syzbot


UBSAN: shift-out-of-bounds in dbFindBits (2)

Status: upstream: reported C repro on 2024/10/25 06:49
Subsystems: jfs
[Documentation on labels]
Reported-by: syzbot+9e90a1c5eedb9dc4c6cc@syzkaller.appspotmail.com
First crash: 156d, last: 1d03h
Discussions (5)
Title Replies (including bot) Last reply
[PATCH v4] jfs: UBSAN: shift-out-of-bounds in dbFindBits 2 (3) 2024/12/02 20:53
[PATCH v3] jfs: UBSAN: shift-out-of-bounds in dbFindBits 2 (3) 2024/10/30 15:15
Re: [syzbot] [PATCH v3] jfs: UBSAN: shift-out-of-bounds in dbFindBits 0 (1) 2024/10/25 16:30
[PATCH v2] jfs: UBSAN: shift-out-of-bounds in dbFindBits 1 (2) 2024/10/25 15:39
[syzbot] [jfs?] UBSAN: shift-out-of-bounds in dbFindBits (2) 0 (1) 2024/10/25 06:49
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream UBSAN: shift-out-of-bounds in dbFindBits jfs C error 53 159d 262d 28/28 fixed on 2024/10/22 11:57
Last patch testing requests (4)
Created Duration User Patch Repo Result
2024/11/01 10:00 19m zoo868e@gmail.com patch upstream OK log
2024/10/25 17:00 19m zoo868e@gmail.com patch upstream OK log
2024/10/25 16:30 19m zoo868e@gmail.com patch upstream OK log
2024/10/25 15:25 13m zoo868e@gmail.com patch upstream report log

Sample crash report:
ERROR: (device loop0): remounting filesystem as read-only
ERROR: (device loop0): dbDiscardAG: -EIO
ERROR: (device loop0): dbAllocBits: leaf page corrupt
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:3034:55
shift exponent 32 is too large for 32-bit type 'u32' (aka 'unsigned int')
CPU: 0 UID: 0 PID: 5302 Comm: syz-executor163 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468
 dbFindBits+0x11a/0x1d0 fs/jfs/jfs_dmap.c:3034
 dbAllocDmapLev+0x1e9/0x4a0 fs/jfs/jfs_dmap.c:1988
 dbAllocCtl+0x147/0x9b0 fs/jfs/jfs_dmap.c:1828
 dbAllocAG+0x28f/0x10b0 fs/jfs/jfs_dmap.c:1364
 dbDiscardAG+0x352/0xa20 fs/jfs/jfs_dmap.c:1613
 jfs_ioc_trim+0x45a/0x6b0 fs/jfs/jfs_discard.c:105
 jfs_ioctl+0x2cd/0x3e0 fs/jfs/ioctl.c:131
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4fb4b3cc99
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc63e58898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fb4b3cc99
RDX: 00000000200000c0 RSI: 00000000c0185879 RDI: 0000000000000004
RBP: 00007f4fb4bb55f0 R08: 000055556545d4c0 R09: 000055556545d4c0
R10: 000055556545d4c0 R11: 0000000000000246 R12: 00007ffc63e588c0
R13: 00007ffc63e58ae8 R14: 431bde82d7b634db R15: 00007f4fb4b8503b
 </TASK>
---[ end trace ]---

Crashes (132):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/01 07:56 upstream 69e858e0b8b2 aa47157c .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2024/10/22 13:13 upstream c2ee9f594da8 a93682b3 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/27 05:01 upstream f6e0150b2003 20510e88 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/26 23:01 upstream 1e26c5e28ca5 19e40f48 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/26 09:30 upstream 2df0c02dab82 89d30d73 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/22 13:28 upstream 88d324e69ea9 c6512ef7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/21 15:48 upstream b3ee1e460951 62330552 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/20 20:56 upstream 5fc319360819 62330552 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/19 00:51 upstream 76b6905c11fd 22a6c2b1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/15 04:19 upstream 83158b21ae9a e2826670 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/13 21:34 upstream 4003c9e78778 e2826670 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/11 04:05 upstream 4d872d51bc9d 16256247 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/02 21:38 upstream 1973160c90d7 c3901742 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/02 15:33 upstream ece144f151ac c3901742 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/02/28 18:41 upstream 76544811c850 1e7a43e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/02/25 20:45 upstream 2a1944bff549 d34966d1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/02/17 01:42 upstream ba643b6d8440 40a34ec9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/02/13 05:37 upstream 4dc1d1bec898 2afad16e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/02/10 16:42 upstream a64dcfb451e2 43f51a00 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/02/08 05:32 upstream 7ee983c850b4 ef44b750 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/02/01 06:52 upstream 69e858e0b8b2 aa47157c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/30 05:31 upstream 805ba04cb7cc afe4eff5 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/29 16:36 upstream 805ba04cb7cc d03b0c97 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/28 13:44 upstream 805ba04cb7cc ac37c1f8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/28 04:39 upstream 805ba04cb7cc 18070896 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/27 02:29 upstream c2da8b3f914f 9fbd772e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/24 21:20 upstream bc8198dc7ebc 1293872d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/24 18:34 upstream bc8198dc7ebc 1293872d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/24 05:13 upstream e0b1f5914274 521b0ce3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/23 05:13 upstream df60eac9efe8 9d4f14f8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/22 10:30 upstream c4b9570cfb63 da72ac06 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/21 01:20 upstream ffd294d346d1 6e87cfa2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/19 21:44 upstream 9528d418de4d f2cb035c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/18 18:58 upstream 595523945be0 f2cb035c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/17 18:05 upstream 9bffa1ad25b8 bb91bdd4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/16 10:21 upstream 619f0b6fad52 968edaf4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/14 15:39 upstream c45323b7560e 0dce2409 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/10 04:11 upstream 643e2e259c2b 67d7ec0a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/09 12:44 upstream eea6e4b4dfb8 9220929f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/08 23:01 upstream 0b7958fa05d5 f3558dbf .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/06 19:32 upstream 9d89551994a4 f3558dbf .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/06 08:21 upstream 9244696b34f2 f3558dbf .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/06 03:25 upstream 9244696b34f2 f3558dbf .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/04 09:09 upstream 63676eefb7a0 f3558dbf .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/01/01 19:31 upstream ccb98ccef0e5 d3ccff63 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
* Struck through repros no longer work on HEAD.