================================================================================ UBSAN: Undefined behaviour in ./include/net/red.h:272:18 shift exponent 234 is too large for 64-bit type 'long unsigned int' CPU: 0 PID: 3709 Comm: systemd-journal Not tainted 4.19.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 red_calc_qavg_from_idle_time include/net/red.h:272 [inline] red_adaptative_algo include/net/red.h:404 [inline] red_adaptative_timer+0x7ed/0x870 net/sched/sch_red.c:266 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338 expire_timers+0x243/0x500 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1703 [inline] run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716 __do_softirq+0x27d/0xad2 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x22d/0x270 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:544 [inline] smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:lock_acquire+0x1ec/0x3f0 kernel/locking/lockdep.c:3910 Code: 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 dd 01 00 00 48 83 3d c9 9d 0b 08 00 0f 84 4e 01 00 00 48 8b 7c 24 08 57 9d <0f> 1f 44 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b RSP: 0018:ffff8880941c7aa8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff12c7135 RBX: ffff8880941b86c0 RCX: 1546c8f32ac0192f RDX: dffffc0000000000 RSI: ffff8880941b8f48 RDI: 0000000000000286 RBP: ffff8880a94350d8 R08: 000000002dc2a7e1 R09: 0000000000000000 R10: 0000000000000028 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] lockref_get_not_dead+0x14/0x80 lib/lockref.c:208 legitimize_path+0xaa/0x200 fs/namei.c:625 unlazy_walk+0xdf/0x520 fs/namei.c:677 complete_walk+0xc6/0x240 fs/namei.c:790 path_lookupat+0x26f/0x8d0 fs/namei.c:2323 filename_lookup+0x1ac/0x5a0 fs/namei.c:2349 user_path_at include/linux/namei.h:57 [inline] do_faccessat+0x262/0x7f0 fs/open.c:397 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fc11df419c7 Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 RSP: 002b:00007ffe8369e648 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 RAX: ffffffffffffffda RBX: 00007ffe8369f260 RCX: 00007fc11df419c7 RDX: 00007fc11e9b2a00 RSI: 0000000000000000 RDI: 000055a19954d9a3 RBP: 00007ffe8369e680 R08: 000000000000c0c0 R09: 0000000000000000 R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007ffe8369f260 R15: 000055a199fca780 ================================================================================ EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. EXT4-fs (loop4): mount failed EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. EXT4-fs (loop4): mount failed EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. EXT4-fs (loop4): mount failed EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. EXT4-fs (loop4): mount failed batman_adv: Cannot find parent device EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. batman_adv: Cannot find parent device f2fs_msg: 96 callbacks suppressed F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) EXT4-fs (loop4): mount failed F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock EXT4-fs (loop1): Unsupported encryption level 141 batman_adv: Cannot find parent device EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. EXT4-fs (loop4): mount failed F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. EXT4-fs (loop4): mount failed ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. ldm_validate_privheads(): Cannot find PRIVHEAD 1. loop3: p2 < > EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. EXT4-fs (loop4): mount failed ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. ldm_validate_privheads(): Cannot find PRIVHEAD 1. loop3: p2 < > ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. ldm_validate_privheads(): Cannot find PRIVHEAD 1. loop3: p2 < > ptrace attach of "/root/syz-executor.1"[31592] was attempted by "/root/syz-executor.1"[31594] EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. EXT4-fs (loop4): mount failed kauditd_printk_skb: 181 callbacks suppressed audit: type=1326 audit(1601530695.165:10789): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x7ffc0000 ptrace attach of "/root/syz-executor.3"[31624] was attempted by "/root/syz-executor.3"[31628] audit: type=1326 audit(1601530695.165:10790): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45dd99 code=0x7ffc0000 audit: type=1326 audit(1601530695.165:10791): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x7ffc0000 audit: type=1326 audit(1601530695.165:10792): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=56 compat=0 ip=0x45dd99 code=0x7ffc0000 audit: type=1326 audit(1601530695.165:10793): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x7ffc0000 audit: type=1326 audit(1601530695.165:10794): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45dd99 code=0x7ffc0000 audit: type=1326 audit(1601530695.165:10795): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x7ffc0000 audit: type=1326 audit(1601530695.165:10796): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=186 compat=0 ip=0x45dd99 code=0x7ffc0000 audit: type=1326 audit(1601530695.165:10797): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x7ffc0000 audit: type=1326 audit(1601530695.165:10798): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31618 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45dd99 code=0x7ffc0000 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. EXT4-fs (loop4): mount failed EXT4-fs (loop3): invalid first ino: 0 EXT4-fs (loop3): invalid first ino: 0 EXT4-fs error (device loop4): ext4_ext_check_inode:498: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. EXT4-fs (loop4): mount failed EXT4-fs error (device loop4): ext4_ext_check_inode:498: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. FAT-fs (loop1): FAT read failed (blocknr 32) EXT4-fs (loop4): mount failed EXT4-fs error (device loop4): ext4_ext_check_inode:498: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 FAT-fs (loop1): FAT read failed (blocknr 32) EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. EXT4-fs (loop4): mount failed FAT-fs (loop1): FAT read failed (blocknr 32) EXT4-fs error (device loop4): ext4_ext_check_inode:498: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. EXT4-fs (loop4): mount failed FAT-fs (loop1): FAT read failed (blocknr 32) EXT4-fs error (device loop4): ext4_ext_check_inode:498: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop4): ext4_quota_enable:5835: comm syz-executor.4: Bad quota inode # 3 f2fs_msg: 94 callbacks suppressed F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(0) root(3) F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock EXT4-fs warning (device loop4): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(0) root(3) F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock EXT4-fs (loop4): mount failed F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock