syzbot


UBSAN: shift-out-of-bounds in parse_options

Status: upstream: reported C repro on 2024/08/17 08:59
Bug presence: origin:lts
[Documentation on labels]
Reported-by: syzbot+561af80c4a21ada6cf3e@syzkaller.appspotmail.com
First crash: 520d, last: 5h46m
Bug presence (2)
Date Name Commit Repro Result
2024/08/17 lts (merge base) 909ba1f1b414 C [report] UBSAN: shift-out-of-bounds in parse_options
2024/08/17 upstream (ToT) e5fa841af679 C Didn't crash
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 UBSAN: shift-out-of-bounds in parse_options ext4 origin:lts -1 C error 1232 54m 1107d 0/2 upstream: reported C repro on 2023/01/08 05:56
linux-6.1 UBSAN: shift-out-of-bounds in parse_options origin:lts-only -1 C inconclusive 281 1d03h 523d 0/3 upstream: reported C repro on 2024/08/13 23:52
linux-5.15 UBSAN: shift-out-of-bounds in parse_options origin:lts-only -1 C unreliable 447 7d00h 791d 0/3 upstream: reported C repro on 2023/11/19 20:08
Last patch testing requests (3)
Created Duration User Patch Repo Result
2025/03/03 07:00 11m retest repro android14-6.1 report log
2025/03/03 07:00 6m retest repro android14-6.1 report log
2025/03/03 07:00 6m retest repro android14-6.1 report log

Sample crash report:
loop2: detected capacity change from 0 to 40427
F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
================================================================================
UBSAN: shift-out-of-bounds in fs/f2fs/super.c:942:5
shift exponent 150 is too large for 64-bit type 'unsigned long'
CPU: 0 PID: 374 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0xee/0x150 lib/dump_stack.c:106
 dump_stack+0x15/0x24 lib/dump_stack.c:113
 ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
 __ubsan_handle_shift_out_of_bounds+0x37c/0x400 lib/ubsan.c:321
 parse_options+0x4a10/0x4a20 fs/f2fs/super.c:942
 f2fs_fill_super+0x2281/0x6c70 fs/f2fs/super.c:4366
 mount_bdev+0x2bc/0x3f0 fs/super.c:1445
 f2fs_mount+0x34/0x40 fs/f2fs/super.c:4802
 legacy_get_tree+0xfe/0x1a0 fs/fs_context.c:632
 vfs_get_tree+0x9a/0x270 fs/super.c:1575
 do_new_mount+0x25a/0xa20 fs/namespace.c:3078
 path_mount+0x675/0x1010 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount+0x318/0x380 fs/namespace.c:3606
 __x64_sys_mount+0xbf/0xd0 fs/namespace.c:3606
 x64_sys_call+0x65d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f53d2790eea
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd3546dbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffd3546dc80 RCX: 00007f53d2790eea
RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 00007ffd3546dc40
RBP: 0000200000000040 R08: 00007ffd3546dc80 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0
R13: 00007ffd3546dc40 R14: 000000000000553a R15: 0000200000005a80
 </TASK>
================================================================================
F2FS-fs (loop2): Not support 4194304, larger than 256

Crashes (440):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/10 16:41 android14-6.1 0ac176d7ef4d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/12/05 01:56 android14-6.1 5ddae867b428 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/09/20 17:53 android14-6.1 462bdb2cb1b1 67c37560 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/06/14 08:02 android14-6.1 6246d345f550 0e8da31f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/06/11 15:23 android14-6.1 47e5d7e91778 5d7e17ca .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/12 04:22 android14-6.1 646380b087a5 77908e5f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/05 18:50 android14-6.1 0c1a07d9c284 6ca47dd8 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/05 08:12 android14-6.1 0c1a07d9c284 b0714e37 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/25 00:25 android14-6.1 72db89d3d913 1293872d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/22 22:52 android14-6.1 0405a25a6ed7 a44b0418 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/21 01:48 android14-6.1 d12538e9da37 6e87cfa2 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/11/25 11:15 android14-6.1 226e9f92a06c 68da6d95 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 09:04 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:58 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:52 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/19 07:05 android14-6.1 37a76cbe8f87 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/19 05:29 android14-6.1 37a76cbe8f87 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/18 20:47 android14-6.1 37a76cbe8f87 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/18 18:10 android14-6.1 37a76cbe8f87 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/18 09:43 android14-6.1 f8a5ad1fcf13 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/18 06:59 android14-6.1 f8a5ad1fcf13 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/18 04:49 android14-6.1 f8a5ad1fcf13 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/17 22:14 android14-6.1 f8a5ad1fcf13 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/17 16:52 android14-6.1 f8a5ad1fcf13 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/14 19:01 android14-6.1 2683d39c884b d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/13 23:39 android14-6.1 4472ce9a8930 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/13 15:18 android14-6.1 4472ce9a8930 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/13 05:26 android14-6.1 4472ce9a8930 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/12 13:23 android14-6.1 4472ce9a8930 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/07 16:20 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/06 21:54 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/06 05:24 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/06 04:24 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 22:40 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 20:41 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 18:22 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 15:55 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 14:00 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 12:33 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 11:14 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 06:38 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/05 00:12 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 22:00 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 20:29 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 19:01 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 12:19 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 11:21 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 10:15 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 04:32 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 03:16 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/04 01:12 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/03 12:31 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/03 09:55 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/02 20:55 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/02 10:57 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/02 04:32 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/01 18:09 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/01 15:20 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/01 13:52 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/01 09:23 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/01 00:25 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/12/31 16:55 android14-6.1 5e6db7045704 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:44 android14-6.1 d6a513a78492 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
* Struck through repros no longer work on HEAD.