syzbot

 sign-in | mailing list | source | docs
🐞 Open [73] 🐞 Fixed [70] 🐞 Invalid [133] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel BUG in prog_array_map_poke_run

Status: upstream: reported C repro on 2023/11/07 04:51
Reported-by: syzbot+f8c117e3af198f898470@syzkaller.appspotmail.com
First crash: 172d, last: 11h56m
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in prog_array_map_poke_run origin:upstream missing-backport C done 16 114d 172d 0/3 upstream: reported C repro on 2023/11/07 11:42
upstream kernel BUG in prog_array_map_poke_run bpf C done done 35 131d 172d 25/26 fixed on 2024/01/23 01:55
linux-6.1 kernel BUG in prog_array_map_poke_run origin:upstream missing-backport C unreliable 3 126d 171d 0/3 upstream: reported C repro on 2023/11/08 01:21
android-6-1 kernel BUG in prog_array_map_poke_run origin:upstream missing-backport C error 14 113d 172d 2/2 fixed on 2024/01/09 06:37
android-5-15 kernel BUG in prog_array_map_poke_run missing-backport origin:upstream C done 32 104d 172d 0/2 auto-obsoleted due to no activity on 2024/03/24 07:32

Sample crash report:
------------[ cut here ]------------
kernel BUG at kernel/bpf/arraymap.c:990!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 1618 Comm: kworker/1:4 Not tainted 5.10.209-syzkaller-00435-gdd976ecce2ce #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Workqueue: events prog_array_map_clear_deferred
RIP: 0010:prog_array_map_poke_run+0x696/0x6b0 kernel/bpf/arraymap.c:990
Code: 98 e8 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3d 98 e8 ff 0f 0b e9 de f9 ff ff e8 31 98 e8 ff 0f 0b e8 2a 98 e8 ff <0f> 0b e8 23 98 e8 ff 0f 0b e8 1c 98 e8 ff 0f 0b 66 2e 0f 1f 84 00
RSP: 0018:ffffc90000b97b90 EFLAGS: 00010293
RAX: ffffffff81820fc6 RBX: ffff88810cd7dc90 RCX: ffff88810ff63b40
RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea
RBP: ffffc90000b97c28 R08: ffffffff81820d51 R09: fffffbfff0cdd641
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888119667900
R13: dffffc0000000000 R14: ffff888119209c00 R15: 00000000fffffff0
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa51f1f0d58 CR3: 000000011de7f000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 fd_array_map_delete_elem+0x154/0x250 kernel/bpf/arraymap.c:783
 bpf_fd_array_map_clear kernel/bpf/arraymap.c:831 [inline]
 prog_array_map_clear_deferred+0xf8/0x210 kernel/bpf/arraymap.c:1010
 process_one_work+0x6dc/0xbd0 kernel/workqueue.c:2301
 worker_thread+0xaea/0x1510 kernel/workqueue.c:2447
 kthread+0x34b/0x3d0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:299
Modules linked in:
---[ end trace f2459146f48cea53 ]---
RIP: 0010:prog_array_map_poke_run+0x696/0x6b0 kernel/bpf/arraymap.c:990
Code: 98 e8 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3d 98 e8 ff 0f 0b e9 de f9 ff ff e8 31 98 e8 ff 0f 0b e8 2a 98 e8 ff <0f> 0b e8 23 98 e8 ff 0f 0b e8 1c 98 e8 ff 0f 0b 66 2e 0f 1f 84 00
RSP: 0018:ffffc90000b97b90 EFLAGS: 00010293
RAX: ffffffff81820fc6 RBX: ffff88810cd7dc90 RCX: ffff88810ff63b40
RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea
RBP: ffffc90000b97c28 R08: ffffffff81820d51 R09: fffffbfff0cdd641
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888119667900
R13: dffffc0000000000 R14: ffff888119209c00 R15: 00000000fffffff0
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd871b17c0 CR3: 000000010ca6e000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (142):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/15 17:07 android13-5.10-lts dd976ecce2ce d615901c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/03/15 17:05 android13-5.10-lts dd976ecce2ce d615901c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/02/21 13:58 android13-5.10-lts dd976ecce2ce 3af7dd65 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/02/08 03:45 android13-5.10-lts 87a5e148c75b 6404acf9 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/07 09:02 android13-5.10-lts d30b996835c0 83211397 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2023/11/07 05:11 android13-5.10-lts d30b996835c0 83211397 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/07 04:44 android13-5.10-lts d30b996835c0 83211397 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/07 04:44 android13-5.10-lts d30b996835c0 83211397 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/01/04 18:28 android13-5.10-lts f7977422e132 28c42cff .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/21 01:13 android13-5.10-lts d30b996835c0 cb976f63 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2023/11/20 20:04 android13-5.10-lts d30b996835c0 cb976f63 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/27 08:54 android13-5.10-lts 70b6ab09a34b 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/24 16:59 android13-5.10-lts 70b6ab09a34b 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/24 12:53 android13-5.10-lts 70b6ab09a34b 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/23 13:07 android13-5.10-lts 70b6ab09a34b 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/22 21:44 android13-5.10-lts 70b6ab09a34b 36c961ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/22 10:13 android13-5.10-lts 8d3bb9cb3b7d 36c961ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/21 20:11 android13-5.10-lts 8d3bb9cb3b7d af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/21 18:17 android13-5.10-lts 8d3bb9cb3b7d af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/04/21 04:03 android13-5.10-lts 8d3bb9cb3b7d af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/20 09:45 android13-5.10-lts c449d2a618ef af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/18 00:43 android13-5.10-lts 3c981dac49d9 acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/16 21:06 android13-5.10-lts 4e1bc8d8e8ae 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/16 04:04 android13-5.10-lts 4e1bc8d8e8ae 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/15 23:00 android13-5.10-lts 4e1bc8d8e8ae b9af7e61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/04/13 07:13 android13-5.10-lts 4e1bc8d8e8ae c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/04/12 18:14 android13-5.10-lts 4e1bc8d8e8ae c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/11 09:35 android13-5.10-lts 4e1bc8d8e8ae 33b9e058 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/10 03:08 android13-5.10-lts 4e1bc8d8e8ae 171ec371 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/09 14:22 android13-5.10-lts 4e1bc8d8e8ae f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/09 08:26 android13-5.10-lts 4e1bc8d8e8ae f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/04/09 07:04 android13-5.10-lts 4e1bc8d8e8ae f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/09 04:54 android13-5.10-lts 4e1bc8d8e8ae f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/08 20:12 android13-5.10-lts 4e1bc8d8e8ae 53df08b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/04/07 09:23 android13-5.10-lts e7daca75b4c3 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/05 14:33 android13-5.10-lts e7daca75b4c3 77230c29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/04 22:24 android13-5.10-lts e7daca75b4c3 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/03 19:07 android13-5.10-lts e7daca75b4c3 51c4dcff .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/03 14:29 android13-5.10-lts e7daca75b4c3 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/04/02 13:46 android13-5.10-lts e7daca75b4c3 eb2966c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/30 18:11 android13-5.10-lts e7daca75b4c3 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/03/30 10:11 android13-5.10-lts e7daca75b4c3 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/03/30 09:10 android13-5.10-lts e7daca75b4c3 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/30 07:07 android13-5.10-lts e7daca75b4c3 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/03/30 01:59 android13-5.10-lts e7daca75b4c3 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/29 05:23 android13-5.10-lts e7daca75b4c3 c52bcb23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/27 06:51 android13-5.10-lts e7daca75b4c3 454571b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/03/23 23:55 android13-5.10-lts e7daca75b4c3 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/03/23 14:29 android13-5.10-lts e7daca75b4c3 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
2024/03/23 10:40 android13-5.10-lts e7daca75b4c3 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/22 16:39 android13-5.10-lts e7daca75b4c3 4b6cdce6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/21 21:00 android13-5.10-lts e7daca75b4c3 7a239ce7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/20 17:00 android13-5.10-lts dd976ecce2ce 5b7d42ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/20 14:05 android13-5.10-lts dd976ecce2ce a485f239 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2024/03/20 08:15 android13-5.10-lts dd976ecce2ce a485f239 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf kernel BUG in prog_array_map_poke_run
2023/11/07 03:36 android13-5.10-lts d30b996835c0 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 kernel BUG in prog_array_map_poke_run
* Struck through repros no longer work on HEAD.