================================================================================ UBSAN: shift-out-of-bounds in ./include/net/red.h:312:18 shift exponent 193 is too large for 64-bit type 'long unsigned int' CPU: 0 PID: 10912 Comm: syz-executor.0 Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x141/0x1d7 lib/dump_stack.c:120 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:327 red_calc_qavg_from_idle_time include/net/red.h:312 [inline] red_calc_qavg include/net/red.h:353 [inline] choke_enqueue.cold+0x18/0x3dd net/sched/sch_choke.c:221 __dev_xmit_skb net/core/dev.c:3837 [inline] __dev_queue_xmit+0x1943/0x2e00 net/core/dev.c:4150 neigh_hh_output include/net/neighbour.h:499 [inline] neigh_output include/net/neighbour.h:508 [inline] ip_finish_output2+0xeec/0x21f0 net/ipv4/ip_output.c:230 __ip_finish_output net/ipv4/ip_output.c:308 [inline] __ip_finish_output+0x396/0x640 net/ipv4/ip_output.c:290 ip_finish_output+0x35/0x200 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:290 [inline] ip_output+0x196/0x310 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:448 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] __ip_queue_xmit+0x8e9/0x1a00 net/ipv4/ip_output.c:533 sctp_v4_xmit+0x810/0xb40 net/sctp/protocol.c:1082 sctp_packet_transmit+0x1f44/0x32f0 net/sctp/output.c:627 sctp_outq_flush_transports net/sctp/outqueue.c:1147 [inline] sctp_outq_flush+0x2aa/0x2580 net/sctp/outqueue.c:1195 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1801 [inline] sctp_side_effects net/sctp/sm_sideeffect.c:1185 [inline] sctp_do_sm+0x74e/0x5120 net/sctp/sm_sideeffect.c:1156 sctp_primitive_REQUESTHEARTBEAT+0x9b/0xc0 net/sctp/primitive.c:185 sctp_apply_peer_addr_params+0x110/0x1ed0 net/sctp/socket.c:2413 sctp_setsockopt_peer_addr_params net/sctp/socket.c:2661 [inline] sctp_setsockopt+0x49f2/0x9bf0 net/sctp/socket.c:4552 __sys_setsockopt+0x2db/0x610 net/socket.c:2117 __do_sys_setsockopt net/socket.c:2128 [inline] __se_sys_setsockopt net/socket.c:2125 [inline] __x64_sys_setsockopt+0xba/0x150 net/socket.c:2125 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x465f69 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f08c74ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 RBP: 00000000004bfa67 R08: 000000000000009c R09: 0000000000000000 R10: 0000000020000300 R11: 0000000000000246 R12: 000000000056c0b0 R13: 00007ffd705c5ddf R14: 00007f08c74ef300 R15: 0000000000022000 ================================================================================