UBSAN: shift-out-of-bounds in parse_options

Status: upstream: reported C repro on 2024/08/17 08:59
Bug presence: origin:lts
[Documentation on labels]
Reported-by: syzbot+561af80c4a21ada6cf3e@syzkaller.appspotmail.com
First crash: 811d, last: 48m
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2024/08/17 lts (merge base) 909ba1f1b414 C [report] UBSAN: shift-out-of-bounds in parse_options
2024/08/17 upstream (ToT) e5fa841af679 C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 UBSAN: shift-out-of-bounds in parse_options ext4 origin:lts -1 syz, C error 2508 14h37m 1398d 0/2 upstream: reported C repro on 2023/01/08 05:56
linux-6.1 UBSAN: shift-out-of-bounds in parse_options origin:lts-only -1 syz, C inconclusive 410 1d22h 815d 0/3 upstream: reported C repro on 2024/08/13 23:52
linux-5.15 UBSAN: shift-out-of-bounds in parse_options origin:lts-only -1 syz, C unreliable 489 1d11h 1083d 0/3 upstream: reported C repro on 2023/11/19 20:08

Sample crash report:
loop0: detected capacity change from 0 to 40427
================================================================================
UBSAN: shift-out-of-bounds in fs/f2fs/super.c:955:5
shift exponent 160 is too large for 64-bit type 'unsigned long'
CPU: 1 PID: 305 Comm: syz-executor157 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 dump_stack+0x15/0x24 lib/dump_stack.c:113
 ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
 __ubsan_handle_shift_out_of_bounds+0x364/0x3f0 lib/ubsan.c:321
 parse_options+0x4d05/0x4d30 fs/f2fs/super.c:956
 f2fs_fill_super+0x266c/0x7460 fs/f2fs/super.c:4501
 mount_bdev+0x29b/0x3d0 fs/super.c:1448
 f2fs_mount+0x34/0x40 fs/f2fs/super.c:4941
 legacy_get_tree+0xfe/0x1a0 fs/fs_context.c:632
 vfs_get_tree+0x9a/0x270 fs/super.c:1578
 do_new_mount+0x251/0xb40 fs/namespace.c:3081
 path_mount+0x640/0xfd0 fs/namespace.c:3411
 do_mount fs/namespace.c:3424 [inline]
 __do_sys_mount fs/namespace.c:3632 [inline]
 __se_sys_mount+0x320/0x390 fs/namespace.c:3609
 __x64_sys_mount+0xbf/0xd0 fs/namespace.c:3609
 x64_sys_call+0x65d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fd2756e075a
Code: 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 33 09 00 00 00 00 00 eb 96 e8 61 05 00 00 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc80805468 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffc80805480 RCX: 00007fd2756e075a
RDX: 00002000000001c0 RSI: 0000200000000200 RDI: 00007ffc80805480
RBP: 0000200000000200 R08: 00007ffc808054c0 R09: 0000000000000000
R10: 0000000000010800 R11: 0000000000000286 R12: 00002000000001c0
R13: 00007ffc808054c0 R14: 0000000000000003 R15: 0000000000010800
 </TASK>
================================================================================
F2FS-fs (loop0): Not support 4294967296, larger than 256

Crashes (1238):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/30 02:28 android14-6.1 00ed7c2479b4 b498adee .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/21 19:31 android14-6.1 72b456bf57ad 7c5de9c3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/06/04 09:30 android14-6.1 80aded6fbb9d 197909be .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/03/29 12:47 android14-6.1 1c08e57193aa b5ceaad2 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/20 03:47 android14-6.1 37a76cbe8f87 572effc1 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/12/10 16:41 android14-6.1 0ac176d7ef4d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/12/05 01:56 android14-6.1 5ddae867b428 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/09/20 17:53 android14-6.1 462bdb2cb1b1 67c37560 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/06/14 08:02 android14-6.1 6246d345f550 0e8da31f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/06/11 15:23 android14-6.1 47e5d7e91778 5d7e17ca .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/12 04:22 android14-6.1 646380b087a5 77908e5f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/05 18:50 android14-6.1 0c1a07d9c284 6ca47dd8 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/05 08:12 android14-6.1 0c1a07d9c284 b0714e37 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/25 00:25 android14-6.1 72db89d3d913 1293872d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/22 22:52 android14-6.1 0405a25a6ed7 a44b0418 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/21 01:48 android14-6.1 d12538e9da37 6e87cfa2 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/11/25 11:15 android14-6.1 226e9f92a06c 68da6d95 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 09:04 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:58 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:52 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/11/06 22:28 android14-6.1 2e8ed1192bdf 5cecaf1f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/11/05 01:03 android14-6.1 2e8ed1192bdf 73438ed0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/11/02 06:07 android14-6.1 743bbe988cbf 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/11/01 18:20 android14-6.1 743bbe988cbf 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/11/01 05:03 android14-6.1 743bbe988cbf 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/31 01:27 android14-6.1 17f0538436d1 0ec395f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/30 07:09 android14-6.1 00ed7c2479b4 b498adee .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/30 02:06 android14-6.1 00ed7c2479b4 b498adee .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/28 18:42 android14-6.1 b83ca11f560a 858db2ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/28 03:41 android14-6.1 0c2ef8c1e2db 96923c60 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/27 07:37 android14-6.1 e7e4a657fff8 168cb7a2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/26 11:41 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/26 09:46 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/26 05:43 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/26 05:36 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/26 03:01 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/26 01:23 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/25 21:53 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/25 10:53 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/25 09:35 android14-6.1 2f0d864181b9 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/24 05:01 android14-6.1 04566490b518 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/22 08:56 android14-6.1 3ad9f1eca4fa 4ba27f85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/20 23:29 android14-6.1 bb5a6085be4a df8746fb .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/20 04:26 android14-6.1 b9b12f129604 72cdc28d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/19 07:55 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/19 05:51 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/18 23:41 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/18 15:27 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/18 11:16 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/17 19:34 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/17 16:15 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/17 12:46 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/15 16:03 android14-6.1 06aabb3c5541 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/15 10:29 android14-6.1 06aabb3c5541 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/14 06:20 android14-6.1 e3b8fb598ad4 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/12 06:37 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/12 05:13 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/12 03:05 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/11 22:59 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/11 13:37 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/11 12:32 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/11 03:55 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/11 01:26 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/10 20:36 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/10 08:59 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/10 07:41 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/10/09 16:17 android14-6.1 9ea8d8374e5e b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:44 android14-6.1 d6a513a78492 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
* Struck through repros no longer work on HEAD.