syzbot

 sign-in | mailing list | source | docs
🐞 Open [106] 🐞 Fixed [1] 🐞 Invalid [166] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

WARNING in __brelse

Status: public: reported C repro on 2019/04/12 00:00
Reported-by: syzbot+82944136071a6d213266@syzkaller.appspotmail.com
First crash: 1851d, last: 1848d
▶ ▼ Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __brelse (3) fs C done done 21 9d12h 273d 0/26 upstream: reported C repro on 2023/07/26 14:30
android-49 WARNING in __brelse C 6 1848d 1838d 0/3 public: reported C repro on 2019/04/14 00:00
upstream WARNING in __brelse udf C inconclusive 22 432d 574d 22/26 fixed on 2023/02/24 13:50
linux-4.14 WARNING in __brelse vfs udf C 6 435d 541d 0/1 upstream: reported C repro on 2022/10/31 19:01
linux-6.1 WARNING in __brelse 5 17h55m 52d 0/3 upstream: reported on 2024/03/03 15:14
upstream WARNING in __brelse (2) udf 1 424d 420d 0/26 auto-obsoleted due to no activity on 2023/06/25 16:51
linux-5.15 WARNING in __brelse 1 375d 375d 0/3 auto-obsoleted due to no activity on 2023/08/14 05:07
linux-4.19 WARNING in __brelse vfs reiserfs ext4 udf C 43 416d 572d 0/1 upstream: reported C repro on 2022/10/01 01:04

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
audit: type=1400 audit(1554217075.873:7): avc:  denied  { map } for  pid=1794 comm="syz-executor431" path="/root/syz-executor431875882" dev="sda1" ino=16351 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
VFS: brelse: Trying to free free buffer
------------[ cut here ]------------
WARNING: CPU: 1 PID: 1794 at fs/buffer.c:1206 __brelse fs/buffer.c:1206 [inline]
WARNING: CPU: 1 PID: 1794 at fs/buffer.c:1206 __brelse.cold+0x11/0x18 fs/buffer.c:1200
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 1794 Comm: syz-executor431 Not tainted 4.14.109+ #46
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xb9/0x10e lib/dump_stack.c:53
 panic+0x1d9/0x3c2 kernel/panic.c:182
 __warn.cold+0x2f/0x3b kernel/panic.c:546
Kernel Offset: 0x35200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
Rebooting in 86400 seconds..

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/02 15:00 android-4.14 140cda105bb8 dfd3394d .config console log report syz C ci-android-414-kasan-gce-root
2019/04/03 15:46 android-4.14 588c62994468 dfd3394d .config console log report ci-android-414-kasan-gce-root
2019/04/01 06:14 android-4.14 0ae399edfd67 ccf2355a .config console log report ci-android-414-kasan-gce-root
2019/04/01 05:23 android-4.14 0ae399edfd67 ccf2355a .config console log report ci-android-414-kasan-gce-root
2019/04/01 04:18 android-4.14 0ae399edfd67 ccf2355a .config console log report ci-android-414-kasan-gce-root
2019/04/01 02:45 android-4.14 0ae399edfd67 ccf2355a .config console log report ci-android-414-kasan-gce-root
2019/03/31 16:15 android-4.14 0ae399edfd67 0c624d4d .config console log report ci-android-414-kasan-gce-root
2019/03/31 16:01 android-4.14 0ae399edfd67 0c624d4d .config console log report ci-android-414-kasan-gce-root
2019/03/31 13:55 android-4.14 0ae399edfd67 0c624d4d .config console log report ci-android-414-kasan-gce-root
2019/03/31 13:37 android-4.14 0ae399edfd67 0c624d4d .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.