UBSAN: shift-out-of-bounds in parse_options

Status: upstream: reported C repro on 2024/08/17 08:59
Bug presence: origin:lts
[Documentation on labels]
Reported-by: syzbot+561af80c4a21ada6cf3e@syzkaller.appspotmail.com
First crash: 709d, last: 21h42m
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2024/08/17 lts (merge base) 909ba1f1b414 C [report] UBSAN: shift-out-of-bounds in parse_options
2024/08/17 upstream (ToT) e5fa841af679 C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 UBSAN: shift-out-of-bounds in parse_options ext4 origin:lts -1 C error 2165 8h45m 1297d 0/2 upstream: reported C repro on 2023/01/08 05:56
linux-6.1 UBSAN: shift-out-of-bounds in parse_options origin:lts-only -1 C inconclusive 364 4d10h 713d 0/3 upstream: reported C repro on 2024/08/13 23:52
linux-5.15 UBSAN: shift-out-of-bounds in parse_options origin:lts-only -1 C unreliable 479 21d 981d 0/3 upstream: reported C repro on 2023/11/19 20:08

Sample crash report:
loop2: detected capacity change from 0 to 40427
F2FS-fs (loop2): Image doesn't support compression
F2FS-fs (loop2): Image doesn't support compression
================================================================================
UBSAN: shift-out-of-bounds in fs/f2fs/super.c:942:5
shift exponent 114 is too large for 64-bit type 'unsigned long'
CPU: 1 PID: 375 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 dump_stack+0x15/0x24 lib/dump_stack.c:113
 ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
 __ubsan_handle_shift_out_of_bounds+0x364/0x3f0 lib/ubsan.c:321
 parse_options+0x4a47/0x4a50 fs/f2fs/super.c:943
 f2fs_fill_super+0x2660/0x7380 fs/f2fs/super.c:4428
 mount_bdev+0x29b/0x3d0 fs/super.c:1448
 f2fs_mount+0x34/0x40 fs/f2fs/super.c:4861
 legacy_get_tree+0xfe/0x1a0 fs/fs_context.c:632
 vfs_get_tree+0x9a/0x270 fs/super.c:1578
 do_new_mount+0x251/0xb40 fs/namespace.c:3081
 path_mount+0x640/0xfd0 fs/namespace.c:3411
 do_mount fs/namespace.c:3424 [inline]
 __do_sys_mount fs/namespace.c:3632 [inline]
 __se_sys_mount+0x320/0x390 fs/namespace.c:3609
 __x64_sys_mount+0xbf/0xd0 fs/namespace.c:3609
 x64_sys_call+0x65d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7ff03f19f10a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe6d44d638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffe6d44d6c0 RCX: 00007ff03f19f10a
RDX: 0000200000000000 RSI: 0000200000000080 RDI: 00007ffe6d44d680
RBP: 0000200000000000 R08: 00007ffe6d44d6c0 R09: 0000000000000010
R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000080
R13: 00007ffe6d44d680 R14: 0000000000005518 R15: 00002000000001c0
 </TASK>
================================================================================
F2FS-fs (loop2): Not support 1125899906842624, larger than 256

Crashes (988):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/21 19:31 android14-6.1 72b456bf57ad 7c5de9c3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/06/04 09:30 android14-6.1 80aded6fbb9d 197909be .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/03/29 12:47 android14-6.1 1c08e57193aa b5ceaad2 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/01/20 03:47 android14-6.1 37a76cbe8f87 572effc1 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/12/10 16:41 android14-6.1 0ac176d7ef4d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/12/05 01:56 android14-6.1 5ddae867b428 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/09/20 17:53 android14-6.1 462bdb2cb1b1 67c37560 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/06/14 08:02 android14-6.1 6246d345f550 0e8da31f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/06/11 15:23 android14-6.1 47e5d7e91778 5d7e17ca .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/12 04:22 android14-6.1 646380b087a5 77908e5f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/05 18:50 android14-6.1 0c1a07d9c284 6ca47dd8 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/05/05 08:12 android14-6.1 0c1a07d9c284 b0714e37 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/25 00:25 android14-6.1 72db89d3d913 1293872d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/22 22:52 android14-6.1 0405a25a6ed7 a44b0418 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2025/01/21 01:48 android14-6.1 d12538e9da37 6e87cfa2 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/11/25 11:15 android14-6.1 226e9f92a06c 68da6d95 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 09:04 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:58 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:52 android14-6.1 d6a513a78492 dbc93b08 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/27 10:12 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/27 05:48 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/27 03:29 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/26 10:39 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/26 06:34 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/26 05:10 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/25 21:09 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/25 05:37 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/25 03:42 android14-6.1 92668decd5e0 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/25 01:00 android14-6.1 92668decd5e0 dd737a83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/24 11:57 android14-6.1 92668decd5e0 544adce9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/22 09:38 android14-6.1 72b456bf57ad b561ce9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/22 08:13 android14-6.1 72b456bf57ad b561ce9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/22 05:14 android14-6.1 72b456bf57ad b561ce9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/21 07:59 android14-6.1 72b456bf57ad de6a700d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/21 06:58 android14-6.1 72b456bf57ad de6a700d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/20 10:15 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/20 05:02 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/20 03:02 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 23:28 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 22:09 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 20:41 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 18:30 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 15:16 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 09:01 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 07:45 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 05:49 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 03:10 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 02:02 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/19 00:40 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/18 19:25 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/18 18:23 android14-6.1 c7e15f0bdc49 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/18 01:04 android14-6.1 c7e15f0bdc49 8aaff637 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/17 23:22 android14-6.1 c7e15f0bdc49 8aaff637 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/17 14:30 android14-6.1 c7e15f0bdc49 7f27c57a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/17 11:32 android14-6.1 c7e15f0bdc49 7f27c57a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/16 08:29 android14-6.1 8824f345abdb 27a8bd60 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/15 16:33 android14-6.1 6c6a10606081 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/15 06:29 android14-6.1 e69716042404 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/15 00:17 android14-6.1 e69716042404 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/14 11:19 android14-6.1 e69716042404 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/14 10:17 android14-6.1 e69716042404 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/14 07:13 android14-6.1 e69716042404 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/13 05:38 android14-6.1 21b931853e8d d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/13 00:41 android14-6.1 21b931853e8d d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/12 22:43 android14-6.1 21b931853e8d d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/12 18:55 android14-6.1 21b931853e8d d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2026/07/12 13:54 android14-6.1 21b931853e8d d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
2024/08/17 08:44 android14-6.1 d6a513a78492 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 UBSAN: shift-out-of-bounds in parse_options
* Struck through repros no longer work on HEAD.