syzbot


UBSAN: shift-out-of-bounds in ocfs2_fill_super

Status: fixed on 2024/10/22 11:56
Subsystems: ocfs2
[Documentation on labels]
Reported-by: syzbot+f3fff775402751ebb471@syzkaller.appspotmail.com
Fix commit: 7f86b2942791 ocfs2: fix shift-out-of-bounds UBSAN bug in ocfs2_verify_volume()
First crash: 119d, last: 51d
Discussions (4)
Title Replies (including bot) Last reply
[PATCH v2] ocfs2: Fix shift-out-of-bounds UBSAN bug in ocfs2_verify_volume() 2 (2) 2024/08/20 01:27
[PATCH] ocfs2: Fix shift-out-of-bounds UBSAN bug in ocfs2_verify_volume() 5 (5) 2024/08/20 01:12
Re: [syzbot] [PATCH] ocfs2: Fix shift-out-of-bounds UBSAN bug in ocfs2_verify_volume() 0 (1) 2024/08/16 01:39
[syzbot] [ocfs2?] UBSAN: shift-out-of-bounds in ocfs2_fill_super 0 (1) 2024/08/15 10:46
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 UBSAN: shift-out-of-bounds in ocfs2_fill_super origin:upstream missing-backport C error 24 4d15h 72d 0/3 upstream: reported C repro on 2024/09/30 21:30
upstream UBSAN: shift-out-of-bounds in ocfs2_fill_super (2) ocfs2 C 81 25d 46d 27/28 upstream: reported C repro on 2024/10/27 00:25
linux-6.1 UBSAN: shift-out-of-bounds in ocfs2_fill_super origin:upstream C 13 20d 46d 0/3 upstream: reported C repro on 2024/10/27 03:28
Last patch testing requests (1)
Created Duration User Patch Repo Result
2024/08/16 01:39 25m qasdev00@gmail.com patch upstream OK log

Sample crash report:
loop0: detected capacity change from 0 to 32768
=======================================================
WARNING: The mand mount option has been deprecated and
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/ocfs2/super.c:2336:10
shift exponent 4278976521 is too large for 32-bit type 'int'
CPU: 1 UID: 0 PID: 5222 Comm: syz-executor345 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468
 ocfs2_verify_volume fs/ocfs2/super.c:2336 [inline]
 ocfs2_sb_probe fs/ocfs2/super.c:792 [inline]
 ocfs2_fill_super+0xf9c/0x5750 fs/ocfs2/super.c:988
 mount_bdev+0x20a/0x2d0 fs/super.c:1679
 legacy_get_tree+0xee/0x190 fs/fs_context.c:662
 vfs_get_tree+0x90/0x2b0 fs/super.c:1800
 do_new_mount+0x2be/0xb40 fs/namespace.c:3507
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4055 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4032
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fecc6c51cba
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcd4fc0b18 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffcd4fc0b30 RCX: 00007fecc6c51cba
RDX: 0000000020004440 RSI: 0000000020000040 RDI: 00007ffcd4fc0b30
RBP: 0000000000000004 R08: 00007ffcd4fc0b70 R09: 0000000000004424
R10: 00000000000008c0 R11: 0000000000000282 R12: 00000000000008c0
R13: 00007ffcd4fc0b70 R14: 0000000000000003 R15: 0000000001000000
 </TASK>
---[ end trace ]---

Crashes (199):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/13 07:29 upstream 7234e2ea0edd 084d8178 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/08/15 03:24 upstream d07b43284ab3 e4bacdaf .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/08/15 02:40 upstream d07b43284ab3 e4bacdaf .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/08/15 01:56 upstream d07b43284ab3 e4bacdaf .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/16 15:38 upstream 2f87d0916ce0 bde2d81c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/01 02:40 upstream 9852d85ec9d4 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/21 16:03 upstream 42f7652d3eb5 14517542 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/21 04:35 upstream db87114dcf13 cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/20 10:51 upstream 715ca9dd687f cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/20 07:57 upstream 715ca9dd687f cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/19 21:22 upstream 3d5ad2d4eca3 cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/19 18:02 upstream 3d5ad2d4eca3 cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/19 16:37 upstream 3d5ad2d4eca3 cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/19 15:11 upstream 3d5ad2d4eca3 cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/19 11:33 upstream b04ae0f45168 cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/19 05:54 upstream b04ae0f45168 cd6fc0a3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/18 22:10 upstream 4d939780b705 0270e729 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/18 18:57 upstream 4d939780b705 0270e729 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/18 07:28 upstream 6efbea77b390 666f77ed .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/18 06:06 upstream 6efbea77b390 666f77ed .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/17 15:11 upstream c964ced77262 666f77ed .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/15 07:22 upstream eca631b8fe80 484e362f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/14 08:31 upstream 6485cf5ea253 084d8178 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/12 10:55 upstream 9e4c6c1ad9a1 084d8178 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/11 17:00 upstream 1d227fcc7222 5e7b4bca .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/11 15:29 upstream 1d227fcc7222 5e7b4bca .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/11 09:12 upstream 1d227fcc7222 cd942402 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/10 19:49 upstream d3d1556696c1 d44647df .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/10 16:22 upstream d3d1556696c1 d44647df .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/09 08:19 upstream 5b7c893ed5ed 402f1df0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/07 18:15 upstream 8cf0b93919e1 d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/07 01:01 upstream 2a130b7e1fcd d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/05 13:28 upstream 27cc6fdf7201 d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/05 10:33 upstream 27cc6fdf7201 d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/05 09:12 upstream 27cc6fdf7201 d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/04 19:19 upstream 0c559323bbaa d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/04 07:23 upstream 3840cbe24cf0 d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/04 00:18 upstream 7ec462100ef9 d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/03 18:53 upstream 7ec462100ef9 d7906eff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/03 10:14 upstream f23aa4c0761a a4c7fd36 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/03 03:40 upstream f23aa4c0761a a4c7fd36 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/02 02:27 upstream e32cde8d2bd7 ea2b66a6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/01 15:09 upstream e32cde8d2bd7 e9f6e118 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/29 08:35 upstream 3efc57369a0c ba29ff75 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/29 06:30 upstream 3efc57369a0c ba29ff75 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/29 03:47 upstream 3efc57369a0c ba29ff75 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/28 03:54 upstream e477dba5442c 440b26ec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/28 02:14 upstream e477dba5442c 440b26ec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/26 23:10 upstream 11a299a7933e 9314348a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/26 19:39 upstream 11a299a7933e 9314348a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/26 04:32 upstream 11a299a7933e 0d19f247 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/25 15:41 upstream 684a64bf32b6 0b45cac3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/21 01:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9ec59cb3edc7 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/10/10 08:30 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 80cb3fb61135 0278d004 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/30 12:21 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5f5673607153 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 UBSAN: shift-out-of-bounds in ocfs2_fill_super
2024/09/30 03:57 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5f5673607153 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 UBSAN: shift-out-of-bounds in ocfs2_fill_super
* Struck through repros no longer work on HEAD.