Warning: Permanently added '10.128.0.129' (ECDSA) to the list of known hosts. syzkaller login: [ 41.897553] audit: type=1400 audit(1600868983.406:8): avc: denied { execmem } for pid=6459 comm="syz-executor882" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.925323] IPVS: ftp: loaded support on port[0] = 21 [ 42.013439] chnl_net:caif_netlink_parms(): no params data found [ 42.117307] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.125773] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.133678] device bridge_slave_0 entered promiscuous mode [ 42.143175] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.149739] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.156860] device bridge_slave_1 entered promiscuous mode [ 42.176129] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.185680] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.205971] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.214033] team0: Port device team_slave_0 added [ 42.220305] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.227646] team0: Port device team_slave_1 added [ 42.244584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.251187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.276694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.288494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.294967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.320454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.331660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.339339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.361084] device hsr_slave_0 entered promiscuous mode [ 42.367043] device hsr_slave_1 entered promiscuous mode [ 42.373790] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.381257] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.455527] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.462047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.469044] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.475721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.512666] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 42.518772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.530707] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.542452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.552016] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.560626] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.567730] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 42.579613] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.585722] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.596041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.604021] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.610476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.620448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.628200] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.634679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.650344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.666503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.677840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.689525] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.696702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.705344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.714100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.722388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.730578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.743347] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 42.752738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.759873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.770649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.786119] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 42.796635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.838142] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 42.845600] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 42.853174] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 42.863946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.872100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.880484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.891028] device veth0_vlan entered promiscuous mode [ 42.901814] device veth1_vlan entered promiscuous mode [ 42.907789] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 42.917218] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 42.929985] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 42.942078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.950210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.957831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.969437] device veth0_macvtap entered promiscuous mode [ 42.975906] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 42.985704] device veth1_macvtap entered promiscuous mode [ 42.995695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 43.005952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 43.014847] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.024984] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 43.033584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.041523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.050767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.063462] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 43.070944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.077651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.086055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 43.362843] ================================================================================ [ 43.372027] UBSAN: Undefined behaviour in ./include/net/red.h:272:18 [ 43.378638] shift exponent 71 is too large for 64-bit type 'long unsigned int' [ 43.385992] CPU: 0 PID: 2804 Comm: kworker/0:2 Not tainted 4.19.147-syzkaller #0 [ 43.393633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.403751] Workqueue: ipv6_addrconf addrconf_dad_work [ 43.409017] Call Trace: [ 43.411616] dump_stack+0x22c/0x33e [ 43.415298] ubsan_epilogue+0xe/0x3a [ 43.419115] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 43.425268] ? kvm_clock_get_cycles+0x14/0x30 [ 43.429756] ? ktime_get+0x21b/0x320 [ 43.433481] red_enqueue+0x2064/0x2200 [ 43.437388] ? red_graft+0x320/0x320 [ 43.441109] ? __dev_queue_xmit+0x1425/0x2ec0 [ 43.445609] __dev_queue_xmit+0x14e1/0x2ec0 [ 43.449943] ? ctnetlink_conntrack_event+0xc82/0x1405 [ 43.455739] ? netdev_pick_tx+0x350/0x350 [ 43.459898] ? mark_held_locks+0xa6/0xf0 [ 43.464397] ? ip_finish_output2+0x1073/0x1640 [ 43.468972] ip_finish_output2+0xc04/0x1640 [ 43.473291] ? ip_reply_glue_bits+0xb0/0xb0 [ 43.477609] ? lock_downgrade+0x750/0x750 [ 43.482280] ip_finish_output+0x88e/0xd80 [ 43.486683] ip_output+0x203/0x650 [ 43.490227] ? ip_mc_output+0xff0/0xff0 [ 43.494309] ? ip_fragment.constprop.0+0x240/0x240 [ 43.499702] ? prandom_u32+0xa3/0x100 [ 43.503943] ip_local_out+0xaf/0x170 [ 43.507672] iptunnel_xmit+0x63e/0xa30 [ 43.511564] geneve_xmit+0xeb4/0x2a20 [ 43.516099] ? geneve_fill_metadata_dst+0xd00/0xd00 [ 43.521124] ? netif_skb_features+0x3f9/0xb20 [ 43.525626] dev_hard_start_xmit+0x1a8/0x960 [ 43.530035] __dev_queue_xmit+0x276a/0x2ec0 [ 43.535233] ? __neigh_create+0x1286/0x1d80 [ 43.539808] ? netdev_pick_tx+0x350/0x350 [ 43.543965] ? ip6_finish_output2+0x1184/0x2370 [ 43.548635] ? memcpy+0x35/0x50 [ 43.551910] neigh_resolve_output+0x55a/0x950 [ 43.556406] ip6_finish_output2+0x1184/0x2370 [ 43.561008] ? ip6_append_data+0x300/0x300 [ 43.565243] ? lock_downgrade+0x750/0x750 [ 43.569474] ? check_preemption_disabled+0x41/0x2b0 [ 43.574680] ip6_finish_output+0x610/0xcc0 [ 43.578918] ip6_output+0x205/0x7c0 [ 43.582633] ? ip6_finish_output+0xcc0/0xcc0 [ 43.587393] ? ip6_fragment+0x3390/0x3390 [ 43.591556] ? check_preemption_disabled+0x41/0x2b0 [ 43.596579] ndisc_send_skb+0xa6b/0x1860 [ 43.600644] ? pndisc_constructor+0x250/0x250 [ 43.605155] ? __kmalloc_node_track_caller+0x38/0x70 [ 43.610265] ? do_ipv6_setsockopt.constprop.0.cold+0x8c/0x8c [ 43.616248] ? __alloc_skb+0x36d/0x580 [ 43.620223] ? skb_set_owner_w+0x21f/0x370 [ 43.624458] ndisc_send_ns+0x51d/0x840 [ 43.628345] ? addrconf_dad_work+0xab2/0x1130 [ 43.632834] ? pndisc_redo+0x20/0x20 [ 43.636553] ? mark_held_locks+0xa6/0xf0 [ 43.640608] ? addrconf_dad_work+0x677/0x1130 [ 43.645108] ? __local_bh_enable_ip+0x159/0x2a0 [ 43.650052] addrconf_dad_work+0xb78/0x1130 [ 43.654559] ? addrconf_dad_completed+0xb60/0xb60 [ 43.660102] process_one_work+0x796/0x14e0 [