================================================================================ UBSAN: Undefined behaviour in arch/x86/kvm/pmu_intel.c:301:13 shift exponent 83 is too large for 64-bit type 'long long unsigned int' CPU: 1 PID: 11664 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 intel_pmu_refresh.cold+0x75/0xa0 arch/x86/kvm/pmu_intel.c:301 kvm_update_cpuid+0x6d9/0xaf0 arch/x86/kvm/cpuid.c:147 kvm_vcpu_ioctl_set_cpuid+0x6ab/0x970 arch/x86/kvm/cpuid.c:232 kvm_arch_vcpu_ioctl+0xea3/0x2e10 arch/x86/kvm/x86.c:3921 kvm_vcpu_ioctl+0x8af/0xe30 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2975 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45de59 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd781265c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045de59 RDX: 0000000020000380 RSI: 000000004008ae8a RDI: 0000000000000005 RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c R13: 00007ffcdd6a1cbf R14: 00007fd7812669c0 R15: 000000000118bf2c ================================================================================ ISOFS: Unable to identify CD-ROM format. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11671 comm=syz-executor.2 IPv6: ADDRCONF(NETDEV_UP): macvlan2: link is not ready netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. ISOFS: Unable to identify CD-ROM format. EXT4-fs error (device loop5): ext4_fill_super:4448: inode #2: comm syz-executor.5: iget: root inode unallocated EXT4-fs (loop5): get root inode failed EXT4-fs (loop5): mount failed EXT4-fs error (device loop5): ext4_fill_super:4448: inode #2: comm syz-executor.5: iget: root inode unallocated EXT4-fs (loop5): get root inode failed EXT4-fs (loop5): mount failed hub 9-0:1.0: USB hub found REISERFS warning (device loop0): super-6514 reiserfs_parse_options: unknown quota format specified. hub 9-0:1.0: 8 ports detected print_req_error: I/O error, dev loop1, sector 36028797018963960 NILFS (loop1): unable to read secondary superblock (blocksize = 1024) NILFS (loop1): couldn't find nilfs on the device overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected print_req_error: I/O error, dev loop1, sector 36028797018963960 NILFS (loop1): unable to read secondary superblock (blocksize = 1024) nla_parse: 1 callbacks suppressed netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. NILFS (loop1): couldn't find nilfs on the device SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25344 sclass=netlink_route_socket pid=11823 comm=syz-executor.2 netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. REISERFS warning (device loop0): super-6514 reiserfs_parse_options: unknown quota format specified. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25344 sclass=netlink_route_socket pid=11823 comm=syz-executor.2 EXT4-fs error (device loop5): ext4_fill_super:4448: inode #2: comm syz-executor.5: iget: root inode unallocated EXT4-fs (loop5): get root inode failed EXT4-fs (loop5): mount failed TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. EXT4-fs (loop5): corrupt root inode, run e2fsck EXT4-fs (loop5): mount failed squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.3 filesystem squashfs: SQUASHFS error: Please update your kernel netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. EXT4-fs (loop5): corrupt root inode, run e2fsck EXT4-fs (loop5): mount failed FAT-fs (loop1): bogus number of reserved sectors FAT-fs (loop1): Can't find a valid FAT filesystem audit: type=1800 audit(1603063555.217:28): pid=12503 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16132 res=0 EXT4-fs (loop5): corrupt root inode, run e2fsck EXT4-fs (loop5): mount failed device wlan1 entered promiscuous mode device wlan1 left promiscuous mode device wlan1 entered promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode EXT4-fs error (device loop5): ext4_fill_super:4448: inode #2: comm syz-executor.5: iget: root inode unallocated FAT-fs (loop4): Unrecognized mount option "keyring" or missing value