hugetlbfs: syz-executor.2 (13655): Using mlock ulimits for SHM_HUGETLB is deprecated ================================================================================ UBSAN: Undefined behaviour in net/core/gen_estimator.c:87:38 shift exponent -246 is negative CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 est_timer.cold+0x96/0x126 net/core/gen_estimator.c:87 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338 expire_timers+0x243/0x500 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1703 [inline] run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716 __do_softirq+0x27d/0xad2 kernel/softirq.c:292 run_ksoftirqd+0x57/0x130 kernel/softirq.c:653 smpboot_thread_fn+0x66e/0xa30 kernel/smpboot.c:164 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ================================================================================ ================================================================================ UBSAN: Undefined behaviour in net/core/gen_estimator.c:88:23 shift exponent 255 is too large for 64-bit type 'long long unsigned int' CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 est_timer.cold+0xd6/0x126 net/core/gen_estimator.c:88 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338 expire_timers+0x243/0x500 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1703 [inline] run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716 __do_softirq+0x27d/0xad2 kernel/softirq.c:292 run_ksoftirqd+0x57/0x130 kernel/softirq.c:653 smpboot_thread_fn+0x66e/0xa30 kernel/smpboot.c:164 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ================================================================================ ================================================================================ UBSAN: Undefined behaviour in net/core/gen_estimator.c:90:46 shift exponent -246 is negative CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 est_timer.cold+0x17/0x126 net/core/gen_estimator.c:90 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338 expire_timers+0x243/0x500 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1703 [inline] run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716 __do_softirq+0x27d/0xad2 kernel/softirq.c:292 run_ksoftirqd+0x57/0x130 kernel/softirq.c:653 smpboot_thread_fn+0x66e/0xa30 kernel/smpboot.c:164 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ================================================================================ ================================================================================ UBSAN: Undefined behaviour in net/core/gen_estimator.c:91:22 shift exponent 255 is too large for 64-bit type 'long long unsigned int' CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 est_timer.cold+0x5b/0x126 net/core/gen_estimator.c:91 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338 expire_timers+0x243/0x500 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1703 [inline] run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716 __do_softirq+0x27d/0xad2 kernel/softirq.c:292 run_ksoftirqd+0x57/0x130 kernel/softirq.c:653 smpboot_thread_fn+0x66e/0xa30 kernel/smpboot.c:164 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ================================================================================ ptrace attach of "/root/syz-executor.2"[13699] was attempted by "/root/syz-executor.2"[13702] 9pnet_virtio: no channels available for device syz md: invalid raid superblock magic on ram83 md: ram83 does not have a valid v0.0 superblock, not importing! md: md_import_device returned -22 md: invalid raid superblock magic on ram83 md: ram83 does not have a valid v0.0 superblock, not importing! md: md_import_device returned -22 overlayfs: failed to resolve './file1': -2 md: invalid raid superblock magic on ram83 md: ram83 does not have a valid v0.0 superblock, not importing! md: md_import_device returned -22 netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. overlayfs: failed to resolve './file1': -2 netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. md: invalid raid superblock magic on ram83 md: ram83 does not have a valid v0.0 superblock, not importing! md: md_import_device returned -22 overlayfs: failed to resolve './file1': -2 overlayfs: failed to resolve './bus': -2 overlayfs: failed to resolve './bus': -2 overlayfs: failed to resolve './bus': -2 ptrace attach of "/root/syz-executor.4"[13942] was attempted by "/root/syz-executor.4"[13945] ptrace attach of "/root/syz-executor.4"[13981] was attempted by "/root/syz-executor.4"[13984] ptrace attach of "/root/syz-executor.5"[13986] was attempted by "/root/syz-executor.5"[13989] tmpfs: No value for mount option 'ผล' overlayfs: missing 'lowerdir' ptrace attach of "/root/syz-executor.1"[14079] was attempted by "/root/syz-executor.1"[14082] overlayfs: missing 'lowerdir' audit: type=1804 audit(1601533048.988:41): pid=14129 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir476052791/syzkaller.Lj99yS/301/file0" dev="sda1" ino=16476 res=1 ptrace attach of "/root/syz-executor.3"[14140] was attempted by "/root/syz-executor.3"[14142] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. overlayfs: missing 'lowerdir' overlayfs: missing 'lowerdir' EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue overlayfs: missing 'lowerdir' EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue EXT4-fs error (device loop5): ext4_empty_dir:2734: inode #12: comm syz-executor.5: Directory hole found for htree leaf block overlayfs: missing 'lowerdir' ptrace attach of "/root/syz-executor.4"[14213] was attempted by "/root/syz-executor.4"[14215] EXT4-fs error (device loop5): ext4_free_inode:350: comm syz-executor.5: bit already cleared for inode 12 netlink: 'syz-executor.2': attribute type 3 has an invalid length. netlink: 'syz-executor.2': attribute type 3 has an invalid length. overlayfs: missing 'lowerdir' xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables EXT4-fs (sda1): re-mounted. Opts: (null)