Received: by 2002:a89:48b:0:b0:1f5:f2ab:c469 with SMTP id a11csp837298lqd; Wed, 24 Apr 2024 20:16:11 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCWlOxiMZH9mr/GecsNIW/9sOnYe7l5SN5whbNgeWrjdmJgYAogYo00r0LgPGSgk75UlbuYg2Vfpt7CIjCqu4zXc9/9Y8BtPYoTxFiOwmA== X-Google-Smtp-Source: AGHT+IFc7pOmWdfuoqwBGRxysgiOU5wlsiKe05cAmlHvUjhKGX9/YEgsUCtPKp8a/zxUXGyuQDAO X-Received: by 2002:a17:906:458:b0:a58:78ac:7511 with SMTP id e24-20020a170906045800b00a5878ac7511mr2520366eja.16.1714014971821; Wed, 24 Apr 2024 20:16:11 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1714014971; cv=pass; d=google.com; s=arc-20160816; b=fmAeiwa9DdGmQzAjpz2m7zpLJ6XgCjTvaemcdHefS6o/eM06CY1q08OdaYKkuXXI95 bSyPhV8ELmTiXiqOVGqV8AR4VTkqntBOvc39R6xd+cT0nAPsswv6UAhkVR/qLtA6KZt8 y2c2nbtD9s1UitYJ1gG+Y1K2HVH9WlBX+OUR154bdX19sLleomLyHcSNndNkYKPdHQLV YlUKLghUQWH8tEENCTtos0TDvx/KpxLcSU5Hul4tw2LLrKTFmL1JkgvsDHqaYdftwhB5 aO6AHLY1N+t7sg+KvQs1W4B7vP7QQ95/LUCpsrOMj91RRBs5M5i+8bSZRb1f1BginFEk IxSw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:references:in-reply-to:message-id :date:subject:cc:to:from:dkim-signature; bh=1Q1Itnlmg8Ted0k+oi1/NBrIkOL2DiHn2J/5DR1ybvM=; fh=+3JyGXvKK6mZM9Bfas5hXNYqPrps01P4B36DFgm3VFw=; b=zWmo0YFwV7D6Wgm4PRJSFRRnCFetvCbN4eWI1NAXEzLAEfB0Aso2Z+BkLyD1OFPFr5 R6wAsh+6vRUOEigqc0yZ2jd83OgHUEkgg5t9WWtCH6jnE5YMFlqT+QW9V4Ix0mdEX14A BD/nUtYLYxuO98n38WkWCbZZ/iSoq1ONuncA3nnagB+KHvZxq5MFgRz83JfUJGBJv38G tDK9bvbFiVvTfSwIoeANCfcSjIWdmFdo+thjU9CTctvrEqfQLbJ5cf5IIg7mTi/4v7A7 JI8RHVH7Rd2ETLDXzwEjZtEEvIPVUeJ+dUbd7RZ1WwDILsv9i2avdEQ2VeqjZC+5cna2 LsQA==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=KuzZu7Sc; arc=pass (i=1 spf=pass spfdomain=gmail.com dkim=pass dkdomain=gmail.com dmarc=pass fromdomain=gmail.com); spf=pass (google.com: domain of linux-kernel+bounces-157958-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) smtp.mailfrom="linux-kernel+bounces-157958-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from am.mirrors.kernel.org (am.mirrors.kernel.org. [2604:1380:4601:e00::3]) by mx.google.com with ESMTPS id lg3-20020a170906f88300b00a5843a098c2si3635147ejb.782.2024.04.24.20.16.11 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 24 Apr 2024 20:16:11 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel+bounces-157958-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) client-ip=2604:1380:4601:e00::3; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=KuzZu7Sc; arc=pass (i=1 spf=pass spfdomain=gmail.com dkim=pass dkdomain=gmail.com dmarc=pass fromdomain=gmail.com); spf=pass (google.com: domain of linux-kernel+bounces-157958-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) smtp.mailfrom="linux-kernel+bounces-157958-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by am.mirrors.kernel.org (Postfix) with ESMTPS id 8DBD11F2319D for ; Thu, 25 Apr 2024 03:16:11 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 687BD1CA89; Thu, 25 Apr 2024 03:16:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="KuzZu7Sc" Received: from mail-pg1-f171.google.com (mail-pg1-f171.google.com [209.85.215.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 626B8F513 for ; Thu, 25 Apr 2024 03:16:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.215.171 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1714014964; cv=none; b=qs3oD3n555tc/CaOFzTWM1JOW0RDNW6mLdNsTUusNLHfy9b5VsTpOQSuiEPCDaAIArX2Lob90xX6feBeB4I0SQEOIeAm+WSDW/m3EeWm6/jTfU/EcKjpO3PisTzsMiZ5x3dl4HxQe/h9LxU2Rc0AcZIdG19c4kYGc3Y45GptrZU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1714014964; c=relaxed/simple; bh=UHDcHhg2SVBsQ5unx72cY0vVFjQtl+lWV7o9LLkDLu8=; h=From:To:Cc:Subject:Date:Message-Id:In-Reply-To:References: MIME-Version; b=bqBiSTGCYRQ+kcStB8fN56EuRFv90xuKTA8LymEnp/HwvU1A7bR1BdqO6zreIkTLJ2PAXcy096q0SXT6NXXiV6q7c+EMtr76ecxHr7RGrGkvBNsU8RFm2njEj0FzXhRnx/rsI+nt3Nl7pW5jQxuXUSVzfyEeP1K08fGTDcww32A= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=KuzZu7Sc; arc=none smtp.client-ip=209.85.215.171 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-pg1-f171.google.com with SMTP id 41be03b00d2f7-5c66b093b86so1256913a12.0 for ; Wed, 24 Apr 2024 20:16:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1714014963; x=1714619763; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=1Q1Itnlmg8Ted0k+oi1/NBrIkOL2DiHn2J/5DR1ybvM=; b=KuzZu7SczdzFVqGAdEjKzyAELi6g33S+4oIUmVjkCfgLGjSOQiNgKRY6ehQMa8+dKk UXmEp7cpS8BUBpFz3L7XoyA38ZrzDpCPG5A7ij7tCZREuWBENDhQdR1lF71TP/DPXz1f a70D/TnVud8PR3j67eTeV/c55eus2aNHG2rfWOGajz7rzC8vlyqwIpgcs3EPmdjig9rt LU/aOeyLiCjMkmM4hfHFgkm9Wk7I5H2fpULRwqtqv2bwztKoyGd955T4YFXz2S3uDt00 qPJQleOKqVESUhaFa0/BOqJ2HD4LCefKvHgX2YYUgsBpvV5HRat7XCjRe+k7QUpueds8 QsUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1714014963; x=1714619763; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=1Q1Itnlmg8Ted0k+oi1/NBrIkOL2DiHn2J/5DR1ybvM=; b=d4irJneRTltdJGQG9APhlUcnxMsCTXSV4w2G/7vVbojriv83cIgEwsHYTqgP024tJ/ QaBker9HgeFb4GBTtUixsbHV+Y95OnglwPH6UgrMmoqz3Vb53hhkAq+n7NOif4YUAD0F Uve/8pr3YO4j7RuevXt8f0KvXbPeyaskfi7sLISU8zCQKio4JgUF4nBO5zkZnNroLBLq Z5DidnmXc5ZmRp0lloHQ3CulNqYKQX37OhwGZ6IugHoLLyIc1v6M7/wIDA4rQYLdb3z2 O5s3rqDsZjn2qa56VGzcgLfS/NocJWgjGFqzBXT4FIS8TTSQYcCuITAJUd4NQbtnUEKS 9e3g== X-Gm-Message-State: AOJu0YwXs6hbgYl05hHFh3fLU81DXOFSSrAuRL0F5yNuyIdZe6euRUzW aDZx/zrFvJ/hS7KSyQUGLpzUdxi4Z/k+5FFrH8l9bPg3JP4PZ+j8zyZaQR0LJH8= X-Received: by 2002:a17:90a:17a5:b0:29b:fb23:863e with SMTP id q34-20020a17090a17a500b0029bfb23863emr2326730pja.17.1714014962515; Wed, 24 Apr 2024 20:16:02 -0700 (PDT) Received: from kernelexploit-virtual-machine.localdomain ([121.185.186.233]) by smtp.gmail.com with ESMTPSA id m14-20020a17090a668e00b002a6e67e197dsm11926206pjj.45.2024.04.24.20.16.01 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 24 Apr 2024 20:16:02 -0700 (PDT) From: Jeongjun Park To: syzbot+241c815bda521982cb49@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [jfs?] UBSAN: array-index-out-of-bounds in diFree Date: Thu, 25 Apr 2024 12:15:58 +0900 Message-Id: <20240425031558.6181-1-aha310510@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <0000000000000866ea0616cb082c@google.com> References: <0000000000000866ea0616cb082c@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit please test array-index-out-of-bounds in diFree #syz test git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/ master --- fs/jfs/jfs_dmap.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/fs/jfs/jfs_dmap.c b/fs/jfs/jfs_dmap.c index cb3cda1390ad..773b9263e497 100644 --- a/fs/jfs/jfs_dmap.c +++ b/fs/jfs/jfs_dmap.c @@ -206,6 +206,7 @@ int dbMount(struct inode *ipbmap) bmp->db_agwidth = le32_to_cpu(dbmp_le->dn_agwidth); bmp->db_agstart = le32_to_cpu(dbmp_le->dn_agstart); bmp->db_agl2size = le32_to_cpu(dbmp_le->dn_agl2size); + printk(KERN_DEBUG "dmMount : %d\n",bmp->db_agl2size); if (bmp->db_agl2size > L2MAXL2SIZE - L2MAXAG || bmp->db_agl2size < 0) { err = -EINVAL; @@ -316,6 +317,7 @@ int dbSync(struct inode *ipbmap) dbmp_le->dn_agwidth = cpu_to_le32(bmp->db_agwidth); dbmp_le->dn_agstart = cpu_to_le32(bmp->db_agstart); dbmp_le->dn_agl2size = cpu_to_le32(bmp->db_agl2size); + printk(KERN_DEBUG "dbSync : %d\n",bmp->db_agl2size); for (i = 0; i < MAXAG; i++) dbmp_le->dn_agfree[i] = cpu_to_le64(bmp->db_agfree[i]); dbmp_le->dn_agsize = cpu_to_le64(bmp->db_agsize); @@ -3393,7 +3395,7 @@ int dbExtendFS(struct inode *ipbmap, s64 blkno, s64 nblocks) bmp->db_agl2size = l2agsize; bmp->db_agsize = 1 << l2agsize; - + printk(KERN_DEBUG "dbExtendFS : %d\n",bmp->db_agl2size); /* compute new number of AG */ agno = bmp->db_numag; bmp->db_numag = newsize >> l2agsize; -- 2.34.1