netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:87:38
shift exponent -246 is negative
CPU: 0 PID: 3725 Comm: systemd-udevd Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x22c/0x33e lib/dump_stack.c:118
ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
__ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
est_timer.cold+0x96/0x126 net/core/gen_estimator.c:87
call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
expire_timers+0x243/0x500 kernel/time/timer.c:1375
__run_timers kernel/time/timer.c:1703 [inline]
run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
__do_softirq+0x27d/0xad2 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x22d/0x270 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:544 [inline]
smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:kmem_cache_free+0x11c/0x2b0 mm/slab.c:3766
Code: 11 48 63 75 74 48 89 df e8 91 e8 f7 01 e9 68 ff ff ff e8 a7 7d cc ff 48 83 3d 17 ca b8 07 00 0f 84 36 01 00 00 4c 89 e7 57 9d <0f> 1f 44 00 00 eb 86 65 8b 05 86 c1 56 7e 83 f8 3f 0f 87 45 01 00
RSP: 0018:ffff88808fbffc28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: ffff88809f1b0dc0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286
RBP: ffff88821bc44b00 R08: 0000000000400000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000286
R13: ffffffff81b9b5b1 R14: ffff88809f1b0dc0 R15: ffff88808fbffd00
putname+0xe1/0x130 fs/namei.c:261
filename_lookup+0x3d0/0x5a0 fs/namei.c:2358
do_readlinkat+0xcd/0x2f0 fs/stat.c:394
__do_sys_readlinkat fs/stat.c:421 [inline]
__se_sys_readlinkat fs/stat.c:418 [inline]
__x64_sys_readlinkat+0x93/0xf0 fs/stat.c:418
do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe49f91d0ba
Code: 48 8b 0d e1 bd 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 0b 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ae bd 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcf4928618 EFLAGS: 00000202 ORIG_RAX: 000000000000010b
RAX: ffffffffffffffda RBX: 00005614618063b0 RCX: 00007fe49f91d0ba
RDX: 00005614618063b0 RSI: 0000561461801e70 RDI: 00000000ffffff9c
RBP: 0000000000000064 R08: 000056145fa47670 R09: 0000000000000070
R10: 0000000000000063 R11: 0000000000000202 R12: 0000561461801e70
R13: 00000000ffffff9c R14: 00007ffcf4928670 R15: 0000000000000063
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:88:23
shift exponent 255 is too large for 64-bit type 'long long unsigned int'
CPU: 0 PID: 3725 Comm: systemd-udevd Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x22c/0x33e lib/dump_stack.c:118
ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
__ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
est_timer.cold+0xd6/0x126 net/core/gen_estimator.c:88
call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
expire_timers+0x243/0x500 kernel/time/timer.c:1375
__run_timers kernel/time/timer.c:1703 [inline]
run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
__do_softirq+0x27d/0xad2 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x22d/0x270 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:544 [inline]
smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:kmem_cache_free+0x11c/0x2b0 mm/slab.c:3766
Code: 11 48 63 75 74 48 89 df e8 91 e8 f7 01 e9 68 ff ff ff e8 a7 7d cc ff 48 83 3d 17 ca b8 07 00 0f 84 36 01 00 00 4c 89 e7 57 9d <0f> 1f 44 00 00 eb 86 65 8b 05 86 c1 56 7e 83 f8 3f 0f 87 45 01 00
RSP: 0018:ffff88808fbffc28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: ffff88809f1b0dc0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286
RBP: ffff88821bc44b00 R08: 0000000000400000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000286
R13: ffffffff81b9b5b1 R14: ffff88809f1b0dc0 R15: ffff88808fbffd00
putname+0xe1/0x130 fs/namei.c:261
filename_lookup+0x3d0/0x5a0 fs/namei.c:2358
do_readlinkat+0xcd/0x2f0 fs/stat.c:394
__do_sys_readlinkat fs/stat.c:421 [inline]
__se_sys_readlinkat fs/stat.c:418 [inline]
__x64_sys_readlinkat+0x93/0xf0 fs/stat.c:418
do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe49f91d0ba
Code: 48 8b 0d e1 bd 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 0b 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ae bd 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcf4928618 EFLAGS: 00000202 ORIG_RAX: 000000000000010b
RAX: ffffffffffffffda RBX: 00005614618063b0 RCX: 00007fe49f91d0ba
RDX: 00005614618063b0 RSI: 0000561461801e70 RDI: 00000000ffffff9c
RBP: 0000000000000064 R08: 000056145fa47670 R09: 0000000000000070
R10: 0000000000000063 R11: 0000000000000202 R12: 0000561461801e70
R13: 00000000ffffff9c R14: 00007ffcf4928670 R15: 0000000000000063
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:90:46
shift exponent -246 is negative
CPU: 0 PID: 3725 Comm: systemd-udevd Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x22c/0x33e lib/dump_stack.c:118
ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
__ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
est_timer.cold+0x17/0x126 net/core/gen_estimator.c:90
call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
expire_timers+0x243/0x500 kernel/time/timer.c:1375
__run_timers kernel/time/timer.c:1703 [inline]
run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
__do_softirq+0x27d/0xad2 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x22d/0x270 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:544 [inline]
smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:kmem_cache_free+0x11c/0x2b0 mm/slab.c:3766
Code: 11 48 63 75 74 48 89 df e8 91 e8 f7 01 e9 68 ff ff ff e8 a7 7d cc ff 48 83 3d 17 ca b8 07 00 0f 84 36 01 00 00 4c 89 e7 57 9d <0f> 1f 44 00 00 eb 86 65 8b 05 86 c1 56 7e 83 f8 3f 0f 87 45 01 00
RSP: 0018:ffff88808fbffc28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: ffff88809f1b0dc0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286
RBP: ffff88821bc44b00 R08: 0000000000400000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000286
R13: ffffffff81b9b5b1 R14: ffff88809f1b0dc0 R15: ffff88808fbffd00
putname+0xe1/0x130 fs/namei.c:261
filename_lookup+0x3d0/0x5a0 fs/namei.c:2358
do_readlinkat+0xcd/0x2f0 fs/stat.c:394
__do_sys_readlinkat fs/stat.c:421 [inline]
__se_sys_readlinkat fs/stat.c:418 [inline]
__x64_sys_readlinkat+0x93/0xf0 fs/stat.c:418
do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe49f91d0ba
Code: 48 8b 0d e1 bd 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 0b 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ae bd 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcf4928618 EFLAGS: 00000202 ORIG_RAX: 000000000000010b
RAX: ffffffffffffffda RBX: 00005614618063b0 RCX: 00007fe49f91d0ba
RDX: 00005614618063b0 RSI: 0000561461801e70 RDI: 00000000ffffff9c
RBP: 0000000000000064 R08: 000056145fa47670 R09: 0000000000000070
R10: 0000000000000063 R11: 0000000000000202 R12: 0000561461801e70
R13: 00000000ffffff9c R14: 00007ffcf4928670 R15: 0000000000000063
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:91:22
shift exponent 255 is too large for 64-bit type 'long long unsigned int'
CPU: 0 PID: 3725 Comm: systemd-udevd Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x22c/0x33e lib/dump_stack.c:118
ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
__ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
est_timer.cold+0x5b/0x126 net/core/gen_estimator.c:91
audit: type=1804 audit(1601329071.791:14): pid=8525 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir857395507/syzkaller.LMgSUp/27/file0" dev="sda1" ino=15814 res=1
call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
expire_timers+0x243/0x500 kernel/time/timer.c:1375
__run_timers kernel/time/timer.c:1703 [inline]
run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
__do_softirq+0x27d/0xad2 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x22d/0x270 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:544 [inline]
smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:kmem_cache_free+0x11c/0x2b0 mm/slab.c:3766
Code: 11 48 63 75 74 48 89 df e8 91 e8 f7 01 e9 68 ff ff ff e8 a7 7d cc ff 48 83 3d 17 ca b8 07 00 0f 84 36 01 00 00 4c 89 e7 57 9d <0f> 1f 44 00 00 eb 86 65 8b 05 86 c1 56 7e 83 f8 3f 0f 87 45 01 00
isofs_fill_super: root inode is not a directory. Corrupted media?
RSP: 0018:ffff88808fbffc28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: ffff88809f1b0dc0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286
RBP: ffff88821bc44b00 R08: 0000000000400000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000286
R13: ffffffff81b9b5b1 R14: ffff88809f1b0dc0 R15: ffff88808fbffd00
putname+0xe1/0x130 fs/namei.c:261
filename_lookup+0x3d0/0x5a0 fs/namei.c:2358
do_readlinkat+0xcd/0x2f0 fs/stat.c:394
__do_sys_readlinkat fs/stat.c:421 [inline]
__se_sys_readlinkat fs/stat.c:418 [inline]
__x64_sys_readlinkat+0x93/0xf0 fs/stat.c:418
do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe49f91d0ba
Code: 48 8b 0d e1 bd 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 0b 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ae bd 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcf4928618 EFLAGS: 00000202 ORIG_RAX: 000000000000010b
RAX: ffffffffffffffda RBX: 00005614618063b0 RCX: 00007fe49f91d0ba
RDX: 00005614618063b0 RSI: 0000561461801e70 RDI: 00000000ffffff9c
RBP: 0000000000000064 R08: 000056145fa47670 R09: 0000000000000070
R10: 0000000000000063 R11: 0000000000000202 R12: 0000561461801e70
R13: 00000000ffffff9c R14: 00007ffcf4928670 R15: 0000000000000063
================================================================================
audit: type=1804 audit(1601329072.151:15): pid=8526 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir857395507/syzkaller.LMgSUp/27/file0" dev="sda1" ino=15814 res=1
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
IPVS: ftp: loaded support on port[0] = 21
netlink: 'syz-executor.0': attribute type 10 has an invalid length.
bond0: Error: Device is in use and cannot be enslaved
encrypted_key: keyword 'new' not allowed when called from .update method
IPVS: ftp: loaded support on port[0] = 21
tmpfs: No value for mount option './bus'
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
netlink: 'syz-executor.4': attribute type 1 has an invalid length.
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=104 sclass=netlink_route_socket pid=8761 comm=syz-executor.1
batman_adv: Cannot find parent device
audit: type=1800 audit(1601329074.781:16): pid=8799 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15827 res=0
nla_parse: 5 callbacks suppressed
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
F2FS-fs (loop3): Invalid segment/section count (31, 24 x 402915329)
F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
F2FS-fs (loop3): Invalid segment/section count (31, 24 x 402915329)
F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
IPVS: ftp: loaded support on port[0] = 21
Dev loop1: unable to read RDB block 1
loop1: unable to read partition table
loop1: partition table beyond EOD, truncated
loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
Dev loop1: unable to read RDB block 1
loop1: unable to read partition table
loop1: partition table beyond EOD, truncated
IPVS: ftp: loaded support on port[0] = 21
Dev loop1: unable to read RDB block 1
loop1: unable to read partition table
loop1: partition table beyond EOD, truncated
loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
REISERFS warning (device loop1): jmacd-7 reiserfs_fill_super: resize option for remount only
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
REISERFS warning (device loop1): jmacd-7 reiserfs_fill_super: resize option for remount only
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=104 sclass=netlink_route_socket pid=9112 comm=syz-executor.5
netlink: 'syz-executor.3': attribute type 2 has an invalid length.
netlink: 'syz-executor.3': attribute type 2 has an invalid length.
device vxlan0 entered promiscuous mode