syzbot

 sign-in | mailing list | source | docs
🐞 Open [977] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12473] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

WARNING in __mark_chain_precision

Status: fixed on 2019/08/14 02:14
Reported-by: syzbot+4da3ff23081bafe74fc2@syzkaller.appspotmail.com
Fix commit: b3b50f05dc50 bpf: fix precision bit propagation for BPF_ST instructions
First crash: 1750d, last: 1710d
Cause bisection: introduced by (bisect log) :
commit b53119f13a04879c3bf502828d99d13726639ead
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Thu Mar 7 01:22:54 2019 +0000

  pin iocb through aio.

Crash: WARNING in bpf_jit_free (log)
Repro: C syz .config
  
▶ ▼ Duplicate bugs (1)
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
WARNING in mark_chain_precision bpf C done 15 1747d 1746d 0/26 closed as dup on 2019/07/09 18:55
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[PATCH bpf-next] bpf: fix precision bit propagation for BPF_ST instructions 2 (2) 2019/07/12 13:05
WARNING in __mark_chain_precision 1 (3) 2019/07/09 04:08
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __mark_chain_precision (4) bpf C 6 17d 17d 2/26 upstream: reported C repro on 2024/04/01 16:51
upstream WARNING in __mark_chain_precision (2) bpf C done 18 1676d 1694d 13/26 fixed on 2019/10/09 10:54
upstream WARNING in __mark_chain_precision (3) bpf C done 19 109d 130d 26/26 fixed on 2024/01/31 06:43
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2019/07/09 03:49 17m andrii.nakryiko@gmail.com https://github.com/anakryiko/linux bpf-fix-precise-bpf_st OK

Sample crash report:
------------[ cut here ]------------
verifier backtracking bug
WARNING: CPU: 0 PID: 9730 at kernel/bpf/verifier.c:1782 __mark_chain_precision+0x197a/0x1ea0 kernel/bpf/verifier.c:1782
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 9730 Comm: syz-executor763 Not tainted 5.3.0-rc3+ #102
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2dc/0x755 kernel/panic.c:219
 __warn.cold+0x20/0x4c kernel/panic.c:576
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:291
 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1028
RIP: 0010:__mark_chain_precision+0x197a/0x1ea0 kernel/bpf/verifier.c:1782
Code: 08 31 ff 89 de e8 26 a0 f2 ff 84 db 0f 85 07 ff ff ff e8 d9 9e f2 ff 48 c7 c7 80 a7 91 87 c6 05 2c b2 21 08 01 e8 9e 11 c4 ff <0f> 0b 41 bc f2 ff ff ff e9 e8 fe ff ff 48 8b bd d8 fe ff ff e8 fd
RSP: 0018:ffff888090e175d8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815c3ba6 RDI: ffffed10121c2ead
RBP: ffff888090e17728 R08: ffff888095bbc500 R09: fffffbfff11b42c5
R10: fffffbfff11b42c4 R11: ffffffff88da1623 R12: 0000000000000001
R13: ffff88809bd38cc0 R14: ffff8880992c56c0 R15: ffff888090e176c0
 mark_chain_precision kernel/bpf/verifier.c:1819 [inline]
 propagate_precision kernel/bpf/verifier.c:7176 [inline]
 is_state_visited kernel/bpf/verifier.c:7297 [inline]
 do_check+0x36d6/0x89f0 kernel/bpf/verifier.c:7509
 bpf_check+0x6f99/0x9948 kernel/bpf/verifier.c:9292
 bpf_prog_load+0xe68/0x1670 kernel/bpf/syscall.c:1698
 __do_sys_bpf+0xc43/0x3460 kernel/bpf/syscall.c:2849
 __se_sys_bpf kernel/bpf/syscall.c:2808 [inline]
 __x64_sys_bpf+0x73/0xb0 kernel/bpf/syscall.c:2808
 do_syscall_64+0xfd/0x6a0 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4402b9
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fff58fbdca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402b9
RDX: 0000000000000048 RSI: 0000000020000200 RDI: 0000000000000005
RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401b40
R13: 0000000000401bd0 R14: 0000000000000000 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (105):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/08/08 17:50 upstream ecb095bff5d4 e6ebef88 .config console log report syz C ci-upstream-kasan-gce-root
2019/08/08 17:01 upstream ecb095bff5d4 e6ebef88 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/08/08 16:58 upstream ecb095bff5d4 e6ebef88 .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/07/17 00:56 upstream 9637d517347e db842eb6 .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/07/17 00:55 upstream 9637d517347e db842eb6 .config console log report syz C ci-upstream-kasan-gce-root
2019/07/17 00:52 upstream 9637d517347e db842eb6 .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/08/08 17:01 net-old 33920f1ec5bf e6ebef88 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/08/08 16:54 bpf cb8ffde5694a e6ebef88 .config console log report syz C ci-upstream-bpf-kasan-gce
2019/07/17 00:56 net-old 1d43d5e469d9 db842eb6 .config console log report syz C ci-upstream-net-this-kasan-gce
2019/08/08 17:35 net-next-old 13dfb3fa4943 e6ebef88 .config console log report syz C ci-upstream-net-kasan-gce
2019/08/08 16:53 bpf-next 192f0f8e9db7 e6ebef88 .config console log report syz C ci-upstream-bpf-next-kasan-gce
2019/07/17 00:54 net-next-old 192f0f8e9db7 db842eb6 .config console log report syz C ci-upstream-net-kasan-gce
2019/07/04 16:19 bpf-next e5a3e259ef23 55565fa0 .config console log report syz C ci-upstream-bpf-next-kasan-gce
2019/07/04 16:00 bpf-next e5a3e259ef23 55565fa0 .config console log report syz C ci-upstream-bpf-next-kasan-gce
2019/07/04 15:41 bpf-next e5a3e259ef23 55565fa0 .config console log report syz C ci-upstream-bpf-next-kasan-gce
2019/08/08 17:04 linux-next 2ae256317763 e6ebef88 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/07/09 08:17 linux-next d58b5ab90ee7 f62e1e85 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/07/09 07:57 linux-next d58b5ab90ee7 f62e1e85 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/07/25 08:14 upstream bed38c3e2dca 32329ceb .config console log report ci-upstream-kasan-gce-smack-root
2019/08/13 21:01 bpf-next 192f0f8e9db7 ef801a3e .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/13 19:48 bpf-next 192f0f8e9db7 ef801a3e .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/13 02:53 bpf-next 192f0f8e9db7 8620c2c2 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/13 00:29 bpf-next 192f0f8e9db7 8620c2c2 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/11 23:39 bpf-next 192f0f8e9db7 acb51638 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/11 20:16 bpf-next 192f0f8e9db7 acb51638 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/11 15:17 bpf-next 192f0f8e9db7 acb51638 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/11 13:24 bpf-next 192f0f8e9db7 acb51638 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/11 04:32 bpf-next 192f0f8e9db7 acb51638 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/09 11:19 bpf-next 192f0f8e9db7 ede31a9b .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/08 21:20 bpf-next 192f0f8e9db7 e6ebef88 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/08 16:08 bpf-next 192f0f8e9db7 e6ebef88 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/08 11:40 bpf-next 192f0f8e9db7 e6ebef88 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/08 09:05 bpf-next 192f0f8e9db7 e6ebef88 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/08 09:05 bpf-next 192f0f8e9db7 e6ebef88 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/07 20:58 bpf-next 192f0f8e9db7 e6ebef88 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/06 16:49 bpf-next 192f0f8e9db7 c6f01e54 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/06 09:32 bpf-next 192f0f8e9db7 6affd8e8 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/05 17:23 bpf-next 192f0f8e9db7 6affd8e8 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/04 20:01 bpf-next 192f0f8e9db7 6affd8e8 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/04 11:44 bpf-next 192f0f8e9db7 6affd8e8 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/02 14:12 bpf-next 192f0f8e9db7 835dffe7 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/02 03:26 bpf-next 192f0f8e9db7 835dffe7 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/01 17:42 bpf-next 192f0f8e9db7 835dffe7 .config console log report ci-upstream-bpf-next-kasan-gce
2019/08/01 11:24 bpf-next 192f0f8e9db7 c692b5bd .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/31 22:48 bpf-next 192f0f8e9db7 c692b5bd .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/31 13:38 bpf-next 192f0f8e9db7 7c7ded69 .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/30 06:56 bpf-next 192f0f8e9db7 f67095ee .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/30 05:42 bpf-next 192f0f8e9db7 f67095ee .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/29 15:29 bpf-next 192f0f8e9db7 c85e1c5b .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/29 06:59 bpf-next 192f0f8e9db7 c85e1c5b .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/28 06:51 bpf-next 192f0f8e9db7 c85e1c5b .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/28 03:29 bpf-next 192f0f8e9db7 c85e1c5b .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/27 05:26 bpf-next 192f0f8e9db7 c85e1c5b .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/26 15:06 bpf-next 192f0f8e9db7 3e5d1beb .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/26 03:20 bpf-next 192f0f8e9db7 732bc5a0 .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/26 00:25 bpf-next 192f0f8e9db7 732bc5a0 .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/25 13:39 bpf-next 192f0f8e9db7 32329ceb .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/24 20:33 bpf-next 192f0f8e9db7 32329ceb .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/23 06:25 bpf-next 192f0f8e9db7 55e0c077 .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/22 15:54 bpf-next 192f0f8e9db7 b3c615f5 .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/22 06:34 bpf-next 192f0f8e9db7 b3c615f5 .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/22 03:49 bpf-next 192f0f8e9db7 1656845f .config console log report ci-upstream-bpf-next-kasan-gce
2019/07/22 01:46 bpf-next 192f0f8e9db7 1656845f .config console log report ci-upstream-bpf-next-kasan-gce
* Struck through repros no longer work on HEAD.