syzbot

 sign-in | mailing list | source | docs
🐞 Open [677]
🐞 Fixed [94]
🐞 Invalid [514]
⬇ Missing Backports [36]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

UBSAN: shift-out-of-bounds in extAlloc

Status: upstream: reported C repro on 2023/03/12 23:53
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+67f714a53ce18d5b542e@syzkaller.appspotmail.com
First crash: 619d, last: 368d
Fix commit to backport (bisect log) :
tree: upstream
commit a779ed754e52d582b8c0e17959df063108bd0656
Author: Dave Kleikamp <dave.kleikamp@oracle.com>
Date: Thu Oct 5 14:16:14 2023 +0000

  jfs: define xtree root and page independently

  
Fix bisection: the issue occurs on the latest tested release (bisect log)
Crash: UBSAN: array-index-out-of-bounds in txCommit (log)
Repro: C syz .config
  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2023/11/05 linux-6.1.y (ToT) 4a61839152cc C [report] UBSAN: array-index-out-of-bounds in xtInsert
2023/05/09 upstream (ToT) ba0ad6ed89fd C [report] UBSAN: array-index-out-of-bounds in xtInsert
2023/11/05 upstream (ToT) 77fa2fbe87fc C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream UBSAN: shift-out-of-bounds in extAlloc jfs C error 6605 426d 786d 23/28 fixed on 2023/10/12 12:47
linux-5.15 UBSAN: shift-out-of-bounds in extAlloc origin:upstream C done 217 430d 622d 3/3 fixed on 2023/10/20 00:28
upstream UBSAN: shift-out-of-bounds in extAlloc (2) jfs C inconclusive 3 39d 201d 0/28 upstream: reported C repro on 2024/05/03 13:40
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2023/12/10 03:12 3h41m fix candidate upstream OK (1) job log
2023/11/18 08:27 1h22m bisect fix linux-6.1.y OK (0) job log log
2023/10/17 03:51 1h14m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
================================================================================
UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
shift exponent -1 is negative
CPU: 1 PID: 3547 Comm: syz-executor137 Not tainted 6.1.52-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3bf/0x420 lib/ubsan.c:321
 extBalloc fs/jfs/jfs_extent.c:314 [inline]
 extAlloc+0xe4f/0x1010 fs/jfs/jfs_extent.c:122
 jfs_get_block+0x417/0xe50 fs/jfs/inode.c:248
 get_more_blocks fs/direct-io.c:665 [inline]
 do_direct_IO fs/direct-io.c:953 [inline]
 __blockdev_direct_IO+0x1ba3/0x4340 fs/direct-io.c:1266
 blockdev_direct_IO include/linux/fs.h:3230 [inline]
 jfs_direct_IO+0xf6/0x1e0 fs/jfs/inode.c:336
 generic_file_direct_write+0x204/0x460 mm/filemap.c:3678
 __generic_file_write_iter+0x1c4/0x400 mm/filemap.c:3838
 generic_file_write_iter+0xab/0x310 mm/filemap.c:3914
 do_iter_write+0x6e6/0xc50 fs/read_write.c:861
 iter_file_splice_write+0x806/0xfa0 fs/splice.c:686
 do_splice_from fs/splice.c:764 [inline]
 direct_splice_actor+0xe3/0x1c0 fs/splice.c:931
 splice_direct_to_actor+0x4c0/0xbd0 fs/splice.c:886
 do_splice_direct+0x27f/0x3c0 fs/splice.c:974
 do_sendfile+0x61c/0xff0 fs/read_write.c:1255
 __do_sys_sendfile64 fs/read_write.c:1323 [inline]
 __se_sys_sendfile64+0x178/0x1e0 fs/read_write.c:1309
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f0bbae1b0d9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdf667b578 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 0032656c69662f2e RCX: 00007f0bbae1b0d9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 7261637369646f6e R08: 00005555574a24c0 R09: 00005555574a24c0
R10: 0001000000201004 R11: 0000000000000246 R12: 6573726168636f69
R13: 65756e69746e6f63 R14: 633d73726f727265 R15: 00007f0bbae6403b
 </TASK>
================================================================================

Crashes (203):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/09/13 06:16 linux-6.1.y 59b13c2b647e 59da8366 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/03 18:35 linux-6.1.y c2cbfe5f5122 696ea0d2 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/05/07 19:55 linux-6.1.y ca48fc16c493 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/20 08:55 linux-6.1.y 6c44e13dc284 d216d8a0 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/18 03:34 linux-6.1.y 6c44e13dc284 74b106b6 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/16 12:22 linux-6.1.y 1321ab403b38 39990d51 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/14 04:59 linux-6.1.y 1321ab403b38 39990d51 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/07/23 01:42 linux-6.1.y a456e1743881 27cbe77f .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/06/20 17:32 linux-6.1.y ca87e77a2ef8 09ffe269 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/06/19 08:20 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/06/17 18:36 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/06/17 18:02 linux-6.1.y ca87e77a2ef8 f3921d4d .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/05/29 12:04 linux-6.1.y a343b0dd87b4 cf184559 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/05/22 17:46 linux-6.1.y fa74641fb6b9 4bce1a3e .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/05/22 15:37 linux-6.1.y fa74641fb6b9 4bce1a3e .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/05/22 14:25 linux-6.1.y fa74641fb6b9 4bce1a3e .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/05/15 00:57 linux-6.1.y bf4ad6fa4e53 2b9ba477 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/05/07 05:26 linux-6.1.y ca48fc16c493 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/05/19 09:44 linux-6.1.y fa74641fb6b9 3bb7af1d .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/05/18 22:59 linux-6.1.y fa74641fb6b9 3bb7af1d .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/03/26 05:12 linux-6.1.y e3a87a10f259 fbf0499a .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/03/25 20:15 linux-6.1.y e3a87a10f259 fbf0499a .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/09/12 21:26 linux-6.1.y 59b13c2b647e 59da8366 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/11 22:43 linux-6.1.y 59b13c2b647e 59da8366 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/11 07:28 linux-6.1.y 59b13c2b647e 6654cf89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/10 22:58 linux-6.1.y 59b13c2b647e 6654cf89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/07 12:49 linux-6.1.y 59b13c2b647e 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/06 07:45 linux-6.1.y c2cbfe5f5122 0b6286dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/03 08:24 linux-6.1.y c2cbfe5f5122 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/02 21:27 linux-6.1.y c2cbfe5f5122 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/02 18:02 linux-6.1.y c2cbfe5f5122 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/31 22:14 linux-6.1.y a2943d2d9a00 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/09/11 01:32 linux-6.1.y 59b13c2b647e 6654cf89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/09/08 13:55 linux-6.1.y 59b13c2b647e 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/09/06 14:34 linux-6.1.y c2cbfe5f5122 0b6286dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/09/05 02:09 linux-6.1.y c2cbfe5f5122 0b6286dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/09/04 17:06 linux-6.1.y c2cbfe5f5122 db3306a6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/09/04 10:46 linux-6.1.y c2cbfe5f5122 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/09/04 05:21 linux-6.1.y c2cbfe5f5122 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/31 07:55 linux-6.1.y a2943d2d9a00 84803932 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/30 19:19 linux-6.1.y a2943d2d9a00 84803932 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/28 20:27 linux-6.1.y 024f76bca9d0 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/28 07:04 linux-6.1.y 024f76bca9d0 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/25 18:15 linux-6.1.y 802aacbbffe2 03d9c195 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/22 06:14 linux-6.1.y 6c44e13dc284 6b415825 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/15 18:47 linux-6.1.y 1321ab403b38 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/12 04:54 linux-6.1.y 1321ab403b38 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/10 10:43 linux-6.1.y 0a4a7855302d 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/10 06:12 linux-6.1.y 0a4a7855302d 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/10 04:41 linux-6.1.y 0a4a7855302d 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/09 11:29 linux-6.1.y 0a4a7855302d 8ad1a287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/09 00:09 linux-6.1.y 0a4a7855302d 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/08 12:14 linux-6.1.y 52a953d0934b 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/08 03:32 linux-6.1.y 52a953d0934b b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/08 02:04 linux-6.1.y 52a953d0934b b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/05 02:42 linux-6.1.y 52a953d0934b cdae481e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/07/31 07:32 linux-6.1.y d2a6dc4eaf6d 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/03/12 23:53 linux-6.1.y 1cc3fcf63192 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan UBSAN: shift-out-of-bounds in extAlloc
2023/08/27 00:18 linux-6.1.y cd363bb9548e 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/24 09:26 linux-6.1.y 802aacbbffe2 4d7ae7ab .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/23 14:52 linux-6.1.y 6c44e13dc284 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/19 03:59 linux-6.1.y 6c44e13dc284 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/14 18:21 linux-6.1.y 1321ab403b38 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/09 01:56 linux-6.1.y 0a4a7855302d 9552ae77 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/05 05:59 linux-6.1.y 52a953d0934b cdae481e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
2023/08/01 12:34 linux-6.1.y d2a6dc4eaf6d 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 UBSAN: shift-out-of-bounds in extAlloc
* Struck through repros no longer work on HEAD.