syzbot

 sign-in | mailing list | source | docs
🐞 Open [106]
🐞 Fixed [1]
🐞 Invalid [166]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

WARNING in __brelse

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+82944136071a6d213266@syzkaller.appspotmail.com
First crash: 2061d, last: 2058d
▶ ▼ Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __brelse (3) fs C done done 46 5h33m 483d 0/28 upstream: reported C repro on 2023/07/26 14:30
android-49 WARNING in __brelse C 6 2058d 2048d 0/3 public: reported C repro on 2019/04/14 00:00
upstream WARNING in __brelse udf C inconclusive 22 642d 784d 22/28 fixed on 2023/02/24 13:50
linux-4.14 WARNING in __brelse vfs udf C 6 645d 751d 0/1 upstream: reported C repro on 2022/10/31 19:01
linux-6.1 WARNING in __brelse 8 204d 262d 0/3 auto-obsoleted due to no activity on 2024/08/08 10:26
linux-5.15 WARNING in __brelse (2) 3 16d 111d 0/3 upstream: reported on 2024/08/02 08:59
upstream WARNING in __brelse (2) udf 1 634d 630d 0/28 auto-obsoleted due to no activity on 2023/06/25 16:51
linux-5.15 WARNING in __brelse 1 585d 585d 0/3 auto-obsoleted due to no activity on 2023/08/14 05:07
linux-4.19 WARNING in __brelse vfs reiserfs ext4 udf C 43 626d 782d 0/1 upstream: reported C repro on 2022/10/01 01:04

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
audit: type=1400 audit(1554217075.873:7): avc:  denied  { map } for  pid=1794 comm="syz-executor431" path="/root/syz-executor431875882" dev="sda1" ino=16351 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
VFS: brelse: Trying to free free buffer
------------[ cut here ]------------
WARNING: CPU: 1 PID: 1794 at fs/buffer.c:1206 __brelse fs/buffer.c:1206 [inline]
WARNING: CPU: 1 PID: 1794 at fs/buffer.c:1206 __brelse.cold+0x11/0x18 fs/buffer.c:1200
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 1794 Comm: syz-executor431 Not tainted 4.14.109+ #46
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xb9/0x10e lib/dump_stack.c:53
 panic+0x1d9/0x3c2 kernel/panic.c:182
 __warn.cold+0x2f/0x3b kernel/panic.c:546
Kernel Offset: 0x35200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
Rebooting in 86400 seconds..

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/02 15:00 android-4.14 140cda105bb8 dfd3394d .config console log report syz C ci-android-414-kasan-gce-root
2019/04/03 15:46 android-4.14 588c62994468 dfd3394d .config console log report ci-android-414-kasan-gce-root
2019/04/01 06:14 android-4.14 0ae399edfd67 ccf2355a .config console log report ci-android-414-kasan-gce-root
2019/04/01 05:23 android-4.14 0ae399edfd67 ccf2355a .config console log report ci-android-414-kasan-gce-root
2019/04/01 04:18 android-4.14 0ae399edfd67 ccf2355a .config console log report ci-android-414-kasan-gce-root
2019/04/01 02:45 android-4.14 0ae399edfd67 ccf2355a .config console log report ci-android-414-kasan-gce-root
2019/03/31 16:15 android-4.14 0ae399edfd67 0c624d4d .config console log report ci-android-414-kasan-gce-root
2019/03/31 16:01 android-4.14 0ae399edfd67 0c624d4d .config console log report ci-android-414-kasan-gce-root
2019/03/31 13:55 android-4.14 0ae399edfd67 0c624d4d .config console log report ci-android-414-kasan-gce-root
2019/03/31 13:37 android-4.14 0ae399edfd67 0c624d4d .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.