program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='0000:00:02.0\x00', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='e100\x00', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/e100/bind\x00', 0x1, 0x0)
syz_clone(0x0, &(0x7f0000002000), 0x0, &(0x7f0000003000), &(0x7f0000004000), &(0x7f0000005000))
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
write(r3, &(0x7f0000000240)='0000:00:02.0\x00', 0xc)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x4)
[ 85.380999][ T5330] e1000e 0000:00:02.0 eth1: removed PHC
[ 85.624498][ T5330] e1000e 0000:00:02.0 eth1: Hardware Error
[ 85.727812][ T4653] Bluetooth: hci0: command tx timeout
[ 86.452173][ T9] cfg80211: failed to load regulatory.db
[ 87.808715][ T4653] Bluetooth: hci0: command tx timeout
[ 89.782202][ T5330] e1000e 0000:00:02.0 eth1: NIC Link is Down
[ 89.888331][ T4653] Bluetooth: hci0: command tx timeout
[ 90.071973][ T5331] e100 0000:00:02.0: enabling device (0000 -> 0003)
[ 90.182910][ T5331] ------------[ cut here ]------------
[ 90.185315][ T5331] UBSAN: shift-out-of-bounds in drivers/net/ethernet/intel/e100.c:768:21
[ 90.199427][ T5331] shift exponent 65529 is too large for 32-bit type 'int'
[ 90.208668][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 90.208684][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 90.208691][ T5331] Call Trace:
[ 90.208697][ T5331]
[ 90.208724][ T5331] dump_stack_lvl+0xe8/0x150
[ 90.208795][ T5331] ubsan_epilogue+0xa/0x30
[ 90.208809][ T5331] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 90.208868][ T5331] ? ioread8+0x1c/0x80
[ 90.208891][ T5331] e100_eeprom_load+0x45f/0x530
[ 90.208906][ T5331] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 90.208952][ T5331] e100_probe+0x90d/0x1360
[ 90.208971][ T5331] pci_device_probe+0x431/0xc90
[ 90.208990][ T5331] ? up_write+0x19f/0x4a0
[ 90.209003][ T5331] ? __pfx_pci_device_probe+0x10/0x10
[ 90.209020][ T5331] ? kernfs_put+0x7b9/0x820
[ 90.209039][ T5331] ? kernfs_create_link+0x187/0x200
[ 90.209054][ T5331] ? sysfs_do_create_link_sd+0xe0/0x110
[ 90.209069][ T5331] ? driver_sysfs_add+0x1fe/0x210
[ 90.209084][ T5331] ? __pfx_pci_device_probe+0x10/0x10
[ 90.209103][ T5331] really_probe+0x254/0xae0
[ 90.209119][ T5331] __driver_probe_device+0x1e8/0x360
[ 90.209135][ T5331] device_driver_attach+0xe0/0x1d0
[ 90.209150][ T5331] bind_store+0x1d0/0x220
[ 90.209165][ T5331] ? __pfx_sysfs_kf_write+0x10/0x10
[ 90.209176][ T5331] kernfs_fop_write_iter+0x3a4/0x540
[ 90.209192][ T5331] vfs_write+0x612/0xba0
[ 90.209214][ T5331] ? __pfx_vfs_write+0x10/0x10
[ 90.209237][ T5331] ? __fget_files+0x2a/0x420
[ 90.209262][ T5331] ksys_write+0x150/0x270
[ 90.209283][ T5331] ? __pfx_ksys_write+0x10/0x10
[ 90.209306][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.209321][ T5331] do_syscall_64+0x174/0x580
[ 90.209335][ T5331] ? trace_irq_disable+0x3b/0x140
[ 90.209350][ T5331] ? clear_bhb_loop+0x40/0x90
[ 90.209363][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.209374][ T5331] RIP: 0033:0x7f7e7e99e019
[ 90.209426][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 90.209437][ T5331] RSP: 002b:00007f7e7f7c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 90.209451][ T5331] RAX: ffffffffffffffda RBX: 00007f7e7ec26090 RCX: 00007f7e7e99e019
[ 90.209460][ T5331] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000006
[ 90.209467][ T5331] RBP: 00007f7e7ea3500c R08: 0000000000000000 R09: 0000000000000000
[ 90.209473][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 90.209480][ T5331] R13: 00007f7e7ec26128 R14: 00007f7e7ec26090 R15: 00007ffd4f7e9048
[ 90.209499][ T5331]
[ 90.209564][ T5331] ---[ end trace ]---
[ 90.368211][ T5331] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 90.372180][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 90.375879][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 90.379900][ T5331] Call Trace:
[ 90.381305][ T5331]
[ 90.382471][ T5331] vpanic+0x56c/0xa60
[ 90.384106][ T5331] ? __pfx_vpanic+0x10/0x10
[ 90.386046][ T5331] ? irqentry_exit+0x218/0x8f0
[ 90.388084][ T5331] panic+0xc5/0xd0
[ 90.389658][ T5331] ? __pfx_panic+0x10/0x10
[ 90.391493][ T5331] ? __pfx__printk+0x10/0x10
[ 90.393427][ T5331] check_panic_on_warn+0x89/0xb0
[ 90.395490][ T5331] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 90.398142][ T5331] ? ioread8+0x1c/0x80
[ 90.399833][ T5331] e100_eeprom_load+0x45f/0x530
[ 90.401907][ T5331] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 90.404273][ T5331] e100_probe+0x90d/0x1360
[ 90.406238][ T5331] pci_device_probe+0x431/0xc90
[ 90.408274][ T5331] ? up_write+0x19f/0x4a0
[ 90.410066][ T5331] ? __pfx_pci_device_probe+0x10/0x10
[ 90.412334][ T5331] ? kernfs_put+0x7b9/0x820
[ 90.414232][ T5331] ? kernfs_create_link+0x187/0x200
[ 90.416398][ T5331] ? sysfs_do_create_link_sd+0xe0/0x110
[ 90.418604][ T5331] ? driver_sysfs_add+0x1fe/0x210
[ 90.420666][ T5331] ? __pfx_pci_device_probe+0x10/0x10
[ 90.422834][ T5331] really_probe+0x254/0xae0
[ 90.424754][ T5331] __driver_probe_device+0x1e8/0x360
[ 90.426938][ T5331] device_driver_attach+0xe0/0x1d0
[ 90.429112][ T5331] bind_store+0x1d0/0x220
[ 90.430895][ T5331] ? __pfx_sysfs_kf_write+0x10/0x10
[ 90.433035][ T5331] kernfs_fop_write_iter+0x3a4/0x540
[ 90.435220][ T5331] vfs_write+0x612/0xba0
[ 90.436943][ T5331] ? __pfx_vfs_write+0x10/0x10
[ 90.438885][ T5331] ? __fget_files+0x2a/0x420
[ 90.440636][ T5331] ksys_write+0x150/0x270
[ 90.442360][ T5331] ? __pfx_ksys_write+0x10/0x10
[ 90.444392][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.446856][ T5331] do_syscall_64+0x174/0x580
[ 90.448765][ T5331] ? trace_irq_disable+0x3b/0x140
[ 90.450818][ T5331] ? clear_bhb_loop+0x40/0x90
[ 90.452757][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.455154][ T5331] RIP: 0033:0x7f7e7e99e019
[ 90.456690][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 90.462942][ T5331] RSP: 002b:00007f7e7f7c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 90.465695][ T5331] RAX: ffffffffffffffda RBX: 00007f7e7ec26090 RCX: 00007f7e7e99e019
[ 90.468613][ T5331] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000006
[ 90.471413][ T5331] RBP: 00007f7e7ea3500c R08: 0000000000000000 R09: 0000000000000000
[ 90.474664][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 90.477650][ T5331] R13: 00007f7e7ec26128 R14: 00007f7e7ec26090 R15: 00007ffd4f7e9048
[ 90.480273][ T5331]
[ 90.481604][ T5331] Kernel Offset: disabled
[ 90.483447][ T5331] Rebooting in 86400 seconds..