WARNING in check_buffer

Status: upstream: reported on 2026/10/21 22:13
Reported-by: syzbot+3fe4ca1b1930bb498fac@syzkaller.appspotmail.com
First crash: 7d04h, last: 7d04h
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in check_buffer prio:low trace -1 C 47 1d12h 38d 0/29 upstream: reported C repro on 2026/09/20 14:21
linux-5.15 WARNING in check_buffer origin:lts-only -1 syz, C 18 1d08h 93d 0/3 upstream: reported C repro on 2026/07/27 18:46
linux-6.1 WARNING in check_buffer -1 18 1d08h 93d 0/3 upstream: reported on 2026/07/27 19:37

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5439 at kernel/trace/ring_buffer.c:3530 check_buffer+0x8b5/0x950 kernel/trace/ring_buffer.c:3530
Modules linked in:
CPU: 1 PID: 5439 Comm: dhcpcd Tainted: G S                 syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:check_buffer+0x8b5/0x950 kernel/trace/ring_buffer.c:3530
Code: 8b 34 24 e8 cd df f8 08 48 c7 c7 20 43 13 98 be 04 00 00 00 e8 9c f1 55 00 f0 ff 0d 85 59 88 16 e9 9c fe ff ff e8 3b ea fc ff <0f> 0b e9 ea fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c f8 f7 ff
RSP: 0018:ffffc90003777778 EFLAGS: 00010293
RAX: ffffffff818ae9a5 RBX: 0000000000000003 RCX: ffff88802cbb5a00
RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000
RBP: 000000000000006c R08: ffff88801aa47007 R09: 1ffff11003548e00
R10: dffffc0000000000 R11: ffffed1003548e01 R12: dffffc0000000000
R13: f800000000000000 R14: ffffc90003777938 R15: 000000154d5ee7ba
FS:  00007f2dc6a05740(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055854f450078 CR3: 000000001ae91000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 __rb_reserve_next+0x4d9/0xd00 kernel/trace/ring_buffer.c:3626
 rb_reserve_next_event kernel/trace/ring_buffer.c:3761 [inline]
 ring_buffer_lock_reserve+0xae1/0xed0 kernel/trace/ring_buffer.c:3820
 __trace_buffer_lock_reserve kernel/trace/trace.c:996 [inline]
 trace_event_buffer_lock_reserve+0x1d2/0x6f0 kernel/trace/trace.c:2905
 trace_event_buffer_reserve+0x2ac/0x3d0 kernel/trace/trace_events.c:661
 do_trace_event_raw_event_sched_process_fork include/trace/events/sched.h:372 [inline]
 trace_event_raw_event_sched_process_fork+0xe0/0x280 include/trace/events/sched.h:372
 trace_sched_process_fork include/trace/events/sched.h:372 [inline]
 kernel_clone+0x830/0x8a0 kernel/fork.c:2929
 __do_sys_clone3 kernel/fork.c:3220 [inline]
 __se_sys_clone3+0x334/0x350 kernel/fork.c:3204
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2dc6b08e09
Code: 0f 94 c0 0f b6 d2 8d 54 12 ff 89 15 a1 83 0d 00 c3 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00
RSP: 002b:00007ffec47ec1f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 0000000000009000 RCX: 00007f2dc6b08e09
RDX: 00007f2dc6af3dd0 RSI: 0000000000000058 RDI: 00007ffec47ec280
RBP: 00007f2dc693b000 R08: 00007ffec47ec230 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000202 R12: 00007ffec47ec550
R13: 00007ffec47ec230 R14: 0000000000000000 R15: 00007f2dc6af3dd0
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/21 22:12 linux-6.6.y 0aebf2870d53 4ba27f85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in check_buffer
* Struck through repros no longer work on HEAD.