syzbot


WARNING in __kernfs_new_node

Status: upstream: reported on 2026/06/17 06:30
Subsystems: kernfs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+ed4cf6ba7dd6164eb4ff@syzkaller.appspotmail.com
First crash: 24d, last: 5d02h
✨ AI Jobs (5)
ID Workflow Result Correct Bug Created Started Finished Revision Error
0d69d2f4-24a8-47af-9c49-f5e4ba0a9646 assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ✅ WARNING in __kernfs_new_node 2026/07/01 00:33 2026/07/01 00:33 2026/07/01 01:08 93f579545ae410f5bccfa141d2e7bf03178f036c

			
		
e91ff4c9-b182-4ba7-8a55-97d9b61bf347 assessment-security 💥 WARNING in __kernfs_new_node 2026/06/23 00:06 2026/06/23 00:06 2026/06/23 00:08 5a630be623a83f54a0e7a5a72d78827acdc85248
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/d515f8819783b276bb...
truncated to first 200 bytes; open job for full error
beaea409-38c3-4b7c-8e66-4d787a5ce289 assessment-security 💥 WARNING in __kernfs_new_node 2026/06/19 00:04 2026/06/19 00:04 2026/06/19 00:07 24486521e841016092c2967aa4c1f4c16238080e
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/d515f8819783b276bb...
truncated to first 200 bytes; open job for full error
b7670971-8af9-402d-bd77-e5718277cfcb assessment-security 💥 WARNING in __kernfs_new_node 2026/06/17 00:02 2026/06/17 00:02 2026/06/17 00:03 0e4b3e40a4572a10f991eaf3b70977db43e1fa9b
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/d515f8819783b276bb...
truncated to first 200 bytes; open job for full error
3e9ce9a2-586b-441c-bf00-aa9b5dd46ff6 assessment-security 💥 WARNING in __kernfs_new_node 2026/06/15 00:02 2026/06/15 00:02 2026/06/15 00:05 4f06757f683a802254a4c8edbfe67ff801904c5e
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/d515f8819783b276bb...
truncated to first 200 bytes; open job for full error
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernfs?] WARNING in __kernfs_new_node 0 (1) 2026/06/17 06:30

Sample crash report:
usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
------------[ cut here ]------------
!atomic_read(&kn->count)
WARNING: fs/kernfs/dir.c:560 at kernfs_get fs/kernfs/dir.c:560 [inline], CPU#0: kworker/0:0/15250
WARNING: fs/kernfs/dir.c:560 at __kernfs_new_node+0x7d0/0x980 fs/kernfs/dir.c:704, CPU#0: kworker/0:0/15250
Modules linked in:
CPU: 0 UID: 0 PID: 15250 Comm: kworker/0:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: events request_firmware_work_func
RIP: 0010:kernfs_get fs/kernfs/dir.c:560 [inline]
RIP: 0010:__kernfs_new_node+0x7d0/0x980 fs/kernfs/dir.c:704
Code: c0 0f 85 a1 01 00 00 44 8b 25 20 4f bf 0d 31 ff 44 89 e6 e8 12 89 52 ff 45 85 e4 74 1c e8 c8 84 52 ff eb 2d e8 c1 84 52 ff 90 <0f> 0b 90 e9 9f fd ff ff e8 b3 84 52 ff eb 18 e8 ac 84 52 ff 48 8d
RSP: 0018:ffffc900057e7440 EFLAGS: 00010293
RAX: ffffffff8273dcff RBX: 0000000000000000 RCX: ffff8880505f3e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900057e7598 R08: ffff88805863d3c3 R09: 1ffff1100b0c7a78
R10: dffffc0000000000 R11: ffffed100b0c7a79 R12: ffff88807dde5e10
R13: dffffc0000000000 R14: 1ffff92000afce94 R15: ffff88807dde5e10
FS:  0000000000000000(0000) GS:ffff888125220000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000002a000 CR3: 000000007eec0000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 kernfs_new_node fs/kernfs/dir.c:751 [inline]
 kernfs_create_dir_ns+0xfe/0x230 fs/kernfs/dir.c:1120
 sysfs_create_dir_ns+0x12f/0x2a0 fs/sysfs/dir.c:59
 create_dir lib/kobject.c:73 [inline]
 kobject_add_internal+0x622/0xcd0 lib/kobject.c:240
 kobject_add_varg lib/kobject.c:374 [inline]
 kobject_add+0x163/0x240 lib/kobject.c:426
 class_dir_create_and_add drivers/base/core.c:3300 [inline]
 get_device_parent+0x316/0x3a0 drivers/base/core.c:3351
 device_add+0x2d4/0xb80 drivers/base/core.c:3681
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:86 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:162 [inline]
 firmware_fallback_sysfs+0x2dd/0xa40 drivers/base/firmware_loader/fallback.c:238
 _request_firmware+0x1049/0x1780 drivers/base/firmware_loader/main.c:898
 request_firmware_work_func+0xac/0x2d0 drivers/base/firmware_loader/main.c:1162
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/02 06:52 upstream 4a50a141f05a 27192279 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __kernfs_new_node
2026/06/28 22:39 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __kernfs_new_node
2026/06/28 14:24 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __kernfs_new_node
2026/06/28 04:03 upstream 780d569e6c4b fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __kernfs_new_node
2026/06/25 07:49 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __kernfs_new_node
2026/06/14 08:05 linux-next ec039126b7fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in __kernfs_new_node
2026/06/14 07:03 linux-next ec039126b7fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in __kernfs_new_node
2026/06/13 06:27 linux-next ec039126b7fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in __kernfs_new_node
* Struck through repros no longer work on HEAD.