syzbot


WARNING in bpf_int_jit_compile

Status: fixed on 2018/07/09 18:05
Subsystems: bpf net
[Documentation on labels]
Reported-by: syzbot+9e762b52dd17e616a7a5@syzkaller.appspotmail.com
Fix commit: 9facc336876f bpf: reject any prog that failed read-only lock
First crash: 2196d, last: 2153d
Discussions (3)
Title Replies (including bot) Last reply
[PATCH 4.17 000/101] 4.17.9-stable review 100 (101) 2018/07/22 11:42
[PATCH bpf 0/2] Two bpf fixes 7 (7) 2018/06/15 21:16
WARNING in bpf_int_jit_compile 2 (4) 2018/06/05 08:23
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 WARNING in bpf_int_jit_compile C inconclusive 7 1165d 1579d 0/1 upstream: reported C repro on 2020/01/27 04:29

Sample crash report:
RAX: ffffffffffffffda RBX: 00000000020a5914 RCX: 0000000000455a09
RDX: 0000000000000014 RSI: 00000000200ba000 RDI: 0000000000000005
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 0000000000000046 R14: 00000000006f5730 R15: 0000000000000021
WARNING: CPU: 0 PID: 4786 at include/linux/filter.h:667 bpf_jit_binary_lock_ro include/linux/filter.h:667 [inline]
WARNING: CPU: 0 PID: 4786 at include/linux/filter.h:667 bpf_int_jit_compile+0xbf7/0xef7 arch/x86/net/bpf_jit_comp.c:1271
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 4786 Comm: syz-executor0 Not tainted 4.17.0-rc7+ #81
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 panic+0x22f/0x4de kernel/panic.c:184
 __warn.cold.8+0x163/0x1b3 kernel/panic.c:536
 report_bug+0x252/0x2d0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x1de/0x490 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:315
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:992
RIP: 0010:bpf_jit_binary_lock_ro include/linux/filter.h:667 [inline]
RIP: 0010:bpf_int_jit_compile+0xbf7/0xef7 arch/x86/net/bpf_jit_comp.c:1271
RSP: 0018:ffff8801d03f7920 EFLAGS: 00010293
RAX: ffff8801cfc8e380 RBX: 0000000000000051 RCX: ffffffff81445d89
RDX: 0000000000000000 RSI: ffffffff81445d97 RDI: 0000000000000005
RBP: ffff8801d03f7a40 R08: ffff8801cfc8e380 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000192e002
R13: ffff8801d03f7a18 R14: 00000000fffffff4 R15: 0000000000000003
 bpf_prog_select_runtime+0x131/0x640 kernel/bpf/core.c:1541
 bpf_prog_load+0x16c2/0x2070 kernel/bpf/syscall.c:1333
 __do_sys_bpf kernel/bpf/syscall.c:2073 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:2035 [inline]
 __x64_sys_bpf+0x389/0x4c0 kernel/bpf/syscall.c:2035
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455a09
RSP: 002b:00007fff30524468 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00000000020a5914 RCX: 0000000000455a09
RDX: 0000000000000014 RSI: 00000000200ba000 RDI: 0000000000000005
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 0000000000000046 R14: 00000000006f5730 R15: 0000000000000021
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/06/04 00:55 upstream 325e14f97e0c 2f93b54f .config console log report syz ci-upstream-kasan-gce
2018/06/01 04:02 upstream dd52cb879063 2f93b54f .config console log report syz ci-upstream-kasan-gce-root
2018/05/26 09:28 upstream 62d18ecfa641 f48c20b8 .config console log report syz ci-upstream-kasan-gce-root
2018/06/04 00:16 upstream 325e14f97e0c 2f93b54f .config console log report ci-upstream-kasan-gce
2018/05/31 23:30 upstream dd52cb879063 2f93b54f .config console log report ci-upstream-kasan-gce-root
2018/05/26 08:11 upstream 62d18ecfa641 f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/05/21 19:24 upstream 6741c4bb389d f48c20b8 .config console log report ci-upstream-kasan-gce
2018/05/20 14:42 upstream 203ec2fed17a f48c20b8 .config console log report ci-upstream-kasan-gce-root
2018/07/01 21:32 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
2018/06/26 07:51 https://github.com/google/kmsan.git master 123906095e30 2064fc5c .config console log report ci-upstream-kmsan-gce
2018/05/31 00:58 https://github.com/google/kmsan.git master 8fc8ecd1c58a 2f93b54f .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.