EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
================================================================================
UBSAN: Undefined behaviour in ./include/net/red.h:272:18
shift exponent 234 is too large for 64-bit type 'long unsigned int'
CPU: 0 PID: 8267 Comm: syz-executor.4 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x22c/0x33e lib/dump_stack.c:118
ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
__ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
red_calc_qavg_from_idle_time include/net/red.h:272 [inline]
red_adaptative_algo include/net/red.h:404 [inline]
red_adaptative_timer+0x7ed/0x870 net/sched/sch_red.c:266
call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
expire_timers+0x243/0x500 kernel/time/timer.c:1375
__run_timers kernel/time/timer.c:1703 [inline]
run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
__do_softirq+0x27d/0xad2 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x22d/0x270 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:544 [inline]
smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x50/0x90 kernel/locking/spinlock.c:192
Code: c0 f8 89 63 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 3d 48 83 3d 91 7d b2 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 76 f8 9b f9 65 8b 05 4f e1 50 78 85 c0 74 02 5d
RSP: 0018:ffff8880522a7858 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff12c713f RBX: 0000000076d320a8 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880521baec4
RBP: ffff8880ae22c2c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae22c2c0
R13: ffff88808ff96000 R14: 0000000000000000 R15: 0000000000000001
finish_lock_switch kernel/sched/core.c:2578 [inline]
finish_task_switch+0x174/0x8b0 kernel/sched/core.c:2678
context_switch kernel/sched/core.c:2831 [inline]
__schedule+0x8ed/0x22e0 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
freezable_schedule include/linux/freezer.h:172 [inline]
futex_wait_queue_me+0x34a/0x6a0 kernel/futex.c:2627
futex_wait+0x1ef/0x590 kernel/futex.c:2742
do_futex+0x15b/0x1c60 kernel/futex.c:3709
__do_sys_futex kernel/futex.c:3770 [inline]
__se_sys_futex+0x2af/0x3d0 kernel/futex.c:3738
do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de29
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f69dd079cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 000000000118bf28 RCX: 000000000045de29
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000118bf28
RBP: 000000000118bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffce8002cff R14: 00007f69dd07a9c0 R15: 000000000118bf2c
================================================================================
EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs warning (device loop1): ext4_dirent_csum_verify:368: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D.
EXT4-fs error (device loop1): htree_dirblock_to_tree:995: inode #2: comm syz-executor.1: Directory block failed checksum
EXT4-fs: failed to create workqueue
EXT4-fs (loop5): mount failed
EXT4-fs warning (device loop1): ext4_dirent_csum_verify:368: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D.
EXT4-fs error (device loop1): htree_dirblock_to_tree:995: inode #2: comm syz-executor.1: Directory block failed checksum
EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs warning (device loop1): ext4_dirent_csum_verify:368: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D.
EXT4-fs error (device loop1): htree_dirblock_to_tree:995: inode #2: comm syz-executor.1: Directory block failed checksum
audit: type=1800 audit(1601913556.642:10): pid=8325 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0
EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (128 blocks)
EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (128 blocks)
audit: type=1804 audit(1601913558.582:11): pid=8500 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/" dev="sda1" ino=91 res=1
audit: type=1804 audit(1601913558.602:12): pid=8500 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/" dev="sda1" ino=91 res=1
EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (128 blocks)
EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (128 blocks)
EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (128 blocks)
EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (128 blocks)
EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop4): mount failed
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop4): mount failed
EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop5): mount failed
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop4): mount failed
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop5): mount failed
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop4): mount failed
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop5): mount failed
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop5): mount failed
EXT4-fs (loop4): mount failed
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop5): mount failed
EXT4-fs (loop4): mount failed
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop4): mount failed
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop5): mount failed
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop4): mount failed
EXT4-fs (loop5): mount failed
ptrace attach of "/root/syz-executor.1"[8902] was attempted by "/root/syz-executor.1"[8904]
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop5): mount failed
EXT4-fs (loop4): mount failed
EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated!
EXT4-fs (loop5): mount failed
Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota