syzbot

------------[ cut here ]------------
UBSAN: shift-out-of-bounds in net/ipv4/fib_trie.c:1467:11
shift exponent 128 is too large for 32-bit type 'unsigned int'
CPU: 0 UID: 0 PID: 1089 Comm: kworker/u4:9 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468
 fib_table_lookup+0x488/0x1870 net/ipv4/fib_trie.c:1467
 fib_lookup+0x1c0/0x450 include/net/ip_fib.h:388
 ip_route_output_key_hash_rcu+0x270/0x2290 net/ipv4/route.c:2793
 ip_route_output_key_hash+0x193/0x2b0 net/ipv4/route.c:2683
 __ip_route_output_key include/net/route.h:169 [inline]
 ip_route_output_flow+0x29/0x140 net/ipv4/route.c:2911
 ip_route_output_key include/net/route.h:179 [inline]
 udp_tunnel_dst_lookup+0x2c6/0x640 net/ipv4/udp_tunnel_core.c:239
 geneve_xmit_skb drivers/net/geneve.c:840 [inline]
 geneve_xmit+0x968/0x2bf0 drivers/net/geneve.c:1039
 __netdev_start_xmit include/linux/netdevice.h:5150 [inline]
 netdev_start_xmit include/linux/netdevice.h:5159 [inline]
 xmit_one net/core/dev.c:3735 [inline]
 dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3751
 __dev_queue_xmit+0x1b73/0x3f50 net/core/dev.c:4584
 dev_queue_xmit include/linux/netdevice.h:3311 [inline]
 neigh_hh_output include/net/neighbour.h:523 [inline]
 neigh_output include/net/neighbour.h:537 [inline]
 ip6_finish_output2+0x127d/0x17c0 net/ipv6/ip6_output.c:141
 ip6_finish_output+0x41e/0x840 net/ipv6/ip6_output.c:226
 NF_HOOK+0x9e/0x430 include/linux/netfilter.h:314
 mld_sendpack+0x843/0xdb0 net/ipv6/mcast.c:1868
 ipv6_mc_dad_complete+0x88/0x490 net/ipv6/mcast.c:2293
 addrconf_dad_completed+0x712/0xcd0 net/ipv6/addrconf.c:4336
 addrconf_dad_work+0xdbc/0x16a0
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3317
 worker_thread+0x870/0xd30 kernel/workqueue.c:3398
 kthread+0x7a9/0x920 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace ]---