syzbot

 sign-in | mailing list | source | docs
🐞 Open [978] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12472] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel BUG at drivers/dma-buf/dma-buf.c:LINE!

Status: fixed on 2021/03/10 01:48
Subsystems: dri media
[Documentation on labels]
Reported-by: syzbot+d6734079f30f7fc39021@syzkaller.appspotmail.com
Fix commit: e722a295cf49 staging: ion: remove from the tree
First crash: 1507d, last: 1253d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: fixed by (bisect log) :
commit e722a295cf493388dae474745d30e91e1a2ec549
Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Thu Aug 27 12:36:27 2020 +0000

  staging: ion: remove from the tree

  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
kernel BUG at drivers/dma-buf/dma-buf.c:LINE! 1 (3) 2020/12/19 09:41
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 kernel BUG at drivers/dma-buf/dma-buf.c:LINE! syz done 1 997d 1479d 1/1 fixed on 2021/08/26 13:35
linux-4.14 kernel BUG at drivers/dma-buf/dma-buf.c:LINE! C inconclusive 9 624d 1507d 0/1 upstream: reported C repro on 2020/03/03 09:29
linux-4.19 kernel BUG in dma_buf_release C error 5 575d 747d 0/1 upstream: reported C repro on 2022/04/02 17:55
▶ ▼ Fix bisection attempts (5)
Created Duration User Patch Repo Result
2020/12/18 22:56 3h53m bisect fix upstream job log (1)
2020/11/12 12:26 19m bisect fix upstream job log (0) log
2020/10/13 04:14 20m bisect fix upstream job log (0) log
2020/08/14 07:14 18m bisect fix upstream job log (0) log
2020/05/20 22:52 20m bisect fix upstream job log (0) log

Sample crash report:
------------[ cut here ]------------
kernel BUG at drivers/dma-buf/dma-buf.c:73!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.9.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:dma_buf_release+0x329/0x3f0 drivers/dma-buf/dma-buf.c:73
Code: 3c 02 00 0f 85 8f 00 00 00 48 8b bd d0 00 00 00 e8 1c 97 32 fd 48 89 ef 5b 5d 41 5c 41 5d 41 5e e9 0c 97 32 fd e8 87 f3 f2 fc <0f> 0b e8 80 f3 f2 fc 4c 89 e7 e8 f8 d0 00 00 e9 76 ff ff ff e8 6e
RSP: 0018:ffffc9000914fb78 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff84814914
RDX: ffff88809bbda2c0 RSI: ffffffff84814b89 RDI: 0000000000000005
RBP: ffff8880a8f66000 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888087b329d8
R13: ffff888087b32960 R14: ffff888087b329a8 R15: 0000000000000000
FS:  00007fc587995700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555bd99e8990 CR3: 000000009bbdd000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __dentry_kill+0x42b/0x640 fs/dcache.c:584
 dentry_kill fs/dcache.c:705 [inline]
 dput+0x725/0xbc0 fs/dcache.c:878
 __fput+0x3ab/0x920 fs/file_table.c:294
 task_work_run+0xdd/0x190 kernel/task_work.c:141
 get_signal+0xd89/0x1f00 kernel/signal.c:2561
 arch_do_signal+0x82/0x2520 arch/x86/kernel/signal.c:811
 exit_to_user_mode_loop kernel/entry/common.c:136 [inline]
 exit_to_user_mode_prepare+0x15d/0x1c0 kernel/entry/common.c:167
 syscall_exit_to_user_mode+0x59/0x2b0 kernel/entry/common.c:242
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45d579
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fc587994c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffe00 RBX: 000000000000b000 RCX: 000000000045d579
RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000005
RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffc4f33bacf R14: 00007fc5879959c0 R15: 000000000118cf4c
Modules linked in:
---[ end trace 91ba76dba739690e ]---
RIP: 0010:dma_buf_release+0x329/0x3f0 drivers/dma-buf/dma-buf.c:73
Code: 3c 02 00 0f 85 8f 00 00 00 48 8b bd d0 00 00 00 e8 1c 97 32 fd 48 89 ef 5b 5d 41 5c 41 5d 41 5e e9 0c 97 32 fd e8 87 f3 f2 fc <0f> 0b e8 80 f3 f2 fc 4c 89 e7 e8 f8 d0 00 00 e9 76 ff ff ff e8 6e
RSP: 0018:ffffc9000914fb78 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff84814914
RDX: ffff88809bbda2c0 RSI: ffffffff84814b89 RDI: 0000000000000005
RBP: ffff8880a8f66000 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888087b329d8
R13: ffff888087b32960 R14: ffff888087b329a8 R15: 0000000000000000
FS:  00007fc587995700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007efbfc040018 CR3: 000000009bbdd000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/26 03:50 upstream abb3438d69fb 344da168 .config console log report syz ci-upstream-kasan-gce-selinux-root
2020/08/26 03:48 upstream abb3438d69fb 344da168 .config console log report syz ci-upstream-kasan-gce-smack-root
2020/08/26 03:46 upstream abb3438d69fb 344da168 .config console log report syz ci-upstream-kasan-gce-root
2020/04/20 22:49 upstream ae83d0b416db 347a5dc3 .config console log report syz ci-upstream-kasan-gce-smack-root
2020/04/20 20:02 upstream ae83d0b416db 347a5dc3 .config console log report syz ci-upstream-kasan-gce-selinux-root
2020/04/19 07:51 upstream 50cc09c18985 365fba24 .config console log report syz ci-upstream-kasan-gce-root
2020/03/30 10:45 upstream 7111951b8d49 05736b29 .config console log report syz ci-upstream-kasan-gce
2020/03/03 17:36 upstream 63623fd44972 c88c7b75 .config console log report syz ci-upstream-kasan-gce
2020/08/26 07:27 upstream abb3438d69fb 344da168 .config console log report syz ci-upstream-kasan-gce-386
2020/04/02 13:18 upstream 919dce24701f a34e2c33 .config console log report syz ci-upstream-kasan-gce-386
2020/08/26 06:12 linux-next 3a00d3dfd4b6 344da168 .config console log report syz ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.