program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='e100\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/e100/bind\x00', 0x1, 0x0) syz_clone(0x0, &(0x7f0000002000), 0x0, &(0x7f0000003000), &(0x7f0000004000), &(0x7f0000005000)) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) write(r3, &(0x7f0000000240)='0000:00:02.0\x00', 0xc) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4) [ 87.249357][ T9] cfg80211: failed to load regulatory.db [ 87.391000][ T5322] e1000e 0000:00:02.0 eth1: removed PHC [ 87.447716][ T5282] Bluetooth: hci0: command tx timeout [ 87.613072][ T5322] e1000e 0000:00:02.0 eth1: Hardware Error [ 89.525508][ T5282] Bluetooth: hci0: command tx timeout [ 91.605709][ T5282] Bluetooth: hci0: command tx timeout [ 91.742056][ T5322] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 91.882546][ T5323] e100 0000:00:02.0: enabling device (0000 -> 0003) [ 91.966015][ T5323] ------------[ cut here ]------------ [ 91.971504][ T5323] UBSAN: shift-out-of-bounds in drivers/net/ethernet/intel/e100.c:768:21 [ 91.985390][ T5323] shift exponent 65529 is too large for 32-bit type 'int' [ 91.997494][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 91.997517][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.997525][ T5323] Call Trace: [ 91.997531][ T5323] [ 91.997537][ T5323] dump_stack_lvl+0xe8/0x150 [ 91.997612][ T5323] ubsan_epilogue+0xa/0x30 [ 91.997628][ T5323] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 91.997692][ T5323] ? ioread8+0x1c/0x80 [ 91.997726][ T5323] e100_eeprom_load+0x45f/0x530 [ 91.997743][ T5323] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 91.997798][ T5323] e100_probe+0x90d/0x1360 [ 91.997818][ T5323] pci_device_probe+0x431/0xc90 [ 91.997837][ T5323] ? up_write+0x19f/0x4a0 [ 91.997852][ T5323] ? __pfx_pci_device_probe+0x10/0x10 [ 91.997869][ T5323] ? kernfs_put+0x7b9/0x820 [ 91.997887][ T5323] ? kernfs_create_link+0x187/0x200 [ 91.997903][ T5323] ? sysfs_do_create_link_sd+0xe0/0x110 [ 91.997921][ T5323] ? driver_sysfs_add+0x1fe/0x210 [ 91.997938][ T5323] ? __pfx_pci_device_probe+0x10/0x10 [ 91.997951][ T5323] really_probe+0x254/0xae0 [ 91.997968][ T5323] __driver_probe_device+0x1e8/0x360 [ 91.997985][ T5323] device_driver_attach+0xe0/0x1d0 [ 91.998002][ T5323] bind_store+0x1d0/0x220 [ 91.998018][ T5323] ? __pfx_sysfs_kf_write+0x10/0x10 [ 91.998030][ T5323] kernfs_fop_write_iter+0x3a4/0x540 [ 91.998046][ T5323] vfs_write+0x612/0xba0 [ 91.998071][ T5323] ? __pfx_vfs_write+0x10/0x10 [ 91.998095][ T5323] ? __fget_files+0x2a/0x420 [ 91.998116][ T5323] ksys_write+0x150/0x270 [ 91.998136][ T5323] ? __pfx_ksys_write+0x10/0x10 [ 91.998183][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.998196][ T5323] do_syscall_64+0x174/0x580 [ 91.998212][ T5323] ? clear_bhb_loop+0x40/0x90 [ 91.998227][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.998239][ T5323] RIP: 0033:0x7fddd539e019 [ 91.998252][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.998262][ T5323] RSP: 002b:00007fddd6211fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.998276][ T5323] RAX: ffffffffffffffda RBX: 00007fddd5626090 RCX: 00007fddd539e019 [ 91.998284][ T5323] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000006 [ 91.998292][ T5323] RBP: 00007fddd543500c R08: 0000000000000000 R09: 0000000000000000 [ 91.998301][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.998309][ T5323] R13: 00007fddd5626128 R14: 00007fddd5626090 R15: 00007ffd8e5c3dc8 [ 91.998331][ T5323] [ 92.000243][ T5323] ---[ end trace ]--- [ 92.141081][ T5323] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 92.143445][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 92.147391][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.151646][ T5323] Call Trace: [ 92.153069][ T5323] [ 92.154347][ T5323] vpanic+0x56c/0xa60 [ 92.155938][ T5323] ? __pfx_vpanic+0x10/0x10 [ 92.157483][ T5323] ? irqentry_exit+0x218/0x8f0 [ 92.159080][ T5323] panic+0xc5/0xd0 [ 92.160362][ T5323] ? __pfx_panic+0x10/0x10 [ 92.161913][ T5323] ? __pfx__printk+0x10/0x10 [ 92.163501][ T5323] check_panic_on_warn+0x89/0xb0 [ 92.165132][ T5323] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 92.167231][ T5323] ? ioread8+0x1c/0x80 [ 92.168564][ T5323] e100_eeprom_load+0x45f/0x530 [ 92.170170][ T5323] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 92.172040][ T5323] e100_probe+0x90d/0x1360 [ 92.173504][ T5323] pci_device_probe+0x431/0xc90 [ 92.175089][ T5323] ? up_write+0x19f/0x4a0 [ 92.176490][ T5323] ? __pfx_pci_device_probe+0x10/0x10 [ 92.178279][ T5323] ? kernfs_put+0x7b9/0x820 [ 92.179755][ T5323] ? kernfs_create_link+0x187/0x200 [ 92.181460][ T5323] ? sysfs_do_create_link_sd+0xe0/0x110 [ 92.183272][ T5323] ? driver_sysfs_add+0x1fe/0x210 [ 92.184886][ T5323] ? __pfx_pci_device_probe+0x10/0x10 [ 92.186597][ T5323] really_probe+0x254/0xae0 [ 92.188086][ T5323] __driver_probe_device+0x1e8/0x360 [ 92.189849][ T5323] device_driver_attach+0xe0/0x1d0 [ 92.191454][ T5323] bind_store+0x1d0/0x220 [ 92.192826][ T5323] ? __pfx_sysfs_kf_write+0x10/0x10 [ 92.194490][ T5323] kernfs_fop_write_iter+0x3a4/0x540 [ 92.196173][ T5323] vfs_write+0x612/0xba0 [ 92.197576][ T5323] ? __pfx_vfs_write+0x10/0x10 [ 92.199119][ T5323] ? __fget_files+0x2a/0x420 [ 92.200670][ T5323] ksys_write+0x150/0x270 [ 92.202080][ T5323] ? __pfx_ksys_write+0x10/0x10 [ 92.203639][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.205685][ T5323] do_syscall_64+0x174/0x580 [ 92.207189][ T5323] ? clear_bhb_loop+0x40/0x90 [ 92.208737][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.210638][ T5323] RIP: 0033:0x7fddd539e019 [ 92.212071][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.218106][ T5323] RSP: 002b:00007fddd6211fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.220744][ T5323] RAX: ffffffffffffffda RBX: 00007fddd5626090 RCX: 00007fddd539e019 [ 92.223352][ T5323] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000006 [ 92.225857][ T5323] RBP: 00007fddd543500c R08: 0000000000000000 R09: 0000000000000000 [ 92.228336][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.230875][ T5323] R13: 00007fddd5626128 R14: 00007fddd5626090 R15: 00007ffd8e5c3dc8 [ 92.233374][ T5323] [ 92.234677][ T5323] Kernel Offset: disabled [ 92.236091][ T5323] Rebooting in 86400 seconds..