WARNING in hfsplus_unlink

Status: upstream: reported C repro on 2024/11/24 10:53
Subsystems: hfs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+028180f480a74961919c@syzkaller.appspotmail.com
First crash: 623d, last: 113d
Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: WARNING in hfsplus_unlink (log)
Repro: C syz .config
  
Fix bisection: failed (error log, bisect log)
  
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
9224bb00 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ✅ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ WARNING in hfsplus_unlink 2026/05/26 01:38 2026/05/26 01:38 2026/05/26 02:34 c69befb3
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[PATCH] hfsplus: restore i_nlink and flags when rename_cat fails 1 (1) 2024/11/25 23:42
[syzbot] [hfs?] WARNING in hfsplus_unlink 1 (3) 2024/11/24 15:42
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 WARNING in hfsplus_unlink origin:upstream missing-backport -1 syz, C error 1 68d 115d 0/2 upstream: reported C repro on 2026/04/13 00:43
linux-6.1 WARNING in hfsplus_unlink origin:upstream missing-backport -1 syz, C error 5 68d 218d 0/3 upstream: reported C repro on 2025/12/30 13:36
▶ ▼ Last patch testing requests (11)
Created Duration User Patch Repo Result
2026/08/01 13:51 27m retest repro upstream OK log
2026/08/01 13:51 26m retest repro upstream OK log
2026/07/07 11:51 33m retest repro upstream log
2026/07/07 11:51 33m retest repro upstream OK log
2026/07/07 10:22 32m retest repro upstream log
2026/07/06 02:07 20m retest repro upstream log
2026/06/01 00:12 26m retest repro upstream log
2026/06/01 00:12 21m retest repro upstream log
2026/05/15 03:52 31m retest repro upstream OK log
2026/05/15 03:52 27m retest repro upstream log
2024/11/24 14:38 23m eadavis@qq.com patch upstream OK log
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2026/05/14 09:46 15m bisect fix upstream error job log
2025/02/07 06:59 1h55m bisect fix upstream OK (0) job log log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5815 at fs/inode.c:417 drop_nlink+0xc5/0x110 fs/inode.c:417
Modules linked in:
CPU: 1 UID: 0 PID: 5815 Comm: syz-executor427 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RIP: 0010:drop_nlink+0xc5/0x110 fs/inode.c:417
Code: 70 07 00 00 be 08 00 00 00 e8 b7 84 e8 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9c b2 88 ff 90 <0f> 0b 90 eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b ff ff ff
RSP: 0018:ffffc90003f27bd0 EFLAGS: 00010293
RAX: ffffffff82370b44 RBX: ffff888078e295f0 RCX: ffff88807babda00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffc90003f27727 R09: 1ffff920007e4ee4
R10: dffffc0000000000 R11: fffff520007e4ee5 R12: 1ffff1100f1c52c7
R13: ffff88807a7721d0 R14: ffff888078e29638 R15: dffffc0000000000
FS:  000055558c7f3380(0000) GS:ffff888126202000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000066c7e0 CR3: 000000002fae8000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_unlink+0x3e8/0x730 fs/hfsplus/dir.c:381
 vfs_unlink+0x391/0x650 fs/namei.c:4579
 do_unlinkat+0x350/0x560 fs/namei.c:4643
 __do_sys_unlinkat fs/namei.c:4684 [inline]
 __se_sys_unlinkat fs/namei.c:4677 [inline]
 __x64_sys_unlinkat+0xd3/0xf0 fs/namei.c:4677
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa2527d9739
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe3e8478b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
RAX: ffffffffffffffda RBX: 0000200000000100 RCX: 00007fa2527d9739
RDX: 0000000000000000 RSI: 0000200000000380 RDI: 00000000ffffff9c
RBP: 0031656c69662f2e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
R13: 00007ffe3e847a98 R14: 0000000000000001 R15: 0000000000000001
 </TASK>

Crashes (41):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/28 03:45 upstream b4432656b36e c6b4fb39 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2025/03/07 00:47 upstream 848e07631744 831e3629 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2024/12/20 09:37 upstream 8faabc041a00 0f61b415 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2026/01/16 07:28 upstream 54e82e93ca93 d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2025/06/20 21:39 upstream 41687a5c6f8b 804b3919 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2026/04/14 09:42 upstream 26ff969926a0 1a086e7c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2026/03/19 20:54 upstream 8a30aeb0d1b4 bd6dcb30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2026/02/17 02:23 upstream c22e26bd0906 5d52cba5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2026/02/12 09:54 upstream c22e26bd0906 76a109e2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2026/01/05 04:53 upstream 54e82e93ca93 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2025/12/16 21:46 upstream 40fbbd64bba6 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2025/12/06 21:04 upstream 416f99c3b16f d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2025/11/28 21:28 upstream e538109ac71d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2025/09/20 14:01 upstream cd89d487374c 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2025/09/16 06:09 upstream 46a51f4f5eda e2beed91 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2025/09/08 16:47 upstream 76eeb9b8de98 d291dd2d .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root WARNING in hfsplus_unlink
2025/05/15 19:43 upstream 088d13246a46 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2025/04/28 07:26 upstream b4432656b36e c6b4fb39 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2025/04/28 05:04 upstream b4432656b36e c6b4fb39 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2025/04/27 05:29 upstream d22aad29de2a c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in hfsplus_unlink
2025/04/27 05:29 upstream d22aad29de2a c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in hfsplus_unlink
2025/04/27 04:12 upstream 5bc1018675ec c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in hfsplus_unlink
2025/04/27 04:11 upstream 5bc1018675ec c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in hfsplus_unlink
2025/04/27 01:37 upstream 5bc1018675ec c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2025/03/20 23:20 upstream 5fc319360819 62330552 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2024/12/21 23:22 upstream 499551201b5f d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2024/12/21 17:38 upstream 499551201b5f d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in hfsplus_unlink
2024/12/09 06:45 upstream 62b5a46999c7 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2024/12/07 13:29 upstream b5f217084ab3 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2024/11/20 12:15 upstream bf9aa14fc523 7d02db5a .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2024/11/20 11:33 upstream bf9aa14fc523 7d02db5a .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in hfsplus_unlink
2024/11/20 10:50 upstream bf9aa14fc523 7d02db5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in hfsplus_unlink
2025/12/24 01:14 upstream b927546677c8 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2025/12/17 13:16 upstream ea1013c15392 d1b870e1 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2025/11/23 11:28 upstream d13f3ac64efb 4fb8ef37 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2025/11/22 23:59 upstream 89edd36fd801 4fb8ef37 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2025/09/28 11:22 upstream 51a24b7deaae 001c9061 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2025/08/22 07:37 upstream 3957a5720157 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2025/05/05 05:21 upstream 92a09c47464d b0714e37 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2025/04/27 02:14 upstream 5bc1018675ec c6b4fb39 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hfsplus_unlink
2024/12/15 06:51 upstream 2d8308bf5b67 7cbfbb3a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in hfsplus_unlink
* Struck through repros no longer work on HEAD.