syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

UBSAN: undefined-behaviour in f2fs_fill_super

Status: upstream: reported C repro on 2020/09/21 08:34
Reported-by: syzbot+2a76c8390cbc8272fa6b@syzkaller.appspotmail.com
First crash: 1305d, last: 1276d
Fix bisection: failed (error log, bisect log)
  

Sample crash report:
audit: type=1400 audit(1602021682.969:8): avc:  denied  { execmem } for  pid=6484 comm="syz-executor114" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
================================================================================
UBSAN: Undefined behaviour in fs/f2fs/super.c:2227:16
shift exponent 55 is too large for 32-bit type 'int'
CPU: 1 PID: 6484 Comm: syz-executor114 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 sanity_check_raw_super fs/f2fs/super.c:2227 [inline]
 read_raw_super_block fs/f2fs/super.c:2631 [inline]
 f2fs_fill_super.cold+0x1f9/0x5fb fs/f2fs/super.c:2842
 mount_bdev+0x2fc/0x3b0 fs/super.c:1158
 mount_fs+0xa3/0x318 fs/super.c:1261
 vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961
 vfs_kern_mount fs/namespace.c:951 [inline]
 do_new_mount fs/namespace.c:2469 [inline]
 do_mount+0x51c/0x2f10 fs/namespace.c:2799
 ksys_mount+0xcf/0x130 fs/namespace.c:3015
 __do_sys_mount fs/namespace.c:3029 [inline]
 __se_sys_mount fs/namespace.c:3026 [inline]
 __x64_sys_mount+0xba/0x150 fs/namespace.c:3026
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44776a
Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00
RSP: 002b:00007ffd90cf80d8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffd90cf8130 RCX: 000000000044776a
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd90cf80f0
RBP: 00007ffd90cf80f0 R08: 00007ffd90cf8130 R09: 00007ffd00000015
R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000045
R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003
================================================================================
F2FS-fs (loop0): Invalid blocksize (8388608), supports only 4KB

F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
F2FS-fs (loop0): Invalid blocksize (8388608), supports only 4KB

F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
F2FS-fs (loop0): Magic Mism

Crashes (94):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/10/06 22:03 linux-4.19.y b09c34517e1a 1880b4a9 .config console log report syz C ci2-linux-4-19
2020/09/21 10:25 linux-4.19.y 015e94d0e37b c81d99c8 .config console log report syz C ci2-linux-4-19
2020/10/21 02:01 linux-4.19.y ad326970d25c ff4a3345 .config console log report info ci2-linux-4-19
2020/10/20 18:08 linux-4.19.y ad326970d25c ff4a3345 .config console log report info ci2-linux-4-19
2020/10/20 15:53 linux-4.19.y ad326970d25c ff4a3345 .config console log report info ci2-linux-4-19
2020/10/20 10:54 linux-4.19.y ad326970d25c ff4a3345 .config console log report info ci2-linux-4-19
2020/10/19 07:51 linux-4.19.y ad326970d25c fea47c01 .config console log report info ci2-linux-4-19
2020/10/19 02:54 linux-4.19.y ad326970d25c fea47c01 .config console log report info ci2-linux-4-19
2020/10/19 00:13 linux-4.19.y ad326970d25c fea47c01 .config console log report info ci2-linux-4-19
2020/10/18 19:39 linux-4.19.y ad326970d25c fea47c01 .config console log report info ci2-linux-4-19
2020/10/18 10:48 linux-4.19.y ad326970d25c fea47c01 .config console log report info ci2-linux-4-19
2020/10/17 21:44 linux-4.19.y ad326970d25c fea47c01 .config console log report info ci2-linux-4-19
2020/10/17 19:49 linux-4.19.y ad326970d25c fea47c01 .config console log report info ci2-linux-4-19
2020/10/17 17:39 linux-4.19.y ad326970d25c fea47c01 .config console log report info ci2-linux-4-19
2020/10/17 10:02 linux-4.19.y a1b977b49b66 6e262c73 .config console log report info ci2-linux-4-19
2020/10/17 02:29 linux-4.19.y a1b977b49b66 6e262c73 .config console log report info ci2-linux-4-19
2020/10/16 16:01 linux-4.19.y a1b977b49b66 6e262c73 .config console log report info ci2-linux-4-19
2020/10/15 00:30 linux-4.19.y a1b977b49b66 fc7735a2 .config console log report info ci2-linux-4-19
2020/10/14 19:51 linux-4.19.y a1b977b49b66 fc7735a2 .config console log report info ci2-linux-4-19
2020/10/14 06:23 linux-4.19.y a1b977b49b66 fc7735a2 .config console log report info ci2-linux-4-19
2020/10/13 22:51 linux-4.19.y a1b977b49b66 fc7735a2 .config console log report info ci2-linux-4-19
2020/10/13 20:09 linux-4.19.y a1b977b49b66 fc7735a2 .config console log report info ci2-linux-4-19
2020/10/13 14:01 linux-4.19.y a1b977b49b66 bd69ee0d .config console log report info ci2-linux-4-19
2020/10/13 12:30 linux-4.19.y a1b977b49b66 bd69ee0d .config console log report info ci2-linux-4-19
2020/10/13 09:21 linux-4.19.y a1b977b49b66 bd69ee0d .config console log report info ci2-linux-4-19
2020/10/13 06:50 linux-4.19.y a1b977b49b66 d32b0bbf .config console log report info ci2-linux-4-19
2020/10/13 04:24 linux-4.19.y a1b977b49b66 d32b0bbf .config console log report info ci2-linux-4-19
2020/10/12 22:14 linux-4.19.y a1b977b49b66 d32b0bbf .config console log report info ci2-linux-4-19
2020/10/12 10:56 linux-4.19.y a1b977b49b66 4a77ae0b .config console log report info ci2-linux-4-19
2020/10/12 04:09 linux-4.19.y a1b977b49b66 4a77ae0b .config console log report info ci2-linux-4-19
2020/10/11 23:16 linux-4.19.y a1b977b49b66 4a77ae0b .config console log report info ci2-linux-4-19
2020/10/11 22:03 linux-4.19.y a1b977b49b66 4a77ae0b .config console log report info ci2-linux-4-19
2020/10/11 11:09 linux-4.19.y a1b977b49b66 4a77ae0b .config console log report info ci2-linux-4-19
2020/10/11 03:42 linux-4.19.y a1b977b49b66 4a77ae0b .config console log report info ci2-linux-4-19
2020/10/11 01:31 linux-4.19.y a1b977b49b66 4a77ae0b .config console log report info ci2-linux-4-19
2020/10/10 14:50 linux-4.19.y a1b977b49b66 b74c49a6 .config console log report info ci2-linux-4-19
2020/10/10 04:29 linux-4.19.y a1b977b49b66 93817d89 .config console log report info ci2-linux-4-19
2020/10/09 08:08 linux-4.19.y a1b977b49b66 92390980 .config console log report info ci2-linux-4-19
2020/10/08 04:56 linux-4.19.y a1b977b49b66 1880b4a9 .config console log report info ci2-linux-4-19
2020/10/04 18:47 linux-4.19.y b09c34517e1a 5ef9c291 .config console log report info ci2-linux-4-19
2020/10/04 13:07 linux-4.19.y b09c34517e1a 5ef9c291 .config console log report info ci2-linux-4-19
2020/10/03 18:53 linux-4.19.y b09c34517e1a 1a3f9408 .config console log report info ci2-linux-4-19
2020/10/01 07:40 linux-4.19.y 10ad6cfd5736 a9767fb2 .config console log report info ci2-linux-4-19
2020/10/01 05:35 linux-4.19.y 10ad6cfd5736 a9767fb2 .config console log report info ci2-linux-4-19
2020/10/01 03:47 linux-4.19.y 10ad6cfd5736 a9767fb2 .config console log report info ci2-linux-4-19
2020/09/30 11:02 linux-4.19.y 10ad6cfd5736 8516f6d3 .config console log report info ci2-linux-4-19
2020/09/21 08:54 linux-4.19.y 015e94d0e37b c81d99c8 .config console log report info ci2-linux-4-19
2020/09/21 08:34 linux-4.19.y 015e94d0e37b c81d99c8 .config console log report info ci2-linux-4-19
* Struck through repros no longer work on HEAD.