syzbot |
sign-in | mailing list | source | docs |
| Date | Name | Commit | Repro | Result |
|---|---|---|---|---|
| 2025/11/01 | linux-6.6.y (ToT) | e5bbb12db2c7 | C | [report] KASAN: slab-out-of-bounds Read in hfsplus_uni2asc |
| 2025/07/29 | upstream (ToT) | 86aa72182095 | C | [report] KASAN: slab-out-of-bounds Read in hfsplus_uni2asc |
| 2025/11/01 | upstream (ToT) | ba36dd5ee6fd | C | Didn't crash |
| Kernel | Title | Rank 🛈 | Repro | Cause bisect | Fix bisect | Count | Last | Reported | Patched | Status |
|---|---|---|---|---|---|---|---|---|---|---|
| linux-5.15 | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc origin:upstream | 17 | C | error | 329 | 2d07h | 969d | 0/3 | upstream: reported C repro on 2023/03/16 05:02 | |
| linux-4.19 | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc hfsplus | 17 | C | error | 2 | 1054d | 1078d | 0/1 | upstream: reported C repro on 2022/11/27 08:50 | |
| linux-4.14 | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | 17 | C | 1 | 983d | 1071d | 0/1 | upstream: reported C repro on 2022/12/04 03:32 | ||
| upstream | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc hfs | 17 | C | error | 3538 | 18d | 1077d | 0/29 | upstream: reported C repro on 2022/11/28 10:02 | |
| linux-6.1 | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc origin:upstream | 17 | C | error | 227 | 1d05h | 965d | 0/3 | upstream: reported C repro on 2023/03/19 19:39 |
| Created | Duration | User | Patch | Repo | Result |
|---|---|---|---|---|---|
| 2025/10/13 12:42 | 1h46m | bisect fix | linux-6.6.y | OK (0) job log log |
syz.0.17[5953]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set loop0: detected capacity change from 0 to 1024 hfsplus: invalid length 256 has been corrected to 255 ================================================================== BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x5bd/0x1240 fs/hfsplus/unicode.c:210 Read of size 2 at addr ffff88807d335a18 by task syz.0.17/5953 CPU: 0 PID: 5953 Comm: syz.0.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Call Trace: <TASK> dump_stack_lvl+0x16c/0x230 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:364 [inline] print_report+0xac/0x220 mm/kasan/report.c:468 kasan_report+0x117/0x150 mm/kasan/report.c:581 hfsplus_uni2asc+0x5bd/0x1240 fs/hfsplus/unicode.c:210 hfsplus_listxattr+0x58f/0xb80 fs/hfsplus/xattr.c:740 vfs_listxattr fs/xattr.c:494 [inline] listxattr+0x107/0x280 fs/xattr.c:842 path_listxattr+0xdd/0x1b0 fs/xattr.c:866 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f552db8f6c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffda77917d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 RAX: ffffffffffffffda RBX: 00007f552dde5fa0 RCX: 00007f552db8f6c9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 RBP: 00007f552dc11f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f552dde5fa0 R14: 00007f552dde5fa0 R15: 0000000000000003 </TASK> Allocated by task 5953: kasan_save_stack mm/kasan/common.c:45 [inline] kasan_set_track+0x4e/0x70 mm/kasan/common.c:52 ____kasan_kmalloc mm/kasan/common.c:374 [inline] __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:383 kasan_kmalloc include/linux/kasan.h:198 [inline] __do_kmalloc_node mm/slab_common.c:1007 [inline] __kmalloc+0xb4/0x240 mm/slab_common.c:1020 kmalloc include/linux/slab.h:604 [inline] kzalloc include/linux/slab.h:721 [inline] hfsplus_find_init+0x89/0x1d0 fs/hfsplus/bfind.c:21 hfsplus_listxattr+0x390/0xb80 fs/hfsplus/xattr.c:699 vfs_listxattr fs/xattr.c:494 [inline] listxattr+0x107/0x280 fs/xattr.c:842 path_listxattr+0xdd/0x1b0 fs/xattr.c:866 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 The buggy address belongs to the object at ffff88807d335800 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 0 bytes to the right of allocated 536-byte region [ffff88807d335800, ffff88807d335a18) The buggy address belongs to the physical page: page:ffffea0001f4cc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d330 head:ffffea0001f4cc00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) page_type: 0xffffffff() raw: 00fff00000000840 ffff888017841dc0 ffffea0000b02e00 0000000000000002 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5739, tgid 5739 (dhcpcd-run-hook), ts 69936591479, free_ts 69889106010 set_page_owner include/linux/page_owner.h:31 [inline] post_alloc_hook+0x1cd/0x210 mm/page_alloc.c:1554 prep_new_page mm/page_alloc.c:1561 [inline] get_page_from_freelist+0x195c/0x19f0 mm/page_alloc.c:3191 __alloc_pages+0x1e3/0x460 mm/page_alloc.c:4457 alloc_slab_page+0x5d/0x170 mm/slub.c:1881 allocate_slab mm/slub.c:2028 [inline] new_slab+0x87/0x2e0 mm/slub.c:2081 ___slab_alloc+0xc6d/0x1300 mm/slub.c:3253 __slab_alloc mm/slub.c:3339 [inline] __slab_alloc_node mm/slub.c:3392 [inline] slab_alloc_node mm/slub.c:3485 [inline] __kmem_cache_alloc_node+0x1a2/0x260 mm/slub.c:3534 __do_kmalloc_node mm/slab_common.c:1006 [inline] __kmalloc+0xa4/0x240 mm/slab_common.c:1020 kmalloc include/linux/slab.h:604 [inline] load_elf_phdrs+0x136/0x230 fs/binfmt_elf.c:512 load_elf_binary+0x956/0x2700 fs/binfmt_elf.c:986 search_binary_handler fs/exec.c:1775 [inline] exec_binprm fs/exec.c:1817 [inline] bprm_execve+0xaeb/0x16f0 fs/exec.c:1892 do_execveat_common+0x51b/0x6c0 fs/exec.c:1998 do_execve fs/exec.c:2072 [inline] __do_sys_execve fs/exec.c:2148 [inline] __se_sys_execve fs/exec.c:2143 [inline] __x64_sys_execve+0x92/0xa0 fs/exec.c:2143 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 page last free stack trace: reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1154 [inline] free_unref_page_prepare+0x7ce/0x8e0 mm/page_alloc.c:2336 free_unref_page+0x32/0x2e0 mm/page_alloc.c:2429 discard_slab mm/slub.c:2127 [inline] __unfreeze_partials+0x1cf/0x210 mm/slub.c:2667 put_cpu_partial+0x17c/0x250 mm/slub.c:2743 __slab_free+0x31d/0x410 mm/slub.c:3700 qlink_free mm/kasan/quarantine.c:166 [inline] qlist_free_all+0x75/0xe0 mm/kasan/quarantine.c:185 kasan_quarantine_reduce+0x143/0x160 mm/kasan/quarantine.c:292 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:305 kasan_slab_alloc include/linux/kasan.h:188 [inline] slab_post_alloc_hook+0x6e/0x4d0 mm/slab.h:767 slab_alloc_node mm/slub.c:3495 [inline] slab_alloc mm/slub.c:3503 [inline] __kmem_cache_alloc_lru mm/slub.c:3510 [inline] kmem_cache_alloc+0x11e/0x2e0 mm/slub.c:3519 getname_flags+0xbb/0x500 fs/namei.c:140 do_sys_openat2+0xcb/0x1c0 fs/open.c:1413 do_sys_open fs/open.c:1434 [inline] __do_sys_openat fs/open.c:1450 [inline] __se_sys_openat fs/open.c:1445 [inline] __x64_sys_openat+0x139/0x160 fs/open.c:1445 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 Memory state around the buggy address: ffff88807d335900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff88807d335980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff88807d335a00: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff88807d335a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88807d335b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================
| Time | Kernel | Commit | Syzkaller | Config | Log | Report | Syz repro | C repro | VM info | Assets (help?) | Manager | Title |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2025/11/07 10:48 | linux-6.6.y | 0a805b6ea8cd | 4e1406b4 | .config | console log | report | syz / log | C | [disk image] [vmlinux] [kernel image] [mounted in repro] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | |
| 2025/07/26 02:32 | linux-6.6.y | dbcb8d8e4163 | fb8f743d | .config | console log | report | syz / log | C | [disk image] [vmlinux] [kernel image] [mounted in repro] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | |
| 2025/11/08 05:20 | linux-6.6.y | 0a805b6ea8cd | 4e1406b4 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/11/07 07:01 | linux-6.6.y | 0a805b6ea8cd | 4e1406b4 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/11/07 07:00 | linux-6.6.y | 0a805b6ea8cd | 4e1406b4 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/11/01 00:09 | linux-6.6.y | e5bbb12db2c7 | 2c50b6a9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/11/01 00:09 | linux-6.6.y | e5bbb12db2c7 | 2c50b6a9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/31 13:53 | linux-6.6.y | e5bbb12db2c7 | 2c50b6a9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/31 13:53 | linux-6.6.y | e5bbb12db2c7 | 2c50b6a9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/29 02:14 | linux-6.6.y | 4a243110dc88 | fd2207e7 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/29 02:14 | linux-6.6.y | 4a243110dc88 | fd2207e7 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/29 01:52 | linux-6.6.y | 4a243110dc88 | fd2207e7 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/29 01:52 | linux-6.6.y | 4a243110dc88 | fd2207e7 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/29 01:49 | linux-6.6.y | 4a243110dc88 | fd2207e7 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/29 01:46 | linux-6.6.y | 4a243110dc88 | fd2207e7 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/27 09:47 | linux-6.6.y | 4a243110dc88 | c0460fcd | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/27 09:47 | linux-6.6.y | 4a243110dc88 | c0460fcd | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/27 09:42 | linux-6.6.y | 4a243110dc88 | c0460fcd | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/27 09:41 | linux-6.6.y | 4a243110dc88 | c0460fcd | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/27 08:44 | linux-6.6.y | 4a243110dc88 | c0460fcd | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/26 20:24 | linux-6.6.y | 4a243110dc88 | c0460fcd | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/26 20:24 | linux-6.6.y | 4a243110dc88 | c0460fcd | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/19 11:03 | linux-6.6.y | 0bbbd97a442d | 1c8c8cd8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/19 11:03 | linux-6.6.y | 0bbbd97a442d | 1c8c8cd8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/19 10:53 | linux-6.6.y | 0bbbd97a442d | 1c8c8cd8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/19 10:53 | linux-6.6.y | 0bbbd97a442d | 1c8c8cd8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/19 09:41 | linux-6.6.y | 0bbbd97a442d | 1c8c8cd8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/19 09:40 | linux-6.6.y | 0bbbd97a442d | 1c8c8cd8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/18 21:27 | linux-6.6.y | 0bbbd97a442d | 1c8c8cd8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/18 21:26 | linux-6.6.y | 0bbbd97a442d | 1c8c8cd8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/16 07:44 | linux-6.6.y | 0bbbd97a442d | 19568248 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/16 07:43 | linux-6.6.y | 0bbbd97a442d | 19568248 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/14 19:17 | linux-6.6.y | 655054d2c3c1 | b6605ba8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/10/14 18:51 | linux-6.6.y | 655054d2c3c1 | b6605ba8 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/09/06 00:14 | linux-6.6.y | 355bd0b51d2f | d291dd2d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/08/27 05:32 | linux-6.6.y | bb9c90ab9c5a | e12e5ba4 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/07/22 10:36 | linux-6.6.y | d96eb99e2f0e | 1555463b | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/07/22 10:36 | linux-6.6.y | d96eb99e2f0e | 1555463b | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc | ||
| 2025/07/22 10:34 | linux-6.6.y | d96eb99e2f0e | 1555463b | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-linux-6-6-kasan | KASAN: slab-out-of-bounds Read in hfsplus_uni2asc |