syzbot


UBSAN: shift-out-of-bounds in dbFindBits (2)

Status: upstream: reported C repro on 2024/10/25 06:49
Subsystems: jfs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+9e90a1c5eedb9dc4c6cc@syzkaller.appspotmail.com
First crash: 610d, last: 18h17m
✨ AI Patch Versions (1)
Version Stage Reported Report Link Job
1 moderation 2026/05/29 14:32 Discussion 665e737f-2256-468b-a1a9-fd1d4b2ebf38
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
665e737f-2256-468b-a1a9-fd1d4b2ebf38 patching UBSAN: shift-out-of-bounds in dbFindBits (2) 2026/05/29 14:07 2026/05/29 14:07 2026/05/29 14:32 6b4a844333e83556da95d61d7f207e7ef5cd4bc6

			
		
c23bdd78-d275-4fa4-80a6-e98cd9571d4e assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ✅ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ UBSAN: shift-out-of-bounds in dbFindBits (2) 2026/05/22 05:11 2026/05/22 05:11 2026/05/22 05:42 70ae9b0332c954c7a2e9754a431bc021385efca3

			
		
Discussions (5)
Title Replies (including bot) Last reply
[syzbot] [jfs?] UBSAN: shift-out-of-bounds in dbFindBits (2) 0 (2) 2025/09/28 01:00
[PATCH v4] jfs: UBSAN: shift-out-of-bounds in dbFindBits 2 (3) 2024/12/02 20:53
[PATCH v3] jfs: UBSAN: shift-out-of-bounds in dbFindBits 2 (3) 2024/10/30 15:15
Re: [syzbot] [PATCH v3] jfs: UBSAN: shift-out-of-bounds in dbFindBits 0 (1) 2024/10/25 16:30
[PATCH v2] jfs: UBSAN: shift-out-of-bounds in dbFindBits 1 (2) 2024/10/25 15:39
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream UBSAN: shift-out-of-bounds in dbFindBits jfs -1 C error 53 613d 716d 28/29 fixed on 2024/10/22 11:57
Last patch testing requests (15)
Created Duration User Patch Repo Result
2026/05/11 17:09 21m retest repro upstream error
2026/03/08 20:05 18m retest repro upstream error
2026/02/15 02:27 16m retest repro upstream log
2026/01/15 06:43 20m retest repro upstream OK log
2025/12/28 19:41 16m retest repro upstream report log
2025/12/07 02:07 16m retest repro upstream report log
2025/11/06 06:23 14m retest repro upstream report log
2025/10/19 19:10 14m retest repro upstream report log
2025/09/28 01:00 14m xandfury@gmail.com upstream report log
2025/09/11 06:57 14m retest repro upstream report log
2025/08/28 06:07 14m retest repro upstream report log
2024/11/01 10:00 19m zoo868e@gmail.com patch upstream OK log
2024/10/25 17:00 19m zoo868e@gmail.com patch upstream OK log
2024/10/25 16:30 19m zoo868e@gmail.com patch upstream OK log
2024/10/25 15:25 13m zoo868e@gmail.com patch upstream report log

Sample crash report:
ERROR: (device loop0): dbAdjCtl: Corrupt dmapctl page
ERROR: (device loop0): remounting filesystem as read-only
ERROR: (device loop0): dbDiscardAG: -EIO
ERROR: (device loop0): dbAllocBits: leaf page corrupt
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:3031:55
shift exponent 32 is too large for 32-bit type 'u32' (aka 'unsigned int')
CPU: 0 UID: 0 PID: 5506 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 ubsan_epilogue+0xa/0x40 lib/ubsan.c:233
 __ubsan_handle_shift_out_of_bounds+0x386/0x410 lib/ubsan.c:494
 dbFindBits+0xdf/0x1a0 fs/jfs/jfs_dmap.c:3031
 dbAllocDmapLev+0x16b/0x3c0 fs/jfs/jfs_dmap.c:1985
 dbAllocCtl+0x14a/0x9c0 fs/jfs/jfs_dmap.c:1825
 dbAllocAG+0x1e6/0xff0 fs/jfs/jfs_dmap.c:1353
 dbDiscardAG+0x2df/0x900 fs/jfs/jfs_dmap.c:1608
 jfs_ioc_trim+0x429/0x690 fs/jfs/jfs_discard.c:106
 jfs_ioctl+0x2b5/0x3d0 fs/jfs/ioctl.c:131
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ffab7b8eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdab0c6f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffab7de5fa0 RCX: 00007ffab7b8eec9
RDX: 00002000000000c0 RSI: 00000000c0185879 RDI: 0000000000000004
RBP: 00007ffab7c11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffab7de5fa0 R14: 00007ffab7de5fa0 R15: 0000000000000003
 </TASK>
---[ end trace ]---

Crashes (180):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/05 18:42 upstream 6093a688a07d 49379ee0 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/02/01 07:56 upstream 69e858e0b8b2 aa47157c .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/24 08:52 upstream f31c00c377cc 042555ff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/23 05:11 upstream 4708cac0e22c 5a630be6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/22 01:41 upstream 8cd8cf7a07e5 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/20 18:52 upstream 1a3746ccbb0a 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/20 11:09 upstream a975094bf98c 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/20 05:59 upstream a975094bf98c 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/20 02:04 upstream a975094bf98c 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/19 07:23 upstream 83f1454877cc d7ffd47b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/18 16:49 upstream e771677c937d a776b0d0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/17 07:44 upstream 6b5a2b7d9bc1 62cc6db3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/17 02:15 upstream 6b5a2b7d9bc1 62cc6db3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/14 07:47 upstream 2b07ea76fd28 4f06757f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/13 11:41 upstream 1dadb7e7eb5a 4f06757f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/12 07:07 upstream 2b414a95b8f7 e93da63e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/10 09:54 upstream 685441a6d3f1 34dab4be .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/09 21:42 upstream 2d3090a8aeb5 c36c07f6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/09 16:13 upstream 2d3090a8aeb5 c36c07f6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/05 13:32 upstream ddd664bbff63 48b6c3fa .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/04 10:16 upstream ba3e43a9e601 197909be .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/04 06:38 upstream ba3e43a9e601 197909be .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/06/03 10:20 upstream ba3e43a9e601 3c0d2131 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/31 15:22 upstream 174914ea5513 6b4a8443 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/31 05:13 upstream 174914ea5513 6b4a8443 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/30 05:27 upstream 9215e74f228f 6b4a8443 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/27 19:46 upstream eb3f4b7426cf cb4e87ff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/26 22:37 upstream d60ec36cab33 2b01f00e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/25 16:12 upstream e7ae89a0c97c c69befb3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/24 02:05 upstream 79bd2dded182 c69befb3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/22 00:41 upstream 758c807bb943 70ae9b03 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/21 14:41 upstream 8bc67e4db64a 747d777d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/19 14:23 upstream ab5fce87a778 2aa09d96 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/17 17:00 upstream 6916d5703ddf de5aae85 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/17 14:48 upstream 6916d5703ddf de5aae85 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/17 12:00 upstream 6916d5703ddf de5aae85 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/16 15:06 upstream 6916d5703ddf a15a64a6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/05/13 03:59 upstream c21b90f77687 a0949470 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/27 16:34 upstream 254f49634ee1 0f700595 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/26 08:13 upstream 897d54018cc9 9c2d0995 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/26 06:55 upstream 897d54018cc9 9c2d0995 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/20 22:34 upstream c1f49dea2b8f e65da4ee .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/14 07:27 upstream 26ff969926a0 1a086e7c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/10 09:33 upstream 9a9c8ce300cd 38c8e246 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/07 01:34 upstream bfe62a454542 4440e7c2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/05 14:01 upstream 3aae9383f42f 4440e7c2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/03 20:34 upstream d8a9a4b11a13 4440e7c2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2026/04/01 21:34 upstream 9147566d8016 0285fe54 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/27 05:01 upstream f6e0150b2003 20510e88 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/26 23:01 upstream 1e26c5e28ca5 19e40f48 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/26 09:30 upstream 2df0c02dab82 89d30d73 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/22 13:28 upstream 88d324e69ea9 c6512ef7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2025/03/21 15:48 upstream b3ee1e460951 62330552 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
2024/10/22 13:13 upstream c2ee9f594da8 a93682b3 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in dbFindBits
* Struck through repros no longer work on HEAD.