================================================================================ FAT-fs (loop0): Unrecognized mount option "" or missing value UBSAN: Undefined behaviour in ./include/net/red.h:272:18 shift exponent 234 is too large for 64-bit type 'long unsigned int' CPU: 1 PID: 8120 Comm: syz-executor.1 Not tainted 4.19.149-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 red_calc_qavg_from_idle_time include/net/red.h:272 [inline] red_adaptative_algo include/net/red.h:404 [inline] red_adaptative_timer+0x7ed/0x870 net/sched/sch_red.c:266 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338 expire_timers+0x243/0x500 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1703 [inline] run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716 __do_softirq+0x27d/0xad2 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x22d/0x270 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:544 [inline] smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:unwind_next_frame+0x9c0/0x2430 arch/x86/kernel/unwind_orc.c:444 Code: 34 33 49 89 cb 41 83 e3 07 44 38 df 41 0f 9e c3 40 84 ff 40 0f 95 c7 41 84 fb 0f 85 07 18 00 00 83 e0 07 40 38 c6 40 0f 9e c7 <40> 84 f6 0f 95 c0 40 84 c7 0f 85 ee 17 00 00 48 0f bf 01 48 01 d0 RSP: 0018:ffff8880468f7370 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000003 RBX: 1ffff11008d1ee76 RCX: ffffffff8bac219a RDX: ffff8880468f7780 RSI: 0000000000000000 RDI: 0000000000000001 RBP: 0000000000000001 R08: ffffffff8bac219e R09: ffffffff8bac219f R10: ffff8880468f74a7 R11: 0000000000000001 R12: ffff8880468f7490 R13: ffff8880468f747d R14: ffff8880468f7498 R15: ffff8880468f7448 __save_stack_trace+0x83/0x100 arch/x86/kernel/stacktrace.c:44 save_stack mm/kasan/kasan.c:448 [inline] set_track mm/kasan/kasan.c:460 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:553 kmem_cache_alloc+0x126/0x4a0 mm/slab.c:3559 __d_alloc+0x2b/0xa20 fs/dcache.c:1612 d_alloc+0x4a/0x230 fs/dcache.c:1696 d_alloc_parallel+0xeb/0x1b70 fs/dcache.c:2443 lookup_open+0x4da/0x19c0 fs/namei.c:3148 do_last fs/namei.c:3327 [inline] path_openat+0x187b/0x2e90 fs/namei.c:3537 do_filp_open+0x18c/0x3f0 fs/namei.c:3567 do_sys_open+0x3b3/0x520 fs/open.c:1085 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x417921 Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ff39c66dbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007ff39c66dbd0 RCX: 0000000000417921 RDX: 00007ff39c66dbe0 RSI: 0000000000000002 RDI: 00007ff39c66dbd0 RBP: 000000000118bf58 R08: 0000000000000000 R09: 0000000000000010 R10: 0000000000000005 R11: 0000000000000293 R12: 000000000118bf2c R13: 00007ffc4bdf9e0f R14: 00007ff39c66e9c0 R15: 000000000118bf2c ================================================================================ audit: type=1800 audit(1601975172.278:15): pid=8139 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15783 res=0 nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) ptrace attach of "/root/syz-executor.3"[8194] was attempted by "/root/syz-executor.3"[8210] audit: type=1400 audit(1601975173.328:16): avc: denied { mounton } for pid=8217 comm="syz-executor.0" path="/proc/8217" dev="proc" ino=31452 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 audit: type=1804 audit(1601975173.508:17): pid=8225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir504886539/syzkaller.TBYeeD/6/file0" dev="sda1" ino=15791 res=1 audit: type=1800 audit(1601975173.508:18): pid=8225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15791 res=0 audit: type=1804 audit(1601975173.508:19): pid=8225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir504886539/syzkaller.TBYeeD/6/file0" dev="sda1" ino=15791 res=1 audit: type=1800 audit(1601975173.968:20): pid=8225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15791 res=0 audit: type=1804 audit(1601975174.008:21): pid=8225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir504886539/syzkaller.TBYeeD/6/file0" dev="sda1" ino=15791 res=1 audit: type=1800 audit(1601975174.048:22): pid=8225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=15791 res=0 ISOFS: Unable to identify CD-ROM format. ISOFS: Unable to identify CD-ROM format. netlink: 'syz-executor.2': attribute type 4 has an invalid length. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=8289 comm=syz-executor.2 overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. overlayfs: 'file0' not a directory overlayfs: './file0' not a directory ldm_validate_privheads(): Disk read failed. loop5: p2 < > p4 loop5: partition table partially beyond EOD, truncated loop5: p2 size 2 extends beyond EOD, truncated loop5: p4 size 2097152 extends beyond EOD, truncated syz-executor.1 (8372): /proc/8369/oom_adj is deprecated, please use /proc/8369/oom_score_adj instead. ldm_validate_privheads(): Disk read failed. loop5: p2 < > p4 loop5: partition table partially beyond EOD, truncated loop5: p2 size 2 extends beyond EOD, truncated loop5: p4 size 2097152 extends beyond EOD, truncated netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8482 comm=syz-executor.1 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=8483 comm=syz-executor.1 tmpfs: Bad value '0xffffffffffffffff' for mount option 'gid' netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8490 comm=syz-executor.1 tmpfs: Bad value '0xffffffffffffffff' for mount option 'gid' kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8577 comm=syz-executor.2 UDF-fs: bad mount option "2" or missing value FAT-fs (loop3): Directory bread(block 6) failed hfsplus: type requires a 4 character value hfsplus: unable to parse mount options SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8577 comm=syz-executor.2