syzbot


UBSAN: shift-out-of-bounds in parse_options

Status: upstream: reported C repro on 2024/08/17 08:59
Bug presence: origin:lts
[Documentation on labels]
Reported-by: syzbot+561af80c4a21ada6cf3e@syzkaller.appspotmail.com
First crash: 256d, last: 14h40m
Bug presence (2)
Date Name Commit Repro Result
2024/08/17 lts (merge base) 909ba1f1b414 C [report] UBSAN: shift-out-of-bounds in parse_options
2024/08/17 upstream (ToT) e5fa841af679 C Didn't crash
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 UBSAN: shift-out-of-bounds in parse_options ext4 origin:lts C error 409 15h24m 843d 0/2 upstream: reported C repro on 2023/01/08 05:56
linux-6.1 UBSAN: shift-out-of-bounds in parse_options origin:lts-only C error 100 1d23h 259d 0/3 upstream: reported C repro on 2024/08/13 23:52
linux-5.15 UBSAN: shift-out-of-bounds in parse_options origin:lts-only C unreliable 239 9h53m 527d 0/3 upstream: reported C repro on 2023/11/19 20:08
Last patch testing requests (5)
Created Duration User Patch Repo Result
2025/03/03 07:00 11m retest repro android14-6.1 report log
2025/03/03 07:00 6m retest repro android14-6.1 report log
2025/03/03 07:00 6m retest repro android14-6.1 report log
2025/03/03 07:00 6m retest repro android14-6.1 report log
2025/03/03 07:00 9m retest repro android14-6.1 report log

Sample crash report:
loop0: detected capacity change from 0 to 40427
================================================================================
UBSAN: shift-out-of-bounds in fs/f2fs/super.c:919:5
shift exponent 105 is too large for 64-bit type 'unsigned long'
CPU: 1 PID: 295 Comm: syz-executor359 Not tainted 6.1.118-syzkaller-00024-g72db89d3d913 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106
 dump_stack+0x15/0x18 lib/dump_stack.c:113
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3e1/0x440 lib/ubsan.c:321
 parse_options+0x4b19/0x4b30 fs/f2fs/super.c:919
 f2fs_fill_super+0x23bc/0x6dc0 fs/f2fs/super.c:4303
 mount_bdev+0x282/0x3b0 fs/super.c:1445
 f2fs_mount+0x34/0x40 fs/f2fs/super.c:4739
 legacy_get_tree+0xf1/0x190 fs/fs_context.c:632
 vfs_get_tree+0x88/0x290 fs/super.c:1575
 do_new_mount+0x2ba/0xb30 fs/namespace.c:3056
 path_mount+0x671/0x1070 fs/namespace.c:3386
 do_mount fs/namespace.c:3399 [inline]
 __do_sys_mount fs/namespace.c:3607 [inline]
 __se_sys_mount+0x2c4/0x3b0 fs/namespace.c:3584
 __x64_sys_mount+0xbf/0xd0 fs/namespace.c:3584
 x64_sys_call+0x49d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f81568c5cfa
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe70d6f6e8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffe70d6f700 RCX: 00007f81568c5cfa
RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00007ffe70d6f700
RBP: 0000000000000004 R08: 00007ffe70d6f740 R09: 00000000000054fa
R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
R13: 00007ffe70d6f740 R14: 0000000000000003 R15: 00000000013bd7ef
 </TASK>
================================================================================
F2FS-fs (loop0): Not support 2199023255552, larger than 256

Crashes (222):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/01/25 00:25 android14-6.1 72db89d3d913 1293872d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/22 22:52 android14-6.1 0405a25a6ed7 a44b0418 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/21 01:48 android14-6.1 d12538e9da37 6e87cfa2 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/11/25 11:15 android14-6.1 226e9f92a06c 68da6d95 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 09:04 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:58 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:52 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/29 20:32 android14-6.1 242f90b45e89 85a5a23f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/28 03:28 android14-6.1 a4fc1bef0501 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/23 16:29 android14-6.1 642656a36791 53a8b9bd .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/23 07:26 android14-6.1 642656a36791 53a8b9bd .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/21 04:13 android14-6.1 bc3d1d352ab6 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/20 10:06 android14-6.1 bc3d1d352ab6 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/19 10:51 android14-6.1 bc3d1d352ab6 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/19 06:04 android14-6.1 bc3d1d352ab6 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/14 16:19 android14-6.1 19a0fb1d3513 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/14 06:25 android14-6.1 19a0fb1d3513 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/14 01:09 android14-6.1 19a0fb1d3513 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/13 21:14 android14-6.1 19a0fb1d3513 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/13 17:05 android14-6.1 19a0fb1d3513 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/13 15:37 android14-6.1 19a0fb1d3513 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/08 14:26 android14-6.1 ca24c52e3c25 a775275d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/04/02 08:26 android14-6.1 3e6e324f5b47 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/29 20:38 android14-6.1 c1fd50266bd6 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/29 20:38 android14-6.1 c1fd50266bd6 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/16 19:55 android14-6.1 33c9d4844afc e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/13 21:51 android14-6.1 efd0bedd2cb2 44be8b44 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/12 15:02 android14-6.1 9bcabbda673a ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/10 07:09 android14-6.1 44db4837f75e 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/05 05:24 android14-6.1 471a10d3af3b c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/05 00:58 android14-6.1 471a10d3af3b c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/04 06:14 android14-6.1 471a10d3af3b c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/03/03 16:24 android14-6.1 471a10d3af3b c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/17 06:46 android14-6.1 ccc915784332 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/16 19:52 android14-6.1 ccc915784332 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/12 22:58 android14-6.1 c93dcf3b5358 b27c2402 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/12 17:23 android14-6.1 c93dcf3b5358 b27c2402 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/12 13:31 android14-6.1 c93dcf3b5358 b27c2402 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/10 10:56 android14-6.1 1ac09f5c0571 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/08 20:47 android14-6.1 1ac09f5c0571 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/05 01:04 android14-6.1 7658169f5f5f 5896748e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/02/02 19:19 android14-6.1 2055772eada0 568559e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/28 01:41 android14-6.1 11620ab958c2 18070896 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/27 14:53 android14-6.1 2f2e115eecbd d99a33ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/27 08:49 android14-6.1 ef4fb40b87a9 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/27 07:21 android14-6.1 ef4fb40b87a9 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/27 04:58 android14-6.1 ef4fb40b87a9 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/27 03:13 android14-6.1 ef4fb40b87a9 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/26 21:41 android14-6.1 ef4fb40b87a9 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:44 android14-6.1 d6a513a78492 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
* Struck through repros no longer work on HEAD.