UBSAN: shift-out-of-bounds in parse_options

Status: upstream: reported C repro on 2024/08/17 08:59
Bug presence: origin:lts
[Documentation on labels]
Reported-by: syzbot+561af80c4a21ada6cf3e@syzkaller.appspotmail.com
First crash: 762d, last: 4d09h
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2024/08/17 lts (merge base) 909ba1f1b414 C [report] UBSAN: shift-out-of-bounds in parse_options
2024/08/17 upstream (ToT) e5fa841af679 C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 UBSAN: shift-out-of-bounds in parse_options ext4 origin:lts -1 syz, C error 2396 4h10m 1349d 0/2 upstream: reported C repro on 2023/01/08 05:56
linux-6.1 UBSAN: shift-out-of-bounds in parse_options origin:lts-only -1 syz, C inconclusive 381 4d23h 765d 0/3 upstream: reported C repro on 2024/08/13 23:52
linux-5.15 UBSAN: shift-out-of-bounds in parse_options origin:lts-only -1 syz, C unreliable 481 5d01h 1034d 0/3 upstream: reported C repro on 2023/11/19 20:08

Sample crash report:
loop2: detected capacity change from 0 to 40427
F2FS-fs (loop2): Image doesn't support compression
F2FS-fs (loop2): Image doesn't support compression
================================================================================
UBSAN: shift-out-of-bounds in fs/f2fs/super.c:942:5
shift exponent 114 is too large for 64-bit type 'unsigned long'
CPU: 1 PID: 375 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 dump_stack+0x15/0x24 lib/dump_stack.c:113
 ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
 __ubsan_handle_shift_out_of_bounds+0x364/0x3f0 lib/ubsan.c:321
 parse_options+0x4a47/0x4a50 fs/f2fs/super.c:943
 f2fs_fill_super+0x2660/0x7380 fs/f2fs/super.c:4428
 mount_bdev+0x29b/0x3d0 fs/super.c:1448
 f2fs_mount+0x34/0x40 fs/f2fs/super.c:4861
 legacy_get_tree+0xfe/0x1a0 fs/fs_context.c:632
 vfs_get_tree+0x9a/0x270 fs/super.c:1578
 do_new_mount+0x251/0xb40 fs/namespace.c:3081
 path_mount+0x640/0xfd0 fs/namespace.c:3411
 do_mount fs/namespace.c:3424 [inline]
 __do_sys_mount fs/namespace.c:3632 [inline]
 __se_sys_mount+0x320/0x390 fs/namespace.c:3609
 __x64_sys_mount+0xbf/0xd0 fs/namespace.c:3609
 x64_sys_call+0x65d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ff03f19f10a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe6d44d638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffe6d44d6c0 RCX: 00007ff03f19f10a
RDX: 0000200000000000 RSI: 0000200000000080 RDI: 00007ffe6d44d680
RBP: 0000200000000000 R08: 00007ffe6d44d6c0 R09: 0000000000000010
R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000080
R13: 00007ffe6d44d680 R14: 0000000000005518 R15: 00002000000001c0
 </TASK>
================================================================================
F2FS-fs (loop2): Not support 1125899906842624, larger than 256

Crashes (1125):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/21 19:31 android14-6.1 72b456bf57ad 7c5de9c3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/06/04 09:30 android14-6.1 80aded6fbb9d 197909be .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/03/29 12:47 android14-6.1 1c08e57193aa b5ceaad2 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/20 03:47 android14-6.1 37a76cbe8f87 572effc1 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/12/10 16:41 android14-6.1 0ac176d7ef4d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/12/05 01:56 android14-6.1 5ddae867b428 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/09/20 17:53 android14-6.1 462bdb2cb1b1 67c37560 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/06/14 08:02 android14-6.1 6246d345f550 0e8da31f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/06/11 15:23 android14-6.1 47e5d7e91778 5d7e17ca .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/12 04:22 android14-6.1 646380b087a5 77908e5f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/05 18:50 android14-6.1 0c1a07d9c284 6ca47dd8 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/05 08:12 android14-6.1 0c1a07d9c284 b0714e37 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/25 00:25 android14-6.1 72db89d3d913 1293872d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/22 22:52 android14-6.1 0405a25a6ed7 a44b0418 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/21 01:48 android14-6.1 d12538e9da37 6e87cfa2 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/11/25 11:15 android14-6.1 226e9f92a06c 68da6d95 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 09:04 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:58 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:52 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/14 13:27 android14-6.1 f52fadf7c78f 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/14 08:13 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/14 06:49 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/14 04:19 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/14 03:09 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/14 03:08 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/14 00:52 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/13 16:37 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/13 14:57 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/13 13:52 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/13 11:03 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/13 09:11 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/13 03:33 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/12 23:17 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/12 22:01 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/12 18:14 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/12 16:47 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/12 14:03 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/12 09:05 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/12 06:50 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/11 07:23 android14-6.1 b16e29e4979f 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/10 22:00 android14-6.1 945be0af8244 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/09/10 18:35 android14-6.1 945be0af8244 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/24 09:12 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/24 04:34 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/23 23:11 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/23 18:52 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/23 12:33 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/23 08:48 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/23 07:10 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/23 02:29 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/22 20:11 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/22 13:41 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/22 05:37 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/21 20:20 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/21 16:06 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/21 06:44 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/21 00:45 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/20 22:25 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/20 20:02 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/20 17:35 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/20 11:21 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/20 09:52 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/20 06:51 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/20 05:21 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/08/19 23:28 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:44 android14-6.1 d6a513a78492 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
* Struck through repros no longer work on HEAD.