syzbot

 sign-in | mailing list | source | docs
🐞 Open [527] 🐞 Fixed [32] 🐞 Invalid [292] ⬇ Missing Backports [43] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

UBSAN: shift-out-of-bounds in ext2_fill_super

Status: upstream: reported C repro on 2023/03/10 14:44
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+b8b855c6ce6c30ad0ad2@syzkaller.appspotmail.com
First crash: 402d, last: 248d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/05/08 linux-5.15.y (ToT) 8a7f2a5c5aa1 C [report] UBSAN: shift-out-of-bounds in ext2_fill_super
2023/05/08 upstream (ToT) ac9a78681b92 C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream UBSAN: shift-out-of-bounds in ext2_fill_super ext4 C 2265 312d 416d 22/26 fixed on 2023/06/08 14:41
linux-6.1 UBSAN: shift-out-of-bounds in ext2_fill_super origin:lts-only C inconclusive 1037 249d 402d 0/3 upstream: reported C repro on 2023/03/10 21:57
upstream UBSAN: shift-out-of-bounds in ext2_fill_super (2) ext4 C 571 264d 308d 23/26 fixed on 2023/10/12 12:48
▶ ▼ Fix bisection attempts (4)
Created Duration User Patch Repo Result
2024/03/21 15:49 0m fix candidate upstream error job log (0)
2024/01/09 10:36 0m fix candidate upstream error job log (0)
2023/12/09 09:28 0m fix candidate upstream error job log (0)
2023/10/06 00:35 0m bisect fix linux-5.15.y error job log (0)

Sample crash report:
loop0: detected capacity change from 0 to 512
================================================================================
UBSAN: shift-out-of-bounds in fs/ext2/super.c:950:25
shift exponent 524290 is too large for 32-bit type 'int'
CPU: 0 PID: 3963 Comm: syz-executor138 Not tainted 5.15.110-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
Call trace:
 dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 dump_stack+0x1c/0x58 lib/dump_stack.c:113
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_shift_out_of_bounds+0x2f8/0x378 lib/ubsan.c:321
 ext2_fill_super+0x2124/0x2390 fs/ext2/super.c:950
 mount_bdev+0x26c/0x368 fs/super.c:1378
 ext2_mount+0x44/0x58 fs/ext2/super.c:1473
 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610
 vfs_get_tree+0x90/0x274 fs/super.c:1508
 do_new_mount+0x25c/0x8c8 fs/namespace.c:2994
 path_mount+0x590/0x104c fs/namespace.c:3324
 do_mount fs/namespace.c:3337 [inline]
 __do_sys_mount fs/namespace.c:3545 [inline]
 __se_sys_mount fs/namespace.c:3522 [inline]
 __arm64_sys_mount+0x510/0x5e0 fs/namespace.c:3522
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
================================================================================

Crashes (1031):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/05/06 06:54 linux-5.15.y 8a7f2a5c5aa1 de870ca5 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/06/09 03:08 linux-5.15.y d7af3e5ba454 058b3a5a .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/05/10 00:42 linux-5.15.y 8a7f2a5c5aa1 30aa2a7e .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/11 12:10 linux-5.15.y c275eaaaa342 da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/11 09:06 linux-5.15.y c275eaaaa342 da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/11 00:54 linux-5.15.y c275eaaaa342 da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/10 17:39 linux-5.15.y c275eaaaa342 da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/09 22:47 linux-5.15.y c275eaaaa342 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/09 20:02 linux-5.15.y c275eaaaa342 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/09 09:18 linux-5.15.y c275eaaaa342 8ad1a287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/09 06:58 linux-5.15.y c275eaaaa342 8ad1a287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/09 03:32 linux-5.15.y c275eaaaa342 8ad1a287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/08 23:47 linux-5.15.y c275eaaaa342 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/08 21:21 linux-5.15.y c275eaaaa342 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/08 14:21 linux-5.15.y 38d4ca22a528 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/07 16:01 linux-5.15.y 38d4ca22a528 b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/07 11:29 linux-5.15.y 38d4ca22a528 0ef3dfda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/06 15:47 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/06 07:38 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/05 16:55 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/05 15:14 linux-5.15.y 38d4ca22a528 4ffcc9ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/08/05 03:21 linux-5.15.y 38d4ca22a528 cdae481e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/30 21:51 linux-5.15.y 09996673e313 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/30 20:46 linux-5.15.y 09996673e313 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/30 17:00 linux-5.15.y 09996673e313 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/29 12:17 linux-5.15.y 09996673e313 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/27 17:49 linux-5.15.y 09996673e313 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/27 16:20 linux-5.15.y 09996673e313 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/27 14:32 linux-5.15.y 09996673e313 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/27 11:56 linux-5.15.y 09996673e313 41fe1bae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/26 20:49 linux-5.15.y 5c6a716301d9 41fe1bae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/26 19:16 linux-5.15.y 5c6a716301d9 41fe1bae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/26 17:05 linux-5.15.y 5c6a716301d9 41fe1bae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/26 10:11 linux-5.15.y 5c6a716301d9 2a509c27 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/26 01:59 linux-5.15.y 5c6a716301d9 6756545c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 19:33 linux-5.15.y 5c6a716301d9 6756545c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 18:10 linux-5.15.y 5c6a716301d9 6756545c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 17:04 linux-5.15.y 5c6a716301d9 6756545c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 15:08 linux-5.15.y 5c6a716301d9 6756545c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 13:52 linux-5.15.y 5c6a716301d9 3b91ad04 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 11:10 linux-5.15.y 5c6a716301d9 3b91ad04 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 09:59 linux-5.15.y 5c6a716301d9 3b91ad04 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 07:53 linux-5.15.y 5c6a716301d9 b03242d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/25 01:26 linux-5.15.y 5c6a716301d9 b03242d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/07/24 23:08 linux-5.15.y 5c6a716301d9 b03242d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
2023/03/10 14:44 linux-5.15.y abddfcf701a5 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in ext2_fill_super
* Struck through repros no longer work on HEAD.