syzbot


UBSAN: shift-out-of-bounds in pcl812_attach

Status: upstream: reported C repro on 2025/07/04 21:50
Subsystems: comedi
[Documentation on labels]
Reported-by: syzbot+32de323b0addb9e114ff@syzkaller.appspotmail.com
Fix commit: b14b076ce593 comedi: pcl812: Fix bit shift out of bounds
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-native-arm64-kvm ci-qemu2-riscv64]
First crash: 28d, last: 12d
Discussions (2)
Title Replies (including bot) Last reply
[PATCH] comedi: pcl812: Fix bit shift out of bounds 1 (1) 2025/07/07 13:34
[syzbot] [kernel?] UBSAN: shift-out-of-bounds in pcl812_attach 1 (3) 2025/07/05 00:16
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 UBSAN: shift-out-of-bounds in pcl812_attach origin:upstream -1 C 14 9d18h 20d 0/2 upstream: reported C repro on 2025/07/13 12:08
linux-6.1 UBSAN: shift-out-of-bounds in pcl812_attach origin:upstream -1 C 11 9d18h 20d 0/3 upstream: reported C repro on 2025/07/13 09:10
linux-5.15 UBSAN: shift-out-of-bounds in pcl812_attach origin:upstream -1 C 26 6h00m 21d 0/3 upstream: reported C repro on 2025/07/11 18:34
Last patch testing requests (1)
Created Duration User Patch Repo Result
2025/07/04 23:46 21m hdanton@sina.com patch upstream OK log

Sample crash report:
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10
shift exponent 8550 is too large for 32-bit type 'int'
CPU: 0 UID: 0 PID: 5465 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 ubsan_epilogue+0xa/0x40 lib/ubsan.c:233
 __ubsan_handle_shift_out_of_bounds+0x386/0x410 lib/ubsan.c:494
 pcl812_attach+0x1b9e/0x2300 drivers/comedi/drivers/pcl812.c:1152
 comedi_device_attach+0x51d/0x670 drivers/comedi/drivers.c:996
 do_devconfig_ioctl drivers/comedi/comedi_fops.c:855 [inline]
 comedi_unlocked_ioctl+0x686/0xf40 drivers/comedi/comedi_fops.c:2136
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fed6198e929
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd34893f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fed61bb5fa0 RCX: 00007fed6198e929
RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
RBP: 00007fed61a10b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fed61bb5fa0 R14: 00007fed61bb5fa0 R15: 0000000000000003
 </TASK>
---[ end trace ]---

Crashes (288):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/04 17:27 upstream 4c06e63b9203 d869b261 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/15 01:59 linux-next 0be23810e32e 03fcfc4b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/14 22:09 linux-next 0be23810e32e 03fcfc4b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/13 01:40 linux-next a62b7a37e6fc 3cda49cf .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/12 19:56 linux-next a62b7a37e6fc 3cda49cf .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/09 01:03 linux-next 58ba80c47402 abade794 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 15:02 upstream f4a40a4282f4 7117feec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 00:45 upstream e2291551827f 0d1223f1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 22:56 upstream e2291551827f 0d1223f1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 19:23 upstream e2291551827f 0d1223f1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 11:21 upstream e2291551827f 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 07:36 upstream e2291551827f 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 01:40 upstream 155a3c003e55 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/21 04:02 upstream 990b11a523a8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/21 01:59 upstream 990b11a523a8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 22:08 upstream f4a40a4282f4 7117feec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 20:13 upstream 990b11a523a8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 18:15 upstream 990b11a523a8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 13:54 upstream f4a40a4282f4 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 08:40 upstream bf61759db409 7117feec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 06:04 upstream f4a40a4282f4 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 02:58 upstream f4a40a4282f4 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 21:58 upstream 4871b7cb27f4 7117feec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 20:02 upstream 4871b7cb27f4 7117feec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 18:31 upstream 4871b7cb27f4 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 18:31 upstream 4871b7cb27f4 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 15:40 upstream 4871b7cb27f4 7117feec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 11:27 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 09:03 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 08:30 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 07:18 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 06:05 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 05:00 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 03:47 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 02:26 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/19 02:02 upstream c7de79e662b8 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 20:07 upstream 6832a9317eee f550e092 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 18:12 upstream 6832a9317eee f550e092 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 17:07 upstream 6832a9317eee 7117feec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 13:22 upstream 6832a9317eee f550e092 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 11:46 upstream 6832a9317eee f550e092 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 09:44 upstream 6832a9317eee 88248e14 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 07:55 upstream 6832a9317eee 88248e14 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 05:32 upstream 6832a9317eee 88248e14 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 05:23 upstream 6832a9317eee 88248e14 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 03:20 upstream 6832a9317eee 88248e14 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 02:20 upstream 6832a9317eee 88248e14 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 20:41 upstream e2291551827f 0ea0ca3f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 18:07 upstream e2291551827f 0ea0ca3f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 17:08 upstream e2291551827f 89164500 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 13:13 upstream e2291551827f 89164500 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 12:45 upstream f4a40a4282f4 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 09:57 upstream f4a40a4282f4 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/20 01:00 upstream 4871b7cb27f4 7117feec .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/18 21:26 upstream 6832a9317eee f550e092 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/17 04:05 linux-next e8352908bdcd 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce UBSAN: shift-out-of-bounds in pcl812_attach
2025/07/16 20:14 linux-next e8352908bdcd c118d736 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root UBSAN: shift-out-of-bounds in pcl812_attach
* Struck through repros no longer work on HEAD.