UBSAN: shift-out-of-bounds in diReadSpecial

Status: closed as dup on 2021/01/05 16:08
Subsystems: jfs
[Documentation on labels]
Reported-by: syzbot+d0d8d1bfd19a85de7703@syzkaller.appspotmail.com
First crash: 2053d, last: 1979d
▶ ▼ Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
UBSAN: shift-out-of-bounds in chkSuper jfs -1 C unreliable 28 1980d 2046d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
UBSAN: shift-out-of-bounds in diReadSpecial 1 (2) 2021/01/05 16:07

Sample crash report:
================================================================================
UBSAN: shift-out-of-bounds in fs/jfs/jfs_imap.c:445:7
shift exponent -19 is negative
CPU: 1 PID: 15052 Comm: syz-executor.1 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x107/0x163 lib/dump_stack.c:120
 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148
 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:395
 diReadSpecial.cold+0x1b/0x3e fs/jfs/jfs_imap.c:445
 jfs_mount+0x83/0x3d0 fs/jfs/jfs_mount.c:86
 jfs_fill_super+0x5b1/0xbc0 fs/jfs/super.c:562
 mount_bdev+0x34d/0x410 fs/super.c:1366
 legacy_get_tree+0x105/0x220 fs/fs_context.c:592
 vfs_get_tree+0x89/0x2f0 fs/super.c:1496
 do_new_mount fs/namespace.c:2881 [inline]
 path_mount+0x13ad/0x20c0 fs/namespace.c:3211
 do_mount fs/namespace.c:3224 [inline]
 __do_sys_mount fs/namespace.c:3432 [inline]
 __se_sys_mount fs/namespace.c:3409 [inline]
 __x64_sys_mount+0x27f/0x300 fs/namespace.c:3409
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x46753a
Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f618a4f0fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000046753a
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f618a4f1000
RBP: 00007f618a4f1040 R08: 00007f618a4f1040 R09: 0000000020000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
R13: 0000000020000100 R14: 00007f618a4f1000 R15: 0000000020064f00
================================================================================

Crashes (18):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/21 06:36 upstream e767b3530acb 3e5ed8b4 .config console log report info ci-upstream-kasan-gce-selinux-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/02/14 19:54 upstream 358feceebbf6 98682e5e .config console log report info ci-upstream-kasan-gce-smack-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/02/14 14:58 upstream 358feceebbf6 98682e5e .config console log report info ci-upstream-kasan-gce-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/02/10 10:23 upstream e0756cfc7d7c 2bd9619f .config console log report info ci-upstream-kasan-gce-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/02/03 22:14 upstream 3afe9076a7c1 624dad51 .config console log report info ci-upstream-kasan-gce-smack-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/02/02 06:41 upstream 88bb507a74ea e6b95f32 .config console log report info ci-upstream-kasan-gce-smack-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/01/31 00:58 upstream 8c947645151c fc9fd31e .config console log report info ci-upstream-kasan-gce-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/01/26 14:44 upstream 13391c60da33 52e37319 .config console log report info ci-upstream-kasan-gce-smack-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/01/21 00:48 upstream 75439bc439e0 d4f4eca5 .config console log report info ci-upstream-kasan-gce-smack-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/01/18 03:00 upstream a1339d6355ac fd103621 .config console log report info ci-upstream-kasan-gce-root UBSAN: shift-out-of-bounds in diReadSpecial
2021/01/17 13:19 upstream 0da0a8a0a0e1 813be542 .config console log report info ci-upstream-kasan-gce-smack-root
2021/01/17 11:26 upstream 0da0a8a0a0e1 813be542 .config console log report info ci-qemu-upstream
2021/01/17 02:49 upstream 0da0a8a0a0e1 65a7a854 .config console log report info ci-qemu-upstream
2021/01/14 00:11 upstream 65f0d2414b70 269d24e8 .config console log report info ci-qemu-upstream
2021/01/11 13:12 upstream 7c53f6b671f4 2c1f2513 .config console log report info ci-upstream-kasan-gce-root
2021/01/11 00:22 upstream 0653161f0fac 2c1f2513 .config console log report info ci-upstream-kasan-gce-root
2020/12/23 13:16 upstream 614cb5894306 c2c1d1dd .config console log report info ci-upstream-kasan-gce-selinux-root
2020/12/09 19:54 linux-next a9e26cb5f261 c090b4da .config console log report info ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.