squashfs: SQUASHFS error: Page size > filesystem block size (4). This is currently not supported! overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. ================================================================================ UBSAN: Undefined behaviour in net/sched/sch_api.c:569:10 shift exponent 92 is too large for 32-bit type 'int' CPU: 0 PID: 23 Comm: kworker/u4:1 Not tainted 4.19.149-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events_unbound call_usermodehelper_exec_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 __qdisc_calculate_pkt_len+0x370/0x570 net/sched/sch_api.c:569 qdisc_calculate_pkt_len include/net/sch_generic.h:697 [inline] __dev_xmit_skb net/core/dev.c:3443 [inline] __dev_queue_xmit+0x1372/0x2ec0 net/core/dev.c:3807 neigh_resolve_output+0x55a/0x950 net/core/neighbour.c:1374 neigh_output include/net/neighbour.h:501 [inline] ip6_finish_output2+0x1184/0x2370 net/ipv6/ip6_output.c:120 ip6_finish_output+0x610/0xcc0 net/ipv6/ip6_output.c:154 NF_HOOK_COND include/linux/netfilter.h:278 [inline] ip6_output+0x205/0x7c0 net/ipv6/ip6_output.c:171 dst_output include/net/dst.h:455 [inline] NF_HOOK include/linux/netfilter.h:289 [inline] ndisc_send_skb+0xa6b/0x1860 net/ipv6/ndisc.c:491 ndisc_send_rs+0x131/0x6a0 net/ipv6/ndisc.c:685 addrconf_rs_timer+0x2d9/0x640 net/ipv6/addrconf.c:3834 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338 expire_timers+0x243/0x500 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1703 [inline] run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716 __do_softirq+0x27d/0xad2 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x22d/0x270 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:544 [inline] smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:unwind_next_frame+0x151c/0x2430 arch/x86/kernel/unwind_orc.c:562 Code: 0f 95 c0 45 84 c1 0f 85 1c 0a 00 00 83 e0 07 40 38 c6 41 0f 9e c0 40 84 f6 0f 95 c0 41 84 c0 0f 85 03 0a 00 00 48 0f bf 71 02 <4c> 89 ff 4c 01 e6 e8 09 e9 ff ff 84 c0 0f 85 08 f9 ff ff e9 43 ef RSP: 0018:ffff8880a9bdf528 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 1ffff1101537bead RCX: ffffffff8ba17d1c RDX: ffff8880a9bdf640 RSI: ffffffffffffffd0 RDI: ffffffff8ba17d1e RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 R10: ffff8880a9bdf65f R11: 0000000000000001 R12: ffff8880a9bdff18 R13: ffff8880a9bdf635 R14: ffff8880a9bdf650 R15: ffff8880a9bdf600 __save_stack_trace+0x83/0x100 arch/x86/kernel/stacktrace.c:44 save_stack mm/kasan/kasan.c:448 [inline] set_track mm/kasan/kasan.c:460 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:553 kmem_cache_alloc+0x126/0x4a0 mm/slab.c:3559 kmem_cache_zalloc include/linux/slab.h:699 [inline] __delayacct_tsk_init+0x1b/0x80 kernel/delayacct.c:45 delayacct_tsk_init include/linux/delayacct.h:105 [inline] copy_process.part.0+0x363c/0x7fb0 kernel/fork.c:1783 copy_process kernel/fork.c:1694 [inline] _do_fork+0x22f/0x1020 kernel/fork.c:2207 kernel_thread+0x2f/0x40 kernel/fork.c:2266 call_usermodehelper_exec_work+0x16d/0x260 kernel/umh.c:190 process_one_work+0x796/0x14e0 kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ================================================================================ squashfs: SQUASHFS error: Page size > filesystem block size (4). This is currently not supported! kauditd_printk_skb: 32 callbacks suppressed audit: type=1800 audit(1601989067.345:65): pid=15428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15769 res=0 UDF-fs: warning (device loop0): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 512 failed audit: type=1800 audit(1601989068.135:66): pid=15461 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15769 res=0 UDF-fs: warning (device loop0): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 1024 failed UDF-fs: warning (device loop0): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 2048 failed UDF-fs: warning (device loop0): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 4096 failed UDF-fs: warning (device loop0): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 512 failed UDF-fs: warning (device loop0): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 1024 failed UDF-fs: warning (device loop0): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 2048 failed UDF-fs: warning (device loop0): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 4096 failed hfs: session requires an argument hfs: unable to parse mount options audit: type=1800 audit(1601989068.885:67): pid=15494 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=16685 res=0 nla_parse: 7 callbacks suppressed netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 'syz-executor.2': attribute type 1 has an invalid length. device bond2 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready 8021q: adding VLAN 0 to HW filter on device bond2 netlink: 'syz-executor.2': attribute type 1 has an invalid length. sd 0:0:1:0: [sg0] tag#1893 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#1893 CDB: Test Unit Ready sd 0:0:1:0: [sg0] tag#1893 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[c0]: 00 00 00 00 00 00 00 00 mkiss: ax0: crc mode is auto. mkiss: ax1: crc mode is auto. sd 0:0:1:0: [sg0] tag#1893 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#1893 CDB: Test Unit Ready sd 0:0:1:0: [sg0] tag#1893 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#1893 CDB[c0]: 00 00 00 00 00 00 00 00 mkiss: ax0: crc mode is auto. mkiss: ax1: crc mode is auto. IPVS: ftp: loaded support on port[0] = 21 overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. vivid-001: disconnect vivid-001: reconnect IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 nft_compat: unsupported protocol 0 overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. overlayfs: filesystem on './file0' not supported as upperdir SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15934 comm=syz-executor.5 IPVS: ftp: loaded support on port[0] = 21 overlayfs: conflicting lowerdir path SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15957 comm=syz-executor.5 overlayfs: conflicting lowerdir path