syzbot


UBSAN: shift-out-of-bounds in dbDiscardAG

Status: upstream: reported C repro on 2024/08/11 07:51
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+44479088a2c9bdc8e2a7@syzkaller.appspotmail.com
First crash: 58d, last: 6d15h
Bug presence (2)
Date Name Commit Repro Result
2024/09/29 linux-5.15.y (ToT) 3a5928702e71 C [report] UBSAN: shift-out-of-bounds in dbDiscardAG
2024/09/29 upstream (ToT) 3efc57369a0c C Didn't crash
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 UBSAN: shift-out-of-bounds in dbDiscardAG 1 558d 558d 0/3 auto-obsoleted due to no activity on 2023/07/28 02:34
upstream UBSAN: shift-out-of-bounds in dbDiscardAG jfs C unreliable 5 93d 108d 27/28 fixed on 2024/08/14 03:44
linux-6.1 UBSAN: shift-out-of-bounds in dbDiscardAG (2) origin:lts-only C done 5 50d 55d 3/3 fixed on 2024/09/23 09:27

Sample crash report:
         option from the mount to silence this warning.
=======================================================
================================================================================
UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:1697:18
shift exponent -1 is negative
CPU: 0 PID: 4019 Comm: syz-executor379 Not tainted 5.15.167-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call trace:
 dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 dump_stack+0x1c/0x58 lib/dump_stack.c:113
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_shift_out_of_bounds+0x2f8/0x378 lib/ubsan.c:321
 dbDiscardAG+0x3a4/0x728 fs/jfs/jfs_dmap.c:1697
 jfs_ioc_trim+0x3cc/0x5d8 fs/jfs/jfs_discard.c:100
 jfs_ioctl+0x350/0x574 fs/jfs/ioctl.c:132
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl fs/ioctl.c:860 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:860
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/29 01:45 linux-5.15.y 3a5928702e71 ba29ff75 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in dbDiscardAG
2024/10/01 21:56 linux-5.15.y 3a5928702e71 ea2b66a6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan UBSAN: shift-out-of-bounds in dbDiscardAG
2024/10/01 21:56 linux-5.15.y 3a5928702e71 ea2b66a6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan UBSAN: shift-out-of-bounds in dbDiscardAG
2024/08/13 21:31 linux-5.15.y 7e89efd3ae1c f21a18ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan UBSAN: shift-out-of-bounds in dbDiscardAG
2024/08/13 21:31 linux-5.15.y 7e89efd3ae1c f21a18ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan UBSAN: shift-out-of-bounds in dbDiscardAG
2024/08/11 07:50 linux-5.15.y 7e89efd3ae1c 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan UBSAN: shift-out-of-bounds in dbDiscardAG
2024/10/01 04:46 linux-5.15.y 3a5928702e71 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in dbDiscardAG
2024/10/01 04:46 linux-5.15.y 3a5928702e71 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in dbDiscardAG
2024/09/29 01:46 linux-5.15.y 3a5928702e71 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in dbDiscardAG
2024/09/29 01:35 linux-5.15.y 3a5928702e71 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 UBSAN: shift-out-of-bounds in dbDiscardAG
* Struck through repros no longer work on HEAD.