./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor580966676 <...> DUID 00:04:a3:03:08:15:93:78:e3:1f:4c:1c:fb:56:e6:f5:4b:05 forked to background, child pid 4654 [ 35.653866][ T4655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.680737][ T4655] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.252' (ECDSA) to the list of known hosts. execve("./syz-executor580966676", ["./syz-executor580966676"], 0x7ffdee4dc4f0 /* 10 vars */) = 0 brk(NULL) = 0x555556120000 brk(0x555556120c40) = 0x555556120c40 arch_prctl(ARCH_SET_FS, 0x555556120300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor580966676", 4096) = 27 brk(0x555556141c40) = 0x555556141c40 brk(0x555556142000) = 0x555556142000 mprotect(0x7fadea435000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 3 syzkaller login: [ 61.210902][ T5087] ================================================================================ [ 61.210922][ T5087] UBSAN: shift-out-of-bounds in drivers/video/fbdev/core/fbcon.c:2489:33 [ 61.210935][ T5087] shift exponent 38 is too large for 32-bit type 'int' [ 61.210945][ T5087] CPU: 0 PID: 5087 Comm: syz-executor580 Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 [ 61.210959][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 61.210967][ T5087] Call Trace: [ 61.210972][ T5087] [ 61.210977][ T5087] dump_stack_lvl+0xd1/0x138 [ 61.211005][ T5087] ubsan_epilogue+0xa/0x31 [ 61.211023][ T5087] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 61.211046][ T5087] ? lock_sync+0x190/0x190 [ 61.211061][ T5087] ? con_font_op+0x9ff/0xf10 [ 61.211077][ T5087] fbcon_set_font.cold+0x19/0x3c [ 61.211099][ T5087] ? con_font_op+0x9ff/0xf10 [ 61.211115][ T5087] ? fbcon_set_def_font+0x320/0x320 [ 61.211130][ T5087] con_font_op+0xb52/0xf10 [ 61.211146][ T5087] ? con_write+0x40/0x40 [ 61.211169][ T5087] ? __might_fault+0xa9/0x180 [ 61.211187][ T5087] ? lock_acquire+0x32/0xc0 [ 61.211200][ T5087] ? __might_fault+0xa9/0x180 [ 61.211226][ T5087] vt_ioctl+0x620/0x2df0 [ 61.211243][ T5087] ? vt_waitactive+0x350/0x350 [ 61.211262][ T5087] ? tomoyo_path_number_perm+0x166/0x570 [ 61.211289][ T5087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.211314][ T5087] ? vt_waitactive+0x350/0x350 [ 61.211329][ T5087] tty_ioctl+0x762/0x1670 [ 61.211351][ T5087] ? tty_release+0x11b0/0x11b0 [ 61.211374][ T5087] ? find_held_lock+0x2d/0x110 [ 61.211391][ T5087] ? ptrace_notify+0xfe/0x140 [ 61.211415][ T5087] ? bpf_lsm_file_ioctl+0x9/0x10 [ 61.211434][ T5087] ? tty_release+0x11b0/0x11b0 [ 61.211455][ T5087] __x64_sys_ioctl+0x197/0x210 [ 61.211473][ T5087] do_syscall_64+0x39/0xb0 [ 61.211493][ T5087] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.211511][ T5087] RIP: 0033:0x7fadea3c92c9 [ 61.211523][ T5087] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.211536][ T5087] RSP: 002b:00007ffeb231fd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.211551][ T5087] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadea3c92c9 [ 61.211560][ T5087] RDX: 0000000020000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 61.211569][ T5087] RBP: 00007fadea38d0b0 R08: 000000000000000d R09: 0000000000000000 [ 61.211577][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadea38d140 [ 61.211586][ T5087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.211606][ T5087] [ 61.211611][ T5087] ================================================================================ [ 61.211619][ T5087] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 61.211624][ T5087] CPU: 0 PID: 5087 Comm: syz-executor580 Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 [ 61.211637][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 61.211643][ T5087] Call Trace: [ 61.211646][ T5087] [ 61.211651][ T5087] dump_stack_lvl+0xd1/0x138 [ 61.211669][ T5087] panic+0x2cc/0x626 [ 61.211686][ T5087] ? panic_print_sys_info.part.0+0x110/0x110 [ 61.211706][ T5087] ? record_print_text.cold+0x16/0x16 [ 61.211724][ T5087] ? mark_held_locks+0x9f/0xe0 [ 61.211743][ T5087] check_panic_on_warn.cold+0x19/0x35 [ 61.211761][ T5087] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 61.211787][ T5087] ? lock_sync+0x190/0x190 [ 61.211800][ T5087] ? con_font_op+0x9ff/0xf10 [ 61.211814][ T5087] fbcon_set_font.cold+0x19/0x3c [ 61.211835][ T5087] ? con_font_op+0x9ff/0xf10 [ 61.211850][ T5087] ? fbcon_set_def_font+0x320/0x320 [ 61.211864][ T5087] con_font_op+0xb52/0xf10 [ 61.211880][ T5087] ? con_write+0x40/0x40 [ 61.211902][ T5087] ? __might_fault+0xa9/0x180 [ 61.211917][ T5087] ? lock_acquire+0x32/0xc0 [ 61.211930][ T5087] ? __might_fault+0xa9/0x180 [ 61.211955][ T5087] vt_ioctl+0x620/0x2df0 [ 61.211971][ T5087] ? vt_waitactive+0x350/0x350 [ 61.211988][ T5087] ? tomoyo_path_number_perm+0x166/0x570 [ 61.212015][ T5087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.212038][ T5087] ? vt_waitactive+0x350/0x350 [ 61.212052][ T5087] tty_ioctl+0x762/0x1670 [ 61.212072][ T5087] ? tty_release+0x11b0/0x11b0 [ 61.212095][ T5087] ? find_held_lock+0x2d/0x110 [ 61.212111][ T5087] ? ptrace_notify+0xfe/0x140 [ 61.212134][ T5087] ? bpf_lsm_file_ioctl+0x9/0x10 [ 61.212151][ T5087] ? tty_release+0x11b0/0x11b0 [ 61.212171][ T5087] __x64_sys_ioctl+0x197/0x210 [ 61.212188][ T5087] do_syscall_64+0x39/0xb0 [ 61.212207][ T5087] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.212223][ T5087] RIP: 0033:0x7fadea3c92c9 [ 61.212233][ T5087] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.212244][ T5087] RSP: 002b:00007ffeb231fd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.212257][ T5087] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadea3c92c9 [ 61.212265][ T5087] RDX: 0000000020000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 61.212273][ T5087] RBP: 00007fadea38d0b0 R08: 000000000000000d R09: 0000000000000000 [ 61.212281][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadea38d140 [ 61.212289][ T5087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.212308][ T5087] [ 61.212579][ T5087] Kernel Offset: disabled [ 61.742131][ T5087] Rebooting in 86400 seconds..