[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.145' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 71.477618][ T8482] ================================================================================ [ 71.487044][ T8482] UBSAN: shift-out-of-bounds in drivers/usb/usbip/vhci_hcd.c:399:41 [ 71.495029][ T8482] shift exponent 768 is too large for 32-bit type 'int' [ 71.501974][ T8482] CPU: 1 PID: 8482 Comm: syz-executor092 Not tainted 5.10.0-syzkaller #0 [ 71.510459][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.520507][ T8482] Call Trace: [ 71.523783][ T8482] dump_stack+0x107/0x163 [ 71.528139][ T8482] ubsan_epilogue+0xb/0x5a [ 71.532640][ T8482] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 71.539437][ T8482] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 71.544828][ T8482] vhci_hub_control.cold+0x205/0x246 [ 71.550113][ T8482] ? vhci_hcd_probe+0x3a0/0x3a0 [ 71.554969][ T8482] ? kasan_unpoison_shadow+0x33/0x40 [ 71.560266][ T8482] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 71.566072][ T8482] usb_hcd_submit_urb+0xcaa/0x22d0 [ 71.571190][ T8482] ? vhci_hcd_probe+0x3a0/0x3a0 [ 71.576739][ T8482] ? usb_add_hcd+0x2c0/0x2c0 [ 71.581326][ T8482] ? kasan_save_stack+0x32/0x40 [ 71.586170][ T8482] ? kasan_save_stack+0x1b/0x40 [ 71.591009][ T8482] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 71.596809][ T8482] ? usb_alloc_urb+0x65/0xb0 [ 71.601497][ T8482] ? usb_control_msg+0x1c9/0x4a0 [ 71.606434][ T8482] ? do_proc_control+0x4cb/0x9c0 [ 71.611366][ T8482] ? usbdev_ioctl+0x12c1/0x3b20 [ 71.616385][ T8482] ? __x64_sys_ioctl+0x193/0x200 [ 71.621326][ T8482] ? do_syscall_64+0x2d/0x70 [ 71.625916][ T8482] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.632173][ T8482] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 71.638146][ T8482] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.644300][ T8482] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 71.650289][ T8482] usb_submit_urb+0x6e4/0x1560 [ 71.655067][ T8482] ? lockdep_init_map_waits+0x190/0x720 [ 71.660615][ T8482] usb_start_wait_urb+0x101/0x4c0 [ 71.665647][ T8482] ? usb_api_blocking_completion+0xa0/0xa0 [ 71.671456][ T8482] ? kasan_unpoison_shadow+0x33/0x40 [ 71.676748][ T8482] ? memset+0x20/0x40 [ 71.680736][ T8482] usb_control_msg+0x31c/0x4a0 [ 71.685495][ T8482] ? usb_start_wait_urb+0x4c0/0x4c0 [ 71.690787][ T8482] ? wait_for_completion_io+0x260/0x260 [ 71.696336][ T8482] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 71.702572][ T8482] ? snoop_urb+0x64/0x130 [ 71.706911][ T8482] do_proc_control+0x4cb/0x9c0 [ 71.711666][ T8482] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.717904][ T8482] usbdev_ioctl+0x12c1/0x3b20 [ 71.722580][ T8482] ? processcompl_compat+0x680/0x680 [ 71.727861][ T8482] ? putname+0xe1/0x120 [ 71.732024][ T8482] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 71.737906][ T8482] ? do_vfs_ioctl+0x27d/0x1090 [ 71.742676][ T8482] ? generic_block_fiemap+0x60/0x60 [ 71.747898][ T8482] ? build_open_flags+0x680/0x680 [ 71.752942][ T8482] ? __x64_sys_open+0x119/0x1c0 [ 71.757825][ T8482] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.764933][ T8482] ? processcompl_compat+0x680/0x680 [ 71.771027][ T8482] __x64_sys_ioctl+0x193/0x200 [ 71.776102][ T8482] do_syscall_64+0x2d/0x70 [ 71.780802][ T8482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.786702][ T8482] RIP: 0033:0x443f39 [ 71.790664][ T8482] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.811323][ T8482] RSP: 002b:00007ffd18a092c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.819731][ T8482] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443f39 [ 71.827696][ T8482] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 71.835663][ T8482] RBP: 00000000006ce018 R08: 0000000000000000 R09: 00000000004002e0 [ 71.843715][ T8482] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401bc0 [ 71.851822][ T8482] R13: 0000000000401c50 R14: 0000000000000000 R15: 0000000000000000 [ 71.859813][ T8482] ================================================================================ [ 71.869091][ T8482] Kernel panic - not syncing: panic_on_warn set ... [ 71.875686][ T8482] CPU: 1 PID: 8482 Comm: syz-executor092 Not tainted 5.10.0-syzkaller #0 [ 71.884187][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.894504][ T8482] Call Trace: [ 71.897797][ T8482] dump_stack+0x107/0x163 [ 71.902139][ T8482] panic+0x343/0x77f [ 71.906044][ T8482] ? __warn_printk+0xf3/0xf3 [ 71.910652][ T8482] ? ubsan_epilogue+0x3e/0x5a [ 71.915325][ T8482] ubsan_epilogue+0x54/0x5a [ 71.919818][ T8482] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 71.926863][ T8482] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 71.933302][ T8482] vhci_hub_control.cold+0x205/0x246 [ 71.938608][ T8482] ? vhci_hcd_probe+0x3a0/0x3a0 [ 71.943616][ T8482] ? kasan_unpoison_shadow+0x33/0x40 [ 71.948948][ T8482] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 71.954756][ T8482] usb_hcd_submit_urb+0xcaa/0x22d0 [ 71.959884][ T8482] ? vhci_hcd_probe+0x3a0/0x3a0 [ 71.964740][ T8482] ? usb_add_hcd+0x2c0/0x2c0 [ 71.969342][ T8482] ? kasan_save_stack+0x32/0x40 [ 71.974182][ T8482] ? kasan_save_stack+0x1b/0x40 [ 71.979043][ T8482] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 71.984852][ T8482] ? usb_alloc_urb+0x65/0xb0 [ 71.989437][ T8482] ? usb_control_msg+0x1c9/0x4a0 [ 71.994492][ T8482] ? do_proc_control+0x4cb/0x9c0 [ 71.999441][ T8482] ? usbdev_ioctl+0x12c1/0x3b20 [ 72.004282][ T8482] ? __x64_sys_ioctl+0x193/0x200 [ 72.009223][ T8482] ? do_syscall_64+0x2d/0x70 [ 72.013903][ T8482] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.020686][ T8482] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 72.027379][ T8482] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.033645][ T8482] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 72.039630][ T8482] usb_submit_urb+0x6e4/0x1560 [ 72.044391][ T8482] ? lockdep_init_map_waits+0x190/0x720 [ 72.049977][ T8482] usb_start_wait_urb+0x101/0x4c0 [ 72.055020][ T8482] ? usb_api_blocking_completion+0xa0/0xa0 [ 72.060840][ T8482] ? kasan_unpoison_shadow+0x33/0x40 [ 72.066240][ T8482] ? memset+0x20/0x40 [ 72.070218][ T8482] usb_control_msg+0x31c/0x4a0 [ 72.074992][ T8482] ? usb_start_wait_urb+0x4c0/0x4c0 [ 72.080470][ T8482] ? wait_for_completion_io+0x260/0x260 [ 72.086560][ T8482] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 72.092797][ T8482] ? snoop_urb+0x64/0x130 [ 72.097142][ T8482] do_proc_control+0x4cb/0x9c0 [ 72.101913][ T8482] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.108150][ T8482] usbdev_ioctl+0x12c1/0x3b20 [ 72.112839][ T8482] ? processcompl_compat+0x680/0x680 [ 72.118120][ T8482] ? putname+0xe1/0x120 [ 72.122279][ T8482] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 72.128281][ T8482] ? do_vfs_ioctl+0x27d/0x1090 [ 72.133057][ T8482] ? generic_block_fiemap+0x60/0x60 [ 72.138421][ T8482] ? build_open_flags+0x680/0x680 [ 72.143462][ T8482] ? __x64_sys_open+0x119/0x1c0 [ 72.148324][ T8482] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.154569][ T8482] ? processcompl_compat+0x680/0x680 [ 72.159862][ T8482] __x64_sys_ioctl+0x193/0x200 [ 72.164621][ T8482] do_syscall_64+0x2d/0x70 [ 72.169198][ T8482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.175081][ T8482] RIP: 0033:0x443f39 [ 72.178963][ T8482] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 72.198562][ T8482] RSP: 002b:00007ffd18a092c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.206982][ T8482] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443f39 [ 72.214942][ T8482] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 72.222905][ T8482] RBP: 00000000006ce018 R08: 0000000000000000 R09: 00000000004002e0 [ 72.231049][ T8482] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401bc0 [ 72.239028][ T8482] R13: 0000000000401c50 R14: 0000000000000000 R15: 0000000000000000 [ 72.247877][ T8482] Kernel Offset: disabled [ 72.252308][ T8482] Rebooting in 86400 seconds..