syzbot


WARNING in kernfs_get (5)

Status: upstream: reported syz repro on 2024/05/08 11:07
Subsystems: usb kernfs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+2f44671e54488d20f0e6@syzkaller.appspotmail.com
First crash: 792d, last: 5h59m
Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: SYZFAIL: NL802154_CMD_SET_SHORT_ADDR failed (log)
Repro: syz .config
  
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision Error
10a17fde-77f8-4cb4-82d9-6a1b2f697688 patching 💥 WARNING in kernfs_get (5) 2026/06/24 14:06 2026/06/24 14:06 2026/06/24 14:32 2e5297c5126f27e51eeef9157f2111c5beb11e4f
reproducer did not crash
660feb64-56af-4c9b-b16a-60d247ea6d97 assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ WARNING in kernfs_get (5) 2026/05/30 11:10 2026/05/30 11:10 2026/05/30 12:05 6b4a844333e83556da95d61d7f207e7ef5cd4bc6

			
		
97129227-8265-4ceb-ad7f-0b56e0949ac8 assessment-security 💥 WARNING in kernfs_get (5) 2026/05/14 09:48 2026/05/14 09:48 2026/05/14 09:49 6ccb967e465e832a7bfd7a116ad00d52a0923a5d
failed to run ["git" "pull" "origin" "HEAD" "--depth=1" "--allow-unrelated-histories"]: exit status 128
From /app/workdir/repo/linux
 * branch                HEAD       -> FETCH_HEAD
Updating files:  ...
truncated to first 200 bytes; open job for full error
Discussions (23)
Title Replies (including bot) Last reply
[syzbot] Monthly kernfs report (Jul 2026) 0 (1) 2026/07/01 12:32
[syzbot] Monthly kernfs report (May 2026) 0 (1) 2026/05/31 04:32
[syzbot] Monthly kernfs report (Apr 2026) 0 (1) 2026/04/29 20:32
[syzbot] Monthly kernfs report (Mar 2026) 0 (1) 2026/03/31 08:06
[syzbot] Monthly kernfs report (Feb 2026) 0 (1) 2026/02/26 12:58
[syzbot] Monthly kernfs report (Jan 2026) 0 (1) 2026/01/26 07:12
[syzbot] Monthly kernfs report (Dec 2025) 0 (1) 2025/12/26 07:48
[syzbot] Monthly kernfs report (Nov 2025) 0 (1) 2025/11/25 08:46
[syzbot] Monthly kernfs report (Oct 2025) 0 (1) 2025/10/24 18:48
[syzbot] Monthly kernfs report (Sep 2025) 0 (1) 2025/09/23 13:33
[syzbot] Monthly kernfs report (Aug 2025) 0 (1) 2025/08/23 16:32
[syzbot] Monthly kernfs report (Jul 2025) 0 (1) 2025/07/23 10:04
[syzbot] Monthly kernfs report (Jun 2025) 0 (1) 2025/06/23 07:33
[syzbot] Monthly kernfs report (May 2025) 0 (1) 2025/05/21 14:55
[syzbot] Monthly kernfs report (Apr 2025) 0 (1) 2025/04/22 10:11
[syzbot] Monthly kernfs report (Mar 2025) 0 (1) 2025/03/19 21:29
[syzbot] Monthly kernfs report (Feb 2025) 0 (1) 2025/02/16 21:54
[syzbot] Monthly kernfs report (Jan 2025) 0 (1) 2025/01/16 10:12
[syzbot] Monthly kernfs report (Dec 2024) 0 (1) 2024/12/16 09:45
[syzbot] Monthly kernfs report (Nov 2024) 0 (1) 2024/11/15 11:25
[syzbot] Monthly kernfs report (Oct 2024) 0 (1) 2024/10/15 10:07
[syzbot] Monthly kernfs report (Jul 2024) 0 (1) 2024/07/09 14:10
[syzbot] [kernfs?] WARNING in kernfs_get (5) 3 (8) 2024/05/16 14:52
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in kernfs_get -1 C done 14 2488d 2627d 1/1 fixed on 2019/12/05 23:59
linux-6.6 WARNING in kernfs_get -1 6 317d 372d 0/2 auto-obsoleted due to no activity on 2025/11/30 05:21
upstream WARNING in kernfs_get (2) kernfs -1 2 2107d 2125d 0/29 auto-closed as invalid on 2021/01/25 03:55
linux-4.14 WARNING in kernfs_get -1 C done 17 2512d 2631d 1/1 fixed on 2019/12/07 19:24
upstream WARNING in kernfs_get (4) kernfs -1 syz error 3 1243d 1246d 0/29 auto-obsoleted due to no activity on 2023/06/07 19:32
upstream WARNING in kernfs_get -1 C done 316 2526d 2855d 13/29 fixed on 2019/11/20 22:01
upstream WARNING in kernfs_get (3) kernfs -1 3 1672d 1676d 0/29 auto-closed as invalid on 2022/02/04 06:25
android-414 WARNING in kernfs_get -1 syz 69 2490d 2643d 0/1 public: reported syz repro on 2019/04/10 15:44
Last patch testing requests (13)
Created Duration User Patch Repo Result
2026/05/07 00:01 30m retest repro linux-next OK log
2026/05/07 00:01 41m retest repro upstream OK log
2026/05/07 00:01 48m retest repro upstream report log
2026/05/07 00:01 1h21m retest repro upstream OK log
2026/05/07 00:01 1h20m retest repro linux-next OK log
2026/03/16 22:44 17m retest repro upstream OK log
2026/03/16 22:44 17m retest repro upstream log
2026/02/03 07:00 32m retest repro linux-next error
2026/02/03 07:00 20m retest repro linux-next error
2026/02/03 07:00 23m retest repro upstream OK log
2024/05/16 14:28 21m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 26dd54d03cd9 OK log
2024/05/15 10:33 2h32m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 26dd54d03cd9 OK log
2024/05/14 23:23 1h04m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git 26dd54d03cd9 report log

Sample crash report:
usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
------------[ cut here ]------------
WARNING: CPU: 1 PID: 1165 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 fs/kernfs/dir.c:537
Modules linked in:
CPU: 1 UID: 0 PID: 1165 Comm: kworker/1:2 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
Workqueue: events request_firmware_work_func
RIP: 0010:kernfs_get+0x72/0x90 fs/kernfs/dir.c:537
Code: e8 a3 b4 64 ff 48 89 df be 04 00 00 00 e8 36 ac c6 ff f0 ff 03 eb 05 e8 8c b4 64 ff 5b 5d c3 cc cc cc cc cc e8 7f b4 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35
RSP: 0018:ffffc90003fcf6c0 EFLAGS: 00010293
RAX: ffffffff825b0bd1 RBX: ffff88807f837d20 RCX: ffff888026ae8000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffff88807f837d23 R09: 1ffff1100ff06fa4
R10: dffffc0000000000 R11: ffffed100ff06fa5 R12: ffff8880716df030
R13: 1ffff1100e2dbe07 R14: ffff8880716df038 R15: 1ffff1100e2dbe06
FS:  0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c0015c2030 CR3: 000000007e6d2000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 sysfs_get include/linux/sysfs.h:816 [inline]
 create_dir lib/kobject.c:89 [inline]
 kobject_add_internal+0x632/0xb40 lib/kobject.c:240
 kobject_add_varg lib/kobject.c:374 [inline]
 kobject_add+0x155/0x220 lib/kobject.c:426
 device_add+0x408/0xb50 drivers/base/core.c:3630
 fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:86 [inline]
 fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:162 [inline]
 firmware_fallback_sysfs+0x2e4/0x9b0 drivers/base/firmware_loader/fallback.c:238
 _request_firmware+0xf83/0x15b0 drivers/base/firmware_loader/main.c:941
 request_firmware_work_func+0xaf/0x1c0 drivers/base/firmware_loader/main.c:1194
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xadb/0x17a0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (723):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/02 02:41 upstream ebd297a2affa 51b137cd .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/02/12 05:22 upstream 1e83ccd5921a 76a109e2 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in kernfs_get
2024/05/14 15:44 linux-next 26dd54d03cd9 fdb4c10c .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kernfs_get
2026/07/05 10:43 upstream 7404ce516372 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/05 09:14 upstream 7404ce516372 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/05 05:53 upstream 7404ce516372 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/05 00:37 upstream 1e9cdc2ea15a fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/04 18:27 upstream 1e9cdc2ea15a fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/04 13:16 upstream 1e9cdc2ea15a fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/03 16:48 upstream d2c9a99135da 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/03 14:35 upstream 87320be9f0d2 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/03 12:21 upstream 87320be9f0d2 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/03 03:17 upstream 87320be9f0d2 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/07/02 01:33 upstream 4a50a141f05a 27192279 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/30 22:32 upstream dc59e4fea9d8 00e8b0fd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/30 18:09 upstream dc59e4fea9d8 00e8b0fd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/30 11:49 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/29 21:27 upstream dc59e4fea9d8 6a0c72dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/29 03:58 upstream dc59e4fea9d8 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/29 02:42 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/29 00:43 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/28 13:25 upstream 780d569e6c4b fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/28 07:52 upstream 780d569e6c4b fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/27 22:03 upstream 5a66900afbd6 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/27 10:27 upstream 5a66900afbd6 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/27 07:04 upstream 51cb1aa1250c fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/27 04:12 upstream 51cb1aa1250c fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/26 21:02 upstream 51cb1aa1250c fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/26 09:04 upstream 4edcdefd4083 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/26 04:15 upstream 962528fef902 432fd51a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/25 20:56 upstream ab9de95c9cf9 432fd51a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/22 16:58 upstream ef0c9f75a195 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/20 05:56 upstream c98d767b3457 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/19 14:45 upstream 8c13415c8a43 d7ffd47b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/18 10:39 upstream e771677c937d a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/15 10:29 upstream 8cd9520d35a6 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/14 19:22 upstream e21ee273e6fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/14 13:36 upstream e21ee273e6fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/14 12:13 upstream e21ee273e6fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in kernfs_get
2026/06/14 07:40 upstream 2b07ea76fd28 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in kernfs_get
2026/06/14 05:28 upstream 2b07ea76fd28 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in kernfs_get
2026/06/14 04:08 upstream 2b07ea76fd28 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/06/14 02:10 upstream 2b07ea76fd28 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in kernfs_get
2026/05/13 01:18 upstream c21b90f77687 a0949470 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in kernfs_get
2025/12/29 18:22 upstream 7839932417dd d6526ea3 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2025/12/19 08:10 upstream 516471569089 d6526ea3 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in kernfs_get
2024/12/24 10:41 upstream f07044dd0df0 444551c4 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2024/05/04 10:57 upstream 3d25a941ea50 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kernfs_get
2026/04/19 19:26 upstream faeab166167f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in kernfs_get
2026/06/30 08:28 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in kernfs_get
2026/06/25 05:41 upstream f0e6f20cb52b cfa969bf .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in kernfs_get
2026/02/27 01:17 upstream 3f4a08e64442 a2f13f71 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in kernfs_get
2026/02/23 12:36 upstream 6de23f81a5e0 7c9658af .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in kernfs_get
2025/02/18 22:13 net-next 4991b88c2514 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in kernfs_get
2026/07/05 04:08 linux-next 2b763db0c276 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kernfs_get
2026/06/15 15:48 linux-next c425609d6ac4 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kernfs_get
2026/06/15 12:40 linux-next ec039126b7fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in kernfs_get
2026/06/15 06:29 linux-next c425609d6ac4 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kernfs_get
2026/06/15 05:02 linux-next c425609d6ac4 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kernfs_get
2026/06/14 23:26 linux-next c425609d6ac4 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kernfs_get
2026/06/14 10:48 linux-next ec039126b7fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in kernfs_get
2026/01/03 21:20 linux-next cc3aa43b44bd d6526ea3 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kernfs_get
2025/06/24 03:19 upstream 78f4e737a53e 1a7fb460 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in kernfs_get
2026/05/26 03:44 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 4b4362973b6f c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in kernfs_get
* Struck through repros no longer work on HEAD.