syzbot

 sign-in | mailing list | source | docs
🐞 Open [976] ≡ Subsystems 🐞 Fixed [5235] 🐞 Invalid [12491] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

UBSAN: array-index-out-of-bounds in dbAdjTree

Status: fixed on 2024/01/30 15:47
Subsystems: jfs
[Documentation on labels]
Reported-by: syzbot+39ba34a099ac2e9bd3cb@syzkaller.appspotmail.com
Fix commit: 9862ec7ac1cb FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 74ecdda68242 jfs: fix array-index-out-of-bounds in dbAdjTree
First crash: 576d, last: 97d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Discussions (10)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 4.19 01/12] FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 6 (6) 2024/01/16 00:28
[PATCH AUTOSEL 5.4 01/12] FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 6 (6) 2024/01/16 00:27
[PATCH AUTOSEL 5.10 01/12] FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 6 (6) 2024/01/16 00:26
[PATCH AUTOSEL 5.15 01/13] FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 6 (6) 2024/01/16 00:25
[PATCH AUTOSEL 6.1 01/14] FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 6 (6) 2024/01/16 00:24
[PATCH AUTOSEL 6.6 01/19] FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 6 (6) 2024/01/16 00:23
[PATCH AUTOSEL 6.7 01/19] FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 6 (6) 2024/01/16 00:22
[PATCH] jfs: fix array-index-out-of-bounds in dbAdjTree 3 (3) 2023/11/01 15:44
[PATCH] FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree 2 (2) 2023/11/01 14:39
[syzbot] UBSAN: array-index-out-of-bounds in dbAdjTree 0 (1) 2022/09/26 09:44
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: slab-out-of-bounds Read in dbAdjTree C 3 421d 568d 0/1 upstream: reported C repro on 2022/10/03 00:17
linux-4.19 KASAN: use-after-free Read in dbAdjTree C error 5 422d 539d 0/1 upstream: reported C repro on 2022/10/31 14:16
▶ ▼ Last patch testing requests (13)
Created Duration User Patch Repo Result
2023/10/25 22:32 31m (2) retest repro upstream report log
2023/10/25 22:32 11m retest repro upstream report log
2023/10/25 22:32 10m retest repro upstream report log
2023/10/25 22:14 15m retest repro linux-next report log
2023/10/25 22:14 19m retest repro upstream report log
2023/10/25 22:14 21m retest repro upstream report log
2023/10/25 22:14 20m retest repro linux-next report log
2023/10/17 11:50 19m ghandatmanas@gmail.com patch https://github.com/kleikamp/linux-shaggy.git jfs-next OK log
2023/10/17 07:51 12m ghandatmanas@gmail.com https://github.com/kleikamp/linux-shaggy.git jfs-next report log
2023/10/11 16:21 20m osmtendev@gmail.com patch https://github.com/torvalds/linux.git master OK log
2023/07/27 05:17 2h29m retest repro upstream report log
2023/07/27 05:17 1h26m retest repro upstream OK log
2023/07/27 05:24 13m retest repro linux-next report log
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2023/04/26 11:43 8h05m bisect fix upstream error job log (0)
2023/03/27 10:54 46m bisect fix upstream job log (0) log
2023/02/14 13:14 23m bisect fix upstream job log (0) log

Sample crash report:
================================================================================
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2874:19
index 196694 is out of range for type 's8 [1365]'
CPU: 1 PID: 110 Comm: jfsCommit Not tainted 6.7.0-rc7-syzkaller-00049-g453f5db0619e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x125/0x1b0 lib/dump_stack.c:106
 ubsan_epilogue lib/ubsan.c:217 [inline]
 __ubsan_handle_out_of_bounds+0x111/0x150 lib/ubsan.c:348
 dbAdjTree+0x34a/0x350 fs/jfs/jfs_dmap.c:2874
 dbJoin+0x1f6/0x250 fs/jfs/jfs_dmap.c:2841
 dbFreeBits+0x15a/0x8f0 fs/jfs/jfs_dmap.c:2338
 dbFreeDmap+0x62/0x1a0 fs/jfs/jfs_dmap.c:2087
 dbFree+0x266/0x550 fs/jfs/jfs_dmap.c:409
 txFreeMap+0x9a9/0xe60 fs/jfs/jfs_txnmgr.c:2534
 txUpdateMap+0x3f1/0xd10 fs/jfs/jfs_txnmgr.c:2330
 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]
 jfs_lazycommit+0x5da/0xb10 fs/jfs/jfs_txnmgr.c:2732
 kthread+0x2c6/0x3a0 kernel/kthread.c:388
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>
================================================================================
Kernel panic - not syncing: UBSAN: panic_on_warn set ...
CPU: 1 PID: 110 Comm: jfsCommit Not tainted 6.7.0-rc7-syzkaller-00049-g453f5db0619e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106
 panic+0x6dc/0x790 kernel/panic.c:344
 check_panic_on_warn+0xab/0xb0 kernel/panic.c:237
 ubsan_epilogue lib/ubsan.c:223 [inline]
 __ubsan_handle_out_of_bounds+0x139/0x150 lib/ubsan.c:348
 dbAdjTree+0x34a/0x350 fs/jfs/jfs_dmap.c:2874
 dbJoin+0x1f6/0x250 fs/jfs/jfs_dmap.c:2841
 dbFreeBits+0x15a/0x8f0 fs/jfs/jfs_dmap.c:2338
 dbFreeDmap+0x62/0x1a0 fs/jfs/jfs_dmap.c:2087
 dbFree+0x266/0x550 fs/jfs/jfs_dmap.c:409
 txFreeMap+0x9a9/0xe60 fs/jfs/jfs_txnmgr.c:2534
 txUpdateMap+0x3f1/0xd10 fs/jfs/jfs_txnmgr.c:2330
 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]
 jfs_lazycommit+0x5da/0xb10 fs/jfs/jfs_txnmgr.c:2732
 kthread+0x2c6/0x3a0 kernel/kthread.c:388
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (41):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/12/31 20:14 upstream 453f5db0619e fb427a07 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root UBSAN: array-index-out-of-bounds in dbAdjTree
2023/09/25 11:12 upstream 6465e260f487 0b6a67ac .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/10 03:46 upstream a6afa4199d3d aea5da89 .config strace log report syz C [disk image] [vmlinux] [mounted in repro] ci-upstream-kasan-gce-root UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/04 21:04 upstream 4fe89d07dcc2 eab8f949 .config strace log report syz C [disk image] [vmlinux] [mounted in repro] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/09/25 07:34 upstream 1a61b828566f 0042f2b4 .config strace log report syz C [disk image] [vmlinux] ci-upstream-kasan-gce-root UBSAN: array-index-out-of-bounds in dbAdjTree
2022/09/25 07:28 upstream 3db61221f4e8 0042f2b4 .config strace log report syz C ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/11/06 05:28 linux-next 0cdb3579f1ee 6d752409 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/24 05:33 linux-next 4d48f589d294 23bf86af .config strace log report syz C [disk image] [vmlinux] [mounted in repro] ci-upstream-linux-next-kasan-gce-root UBSAN: array-index-out-of-bounds in dbAdjTree
2023/02/25 10:53 upstream 8cbd92339db0 ee50e71c .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2024/01/02 02:34 upstream 610a9b8f49fb fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root UBSAN: array-index-out-of-bounds in dbAdjTree
2023/12/25 08:14 upstream 861deac3b092 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/12/16 19:01 upstream c8e97fc6b4c0 3222d10c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/11/30 00:37 upstream 3b47bc037bd4 6e78f9ce .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/11/22 14:33 upstream c2d5304e6c64 cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/11/21 22:54 upstream c2d5304e6c64 cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/11/18 16:04 upstream 791c8ab095f7 cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/11/12 17:50 upstream 1b907d050735 6d6dbf8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/11/11 21:36 upstream 3ca112b71f35 6d6dbf8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/11/11 18:03 upstream 3ca112b71f35 6d6dbf8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/10/11 21:52 upstream 1c8b86a3799f 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root UBSAN: array-index-out-of-bounds in dbAdjTree
2023/09/29 23:15 upstream 71e58659bfc0 8e26a358 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/09/29 22:48 upstream 71e58659bfc0 8e26a358 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/09/25 10:10 upstream 6465e260f487 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/05/18 05:15 upstream 1b66c114d161 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/02/25 09:36 upstream 8cbd92339db0 ee50e71c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2023/01/15 13:14 upstream 7c6984405241 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/11/11 17:22 upstream 4bbf3422df78 f42ee5d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/11/02 10:21 upstream b229b6ca5abb 08977f5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/11/01 12:34 upstream b229b6ca5abb a1d8560a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/25 02:02 upstream 247f34f7b803 ff2fe65d .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce-selinux-root UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/19 19:55 upstream 493ffd6605b2 b31320fc .config console log report info [disk image] [vmlinux] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/18 22:39 upstream 493ffd6605b2 b31320fc .config console log report info [disk image] [vmlinux] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/18 08:30 upstream 493ffd6605b2 94744d21 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/17 22:39 upstream 493ffd6605b2 94744d21 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/17 20:43 upstream 493ffd6605b2 94744d21 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/17 19:04 upstream 493ffd6605b2 94744d21 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/17 01:12 upstream 55be6084c8e0 67cb024c .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce-root UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/16 13:11 upstream 493ffd6605b2 67cb024c .config console log report info [disk image] [vmlinux] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/12 00:17 upstream 55be6084c8e0 1353c374 .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce-selinux-root UBSAN: array-index-out-of-bounds in dbAdjTree
2022/10/10 20:19 upstream 493ffd6605b2 5bcf0c31 .config console log report info [disk image] [vmlinux] ci2-upstream-fs UBSAN: array-index-out-of-bounds in dbAdjTree
2024/01/16 22:15 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 0802e17d9aca 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 UBSAN: array-index-out-of-bounds in dbAdjTree
* Struck through repros no longer work on HEAD.