syzbot

 sign-in | mailing list | source | docs
🐞 Open [1590]
≡ Subsystems
🐞 Fixed [6234]
🐞 Invalid [15788]
⬇ Missing Backports [184]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

UBSAN: array-index-out-of-bounds in txCommit

Status: fixed on 2024/01/08 11:23
Subsystems: jfs
[Documentation on labels]
Reported-by: syzbot+0558d19c373e44da3c18@syzkaller.appspotmail.com
Fix commit: a779ed754e52 jfs: define xtree root and page independently
First crash: 945d, last: 563d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: fixed by (bisect log) :
commit a779ed754e52d582b8c0e17959df063108bd0656
Author: Dave Kleikamp <dave.kleikamp@oracle.com>
Date: Thu Oct 5 14:16:14 2023 +0000

  jfs: define xtree root and page independently

  
▶ ▼ Discussions (9)
Title Replies (including bot) Last reply
[syzbot] UBSAN: array-index-out-of-bounds in txCommit 0 (4) 2023/12/04 14:55
[syzbot] Monthly jfs report (Nov 2023) 0 (1) 2023/11/03 10:22
[PATCH] jfs : fs array-index-out-of-bounds in txCommit 7 (7) 2023/10/13 15:39
[syzbot] Monthly jfs report (Aug 2023) 0 (1) 2023/08/30 09:54
[syzbot] Monthly jfs report (Jul 2023) 0 (1) 2023/07/30 13:16
[syzbot] Monthly jfs report (Jun 2023) 0 (1) 2023/06/29 09:14
[syzbot] Monthly jfs report (May 2023) 0 (1) 2023/05/30 08:18
[syzbot] Monthly jfs report (Apr 2023) 0 (1) 2023/04/27 10:36
[syzbot] Monthly jfs report 0 (1) 2023/03/27 11:07
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 UBSAN: array-index-out-of-bounds in txCommit 1 751d 751d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:03
linux-6.1 UBSAN: array-index-out-of-bounds in txCommit 1 683d 683d 0/3 auto-obsoleted due to no activity on 2023/10/14 03:47
linux-5.15 UBSAN: array-index-out-of-bounds in txCommit (2) origin:lts-only C unreliable 125 24d 552d 0/3 upstream: reported C repro on 2023/11/14 02:25
linux-6.1 UBSAN: array-index-out-of-bounds in txCommit (2) origin:lts-only C done 152 24d 560d 3/3 fixed on 2025/05/02 07:04
upstream general protection fault in txCommit jfs 1 277d 273d 0/28 auto-obsoleted due to no activity on 2024/11/12 17:04
▶ ▼ Last patch testing requests (11)
Created Duration User Patch Repo Result
2023/11/16 20:27 22m retest repro upstream OK log
2023/11/16 20:27 20m retest repro upstream report log
2023/11/16 20:27 39m retest repro upstream OK log
2023/11/16 20:37 21m retest repro upstream OK log
2023/11/16 19:04 21m retest repro upstream OK log
2023/11/16 19:04 23m retest repro upstream OK log
2023/11/16 19:04 17m retest repro upstream OK log
2023/11/16 19:04 16m retest repro upstream OK log
2023/11/16 19:04 16m retest repro upstream OK log
2023/09/19 06:09 20m ghandatmanas@gmail.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master OK log
2023/09/07 01:56 12m ghandatmanas@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log

Sample crash report:
================================================================================
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_txnmgr.c:1741:21
index 18 is out of range for type 'xad_t [18]'
CPU: 0 PID: 5055 Comm: syz-executor319 Not tainted 6.6.0-syzkaller-03860-g5a6a09e97199 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x125/0x1b0 lib/dump_stack.c:106
 ubsan_epilogue lib/ubsan.c:217 [inline]
 __ubsan_handle_out_of_bounds+0x111/0x150 lib/ubsan.c:348
 xtLog fs/jfs/jfs_txnmgr.c:1741 [inline]
 txLog fs/jfs/jfs_txnmgr.c:1396 [inline]
 txCommit+0x4979/0x4fc0 fs/jfs/jfs_txnmgr.c:1264
 jfs_commit_inode+0x44e/0x570 fs/jfs/inode.c:108
 extAlloc+0x9f1/0xf00 fs/jfs/jfs_extent.c:172
 jfs_get_block+0x428/0xb20 fs/jfs/inode.c:248
 __block_write_begin_int+0x3c0/0x1560 fs/buffer.c:2120
 __block_write_begin fs/buffer.c:2169 [inline]
 block_write_begin+0xb1/0x490 fs/buffer.c:2228
 jfs_write_begin+0x31/0xd0 fs/jfs/inode.c:299
 generic_perform_write+0x278/0x600 mm/filemap.c:3969
 __generic_file_write_iter+0x1f9/0x240 mm/filemap.c:4064
 generic_file_write_iter+0xe3/0x350 mm/filemap.c:4090
 call_write_iter include/linux/fs.h:2020 [inline]
 do_iter_readv_writev+0x21e/0x3c0 fs/read_write.c:735
 do_iter_write+0x17f/0x7f0 fs/read_write.c:860
 vfs_iter_write+0x7a/0xb0 fs/read_write.c:901
 iter_file_splice_write+0x698/0xc00 fs/splice.c:736
 do_splice_from fs/splice.c:933 [inline]
 direct_splice_actor+0x118/0x180 fs/splice.c:1142
 splice_direct_to_actor+0x347/0xa30 fs/splice.c:1088
 do_splice_direct+0x1af/0x280 fs/splice.c:1194
 do_sendfile+0xb3e/0x1310 fs/read_write.c:1254
 __do_sys_sendfile64 fs/read_write.c:1322 [inline]
 __se_sys_sendfile64 fs/read_write.c:1308 [inline]
 __x64_sys_sendfile64+0x1d6/0x220 fs/read_write.c:1308
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fb94cb750a9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb94cb33218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fb94cc02648 RCX: 00007fb94cb750a9
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
RBP: 00007fb94cc02640 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007fb94cc0264c
R13: 00007fb94cbceef8 R14: 00007fb94cbc9060 R15: 0031656c69662f2e
 </TASK>
================================================================================

Crashes (396):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/10/31 21:49 upstream 5a6a09e97199 58499c95 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root UBSAN: array-index-out-of-bounds in txCommit
2023/10/25 04:35 upstream d88520ad73b7 17e6d526 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-badwrites-root UBSAN: array-index-out-of-bounds in txCommit
2023/09/14 16:50 upstream aed8aee11130 0b6a67ac .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-smack-root UBSAN: array-index-out-of-bounds in txCommit
2023/08/14 22:58 upstream 2ccdd1b13c59 39990d51 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/08 22:34 upstream 14f9643dc90a 9552ae77 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2022/12/30 06:04 upstream 2258c2dc850b 44712fbc .config console log report syz C [mounted in repro] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2022/11/26 17:09 upstream 644e9524388a f4470a7b .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2022/12/27 18:34 upstream 1b929c02afd3 44712fbc .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2022/12/15 02:59 upstream e2ca6ba6ba01 b18f0a64 .config console log report syz [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/11/02 18:54 upstream babe393974de 69904c9f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/11/02 15:11 upstream babe393974de 69904c9f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/29 12:20 upstream 2af9b20dbb39 3c418d72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root UBSAN: array-index-out-of-bounds in txCommit
2023/10/26 02:39 upstream 611da07b89fd 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/22 06:52 upstream d537ae43f8a1 361b23dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/20 07:49 upstream ce55c22ec8b2 a42250d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/17 11:01 upstream 213f891525c2 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/17 00:44 upstream 58720809f527 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/16 06:12 upstream fbe1bf1e5ff1 f757a323 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/13 06:34 upstream e8c127b05766 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/12 05:33 upstream 8182d7a3f1b8 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/11 03:09 upstream 1c8b86a3799f 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/10 07:11 upstream 94f6f0550c62 c9be5398 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/08 11:23 upstream b9ddbb0cde2a 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/07 19:20 upstream 82714078aee4 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/07 12:39 upstream 82714078aee4 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/07 07:27 upstream 82714078aee4 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/02 19:31 upstream 8a749fd1a872 50b20e75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root UBSAN: array-index-out-of-bounds in txCommit
2023/09/28 15:40 upstream 633b47cb009d c2ab1e5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/25 22:05 upstream 6465e260f487 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/23 21:48 upstream d90b0276af8f 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/21 23:53 upstream b5cbe7c00aa0 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/15 12:24 upstream 9fdfb15a3dbf 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/12 05:49 upstream 0bb80ecc33a8 59da8366 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root UBSAN: array-index-out-of-bounds in txCommit
2023/09/07 07:33 upstream 744a759492b5 72324844 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/06 23:35 upstream 744a759492b5 72324844 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/06 11:15 upstream 65d6e954e378 0b6286dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/04 12:55 upstream 708283abf896 696ea0d2 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/03 23:53 upstream 6e32dfcccfcc 696ea0d2 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/03 17:05 upstream 92901222f83d 696ea0d2 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/02 19:57 upstream 0468be89b3fa 696ea0d2 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/02 11:58 upstream 0468be89b3fa 696ea0d2 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/01 14:29 upstream 99d99825fc07 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/09/01 09:41 upstream 99d99825fc07 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/31 09:43 upstream ef2a0b7cdbc5 84803932 .config console log report info ci-upstream-kasan-gce-smack-root UBSAN: array-index-out-of-bounds in txCommit
2023/10/17 14:12 upstream 213f891525c2 342b9c55 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: array-index-out-of-bounds in txCommit
2023/10/12 17:37 upstream 401644852d0b 1b231e3c .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: array-index-out-of-bounds in txCommit
2023/09/26 05:31 upstream 6465e260f487 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: array-index-out-of-bounds in txCommit
2023/08/30 09:22 upstream 6c1b980a7e79 ce731e62 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/30 02:07 upstream f97e18a3f2fb ce731e62 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/28 06:48 upstream 2dde18cd1d8f 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/27 23:18 upstream 85eb043618bb 7ba13a15 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: array-index-out-of-bounds in txCommit
2023/08/27 22:18 upstream 28f20a19294d 7ba13a15 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/26 01:11 upstream 382d4cd18475 03d9c195 .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/25 07:28 upstream b5cc3833f13a 49be837e .config console log report info ci-upstream-kasan-gce-smack-root UBSAN: array-index-out-of-bounds in txCommit
2023/08/25 05:05 upstream 93f5de5f648d 49be837e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/24 13:30 upstream a5e505a99ca7 4d7ae7ab .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/23 00:29 upstream 53663f4103ff b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/08/06 09:50 upstream f6a691685962 4ffcc9ef .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root UBSAN: array-index-out-of-bounds in txCommit
2022/10/16 15:48 upstream 493ffd6605b2 67cb024c .config console log report info ci2-upstream-fs UBSAN: array-index-out-of-bounds in txCommit
2023/10/24 12:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ac9e855ce293 af8d2e46 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 UBSAN: array-index-out-of-bounds in txCommit
* Struck through repros no longer work on HEAD.