UBSAN: shift-out-of-bounds in ocfs2_fill

Date	Name	Commit	Repro	Result
2025/07/31	linux-6.6.y (ToT)	dbcb8d8e4163	C	[report] UBSAN: shift-out-of-bounds in ocfs2_fill_super
2025/07/31	upstream (ToT)	260f6f4fda93	C	Didn't crash

Date

Name

Commit

Repro

Result

2025/07/31

linux-6.6.y (ToT)

dbcb8d8e4163

[report] UBSAN: shift-out-of-bounds in ocfs2_fill_super

2025/07/31

upstream (ToT)

260f6f4fda93

Didn't crash

Kernel	Title	Rank 🛈	Repro	Fix bisect	Count	Last	Reported	Patched	Status
upstream	UBSAN: shift-out-of-bounds in ocfs2_fill_super ocfs2	-1	C		199	313d	381d	28/29	fixed on 2024/10/22 11:56
linux-5.15	UBSAN: shift-out-of-bounds in ocfs2_fill_super missing-backport origin:lts-only	-1	C	done	70	15d	334d	0/3	upstream: reported C repro on 2024/09/30 21:30
upstream	UBSAN: shift-out-of-bounds in ocfs2_fill_super (2) ocfs2	-1	C		81	287d	308d	28/29	fixed on 2024/12/16 09:50
linux-6.1	UBSAN: shift-out-of-bounds in ocfs2_fill_super origin:lts-only	-1	C	error	48	6d00h	308d	0/3	upstream: reported C repro on 2024/10/27 03:28

Created	Duration	User	Patch	Repo	Result
2025/08/12 20:17	2h35m	fix candidate		upstream	OK (0) job log

Created

Duration

User

Patch

Repo

Result

2025/08/12 20:17

2h35m

fix candidate

upstream

OK (0) job log

======================================================= WARNING: The mand mount option has been deprecated and and is ignored by this kernel. Remove the mand option from the mount to silence this warning. ======================================================= ================================================================================ UBSAN: shift-out-of-bounds in fs/ocfs2/super.c:2369:4 shift exponent 40 is too large for 32-bit type 'int' CPU: 0 PID: 5951 Comm: syz.0.16 Not tainted 6.6.100-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: <TASK> dump_stack_lvl+0x16c/0x230 lib/dump_stack.c:106 ubsan_epilogue+0xa/0x30 lib/ubsan.c:217 __ubsan_handle_shift_out_of_bounds+0x380/0x400 lib/ubsan.c:387 ocfs2_verify_volume fs/ocfs2/super.c:2369 [inline] ocfs2_sb_probe fs/ocfs2/super.c:792 [inline] ocfs2_fill_super+0xdb8/0x4d90 fs/ocfs2/super.c:988 mount_bdev+0x22b/0x2d0 fs/super.c:1643 legacy_get_tree+0xea/0x180 fs/fs_context.c:662 vfs_get_tree+0x8c/0x280 fs/super.c:1764 do_new_mount+0x24b/0xa40 fs/namespace.c:3371 do_mount fs/namespace.c:3711 [inline] __do_sys_mount fs/namespace.c:3920 [inline] __se_sys_mount+0x2da/0x3c0 fs/namespace.c:3897 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fc4b159014a Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe09d8cbe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007ffe09d8cc70 RCX: 00007fc4b159014a RDX: 0000200000004440 RSI: 0000200000000040 RDI: 00007ffe09d8cc30 RBP: 0000200000004440 R08: 00007ffe09d8cc70 R09: 00000000000008c0 R10: 00000000000008c0 R11: 0000000000000246 R12: 0000200000000040 R13: 00007ffe09d8cc30 R14: 0000000000004440 R15: 0000200000000480 </TASK> ================================================================================

Crashes (3):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2025/07/29 17:03	linux-6.6.y	dbcb8d8e4163	c4a95487	.config	console log	report	syz / log	C		[disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)]	ci2-linux-6-6-kasan	UBSAN: shift-out-of-bounds in ocfs2_fill_super
2025/07/29 03:00	linux-6.6.y	dbcb8d8e4163	6654ea9c	.config	console log	report			info	[disk image] [vmlinux] [kernel image]	ci2-linux-6-6-kasan	UBSAN: shift-out-of-bounds in ocfs2_fill_super
2025/07/29 03:00	linux-6.6.y	dbcb8d8e4163	6654ea9c	.config	console log	report			info	[disk image] [vmlinux] [kernel image]	ci2-linux-6-6-kasan	UBSAN: shift-out-of-bounds in ocfs2_fill_super

Crashes (3):

Assets (help?)