nla_parse: 1 callbacks suppressed
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
================================================================================
UBSAN: Undefined behaviour in net/sched/sch_api.c:561:7
shift exponent 129 is too large for 32-bit type 'int'
CPU: 1 PID: 747 Comm: syz-executor.0 Not tainted 4.19.150-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 __qdisc_calculate_pkt_len+0x3bb/0x570 net/sched/sch_api.c:561
 qdisc_calculate_pkt_len include/net/sch_generic.h:697 [inline]
 __dev_xmit_skb net/core/dev.c:3443 [inline]
 __dev_queue_xmit+0x1372/0x2ec0 net/core/dev.c:3807
 neigh_hh_output include/net/neighbour.h:491 [inline]
 neigh_output include/net/neighbour.h:499 [inline]
 ip_finish_output2+0xc04/0x1640 net/ipv4/ip_output.c:230
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
 ip_finish_output+0x88e/0xd80 net/ipv4/ip_output.c:318
 NF_HOOK_COND include/linux/netfilter.h:278 [inline]
 ip_output+0x203/0x650 net/ipv4/ip_output.c:406
 dst_output include/net/dst.h:455 [inline]
 ip_local_out+0xaf/0x170 net/ipv4/ip_output.c:125
 __ip_queue_xmit+0x8a0/0x1bd0 net/ipv4/ip_output.c:506
 __tcp_transmit_skb+0x1c72/0x36c0 net/ipv4/tcp_output.c:1148
 __tcp_send_ack+0x426/0x610 net/ipv4/tcp_output.c:3640
 tcp_cleanup_rbuf+0x30f/0x5b0 net/ipv4/tcp.c:1602
 tcp_read_sock+0x580/0x730 net/ipv4/tcp.c:1706
 __tcp_splice_read net/ipv4/tcp.c:767 [inline]
 tcp_splice_read+0x20b/0xb90 net/ipv4/tcp.c:809
 sock_splice_read+0xa6/0xe0 net/socket.c:859
 do_splice_to+0x10e/0x160 fs/splice.c:881
 do_splice fs/splice.c:1186 [inline]
 __do_sys_splice fs/splice.c:1428 [inline]
 __se_sys_splice+0x12b5/0x15f0 fs/splice.c:1408
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fee325eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
RAX: ffffffffffffffda RBX: 00000000000350c0 RCX: 000000000045de59
RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 000000000118bf78 R08: 0000000000040009 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffd3dd3f85f R14: 00007fee325eb9c0 R15: 000000000118bf2c
================================================================================
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
nla_parse: 12 callbacks suppressed
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
MPI: mpi too large (16392 bits)
MPI: mpi too large (16392 bits)
MPI: mpi too large (16392 bits)
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
MPI: mpi too large (16392 bits)
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
MPI: mpi too large (16392 bits)
MPI: mpi too large (16392 bits)
MPI: mpi too large (16392 bits)
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
MPI: mpi too large (16392 bits)
MPI: mpi too large (16392 bits)
MPI: mpi too large (16392 bits)