syzbot

 sign-in | mailing list | source | docs
🐞 Open [717] 🐞 Fixed [181] 🐞 Invalid [640] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel BUG at drivers/dma-buf/dma-buf.c:LINE!

Status: upstream: reported C repro on 2020/03/03 09:29
Reported-by: syzbot+df623b51c417453842cc@syzkaller.appspotmail.com
First crash: 1507d, last: 624d
Fix bisection the fix commit could be any of (bisect log):
  01364dad1d45 Linux 4.14.174
  4139fb08c05f Linux 4.14.187
   
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at drivers/dma-buf/dma-buf.c:LINE! dri media syz error done 11 1253d 1503d 19/26 fixed on 2021/03/10 01:48
linux-4.19 kernel BUG at drivers/dma-buf/dma-buf.c:LINE! syz done 1 997d 1480d 1/1 fixed on 2021/08/26 13:35
linux-4.19 kernel BUG in dma_buf_release C error 5 575d 747d 0/1 upstream: reported C repro on 2022/04/02 17:55
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2023/03/03 09:32 1m retest repro linux-4.14.y error OK
2023/03/03 08:32 1m retest repro linux-4.14.y error OK
2023/03/03 07:32 0m retest repro linux-4.14.y error OK
2023/03/03 06:32 0m retest repro linux-4.14.y error OK
2023/03/03 05:32 0m retest repro linux-4.14.y error OK
2022/11/12 13:30 9m retest repro linux-4.14.y report log
2022/11/12 12:30 9m retest repro linux-4.14.y report log
2022/11/12 11:30 9m retest repro linux-4.14.y report log
2022/11/12 10:30 9m retest repro linux-4.14.y report log
2022/11/12 09:30 9m retest repro linux-4.14.y report log
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2020/06/24 09:49 30m (4) bisect fix linux-4.14.y job log (2)
2020/05/25 09:25 24m bisect fix linux-4.14.y job log (0) log
2020/04/25 09:00 24m bisect fix linux-4.14.y job log (0) log

Sample crash report:
IPVS: ftp: loaded support on port[0] = 21
------------[ cut here ]------------
kernel BUG at drivers/dma-buf/dma-buf.c:68!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 7977 Comm: syz-executor311 Not tainted 4.14.290-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
task: ffff888095ace380 task.stack: ffff888095370000
RIP: 0010:dma_buf_release+0x313/0x5c0 drivers/dma-buf/dma-buf.c:68
RSP: 0018:ffff888095377db8 EFLAGS: 00010297
RAX: ffff888095ace380 RBX: ffff8880a019a0c0 RCX: 1ffffffff17f5a8c
RDX: 0000000000000000 RSI: ffff8880a019a0c0 RDI: ffff8880959e7378
RBP: ffff8880959e7200 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a019a0e8
R13: ffff8880a019a13c R14: ffffffff83982d40 R15: ffff8880a019a0d0
FS:  0000555556691300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f78d5cb0d10 CR3: 000000009ae70000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __fput+0x25f/0x7a0 fs/file_table.c:210
 task_work_run+0x11f/0x190 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f78d5c4c693
RSP: 002b:00007fffc3cc05c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f78d5c4c693
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003
RBP: 00007fffc3cc05d8 R08: 0000000000000000 R09: 00007f78d5cfbe40
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc3cc05e0
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: 31 e4 e8 71 cc b4 fd 48 89 ef e8 f9 a2 e6 fd e8 e4 16 bd fd 44 89 e0 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 cd 16 bd fd <0f> 0b e8 c6 16 bd fd e8 d1 f0 ad fd 48 8d bd 38 02 00 00 48 b8 
RIP: dma_buf_release+0x313/0x5c0 drivers/dma-buf/dma-buf.c:68 RSP: ffff888095377db8
---[ end trace 356f38a4940b31ab ]---

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/08/03 10:31 linux-4.14.y b641242202ed 1c9013ac .config console log report syz C ci2-linux-4-14 kernel BUG in dma_buf_release
2022/04/03 01:09 linux-4.14.y 74766a973637 79a2a8fc .config console log report syz C ci2-linux-4-14 kernel BUG in dma_buf_release
2020/08/26 03:07 linux-4.14.y 6a24ca2506d6 344da168 .config console log report syz ci2-linux-4-14
2020/03/26 08:16 linux-4.14.y 01364dad1d45 e8e6c7d2 .config console log report syz ci2-linux-4-14
2020/03/03 11:45 linux-4.14.y 78d697fc93f9 350a7a26 .config console log report syz ci2-linux-4-14
2020/08/26 02:51 linux-4.14.y 6a24ca2506d6 344da168 .config console log report ci2-linux-4-14
2020/03/26 07:53 linux-4.14.y 01364dad1d45 e8e6c7d2 .config console log report ci2-linux-4-14
2020/03/06 00:37 linux-4.14.y 78d697fc93f9 b655d91b .config console log report ci2-linux-4-14
2020/03/03 09:28 linux-4.14.y 78d697fc93f9 350a7a26 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.