syzbot


UBSAN: shift-out-of-bounds in v9fs_get_tree

Status: upstream: reported C repro on 2025/08/21 02:58
Subsystems: v9fs
[Documentation on labels]
Reported-by: syzbot+30c83da54e948f6e9436@syzkaller.appspotmail.com
First crash: 12d, last: 46m
Discussions (2)
Title Replies (including bot) Last reply
[PATCH next] 9p: Correct the session info 3 (3) 2025/08/23 06:34
[syzbot] [v9fs?] UBSAN: shift-out-of-bounds in v9fs_get_tree 5 (11) 2025/08/22 18:05
Last patch testing requests (5)
Created Duration User Patch Repo Result
2025/08/22 14:27 17m eadavis@qq.com patch linux-next error
2025/08/22 13:46 2h50m yuichtsu@amazon.com patch linux-next error
2025/08/22 13:32 1h23m yuichtsu@amazon.com patch linux-next error
2025/08/21 08:48 19m hdanton@sina.com patch linux-next report log
2025/08/21 03:48 17m asmadeus@codewreck.org patch linux-next report log

Sample crash report:
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22
shift exponent 32 is too large for 32-bit type 'int'
CPU: 0 UID: 0 PID: 6022 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 ubsan_epilogue+0xa/0x40 lib/ubsan.c:233
 __ubsan_handle_shift_out_of_bounds+0x386/0x410 lib/ubsan.c:494
 v9fs_fill_super fs/9p/vfs_super.c:57 [inline]
 v9fs_get_tree+0x957/0xa90 fs/9p/vfs_super.c:125
 vfs_get_tree+0x8f/0x2b0 fs/super.c:1752
 do_new_mount+0x2a2/0xa30 fs/namespace.c:3810
 do_mount fs/namespace.c:4138 [inline]
 __do_sys_mount fs/namespace.c:4349 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4326
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9454b8ebe9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffcf50fe38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f9454db5fa0 RCX: 00007f9454b8ebe9
RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000
RBP: 00007f9454c11e19 R08: 0000200000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9454db5fa0 R14: 00007f9454db5fa0 R15: 0000000000000005
 </TASK>
---[ end trace ]---

Crashes (9986):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/29 18:05 linux-next 7fa4d8dc380f 3e1beec6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 15:58 linux-next 7fa4d8dc380f 3e1beec6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/28 15:17 linux-next 7fa4d8dc380f 443c11c7 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/18 12:20 linux-next 3ac864c2d9bb 1804e95e .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/18 11:31 linux-next 3ac864c2d9bb 1804e95e .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/18 10:41 linux-next 3ac864c2d9bb 1804e95e .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 11:33 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 11:26 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 08:08 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 06:46 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 05:07 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 04:47 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 03:39 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 02:59 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 02:45 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 02:31 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 02:08 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 01:56 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/30 01:47 linux-next 7fa4d8dc380f 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 23:59 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 23:08 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 22:47 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 21:36 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 21:01 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 20:57 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 19:50 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 18:45 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 17:49 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 16:59 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 14:49 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 14:16 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 12:56 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 11:55 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 11:37 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 11:16 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 10:15 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 09:56 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 08:46 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 05:22 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 04:46 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 04:46 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 03:04 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 01:49 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 01:34 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/29 01:26 linux-next 7fa4d8dc380f 3e1beec6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/28 23:10 linux-next 7fa4d8dc380f 443c11c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/28 22:18 linux-next 7fa4d8dc380f 443c11c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/28 21:59 linux-next 7fa4d8dc380f 443c11c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in v9fs_get_tree
2025/08/26 16:06 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root UBSAN: shift-out-of-bounds in v9fs_get_tree
* Struck through repros no longer work on HEAD.