syzbot


UBSAN: shift-out-of-bounds in choke_change (2)
Status: internal: reported C repro on 2021/03/24 20:31
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 3a87571f0ffc sch_red: fix off-by-one checks in red_check_params()
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 127d, last: 112d

Cause bisection: introduced by (bisect log) :
commit 97a61369830ab085df5aed0ff9256f35b07d425a
Author: Roman Gushchin <guro@fb.com>
Date: Thu Sep 12 17:56:45 2019 +0000

  cgroup: freezer: fix frozen state inheritance

Crash: KASAN: use-after-free Read in batadv_iv_ogm_queue_add (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream UBSAN: shift-out-of-bounds in choke_change C inconclusive 15 153d 212d 0/22 closed as dup on 2020/12/29 20:08

Sample crash report:

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-this-kasan-gce 2021/03/25 10:27 net 6f235a69e594 607e3baf .config log report syz C UBSAN: shift-out-of-bounds in choke_change
ci-upstream-linux-next-kasan-gce-root 2021/03/24 20:51 linux-next 20f1b5f9c07c 607e3baf .config log report syz C UBSAN: shift-out-of-bounds in choke_change
ci-upstream-kasan-gce-root 2021/04/09 05:42 upstream 4fa56ad0d12e 6a81331a .config log report info UBSAN: shift-out-of-bounds in choke_change
ci-upstream-kasan-gce 2021/04/06 05:10 upstream 0a50438c8436 6a81331a .config log report info UBSAN: shift-out-of-bounds in choke_change
ci-upstream-kasan-gce 2021/04/01 13:28 upstream d19cc4bfbff1 6a81331a .config log report info UBSAN: shift-out-of-bounds in choke_change
ci-upstream-linux-next-kasan-gce-root 2021/03/28 06:58 linux-next 931294922e65 a8529b82 .config log report info UBSAN: shift-out-of-bounds in choke_change
ci-upstream-linux-next-kasan-gce-root 2021/03/24 20:30 linux-next 20f1b5f9c07c 607e3baf .config log report info UBSAN: shift-out-of-bounds in choke_change