Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. executing program [ 86.514852][ T5832] ------------[ cut here ]------------ [ 86.520587][ T5832] UBSAN: shift-out-of-bounds in drivers/scsi/sg.c:1897:13 [ 86.527809][ T5832] shift exponent 64 is too large for 32-bit type 'int' [ 86.535097][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor361 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 86.535134][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 86.535156][ T5832] Call Trace: [ 86.535167][ T5832] [ 86.535184][ T5832] dump_stack_lvl+0x16c/0x1f0 [ 86.535241][ T5832] __ubsan_handle_shift_out_of_bounds+0x24f/0x3f0 [ 86.535295][ T5832] sg_build_indirect.cold+0x1b/0x20 [ 86.535347][ T5832] ? mark_held_locks+0x9f/0xe0 [ 86.535394][ T5832] sg_build_reserve+0xc4/0x180 [ 86.535432][ T5832] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.535470][ T5832] sg_open+0xc37/0x1910 [ 86.535521][ T5832] ? __pfx_sg_open+0x10/0x10 [ 86.535561][ T5832] ? __pfx_lock_release+0x10/0x10 [ 86.535604][ T5832] ? do_raw_spin_lock+0x12d/0x2c0 [ 86.535657][ T5832] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.535709][ T5832] ? lock_acquire+0x2f/0xb0 [ 86.535751][ T5832] ? chrdev_open+0x36b/0x6a0 [ 86.535805][ T5832] ? __pfx_sg_open+0x10/0x10 [ 86.535846][ T5832] chrdev_open+0x237/0x6a0 [ 86.535897][ T5832] ? __pfx_chrdev_open+0x10/0x10 [ 86.535946][ T5832] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 86.535992][ T5832] do_dentry_open+0x735/0x1c40 [ 86.536036][ T5832] ? __pfx_chrdev_open+0x10/0x10 [ 86.536096][ T5832] ? inode_permission+0xdd/0x5f0 [ 86.536135][ T5832] vfs_open+0x82/0x3f0 [ 86.536164][ T5832] ? may_open+0x1f2/0x400 [ 86.536204][ T5832] path_openat+0x1e88/0x2d80 [ 86.536266][ T5832] ? __pfx_path_openat+0x10/0x10 [ 86.536313][ T5832] ? __pfx___lock_acquire+0x10/0x10 [ 86.536356][ T5832] ? lock_acquire.part.0+0x11b/0x380 [ 86.536401][ T5832] ? find_held_lock+0x2d/0x110 [ 86.536440][ T5832] do_filp_open+0x20c/0x470 [ 86.536486][ T5832] ? __pfx_do_filp_open+0x10/0x10 [ 86.536529][ T5832] ? find_held_lock+0x2d/0x110 [ 86.536585][ T5832] ? alloc_fd+0x41f/0x760 [ 86.536641][ T5832] do_sys_openat2+0x17a/0x1e0 [ 86.536674][ T5832] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.536715][ T5832] ? __pfx_lock_release+0x10/0x10 [ 86.536765][ T5832] __x64_sys_openat+0x175/0x210 [ 86.536800][ T5832] ? __pfx___x64_sys_openat+0x10/0x10 [ 86.536833][ T5832] ? ksys_write+0x1ba/0x250 [ 86.536892][ T5832] do_syscall_64+0xcd/0x250 [ 86.536933][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.536979][ T5832] RIP: 0033:0x7f1dc41ca3e9 [ 86.537016][ T5832] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.537051][ T5832] RSP: 002b:00007ffeaa93f3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.537086][ T5832] RAX: ffffffffffffffda RBX: 00007ffeaa93f5a8 RCX: 00007f1dc41ca3e9 [ 86.537107][ T5832] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 86.537128][ T5832] RBP: 00007f1dc423d610 R08: 00007ffeaa93f5a8 R09: 00007ffeaa93f5a8 [ 86.537149][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.537167][ T5832] R13: 00007ffeaa93f598 R14: 0000000000000001 R15: 0000000000000001 [ 86.537207][ T5832] [ 86.537218][ T5832] ---[ end trace ]--- [ 86.837162][ T5832] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 86.844367][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor361 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 86.855493][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 86.865563][ T5832] Call Trace: [ 86.868851][ T5832] [ 86.871812][ T5832] dump_stack_lvl+0x3d/0x1f0 [ 86.876425][ T5832] panic+0x71d/0x800 [ 86.880352][ T5832] ? __pfx_panic+0x10/0x10 [ 86.884803][ T5832] ? __pfx__printk+0x10/0x10 [ 86.889419][ T5832] ? check_panic_on_warn+0x1f/0xb0 [ 86.894556][ T5832] check_panic_on_warn+0xab/0xb0 [ 86.899513][ T5832] __ubsan_handle_shift_out_of_bounds+0x276/0x3f0 [ 86.905955][ T5832] sg_build_indirect.cold+0x1b/0x20 [ 86.911182][ T5832] ? mark_held_locks+0x9f/0xe0 [ 86.915968][ T5832] sg_build_reserve+0xc4/0x180 [ 86.920752][ T5832] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.926122][ T5832] sg_open+0xc37/0x1910 [ 86.930333][ T5832] ? __pfx_sg_open+0x10/0x10 [ 86.934968][ T5832] ? __pfx_lock_release+0x10/0x10 [ 86.940031][ T5832] ? do_raw_spin_lock+0x12d/0x2c0 [ 86.945095][ T5832] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.950521][ T5832] ? lock_acquire+0x2f/0xb0 [ 86.955054][ T5832] ? chrdev_open+0x36b/0x6a0 [ 86.959719][ T5832] ? __pfx_sg_open+0x10/0x10 [ 86.964365][ T5832] chrdev_open+0x237/0x6a0 [ 86.968907][ T5832] ? __pfx_chrdev_open+0x10/0x10 [ 86.973883][ T5832] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 86.980689][ T5832] do_dentry_open+0x735/0x1c40 [ 86.985490][ T5832] ? __pfx_chrdev_open+0x10/0x10 [ 86.990472][ T5832] ? inode_permission+0xdd/0x5f0 [ 86.995443][ T5832] vfs_open+0x82/0x3f0 [ 86.999524][ T5832] ? may_open+0x1f2/0x400 [ 87.003871][ T5832] path_openat+0x1e88/0x2d80 [ 87.008520][ T5832] ? __pfx_path_openat+0x10/0x10 [ 87.013498][ T5832] ? __pfx___lock_acquire+0x10/0x10 [ 87.018724][ T5832] ? lock_acquire.part.0+0x11b/0x380 [ 87.024036][ T5832] ? find_held_lock+0x2d/0x110 [ 87.028888][ T5832] do_filp_open+0x20c/0x470 [ 87.033458][ T5832] ? __pfx_do_filp_open+0x10/0x10 [ 87.038526][ T5832] ? find_held_lock+0x2d/0x110 [ 87.043326][ T5832] ? alloc_fd+0x41f/0x760 [ 87.047690][ T5832] do_sys_openat2+0x17a/0x1e0 [ 87.052409][ T5832] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.057676][ T5832] ? __pfx_lock_release+0x10/0x10 [ 87.062753][ T5832] __x64_sys_openat+0x175/0x210 [ 87.067676][ T5832] ? __pfx___x64_sys_openat+0x10/0x10 [ 87.073073][ T5832] ? ksys_write+0x1ba/0x250 [ 87.077614][ T5832] do_syscall_64+0xcd/0x250 [ 87.082179][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.088234][ T5832] RIP: 0033:0x7f1dc41ca3e9 [ 87.092704][ T5832] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.112347][ T5832] RSP: 002b:00007ffeaa93f3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.120806][ T5832] RAX: ffffffffffffffda RBX: 00007ffeaa93f5a8 RCX: 00007f1dc41ca3e9 [ 87.128786][ T5832] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 87.136782][ T5832] RBP: 00007f1dc423d610 R08: 00007ffeaa93f5a8 R09: 00007ffeaa93f5a8 [ 87.144782][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.152775][ T5832] R13: 00007ffeaa93f598 R14: 0000000000000001 R15: 0000000000000001 [ 87.160775][ T5832] [ 87.164147][ T5832] Kernel Offset: disabled [ 87.168522][ T5832] Rebooting in 86400 seconds..