syzbot


UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
Status: internal: reported C repro on 2020/12/07 13:09
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: b193e15ac69d net: prevent user from passing illegal stab size
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 359d, last: 61d

Cause bisection: introduced by (bisect log) [release commit]:
commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Sun Sep 15 21:19:32 2019 +0000

  Linux 5.3

Crash: UBSAN: undefined-behaviour in __qdisc_calculate_pkt_len (log)
Repro: C syz .config

Sample crash report:

Crashes (5660):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2021/07/13 02:53 upstream 7fef2edf7cc7 f415556d .config log report syz C UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-root 2021/05/29 14:19 upstream 5ff2756afde0 858ea628 .config log report syz C UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/01/20 01:18 upstream 1e2a199f6ccd 63631df1 .config log report syz C UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/03/31 14:20 net 61431a5907fc 6a81331a .config log report syz C UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/03/31 14:18 net-next 37f368d8d09d 6a81331a .config log report syz C UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-linux-next-kasan-gce-root 2020/12/10 02:16 linux-next a9e26cb5f261 c090b4da .config log report syz C
ci-upstream-kasan-gce-root 2021/09/30 17:59 upstream 02d5e016800d be530f6c .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-smack-root 2021/09/29 12:42 upstream a4e6f95a891a d82cb927 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-selinux-root 2021/09/29 09:39 upstream a4e6f95a891a d82cb927 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/09/29 07:59 upstream a4e6f95a891a d82cb927 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/09/29 03:12 upstream d33bec7b3dfa d82cb927 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/09/28 11:51 upstream 0513e464f900 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-selinux-root 2021/09/28 06:46 upstream 0513e464f900 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-smack-root 2021/09/28 03:35 upstream 0513e464f900 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/09/27 18:17 upstream 5816b3e6577e 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-smack-root 2021/09/27 00:05 upstream 996148ee05d0 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-root 2021/09/26 05:21 upstream a5e0aceabef6 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/09/25 19:12 upstream 7d42e9818258 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-smack-root 2021/09/24 08:29 upstream f9e36107ec70 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/09/24 07:25 upstream f9e36107ec70 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-selinux-root 2021/09/24 06:10 upstream f9e36107ec70 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/09/23 20:56 upstream 58e2cf5d7946 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/09/23 18:44 upstream 58e2cf5d7946 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-qemu-upstream 2021/08/01 20:38 upstream d4affd6b6e81 6c236867 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-386 2021/09/30 19:09 upstream 02d5e016800d be530f6c .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-386 2021/09/28 05:29 upstream 0513e464f900 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-386 2021/09/25 02:15 upstream 4c4f0c2bf341 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce-386 2021/09/24 14:27 upstream f9e36107ec70 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-qemu-upstream-386 2021/08/04 00:48 upstream d5ad8ec3cfb5 6c236867 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/09/26 08:08 net 7fe7f3182a0d 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/09/26 03:31 net 7fe7f3182a0d 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/09/26 00:25 net 7fe7f3182a0d 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/09/25 21:13 net 7fe7f3182a0d 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/09/25 18:03 net 7fe7f3182a0d 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/09/25 13:07 net 7fe7f3182a0d 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/09/25 03:31 net 4526fe74c3c5 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-this-kasan-gce 2021/09/23 23:22 net 3106a0847525 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/10/01 02:31 net-next 69508d43334e 1d849ab4 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/10/01 01:25 net-next 69508d43334e 1d849ab4 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/30 11:34 net-next ef91abfb20c7 be530f6c .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/29 18:27 net-next b69c99463d41 be530f6c .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/29 14:40 net-next b69c99463d41 be530f6c .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/29 12:38 net-next b69c99463d41 d82cb927 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/29 06:46 net-next b69c99463d41 d82cb927 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/29 03:13 net-next b69c99463d41 d82cb927 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/28 15:51 net-next b69c99463d41 d82cb927 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/28 02:02 net-next b69c99463d41 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/27 20:15 net-next b69c99463d41 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/27 15:53 net-next b69c99463d41 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/27 13:22 net-next b69c99463d41 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/27 13:20 net-next b69c99463d41 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/27 09:49 net-next d59bdda85eb7 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/27 07:24 net-next d59bdda85eb7 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/27 01:15 net-next d59bdda85eb7 78494d16 .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/26 17:04 net-next d59bdda85eb7 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/26 10:36 net-next 24aa160d5375 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/26 09:10 net-next 24aa160d5375 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/25 23:16 net-next 24aa160d5375 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/25 10:02 net-next acde891c243c 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/24 11:16 net-next 2fcd14d0f780 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-net-kasan-gce 2021/09/24 04:28 net-next 2fcd14d0f780 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-linux-next-kasan-gce-root 2021/09/25 11:37 linux-next 5a5d008887b4 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-linux-next-kasan-gce-root 2021/09/24 04:29 linux-next bc5aa70f2699 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-linux-next-kasan-gce-root 2021/09/24 02:29 linux-next bc5aa70f2699 8cac236e .config log report info UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
ci-upstream-kasan-gce 2021/01/17 13:17 upstream 0da0a8a0a0e1 813be542 .config log report info
ci-upstream-linux-next-kasan-gce-root 2020/12/07 13:08 linux-next 15ac8fdb7440 1190297f .config log report info