syzbot

 sign-in | mailing list | source | docs
🐞 Open [908]
🐞 Fixed [143]
🐞 Invalid [1099]
⬇ Missing Backports [73]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

kernel BUG in dnotify_free_mark

Status: upstream: reported C repro on 2023/07/30 07:52
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+2f4aa3239150dd006e44@syzkaller.appspotmail.com
First crash: 1016d, last: 8d11h
Fix commit to backport (bisect log) :
tree: upstream
commit 4ad5c924df6cd6d85708fa23f9d9a2b78a2e428e
Author: Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
Date: Fri Sep 22 10:07:59 2023 +0000

  fs/ntfs3: Allow repeated call to ntfs3_put_sbi

  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2023/10/28 linux-6.1.y (ToT) 32c9cdbe383c C [report] kernel BUG in dnotify_free_mark
2023/07/30 upstream (ToT) d31e3792919e C [report] kernel BUG in dnotify_free_mark
2023/10/28 upstream (ToT) 2af9b20dbb39 C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in dnotify_free_mark ntfs3 -1 C error done 22993 273d 1290d 29/29 fixed on 2025/11/17 09:14
linux-5.15 kernel BUG in dnotify_free_mark missing-backport origin:upstream -1 C done 608 72d 662d 0/3 upstream: reported C repro on 2024/07/18 09:21
linux-6.6 kernel BUG in dnotify_free_mark origin:lts-only -1 C inconclusive 137 97d 286d 0/2 upstream: reported C repro on 2025/07/29 04:21
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/11/23 13:40 3h54m fix candidate upstream OK (1) job log
2023/09/29 04:09 1h18m bisect fix linux-6.1.y OK (0) job log log
marked invalid by web-security-scanner@google.com

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/notify/dnotify/dnotify.c:136!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 4358 Comm: kworker/u4:5 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: events_unbound fsnotify_mark_destroy_workfn
RIP: 0010:dnotify_free_mark+0x53/0x60 fs/notify/dnotify/dnotify.c:136
Code: 4c 89 f7 e8 1f c5 df ff 49 83 3e 00 75 17 e8 d4 b8 8e ff 48 8b 3d cd 68 2c 0c 48 89 de 5b 41 5e e9 72 fb de ff e8 bd b8 8e ff <0f> 0b 00 00 cc cc 00 00 cc cc 00 00 cc 55 41 57 41 56 41 55 41 54
RSP: 0018:ffffc90004237b68 EFLAGS: 00010293
RAX: ffffffff81f3bc93 RBX: ffff8880275b1000 RCX: ffff88801b721dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880275b1000
RBP: ffffc90004237c30 R08: ffffffff90af92ff R09: 1ffffffff215f25f
R10: dffffc0000000000 R11: fffffbfff215f260 R12: 1ffff11004eb6202
R13: dffffc0000000000 R14: ffff8880275b1080 R15: ffffffff8a9a2be8
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4b30c4c000 CR3: 000000002fade000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 fsnotify_final_mark_destroy fs/notify/mark.c:304 [inline]
 fsnotify_mark_destroy_workfn+0x257/0x2f0 fs/notify/mark.c:928
 process_one_work+0x8a2/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaa2/0x1270 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:dnotify_free_mark+0x53/0x60 fs/notify/dnotify/dnotify.c:136
Code: 4c 89 f7 e8 1f c5 df ff 49 83 3e 00 75 17 e8 d4 b8 8e ff 48 8b 3d cd 68 2c 0c 48 89 de 5b 41 5e e9 72 fb de ff e8 bd b8 8e ff <0f> 0b 00 00 cc cc 00 00 cc cc 00 00 cc 55 41 57 41 56 41 55 41 54
RSP: 0018:ffffc90004237b68 EFLAGS: 00010293
RAX: ffffffff81f3bc93 RBX: ffff8880275b1000 RCX: ffff88801b721dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880275b1000
RBP: ffffc90004237c30 R08: ffffffff90af92ff R09: 1ffffffff215f25f
R10: dffffc0000000000 R11: fffffbfff215f260 R12: 1ffff11004eb6202
R13: dffffc0000000000 R14: ffff8880275b1080 R15: ffffffff8a9a2be8
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fffbf5bee78 CR3: 000000007e414000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2689):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/03 08:23 linux-6.1.y 4931e0e1673d a0d91488 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/09 19:30 linux-6.1.y 1989cd3d56e2 38c8e246 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2025/02/19 13:20 linux-6.1.y 0cbb5f65e52f 9a14138f .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2024/11/09 12:28 linux-6.1.y d7039b844a1c 6b856513 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2024/04/20 03:45 linux-6.1.y 6741e066ec76 af24b050 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2023/07/30 07:52 linux-6.1.y d2a6dc4eaf6d 92476829 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/17 23:56 linux-6.1.y 8e8fc038cad5 24ecfc1e .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
2025/12/28 13:03 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
2025/12/23 05:45 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in dnotify_free_mark
2026/04/23 00:55 linux-6.1.y 7c87defbd336 b10da5ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/22 11:47 linux-6.1.y 7c87defbd336 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/21 19:06 linux-6.1.y 7c87defbd336 0b6ab7ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/21 06:46 linux-6.1.y 7c87defbd336 3f2e655b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/20 17:33 linux-6.1.y 7c87defbd336 e65da4ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/18 12:15 linux-6.1.y 7c87defbd336 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/18 09:39 linux-6.1.y 8e8fc038cad5 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/18 04:43 linux-6.1.y 8e8fc038cad5 5be7a9de .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/18 04:39 linux-6.1.y 8e8fc038cad5 5be7a9de .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/17 16:38 linux-6.1.y 8e8fc038cad5 24ecfc1e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/17 01:23 linux-6.1.y 8e8fc038cad5 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/16 14:23 linux-6.1.y 8e8fc038cad5 4743f87d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/16 01:11 linux-6.1.y 8e8fc038cad5 df15c5f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/15 14:33 linux-6.1.y 8e8fc038cad5 c441f497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/15 01:11 linux-6.1.y 8e8fc038cad5 e2e976a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/14 13:16 linux-6.1.y 8e8fc038cad5 362d1323 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/14 01:52 linux-6.1.y 8e8fc038cad5 1a086e7c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/13 12:50 linux-6.1.y 8e8fc038cad5 9530ccf9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/11 16:47 linux-6.1.y 8e8fc038cad5 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/11 16:47 linux-6.1.y 8e8fc038cad5 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/09 03:59 linux-6.1.y 1989cd3d56e2 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/08 16:08 linux-6.1.y 1989cd3d56e2 d9b7f621 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/08 00:59 linux-6.1.y 1989cd3d56e2 2c961e87 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 12:58 linux-6.1.y 1989cd3d56e2 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 12:58 linux-6.1.y 1989cd3d56e2 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/07 08:33 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/06 05:12 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/03 00:05 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/02 11:56 linux-6.1.y 1989cd3d56e2 91bc79b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/01 23:35 linux-6.1.y 1989cd3d56e2 0cb124d5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/04/01 11:59 linux-6.1.y 1989cd3d56e2 9a1f7828 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/31 23:13 linux-6.1.y 1989cd3d56e2 fb8b2c26 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/31 11:06 linux-6.1.y 1989cd3d56e2 aeea1c72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 22:44 linux-6.1.y 1989cd3d56e2 d0af506e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 10:39 linux-6.1.y 1989cd3d56e2 dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/30 10:37 linux-6.1.y 1989cd3d56e2 dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/28 15:30 linux-6.1.y 1989cd3d56e2 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/28 03:20 linux-6.1.y 1989cd3d56e2 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/27 14:40 linux-6.1.y 1989cd3d56e2 74a13a23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/26 13:36 linux-6.1.y 1989cd3d56e2 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/26 13:35 linux-6.1.y 1989cd3d56e2 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/25 23:05 linux-6.1.y 1989cd3d56e2 c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
2026/03/25 13:45 linux-6.1.y 1989cd3d56e2 8ee77f7d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in dnotify_free_mark
* Struck through repros no longer work on HEAD.