Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 78.530344][ T8421] ================================================================================ [ 78.540662][ T8421] UBSAN: shift-out-of-bounds in drivers/usb/usbip/vhci_hcd.c:605:42 [ 78.548771][ T8421] shift exponent 768 is too large for 32-bit type 'int' [ 78.556288][ T8421] CPU: 0 PID: 8421 Comm: syz-executor852 Not tainted 5.12.0-rc4-syzkaller #0 [ 78.565731][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.577115][ T8421] Call Trace: [ 78.580702][ T8421] dump_stack+0x141/0x1d7 [ 78.585543][ T8421] ubsan_epilogue+0xb/0x5a [ 78.590152][ T8421] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 78.597037][ T8421] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 78.602655][ T8421] vhci_hub_control.cold+0x20b/0x5f0 [ 78.608417][ T8421] ? vhci_hcd_probe+0x3a0/0x3a0 [ 78.613412][ T8421] ? rcu_read_lock_sched_held+0x3a/0x70 [ 78.619159][ T8421] usb_hcd_submit_urb+0xcaf/0x22d0 [ 78.624370][ T8421] ? vhci_hcd_probe+0x3a0/0x3a0 [ 78.629332][ T8421] ? usb_add_hcd+0x2c0/0x2c0 [ 78.633932][ T8421] ? kasan_save_stack+0x32/0x40 [ 78.639131][ T8421] ? kasan_save_stack+0x1b/0x40 [ 78.644250][ T8421] ? __kasan_kmalloc+0x99/0xc0 [ 78.649122][ T8421] ? usb_alloc_urb+0x65/0xb0 [ 78.654098][ T8421] ? usb_control_msg+0x1c9/0x4a0 [ 78.659275][ T8421] ? do_proc_control+0x4af/0x980 [ 78.664501][ T8421] ? usbdev_ioctl+0x10e2/0x36c0 [ 78.669597][ T8421] ? __x64_sys_ioctl+0x193/0x200 [ 78.674551][ T8421] ? do_syscall_64+0x2d/0x70 [ 78.679431][ T8421] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.685583][ T8421] ? __x64_sys_ioctl+0x193/0x200 [ 78.690521][ T8421] ? do_syscall_64+0x2d/0x70 [ 78.695155][ T8421] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.701856][ T8421] usb_submit_urb+0x6e4/0x1540 [ 78.706643][ T8421] usb_start_wait_urb+0x101/0x4c0 [ 78.711734][ T8421] ? usb_api_blocking_completion+0xa0/0xa0 [ 78.717666][ T8421] ? memset+0x20/0x40 [ 78.721675][ T8421] usb_control_msg+0x31c/0x4a0 [ 78.726672][ T8421] ? usb_start_wait_urb+0x4c0/0x4c0 [ 78.732000][ T8421] ? wait_for_completion_io+0x270/0x270 [ 78.737660][ T8421] do_proc_control+0x4af/0x980 [ 78.742624][ T8421] usbdev_ioctl+0x10e2/0x36c0 [ 78.747319][ T8421] ? do_proc_bulk+0x750/0x750 [ 78.752252][ T8421] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 78.758269][ T8421] ? do_vfs_ioctl+0x27d/0x1090 [ 78.763413][ T8421] ? generic_block_fiemap+0x60/0x60 [ 78.768810][ T8421] ? find_held_lock+0x2d/0x110 [ 78.773757][ T8421] ? binder_ioctl.cold+0xc78/0xf80 [ 78.779062][ T8421] ? lock_downgrade+0x6e0/0x6e0 [ 78.784050][ T8421] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 78.790963][ T8421] ? do_proc_bulk+0x750/0x750 [ 78.796011][ T8421] __x64_sys_ioctl+0x193/0x200 [ 78.801143][ T8421] do_syscall_64+0x2d/0x70 [ 78.805611][ T8421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.812014][ T8421] RIP: 0033:0x443499 [ 78.815929][ T8421] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.836315][ T8421] RSP: 002b:00007ffd96535f58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.845178][ T8421] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 0000000000443499 [ 78.853437][ T8421] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 78.861714][ T8421] RBP: 0000000000403040 R08: 0000000000000000 R09: 00000000004004a0 [ 78.869872][ T8421] R10: 000000000000000f R11: 0000000000000246 R12: 00000000004030d0 [ 78.878465][ T8421] R13: 0000000000000000 R14: 00000000004b1018 R15: 00000000004004a0 [ 78.886723][ T8421] ================================================================================ [ 78.896461][ T8421] Kernel panic - not syncing: panic_on_warn set ... [ 78.903169][ T8421] CPU: 0 PID: 8421 Comm: syz-executor852 Not tainted 5.12.0-rc4-syzkaller #0 [ 78.911935][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.922003][ T8421] Call Trace: [ 78.925371][ T8421] dump_stack+0x141/0x1d7 [ 78.929746][ T8421] panic+0x306/0x73d [ 78.933738][ T8421] ? __warn_printk+0xf3/0xf3 [ 78.938430][ T8421] ? ubsan_epilogue+0x3e/0x5a [ 78.943483][ T8421] ubsan_epilogue+0x54/0x5a [ 78.948029][ T8421] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 78.954985][ T8421] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 78.960464][ T8421] vhci_hub_control.cold+0x20b/0x5f0 [ 78.965765][ T8421] ? vhci_hcd_probe+0x3a0/0x3a0 [ 78.970636][ T8421] ? rcu_read_lock_sched_held+0x3a/0x70 [ 78.976399][ T8421] usb_hcd_submit_urb+0xcaf/0x22d0 [ 78.982167][ T8421] ? vhci_hcd_probe+0x3a0/0x3a0 [ 78.987619][ T8421] ? usb_add_hcd+0x2c0/0x2c0 [ 78.992329][ T8421] ? kasan_save_stack+0x32/0x40 [ 78.997452][ T8421] ? kasan_save_stack+0x1b/0x40 [ 79.002335][ T8421] ? __kasan_kmalloc+0x99/0xc0 [ 79.007352][ T8421] ? usb_alloc_urb+0x65/0xb0 [ 79.012159][ T8421] ? usb_control_msg+0x1c9/0x4a0 [ 79.017107][ T8421] ? do_proc_control+0x4af/0x980 [ 79.022047][ T8421] ? usbdev_ioctl+0x10e2/0x36c0 [ 79.027004][ T8421] ? __x64_sys_ioctl+0x193/0x200 [ 79.031942][ T8421] ? do_syscall_64+0x2d/0x70 [ 79.036721][ T8421] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.043250][ T8421] ? __x64_sys_ioctl+0x193/0x200 [ 79.048369][ T8421] ? do_syscall_64+0x2d/0x70 [ 79.053393][ T8421] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.059556][ T8421] usb_submit_urb+0x6e4/0x1540 [ 79.064445][ T8421] usb_start_wait_urb+0x101/0x4c0 [ 79.069790][ T8421] ? usb_api_blocking_completion+0xa0/0xa0 [ 79.075627][ T8421] ? memset+0x20/0x40 [ 79.079636][ T8421] usb_control_msg+0x31c/0x4a0 [ 79.084552][ T8421] ? usb_start_wait_urb+0x4c0/0x4c0 [ 79.089866][ T8421] ? wait_for_completion_io+0x270/0x270 [ 79.095419][ T8421] do_proc_control+0x4af/0x980 [ 79.100195][ T8421] usbdev_ioctl+0x10e2/0x36c0 [ 79.105089][ T8421] ? do_proc_bulk+0x750/0x750 [ 79.109950][ T8421] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 79.115850][ T8421] ? do_vfs_ioctl+0x27d/0x1090 [ 79.120622][ T8421] ? generic_block_fiemap+0x60/0x60 [ 79.126087][ T8421] ? find_held_lock+0x2d/0x110 [ 79.131014][ T8421] ? binder_ioctl.cold+0xc78/0xf80 [ 79.136427][ T8421] ? lock_downgrade+0x6e0/0x6e0 [ 79.141299][ T8421] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.147555][ T8421] ? do_proc_bulk+0x750/0x750 [ 79.152374][ T8421] __x64_sys_ioctl+0x193/0x200 [ 79.157331][ T8421] do_syscall_64+0x2d/0x70 [ 79.162066][ T8421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.168456][ T8421] RIP: 0033:0x443499 [ 79.172594][ T8421] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.192378][ T8421] RSP: 002b:00007ffd96535f58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.201068][ T8421] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 0000000000443499 [ 79.209136][ T8421] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 79.217312][ T8421] RBP: 0000000000403040 R08: 0000000000000000 R09: 00000000004004a0 [ 79.225479][ T8421] R10: 000000000000000f R11: 0000000000000246 R12: 00000000004030d0 [ 79.233453][ T8421] R13: 0000000000000000 R14: 00000000004b1018 R15: 00000000004004a0 [ 79.243174][ T8421] Kernel Offset: disabled [ 79.247693][ T8421] Rebooting in 86400 seconds..