Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 72.956300][ C0] ================================================================================ [ 72.965940][ C0] UBSAN: shift-out-of-bounds in net/core/gen_estimator.c:83:38 [ 72.974057][ C0] shift exponent -1 is negative [ 72.978972][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-syzkaller #0 [ 72.986619][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.996690][ C0] Call Trace: [ 72.999980][ C0] [ 73.002823][ C0] dump_stack+0x107/0x163 [ 73.007263][ C0] ubsan_epilogue+0xb/0x5a [ 73.011838][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 73.018603][ C0] ? gen_kill_estimator+0x50/0x50 [ 73.023625][ C0] ? est_fetch_counters+0xc6/0x160 [ 73.028731][ C0] est_timer.cold+0xbb/0x12d [ 73.033504][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 73.038350][ C0] ? gen_kill_estimator+0x50/0x50 [ 73.043387][ C0] ? gen_kill_estimator+0x50/0x50 [ 73.048403][ C0] call_timer_fn+0x1a5/0x710 [ 73.053002][ C0] ? msleep_interruptible+0x170/0x170 [ 73.058366][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 73.063222][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.069463][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 73.074768][ C0] ? gen_kill_estimator+0x50/0x50 [ 73.079788][ C0] __run_timers.part.0+0x692/0xa80 [ 73.084924][ C0] ? call_timer_fn+0x710/0x710 [ 73.089700][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 73.094896][ C0] ? sched_clock+0x2a/0x40 [ 73.099317][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 73.104285][ C0] run_timer_softirq+0xb3/0x1d0 [ 73.109145][ C0] __do_softirq+0x2bc/0xa77 [ 73.113699][ C0] asm_call_irq_on_stack+0xf/0x20 [ 73.118747][ C0] [ 73.121685][ C0] do_softirq_own_stack+0xaa/0xd0 [ 73.126792][ C0] __irq_exit_rcu+0x17f/0x200 [ 73.131605][ C0] irq_exit_rcu+0x5/0x20 [ 73.135843][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 73.141573][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 73.147698][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 73.153529][ C0] Code: ed cb 57 f8 84 db 75 ac e8 64 c5 57 f8 e8 3f 9b 5d f8 e9 0c 00 00 00 e8 55 c5 57 f8 0f 00 2d 0e 06 b0 00 e8 49 c5 57 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 24 cd 57 f8 48 85 db [ 73.174902][ C0] RSP: 0018:ffffffff8b407d60 EFLAGS: 00000293 [ 73.180990][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 73.188977][ C0] RDX: ffffffff8b49bc00 RSI: ffffffff891a5837 RDI: 0000000000000000 [ 73.197238][ C0] RBP: ffff88801485f864 R08: 0000000000000001 R09: 0000000000000001 [ 73.205248][ C0] R10: ffffffff8177f398 R11: 0000000000000000 R12: 0000000000000001 [ 73.213219][ C0] R13: ffff88801485f800 R14: ffff88801485f864 R15: ffff888143cce004 [ 73.221201][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 73.226258][ C0] ? acpi_idle_do_entry+0x1c7/0x250 [ 73.231474][ C0] acpi_idle_enter+0x361/0x500 [ 73.236277][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 73.241414][ C0] cpuidle_enter+0x4a/0xa0 [ 73.246281][ C0] do_idle+0x3eb/0x590 [ 73.250360][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 73.255388][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 73.261648][ C0] cpu_startup_entry+0x14/0x20 [ 73.266420][ C0] start_kernel+0x496/0x4b7 [ 73.270927][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 73.276901][ C0] ================================================================================ [ 73.286235][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 73.292842][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-syzkaller #0 [ 73.300504][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.310584][ C0] Call Trace: [ 73.314067][ C0] [ 73.316921][ C0] dump_stack+0x107/0x163 [ 73.321251][ C0] panic+0x343/0x77f [ 73.325139][ C0] ? __warn_printk+0xf3/0xf3 [ 73.329727][ C0] ? ubsan_epilogue+0x3e/0x5a [ 73.334426][ C0] ubsan_epilogue+0x54/0x5a [ 73.338924][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 73.345712][ C0] ? gen_kill_estimator+0x50/0x50 [ 73.350759][ C0] ? est_fetch_counters+0xc6/0x160 [ 73.356061][ C0] est_timer.cold+0xbb/0x12d [ 73.360680][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 73.365529][ C0] ? gen_kill_estimator+0x50/0x50 [ 73.370589][ C0] ? gen_kill_estimator+0x50/0x50 [ 73.375616][ C0] call_timer_fn+0x1a5/0x710 [ 73.380212][ C0] ? msleep_interruptible+0x170/0x170 [ 73.385593][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 73.390443][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.396706][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 73.401930][ C0] ? gen_kill_estimator+0x50/0x50 [ 73.407002][ C0] __run_timers.part.0+0x692/0xa80 [ 73.412154][ C0] ? call_timer_fn+0x710/0x710 [ 73.416943][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 73.422137][ C0] ? sched_clock+0x2a/0x40 [ 73.426547][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 73.431394][ C0] run_timer_softirq+0xb3/0x1d0 [ 73.436718][ C0] __do_softirq+0x2bc/0xa77 [ 73.441248][ C0] asm_call_irq_on_stack+0xf/0x20 [ 73.446293][ C0] [ 73.449222][ C0] do_softirq_own_stack+0xaa/0xd0 [ 73.454269][ C0] __irq_exit_rcu+0x17f/0x200 [ 73.458944][ C0] irq_exit_rcu+0x5/0x20 [ 73.463201][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 73.468937][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 73.474932][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 73.480738][ C0] Code: ed cb 57 f8 84 db 75 ac e8 64 c5 57 f8 e8 3f 9b 5d f8 e9 0c 00 00 00 e8 55 c5 57 f8 0f 00 2d 0e 06 b0 00 e8 49 c5 57 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 24 cd 57 f8 48 85 db [ 73.501412][ C0] RSP: 0018:ffffffff8b407d60 EFLAGS: 00000293 [ 73.507481][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 73.515497][ C0] RDX: ffffffff8b49bc00 RSI: ffffffff891a5837 RDI: 0000000000000000 [ 73.523485][ C0] RBP: ffff88801485f864 R08: 0000000000000001 R09: 0000000000000001 [ 73.531539][ C0] R10: ffffffff8177f398 R11: 0000000000000000 R12: 0000000000000001 [ 73.539643][ C0] R13: ffff88801485f800 R14: ffff88801485f864 R15: ffff888143cce004 [ 73.547621][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 73.552659][ C0] ? acpi_idle_do_entry+0x1c7/0x250 [ 73.557887][ C0] acpi_idle_enter+0x361/0x500 [ 73.562672][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 73.567806][ C0] cpuidle_enter+0x4a/0xa0 [ 73.572226][ C0] do_idle+0x3eb/0x590 [ 73.576305][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 73.581323][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 73.588435][ C0] cpu_startup_entry+0x14/0x20 [ 73.593225][ C0] start_kernel+0x496/0x4b7 [ 73.597758][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 73.604499][ C0] Kernel Offset: disabled [ 73.608939][ C0] Rebooting in 86400 seconds..