loop2: p2 size 1073741824 extends beyond EOD, truncated
netlink: 'syz-executor.3': attribute type 5 has an invalid length.
loop2: p5 size 1073741824 extends beyond EOD, truncated
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:87:38
shift exponent -246 is negative
CPU: 1 PID: 7957 Comm: syz-executor.0 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 est_timer.cold+0x96/0x126 net/core/gen_estimator.c:87
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:check_kcov_mode kernel/kcov.c:67 [inline]
RIP: 0010:write_comp_data+0x16/0x70 kernel/kcov.c:122
Code: 39 d0 76 07 48 89 34 d1 48 89 11 c3 0f 1f 84 00 00 00 00 00 49 89 f1 49 89 fa 65 48 8b 34 25 40 ee 01 00 65 8b 05 0a 1b 90 7e <a9> 00 01 1f 00 75 4f 8b 86 e0 12 00 00 83 f8 03 75 44 48 8b 86 e8
RSP: 0018:ffff888049ab7930 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff867fa812
RDX: 0000000000000000 RSI: ffff888049aae400 RDI: 0000000000000001
RBP: 00000000000650d9 R08: 00000000efa77f1f R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: 00000000000ca1b3
R13: 000000000000000a R14: 000000000000000a R15: dffffc0000000000
 rcu_read_lock include/linux/rcupdate.h:628 [inline]
 inet_twsk_purge+0x142/0x80b net/ipv4/inet_timewait_sock.c:267
 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156
 setup_net+0x3d1/0x720 net/core/net_namespace.c:332
 copy_net_ns+0x22c/0x36a net/core/net_namespace.c:438
 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
 copy_namespaces+0x37f/0x420 kernel/nsproxy.c:165
 copy_process.part.0+0x3e1f/0x7fb0 kernel/fork.c:1900
 copy_process kernel/fork.c:1694 [inline]
 _do_fork+0x22f/0x1020 kernel/fork.c:2207
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de29
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb8f64eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000001fc0 RCX: 000000000045de29
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 000002004230c7fc
RBP: 000000000118c018 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4
R13: 00007ffe0173116f R14: 00007fb8f64eb9c0 R15: 000000000118bfd4
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:88:23
shift exponent 255 is too large for 64-bit type 'long long unsigned int'
CPU: 1 PID: 7957 Comm: syz-executor.0 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 est_timer.cold+0xd6/0x126 net/core/gen_estimator.c:88
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:check_kcov_mode kernel/kcov.c:67 [inline]
RIP: 0010:write_comp_data+0x16/0x70 kernel/kcov.c:122
Code: 39 d0 76 07 48 89 34 d1 48 89 11 c3 0f 1f 84 00 00 00 00 00 49 89 f1 49 89 fa 65 48 8b 34 25 40 ee 01 00 65 8b 05 0a 1b 90 7e <a9> 00 01 1f 00 75 4f 8b 86 e0 12 00 00 83 f8 03 75 44 48 8b 86 e8
RSP: 0018:ffff888049ab7930 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff867fa812
RDX: 0000000000000000 RSI: ffff888049aae400 RDI: 0000000000000001
RBP: 00000000000650d9 R08: 00000000efa77f1f R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: 00000000000ca1b3
R13: 000000000000000a R14: 000000000000000a R15: dffffc0000000000
 rcu_read_lock include/linux/rcupdate.h:628 [inline]
 inet_twsk_purge+0x142/0x80b net/ipv4/inet_timewait_sock.c:267
 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156
 setup_net+0x3d1/0x720 net/core/net_namespace.c:332
 copy_net_ns+0x22c/0x36a net/core/net_namespace.c:438
 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
 copy_namespaces+0x37f/0x420 kernel/nsproxy.c:165
 copy_process.part.0+0x3e1f/0x7fb0 kernel/fork.c:1900
 copy_process kernel/fork.c:1694 [inline]
 _do_fork+0x22f/0x1020 kernel/fork.c:2207
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de29
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb8f64eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000001fc0 RCX: 000000000045de29
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 000002004230c7fc
RBP: 000000000118c018 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4
R13: 00007ffe0173116f R14: 00007fb8f64eb9c0 R15: 000000000118bfd4
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:90:46
shift exponent -246 is negative
CPU: 1 PID: 7957 Comm: syz-executor.0 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 est_timer.cold+0x17/0x126 net/core/gen_estimator.c:90
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:check_kcov_mode kernel/kcov.c:67 [inline]
RIP: 0010:write_comp_data+0x16/0x70 kernel/kcov.c:122
Code: 39 d0 76 07 48 89 34 d1 48 89 11 c3 0f 1f 84 00 00 00 00 00 49 89 f1 49 89 fa 65 48 8b 34 25 40 ee 01 00 65 8b 05 0a 1b 90 7e <a9> 00 01 1f 00 75 4f 8b 86 e0 12 00 00 83 f8 03 75 44 48 8b 86 e8
RSP: 0018:ffff888049ab7930 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff867fa812
RDX: 0000000000000000 RSI: ffff888049aae400 RDI: 0000000000000001
RBP: 00000000000650d9 R08: 00000000efa77f1f R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: 00000000000ca1b3
R13: 000000000000000a R14: 000000000000000a R15: dffffc0000000000
 rcu_read_lock include/linux/rcupdate.h:628 [inline]
 inet_twsk_purge+0x142/0x80b net/ipv4/inet_timewait_sock.c:267
 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156
 setup_net+0x3d1/0x720 net/core/net_namespace.c:332
 copy_net_ns+0x22c/0x36a net/core/net_namespace.c:438
 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
 copy_namespaces+0x37f/0x420 kernel/nsproxy.c:165
 copy_process.part.0+0x3e1f/0x7fb0 kernel/fork.c:1900
 copy_process kernel/fork.c:1694 [inline]
 _do_fork+0x22f/0x1020 kernel/fork.c:2207
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de29
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb8f64eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000001fc0 RCX: 000000000045de29
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 000002004230c7fc
RBP: 000000000118c018 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4
R13: 00007ffe0173116f R14: 00007fb8f64eb9c0 R15: 000000000118bfd4
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:91:22
shift exponent 255 is too large for 64-bit type 'long long unsigned int'
CPU: 1 PID: 7957 Comm: syz-executor.0 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 est_timer.cold+0x5b/0x126 net/core/gen_estimator.c:91
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:check_kcov_mode kernel/kcov.c:67 [inline]
RIP: 0010:write_comp_data+0x16/0x70 kernel/kcov.c:122
Code: 39 d0 76 07 48 89 34 d1 48 89 11 c3 0f 1f 84 00 00 00 00 00 49 89 f1 49 89 fa 65 48 8b 34 25 40 ee 01 00 65 8b 05 0a 1b 90 7e <a9> 00 01 1f 00 75 4f 8b 86 e0 12 00 00 83 f8 03 75 44 48 8b 86 e8
RSP: 0018:ffff888049ab7930 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff867fa812
RDX: 0000000000000000 RSI: ffff888049aae400 RDI: 0000000000000001
RBP: 00000000000650d9 R08: 00000000efa77f1f R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: 00000000000ca1b3
R13: 000000000000000a R14: 000000000000000a R15: dffffc0000000000
 rcu_read_lock include/linux/rcupdate.h:628 [inline]
 inet_twsk_purge+0x142/0x80b net/ipv4/inet_timewait_sock.c:267
 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156
 setup_net+0x3d1/0x720 net/core/net_namespace.c:332
 copy_net_ns+0x22c/0x36a net/core/net_namespace.c:438
 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
 copy_namespaces+0x37f/0x420 kernel/nsproxy.c:165
 copy_process.part.0+0x3e1f/0x7fb0 kernel/fork.c:1900
 copy_process kernel/fork.c:1694 [inline]
 _do_fork+0x22f/0x1020 kernel/fork.c:2207
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de29
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb8f64eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000001fc0 RCX: 000000000045de29
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 000002004230c7fc
RBP: 000000000118c018 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4
R13: 00007ffe0173116f R14: 00007fb8f64eb9c0 R15: 000000000118bfd4
================================================================================
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
device vxlan0 entered promiscuous mode
device vxlan0 entered promiscuous mode
nla_parse: 2 callbacks suppressed
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
device vxlan0 entered promiscuous mode
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
device vxlan0 entered promiscuous mode
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
device vxlan0 entered promiscuous mode
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
device vxlan0 entered promiscuous mode
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read
kvm: pic: level sensitive irq not supported
kvm: pic: non byte read