syzbot


kernel BUG in prog_array_map_poke_run

Status: upstream: reported C repro on 2023/11/07 04:51
Reported-by: syzbot+f8c117e3af198f898470@syzkaller.appspotmail.com
First crash: 306d, last: 2h55m
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in prog_array_map_poke_run origin:upstream missing-backport C done 16 248d 306d 0/3 upstream: reported C repro on 2023/11/07 11:42
upstream kernel BUG in prog_array_map_poke_run bpf C done done 35 265d 306d 25/27 fixed on 2024/01/23 01:55
linux-6.1 kernel BUG in prog_array_map_poke_run origin:upstream missing-backport C unreliable 3 260d 306d 0/3 upstream: reported C repro on 2023/11/08 01:21
android-6-1 kernel BUG in prog_array_map_poke_run origin:upstream missing-backport C error 14 248d 306d 2/2 fixed on 2024/01/09 06:37
android-5-15 kernel BUG in prog_array_map_poke_run missing-backport origin:upstream C done 32 238d 306d 0/2 auto-obsoleted due to no activity on 2024/03/24 07:32
Last patch testing requests (10)
Created Duration User Patch Repo Result
2024/08/24 03:46 7m retest repro android13-5.10-lts report log
2024/08/24 03:46 7m retest repro android13-5.10-lts report log
2024/08/24 03:46 13m retest repro android13-5.10-lts report log
2024/08/24 03:46 5m retest repro android13-5.10-lts report log
2024/08/24 03:46 10m retest repro android13-5.10-lts OK log
2024/07/03 09:28 7m retest repro android13-5.10-lts report log
2024/07/03 09:28 6m retest repro android13-5.10-lts report log
2024/07/03 09:28 14m retest repro android13-5.10-lts report log
2024/07/03 09:28 20m retest repro android13-5.10-lts report log
2024/07/03 09:28 9m retest repro android13-5.10-lts report log

Sample crash report:
------------[ cut here ]------------
kernel BUG at kernel/bpf/arraymap.c:990!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 1618 Comm: kworker/1:4 Not tainted 5.10.209-syzkaller-00435-gdd976ecce2ce #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Workqueue: events prog_array_map_clear_deferred
RIP: 0010:prog_array_map_poke_run+0x696/0x6b0 kernel/bpf/arraymap.c:990
Code: 98 e8 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3d 98 e8 ff 0f 0b e9 de f9 ff ff e8 31 98 e8 ff 0f 0b e8 2a 98 e8 ff <0f> 0b e8 23 98 e8 ff 0f 0b e8 1c 98 e8 ff 0f 0b 66 2e 0f 1f 84 00
RSP: 0018:ffffc90000b97b90 EFLAGS: 00010293
RAX: ffffffff81820fc6 RBX: ffff88810cd7dc90 RCX: ffff88810ff63b40
RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea
RBP: ffffc90000b97c28 R08: ffffffff81820d51 R09: fffffbfff0cdd641
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888119667900
R13: dffffc0000000000 R14: ffff888119209c00 R15: 00000000fffffff0
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa51f1f0d58 CR3: 000000011de7f000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 fd_array_map_delete_elem+0x154/0x250 kernel/bpf/arraymap.c:783
 bpf_fd_array_map_clear kernel/bpf/arraymap.c:831 [inline]
 prog_array_map_clear_deferred+0xf8/0x210 kernel/bpf/arraymap.c:1010
 process_one_work+0x6dc/0xbd0 kernel/workqueue.c:2301
 worker_thread+0xaea/0x1510 kernel/workqueue.c:2447
 kthread+0x34b/0x3d0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:299
Modules linked in:
---[ end trace f2459146f48cea53 ]---
RIP: 0010:prog_array_map_poke_run+0x696/0x6b0 kernel/bpf/arraymap.c:990
Code: 98 e8 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3d 98 e8 ff 0f 0b e9 de f9 ff ff e8 31 98 e8 ff 0f 0b e8 2a 98 e8 ff <0f> 0b e8 23 98 e8 ff 0f 0b e8 1c 98 e8 ff 0f 0b 66 2e 0f 1f 84 00
RSP: 0018:ffffc90000b97b90 EFLAGS: 00010293
RAX: ffffffff81820fc6 RBX: ffff88810cd7dc90 RCX: ffff88810ff63b40
RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea
RBP: ffffc90000b97c28 R08: ffffffff81820d51 R09: fffffbfff0cdd641
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888119667900
R13: dffffc0000000000 R14: ffff888119209c00 R15: 00000000fffffff0
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd871b17c0 CR3: 000000010ca6e000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (210):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/15 17:07 android13-5.10-lts dd976ecce2ce d615901c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/03/15 17:05 android13-5.10-lts dd976ecce2ce d615901c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/02/21 13:58 android13-5.10-lts dd976ecce2ce 3af7dd65 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/02/08 03:45 android13-5.10-lts 87a5e148c75b 6404acf9 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/07 09:02 android13-5.10-lts d30b996835c0 83211397 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2023/11/07 05:11 android13-5.10-lts d30b996835c0 83211397 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/07 04:44 android13-5.10-lts d30b996835c0 83211397 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/07 04:44 android13-5.10-lts d30b996835c0 83211397 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/09/04 23:19 android13-5.10-lts 1c5354a314ea dfbe2ed4 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/01/04 18:28 android13-5.10-lts f7977422e132 28c42cff .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/20 20:04 android13-5.10-lts d30b996835c0 cb976f63 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/21 01:13 android13-5.10-lts d30b996835c0 cb976f63 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/09/08 23:25 android13-5.10-lts 1c5354a314ea 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/09/07 13:15 android13-5.10-lts 1c5354a314ea 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/10 03:20 android13-5.10-lts fd58936f3c1f a83d9288 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/07 02:30 android13-5.10-lts fd58936f3c1f 1ef9fe42 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/06 12:17 android13-5.10-lts fd58936f3c1f e1bdb00a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/06 03:59 android13-5.10-lts fd58936f3c1f e1bdb00a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/05 15:12 android13-5.10-lts fd58936f3c1f e35c337f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/08/05 12:27 android13-5.10-lts fd58936f3c1f e35c337f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/04 21:00 android13-5.10-lts fd58936f3c1f 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/04 04:02 android13-5.10-lts fd58936f3c1f 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/04 02:38 android13-5.10-lts fd58936f3c1f 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/03 20:13 android13-5.10-lts fd58936f3c1f 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/03 09:22 android13-5.10-lts fd58936f3c1f 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/08/03 07:28 android13-5.10-lts fd58936f3c1f 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/31 05:15 android13-5.10-lts fd58936f3c1f 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/30 09:29 android13-5.10-lts fd58936f3c1f 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/30 06:19 android13-5.10-lts fd58936f3c1f 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/29 03:16 android13-5.10-lts fd58936f3c1f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/29 02:13 android13-5.10-lts fd58936f3c1f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/28 04:57 android13-5.10-lts fd58936f3c1f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/27 15:35 android13-5.10-lts fd58936f3c1f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/27 08:12 android13-5.10-lts fd58936f3c1f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/26 13:23 android13-5.10-lts fd58936f3c1f 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/26 04:43 android13-5.10-lts fd58936f3c1f 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/24 00:52 android13-5.10-lts 47ea8debeca3 e50e8da5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/22 01:33 android13-5.10-lts 1240968f7644 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/22 00:13 android13-5.10-lts 1240968f7644 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/21 19:57 android13-5.10-lts 1240968f7644 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/21 09:41 android13-5.10-lts 1240968f7644 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/21 05:42 android13-5.10-lts 1240968f7644 b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/13 00:28 android13-5.10-lts 3feee789f446 eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/12 21:05 android13-5.10-lts 3feee789f446 eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/11 22:06 android13-5.10-lts 3feee789f446 eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/08 05:01 android13-5.10-lts 3feee789f446 2a40360c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/06 00:23 android13-5.10-lts 3feee789f446 2a40360c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/05 05:14 android13-5.10-lts 3feee789f446 3f2748a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/04 22:49 android13-5.10-lts 3feee789f446 3f2748a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/04 15:10 android13-5.10-lts 3feee789f446 3f2748a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/07/03 11:06 android13-5.10-lts 3feee789f446 1ecfa2d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/06/19 08:01 android13-5.10-lts b58b8f9dad93 41b7e219 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/06/12 08:14 android13-5.10-lts d3c4d815bf09 4d75f4f7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/06/08 17:02 android13-5.10-lts d3c4d815bf09 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/06/06 12:19 android13-5.10-lts d3c4d815bf09 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/06/05 08:50 android13-5.10-lts d3c4d815bf09 e1e2c66e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/06/04 03:50 android13-5.10-lts d3c4d815bf09 a1feae05 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/05/27 15:22 android13-5.10-lts a8e7f812fbc1 761766e6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/05/23 13:13 android13-5.10-lts a8e7f812fbc1 4c2072ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/05/22 17:28 android13-5.10-lts a8e7f812fbc1 4d098039 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/05/21 17:03 android13-5.10-lts a8e7f812fbc1 4c0d3ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/05/21 00:29 android13-5.10-lts 70b6ab09a34b c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/05/20 09:07 android13-5.10-lts 70b6ab09a34b c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2023/11/07 03:36 android13-5.10-lts d30b996835c0 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
* Struck through repros no longer work on HEAD.