syzbot

 sign-in | mailing list | source | docs
🐞 Open [1472]
≡ Subsystems
🐞 Fixed [5846]
🐞 Invalid [14267]
⬇ Missing Backports [93]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

UBSAN: shift-out-of-bounds in mceusb_dev_printdata

Status: fixed on 2021/04/09 19:46
Subsystems: media usb
[Documentation on labels]
Reported-by: syzbot+6d31bf169a8265204b8d@syzkaller.appspotmail.com
Fix commit: 9dec0f48a75e media: mceusb: sanity check for prescaler value
First crash: 1441d, last: 1373d
Cause bisection: failed (error log, bisect log)
  
▶ ▼ Discussions (12)
Title Replies (including bot) Last reply
[PATCH 5.10 000/102] 5.10.21-rc1 review 119 (119) 2021/03/08 13:21
[PATCH 4.19 00/52] 4.19.179-rc1 review 57 (57) 2021/03/07 22:57
[PATCH 5.11 000/104] 5.11.4-rc1 review 119 (119) 2021/03/07 11:37
[PATCH AUTOSEL 5.11 01/67] ath10k: prevent deinitializing NAPI twice 80 (80) 2021/03/06 17:52
[PATCH 5.4 00/72] 5.4.103-rc1 review 80 (80) 2021/03/06 16:33
[PATCH 4.14 00/39] 4.14.224-rc1 review 42 (42) 2021/03/06 16:30
[PATCH AUTOSEL 5.10 01/56] EDAC/amd64: Do not load on family 0x15, model 0x13 59 (59) 2021/03/05 12:40
[PATCH AUTOSEL 4.14 01/16] staging: fwserial: Fix error handling in fwserial_create 17 (17) 2021/02/24 13:22
[PATCH AUTOSEL 4.19 01/26] staging: fwserial: Fix error handling in fwserial_create 27 (27) 2021/02/24 13:21
[PATCH AUTOSEL 5.4 01/40] staging: fwserial: Fix error handling in fwserial_create 41 (41) 2021/02/24 13:20
[PATCH] media: mceusb: sanity check for prescaler value 1 (1) 2021/01/19 14:02
UBSAN: shift-out-of-bounds in mceusb_dev_printdata 0 (1) 2020/12/16 16:14
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2021/01/08 14:02 8m anant.thazhemadam@gmail.com upstream report log

Sample crash report:
================================================================================
UBSAN: shift-out-of-bounds in drivers/media/rc/mceusb.c:704:13
shift exponent 230 is too large for 32-bit type 'unsigned int'
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.11.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x107/0x163 lib/dump_stack.c:120
 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148
 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:395
 mceusb_dev_printdata.cold+0x19/0x1e drivers/media/rc/mceusb.c:704
 mceusb_process_ir_data drivers/media/rc/mceusb.c:1275 [inline]
 mceusb_dev_recv+0x3cb/0x18b0 drivers/media/rc/mceusb.c:1376
 __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x367/0x410 drivers/usb/core/hcd.c:1726
 dummy_timer+0x11f4/0x32a0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1417
 expire_timers kernel/time/timer.c:1462 [inline]
 __run_timers.part.0+0x67c/0xa50 kernel/time/timer.c:1731
 __run_timers kernel/time/timer.c:1712 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1744
 __do_softirq+0x2bc/0xa29 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu kernel/softirq.c:420 [inline]
 irq_exit_rcu+0x134/0x200 kernel/softirq.c:432
 sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1096
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:79 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:169 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]
RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 drivers/acpi/processor_idle.c:516
Code: 0d a8 76 f8 84 db 75 ac e8 84 a1 76 f8 e8 ff 73 7c f8 e9 0c 00 00 00 e8 75 a1 76 f8 0f 00 2d 9e be ad 00 e8 69 a1 76 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 44 a9 76 f8 48 85 db
RSP: 0018:ffffc90000d47d18 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888010da3780 RSI: ffffffff88fc1fe7 RDI: 0000000000000000
RBP: ffff888013b83864 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff81789408 R11: 0000000000000000 R12: 0000000000000001
R13: ffff888013b83800 R14: ffff888013b83864 R15: ffff888143651804
 acpi_idle_enter+0x361/0x500 drivers/acpi/processor_idle.c:647
 cpuidle_enter_state+0x1b1/0xc80 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x4a/0xa0 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x3e1/0x590 kernel/sched/idle.c:299
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:396
 start_secondary+0x274/0x350 arch/x86/kernel/smpboot.c:272
 secondary_startup_64_no_verify+0xb0/0xbb
================================================================================

Crashes (331):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/01/26 23:21 upstream 13391c60da33 55a7d4df .config console log report syz C ci-upstream-kasan-gce UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2020/12/16 11:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5e60366d56c6 649595c6 .config console log report syz C ci2-upstream-usb
2021/02/02 12:32 upstream 88bb507a74ea 19e09687 .config console log report info ci-upstream-kasan-gce UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/01/31 19:22 upstream 6642d600b541 fc9fd31e .config console log report info ci-upstream-kasan-gce-selinux-root UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/22 04:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 55f62bc87347 a659b3f1 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/22 03:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 55f62bc87347 a659b3f1 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/22 00:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 55f62bc87347 a659b3f1 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/21 22:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 55f62bc87347 a659b3f1 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/21 19:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 55f62bc87347 a659b3f1 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/21 16:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 55f62bc87347 3e5ed8b4 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/21 07:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 3e5ed8b4 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/21 04:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 3e5ed8b4 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/21 02:57 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 3e5ed8b4 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/21 02:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 3e5ed8b4 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/20 18:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 3e5ed8b4 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/20 13:38 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 3e5ed8b4 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/20 08:02 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/20 06:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/20 05:16 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/20 02:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/20 01:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/19 23:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/19 22:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/19 20:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/19 17:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 f689d40a .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/19 03:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/19 01:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/18 23:12 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/18 17:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/18 14:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/18 13:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/18 10:37 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/18 06:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/18 03:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/18 01:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/17 23:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/17 21:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/17 20:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 14052202 .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/17 18:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 052f8d9f .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/17 09:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 052f8d9f .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/17 08:04 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 052f8d9f .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/17 02:32 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 98682e5e .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/17 01:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 98682e5e .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/16 23:04 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 98682e5e .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/16 21:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 98682e5e .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/02/16 20:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b5a12546e779 98682e5e .config console log report info ci2-upstream-usb UBSAN: shift-out-of-bounds in mceusb_dev_printdata
2021/01/11 08:32 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 841081d89d5a 2c1f2513 .config console log report info ci2-upstream-usb
2020/12/16 10:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5e60366d56c6 649595c6 .config console log report info ci2-upstream-usb
* Struck through repros no longer work on HEAD.