs/open.c:1455 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1455
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0f18eb9d59
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff165516f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f0f18eb9d59
RDX: 0000000000183341 RSI: 0000200000000080 RDI: 00000000ffffff9c
RBP: 00007f0f18f4d5f0 R08: 000000000001f1ba R09: 000055555bd744c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff16551720
R13: 00007fff16551948 R14: 431bde82d7b634db R15: 00007f0f18f0303b
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:may_open+0x462/0x470 fs/namei.c:3467
Code: 38 c1 0f 8c 9b fe ff ff 4c 89 ff e8 b8 6e ec ff e9 8e fe ff ff e8 ce 9f 8c ff 4c 89 f7 48 c7 c6 00 0a 79 8b e8 df c4 f4 fe 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000430f940 EFLAGS: 00010246
RAX: 000000000000003a RBX: dffffc0000000000 RCX: bf56c11bc0cc4e00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffffff8e099de0 R08: ffffc9000430f627 R09: 1ffff92000861ec4
R10: dffffc0000000000 R11: fffff52000861ec5 R12: ffffc9000430fc20
R13: 00000000000fffff R14: ffff888075225318 R15: 0000000000000002
FS:  000055555bd73380(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056510a5a8078 CR3: 000000002c584000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (103109):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/12 23:06 upstream 627277ba7c23 f6671af7 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in may_open
2025/05/09 09:19 upstream 2c89c1b655c0 bb813bcc .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/08 13:01 upstream d76bb1ebb558 dbf35fa1 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in may_open
2025/05/04 08:05 upstream 2a239ffbebb5 b0714e37 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/04/29 04:13 upstream f15d97df5afa aeb6ec69 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in may_open
2025/04/18 21:05 upstream fc96b232f8e7 2a20f901 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs kernel BUG in may_open
2025/04/02 00:07 upstream 08733088b566 d863cf4b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/12 07:42 upstream cd802e7e5f1e 77908e5f .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/08 13:10 upstream d76bb1ebb558 dbf35fa1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/08 08:18 upstream d76bb1ebb558 dbf35fa1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/06 19:03 upstream 0d8d44db295c 350f4ffc .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/06 03:05 upstream 01f95500a162 ae98e6b9 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/05 09:50 upstream 92a09c47464d 6ca47dd8 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/05 00:11 upstream 081bc61f9312 b0714e37 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/03 22:56 upstream 95d3481af6dc b0714e37 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/03 18:25 upstream 95d3481af6dc b0714e37 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/01 22:13 upstream 4f79eaa2ceac 51b137cd .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/01 11:12 upstream 7a13c14ee59d ce7952f4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/01 09:50 upstream 7a13c14ee59d ce7952f4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/01 08:51 upstream 7a13c14ee59d ce7952f4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/01 07:57 upstream 7a13c14ee59d ce7952f4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-snapshot-upstream-root kernel BUG in may_open
2025/04/30 19:51 upstream b6ea1680d0ac 937aafd7 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/04/13 23:25 upstream 5aaaedb0cb54 0bd6db41 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/04/05 00:29 upstream e48e99b6edf4 1c4febdb .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/04/04 05:55 upstream 06a22366d6a1 1740c707 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/04/03 12:25 upstream a1b5bd45d4ee 996a9618 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/15 21:24 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c919f08732cc d6b2ee52 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in may_open
2025/05/14 10:56 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c32f8dc5aaf9 7344edeb .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in may_open
2025/05/18 16:20 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/18 16:08 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/05/18 16:00 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/18 15:45 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/05/18 15:38 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 15:30 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/18 15:10 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 15:02 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/18 14:49 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 14:20 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 14:13 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 14:05 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 13:58 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 13:41 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 13:35 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/18 13:26 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 13:18 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/18 13:03 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in may_open
2025/05/18 12:46 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/18 12:38 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/05/18 12:30 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/18 11:53 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in may_open
2025/05/18 11:46 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/18 11:39 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/18 11:04 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/18 10:52 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in may_open
2025/05/18 10:42 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/18 10:18 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 10:08 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in may_open
2025/05/18 09:59 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/18 09:37 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce kernel BUG in may_open
2025/05/18 09:23 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in may_open
2025/05/03 23:13 upstream 95d3481af6dc b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto kernel BUG in may_open
2025/05/18 15:52 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in may_open
2025/05/18 15:23 upstream 5723cc3450bc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 kernel BUG in may_open
2025/05/18 14:58 upstream 5723cc3450bc f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/18 14:39 upstream 5723cc3450bc f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/18 13:11 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/18 12:53 upstream 5723cc3450bc f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/18 12:15 upstream 5723cc3450bc f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/05/18 11:27 upstream 5723cc3450bc f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in may_open
2025/03/29 13:40 upstream 7d06015d936c d3999433 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in may_open
2025/05/18 16:13 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 15:16 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 14:29 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 13:50 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 12:24 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 12:05 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 11:57 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 11:31 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 11:15 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 10:32 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/05/18 09:48 upstream 5723cc3450bc f41472b0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in may_open
2025/04/14 13:05 linux-next 01c6df60d5d4 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in may_open
2025/05/17 08:13 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a82e92598ab1 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in may_open
* Struck through repros no longer work on HEAD.