program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='e100\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e100/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0000:00:02.0\x00', 0xc) [ 116.078840][ T5337] e1000e 0000:00:02.0 eth1: removed PHC [ 116.276242][ T4653] Bluetooth: hci0: command tx timeout [ 116.280871][ T5337] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 116.591487][ T5338] ------------[ cut here ]------------ [ 116.599632][ T5338] UBSAN: shift-out-of-bounds in drivers/net/ethernet/intel/e100.c:768:21 [ 116.609799][ T5338] shift exponent 65529 is too large for 32-bit type 'int' [ 116.622109][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 116.622128][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.622136][ T5338] Call Trace: [ 116.622141][ T5338] [ 116.622146][ T5338] dump_stack_lvl+0xe8/0x150 [ 116.622209][ T5338] ubsan_epilogue+0xa/0x30 [ 116.622223][ T5338] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 116.622277][ T5338] ? ioread8+0x1c/0x80 [ 116.622300][ T5338] e100_eeprom_load+0x45f/0x530 [ 116.622315][ T5338] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.622360][ T5338] e100_probe+0x90d/0x1360 [ 116.622377][ T5338] pci_device_probe+0x431/0xc90 [ 116.622396][ T5338] ? up_write+0x19f/0x4a0 [ 116.622409][ T5338] ? __pfx_pci_device_probe+0x10/0x10 [ 116.622427][ T5338] ? kernfs_put+0x7b9/0x820 [ 116.622444][ T5338] ? kernfs_create_link+0x187/0x200 [ 116.622459][ T5338] ? sysfs_do_create_link_sd+0xe0/0x110 [ 116.622475][ T5338] ? driver_sysfs_add+0x1fe/0x210 [ 116.622490][ T5338] ? __pfx_pci_device_probe+0x10/0x10 [ 116.622504][ T5338] really_probe+0x254/0xae0 [ 116.622521][ T5338] __driver_probe_device+0x1e8/0x360 [ 116.622537][ T5338] device_driver_attach+0xe0/0x1d0 [ 116.622551][ T5338] bind_store+0x1d0/0x220 [ 116.622565][ T5338] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.622576][ T5338] kernfs_fop_write_iter+0x3a4/0x540 [ 116.622589][ T5338] vfs_write+0x612/0xba0 [ 116.622609][ T5338] ? __pfx_vfs_write+0x10/0x10 [ 116.622633][ T5338] ? __fget_files+0x2a/0x420 [ 116.622652][ T5338] ksys_write+0x150/0x270 [ 116.622669][ T5338] ? __pfx_ksys_write+0x10/0x10 [ 116.622698][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.622711][ T5338] do_syscall_64+0x174/0x580 [ 116.622723][ T5338] ? trace_irq_disable+0x3b/0x140 [ 116.622739][ T5338] ? clear_bhb_loop+0x40/0x90 [ 116.622773][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.622785][ T5338] RIP: 0033:0x7f1cde79e019 [ 116.622797][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.622807][ T5338] RSP: 002b:00007f1cdabf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.622820][ T5338] RAX: ffffffffffffffda RBX: 00007f1cdea26090 RCX: 00007f1cde79e019 [ 116.622829][ T5338] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000005 [ 116.622836][ T5338] RBP: 00007f1cde83500c R08: 0000000000000000 R09: 0000000000000000 [ 116.622843][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.622849][ T5338] R13: 00007f1cdea26128 R14: 00007f1cdea26090 R15: 00007fff8fd1d4c8 [ 116.622868][ T5338] [ 116.625670][ T5338] ---[ end trace ]--- [ 116.765604][ T5338] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 116.767962][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 116.770797][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.773959][ T5338] Call Trace: [ 116.775046][ T5338] [ 116.776017][ T5338] vpanic+0x56c/0xa60 [ 116.777314][ T5338] ? __pfx_vpanic+0x10/0x10 [ 116.778753][ T5338] ? irqentry_exit+0x218/0x8f0 [ 116.780304][ T5338] panic+0xc5/0xd0 [ 116.781525][ T5338] ? __pfx_panic+0x10/0x10 [ 116.782966][ T5338] ? __pfx__printk+0x10/0x10 [ 116.784474][ T5338] check_panic_on_warn+0x89/0xb0 [ 116.786080][ T5338] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 116.788164][ T5338] ? ioread8+0x1c/0x80 [ 116.789520][ T5338] e100_eeprom_load+0x45f/0x530 [ 116.791128][ T5338] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.793007][ T5338] e100_probe+0x90d/0x1360 [ 116.794445][ T5338] pci_device_probe+0x431/0xc90 [ 116.796039][ T5338] ? up_write+0x19f/0x4a0 [ 116.797443][ T5338] ? __pfx_pci_device_probe+0x10/0x10 [ 116.799178][ T5338] ? kernfs_put+0x7b9/0x820 [ 116.800652][ T5338] ? kernfs_create_link+0x187/0x200 [ 116.802311][ T5338] ? sysfs_do_create_link_sd+0xe0/0x110 [ 116.804103][ T5338] ? driver_sysfs_add+0x1fe/0x210 [ 116.805783][ T5338] ? __pfx_pci_device_probe+0x10/0x10 [ 116.807627][ T5338] really_probe+0x254/0xae0 [ 116.809174][ T5338] __driver_probe_device+0x1e8/0x360 [ 116.810972][ T5338] device_driver_attach+0xe0/0x1d0 [ 116.812706][ T5338] bind_store+0x1d0/0x220 [ 116.814204][ T5338] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.816022][ T5338] kernfs_fop_write_iter+0x3a4/0x540 [ 116.817770][ T5338] vfs_write+0x612/0xba0 [ 116.819205][ T5338] ? __pfx_vfs_write+0x10/0x10 [ 116.820901][ T5338] ? __fget_files+0x2a/0x420 [ 116.822468][ T5338] ksys_write+0x150/0x270 [ 116.823925][ T5338] ? __pfx_ksys_write+0x10/0x10 [ 116.825682][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.827759][ T5338] do_syscall_64+0x174/0x580 [ 116.829325][ T5338] ? trace_irq_disable+0x3b/0x140 [ 116.831082][ T5338] ? clear_bhb_loop+0x40/0x90 [ 116.832835][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.834922][ T5338] RIP: 0033:0x7f1cde79e019 [ 116.836473][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.842866][ T5338] RSP: 002b:00007f1cdabf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.845721][ T5338] RAX: ffffffffffffffda RBX: 00007f1cdea26090 RCX: 00007f1cde79e019 [ 116.848394][ T5338] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000005 [ 116.851019][ T5338] RBP: 00007f1cde83500c R08: 0000000000000000 R09: 0000000000000000 [ 116.853621][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.856256][ T5338] R13: 00007f1cdea26128 R14: 00007f1cdea26090 R15: 00007fff8fd1d4c8 [ 116.858972][ T5338] [ 116.860432][ T5338] Kernel Offset: disabled [ 116.861974][ T5338] Rebooting in 86400 seconds..