================================================================================ UBSAN: Undefined behaviour in fs/f2fs/super.c:2227:16 shift exponent 134217740 is too large for 32-bit type 'int' CPU: 1 PID: 10135 Comm: syz-executor.3 Not tainted 4.19.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 sanity_check_raw_super fs/f2fs/super.c:2227 [inline] read_raw_super_block fs/f2fs/super.c:2631 [inline] f2fs_fill_super.cold+0x1f9/0x5fb fs/f2fs/super.c:2842 mount_bdev+0x2fc/0x3b0 fs/super.c:1158 mount_fs+0xa3/0x318 fs/super.c:1261 vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961 vfs_kern_mount fs/namespace.c:951 [inline] do_new_mount fs/namespace.c:2469 [inline] do_mount+0x51c/0x2f10 fs/namespace.c:2799 ksys_mount+0xcf/0x130 fs/namespace.c:3015 __do_sys_mount fs/namespace.c:3029 [inline] __se_sys_mount fs/namespace.c:3026 [inline] __x64_sys_mount+0xba/0x150 fs/namespace.c:3026 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4607ea Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007f34d6cdfa88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f34d6cdfb20 RCX: 00000000004607ea RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f34d6cdfae0 RBP: 00007f34d6cdfae0 R08: 00007f34d6cdfb20 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200003c0 ================================================================================ MINIX-fs: deleted inode referenced: 1 MINIX-fs: get root inode failed MINIX-fs: deleted inode referenced: 1 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) MINIX-fs: get root inode failed UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh audit: type=1800 audit(1601538033.262:19): pid=10157 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 MINIX-fs: deleted inode referenced: 1 MINIX-fs: get root inode failed UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 MINIX-fs: deleted inode referenced: 1 MINIX-fs: get root inode failed ================================================================================ UBSAN: Undefined behaviour in fs/f2fs/super.c:2881:40 shift exponent 134217740 is too large for 64-bit type 'long long int' CPU: 0 PID: 10135 Comm: syz-executor.3 Not tainted 4.19.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 f2fs_fill_super.cold+0x1db/0x5fb fs/f2fs/super.c:2881 mount_bdev+0x2fc/0x3b0 fs/super.c:1158 mount_fs+0xa3/0x318 fs/super.c:1261 vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961 vfs_kern_mount fs/namespace.c:951 [inline] do_new_mount fs/namespace.c:2469 [inline] do_mount+0x51c/0x2f10 fs/namespace.c:2799 ksys_mount+0xcf/0x130 fs/namespace.c:3015 __do_sys_mount fs/namespace.c:3029 [inline] __se_sys_mount fs/namespace.c:3026 [inline] __x64_sys_mount+0xba/0x150 fs/namespace.c:3026 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4607ea Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007f34d6cdfa88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f34d6cdfb20 RCX: 00000000004607ea RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f34d6cdfae0 RBP: 00007f34d6cdfae0 R08: 00007f34d6cdfb20 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200003c0 ================================================================================ ================================================================================ UBSAN: Undefined behaviour in fs/f2fs/super.c:2477:21 shift exponent 134217740 is too large for 32-bit type 'int' CPU: 0 PID: 10135 Comm: syz-executor.3 Not tainted 4.19.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 init_sb_info fs/f2fs/super.c:2477 [inline] f2fs_fill_super.cold+0x5e8/0x5fb fs/f2fs/super.c:2956 mount_bdev+0x2fc/0x3b0 fs/super.c:1158 mount_fs+0xa3/0x318 fs/super.c:1261 vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961 vfs_kern_mount fs/namespace.c:951 [inline] do_new_mount fs/namespace.c:2469 [inline] do_mount+0x51c/0x2f10 fs/namespace.c:2799 ksys_mount+0xcf/0x130 fs/namespace.c:3015 __do_sys_mount fs/namespace.c:3029 [inline] __se_sys_mount fs/namespace.c:3026 [inline] __x64_sys_mount+0xba/0x150 fs/namespace.c:3026 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4607ea Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007f34d6cdfa88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f34d6cdfb20 RCX: 00000000004607ea RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f34d6cdfae0 RBP: 00007f34d6cdfae0 R08: 00007f34d6cdfb20 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200003c0 ================================================================================ F2FS-fs (loop3): invalid crc value F2FS-fs (loop3): Failed to initialize F2FS segment manager F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock F2FS-fs (loop3): invalid crc value F2FS-fs (loop3): Failed to initialize F2FS segment manager UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) MINIX-fs: deleted inode referenced: 1 EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh MINIX-fs: get root inode failed UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns MINIX-fs: deleted inode referenced: 1 MINIX-fs: get root inode failed UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns MINIX-fs: deleted inode referenced: 1 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) MINIX-fs: get root inode failed UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 audit: type=1800 audit(1601538035.562:20): pid=10337 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16046 res=0 audit: type=1804 audit(1601538035.562:21): pid=10337 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir143233088/syzkaller.sdKRxT/75/file0" dev="sda1" ino=16046 res=1 audit: type=1800 audit(1601538035.562:22): pid=10337 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16046 res=0 audit: type=1800 audit(1601538035.672:23): pid=10337 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16046 res=0 MINIX-fs: mounting unchecked file system, running fsck is recommended bridge0: port 3(geneve1) entered blocking state bridge0: port 3(geneve1) entered disabled state device geneve1 entered promiscuous mode netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. MINIX-fs: mounting unchecked file system, running fsck is recommended device bond1 entered promiscuous mode UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready 8021q: adding VLAN 0 to HW filter on device bond1 UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) PF_BRIDGE: br_mdb_parse() with invalid ifindex UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh PF_BRIDGE: br_mdb_parse() with invalid ifindex MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 MINIX-fs: mounting unchecked file system, running fsck is recommended sch_tbf: burst 0 is lower than device team0 mtu (1514) ! MINIX-fs: deleted inode referenced: 2 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh MINIX-fs: deleted inode referenced: 2 UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 usb usb9: usbfs: process 10603 (syz-executor.5) did not claim interface 0 before use usb usb9: usbfs: process 10606 (syz-executor.5) did not claim interface 0 before use MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 Cannot find add_set index 0 as target MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 Cannot find add_set index 0 as target MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) NILFS (loop3): mounting unchecked fs NILFS (loop3): invalid segment: Magic number mismatch NILFS (loop3): unable to fall back to spare super block NILFS (loop3): error -22 while searching super root UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. Cannot find add_set index 0 as target NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) NILFS (loop3): mounting unchecked fs NILFS (loop3): invalid segment: Magic number mismatch NILFS (loop3): unable to fall back to spare super block UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) NILFS (loop3): error -22 while searching super root UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) MINIX-fs: mounting unchecked file system, running fsck is recommended UDF-fs: error (device loop1): udf_read_inode: (ino 1344) failed !bh UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0 MINIX-fs: mounting unchecked file system, running fsck is recommended