UBSAN: shift-out-of-bounds in dt2811

ID	Workflow	Result	Correct	Bug	Created	Started	Finished	Revision
464c9e68	assessment-security	DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌	❓	UBSAN: shift-out-of-bounds in dt2811_attach	2026/09/22 00:09	2026/09/22 00:09	2026/09/22 00:48	853b104b

Title	Replies (including bot)	Last reply
[PATCH] comedi: dt2811: fix shift-out-of-bounds in IRQ check	1 (1)	2026/09/22 07:16
[PATCH] test dt2811	1 (2)	2026/09/22 06:57
[syzbot] [comedi?] UBSAN: shift-out-of-bounds in dt2811_attach	0 (1)	2026/09/22 05:29

Title

Replies (including bot)

Last reply

[PATCH] comedi: dt2811: fix shift-out-of-bounds in IRQ check

1 (1)

2026/09/22 07:16

[PATCH] test dt2811

1 (2)

2026/09/22 06:57

[syzbot] [comedi?] UBSAN: shift-out-of-bounds in dt2811_attach

0 (1)

2026/09/22 05:29

Created	Duration	User	Patch	Repo	Result
2026/09/22 06:37	19m	xiaopei01@kylinos.cn	patch	upstream	OK job log log

Created

Duration

User

Patch

Repo

Result

2026/09/22 06:37

19m

xiaopei01@kylinos.cn

patch

upstream

OK job log log

------------[ cut here ]------------ UBSAN: shift-out-of-bounds in drivers/comedi/drivers/dt2811.c:570:31 shift exponent -251 is negative CPU: 0 UID: 0 PID: 5925 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 ubsan_epilogue+0xa/0x30 lib/ubsan.c:233 __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 lib/ubsan.c:494 dt2811_attach.cold+0x19/0x1e drivers/comedi/drivers/dt2811.c:570 comedi_device_attach+0x40e/0x6b0 drivers/comedi/drivers.c:1101 do_devconfig_ioctl+0x1b3/0x6d0 drivers/comedi/comedi_fops.c:930 comedi_unlocked_ioctl+0x860/0x3310 drivers/comedi/comedi_fops.c:2302 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe50959e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffcc3e899c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe509825fa0 RCX: 00007fe50959e159 RDX: 0000200000000100 RSI: 0000000040946400 RDI: 0000000000000003 RBP: 00007fe50963506b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe509825fac R14: 00007fe509825fa0 R15: 00007fe509825fa0 </TASK> ---[ end trace ]---

Crashes (2):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2026/09/21 19:17	upstream	93f51579e7df	a8efa948	.config	console log	report	syz / log	C		[disk image (non-bootable)] [vmlinux] [kernel image]	ci-qemu-upstream	UBSAN: shift-out-of-bounds in dt2811_attach
2026/09/21 18:04	upstream	93f51579e7df	a8efa948	.config	console log	report			info	[disk image (non-bootable)] [vmlinux] [kernel image]	ci-qemu-upstream	UBSAN: shift-out-of-bounds in dt2811_attach

Crashes (2):

Assets (help?)