Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. [ 39.977947] audit: type=1400 audit(1602763189.354:8): avc: denied { execmem } for pid=6492 comm="syz-executor747" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 39.994531] IPVS: ftp: loaded support on port[0] = 21 [ 40.081569] chnl_net:caif_netlink_parms(): no params data found [ 40.146404] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.153378] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.160649] device bridge_slave_0 entered promiscuous mode [ 40.170689] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.178320] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.185696] device bridge_slave_1 entered promiscuous mode [ 40.208658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.218567] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.239592] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.247435] team0: Port device team_slave_0 added [ 40.253725] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.261055] team0: Port device team_slave_1 added [ 40.279182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.285676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.311088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.324093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.330356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.355762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.366629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.374609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.394881] device hsr_slave_0 entered promiscuous mode [ 40.400663] device hsr_slave_1 entered promiscuous mode [ 40.407216] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.414774] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.488039] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.494498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.501435] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.507877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.540646] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 40.548187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.557565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.566952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.576612] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.584011] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.591239] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.602955] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.609170] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.619042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.627319] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.633811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.643801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.651669] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.658036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.673394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.684565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.692383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.704792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.716492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.728113] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.734584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.742702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.756239] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 40.768063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.775706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.783166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.797007] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 40.807472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.844628] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 40.852006] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 40.858621] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 40.868802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.876984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.884304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.893499] device veth0_vlan entered promiscuous mode [ 40.903462] device veth1_vlan entered promiscuous mode [ 40.909557] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 40.919136] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 40.931252] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 40.941975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.949261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.957409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.968018] device veth0_macvtap entered promiscuous mode [ 40.975032] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 40.983805] device veth1_macvtap entered promiscuous mode [ 40.993262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 41.002726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 41.014316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.021237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.030573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.041781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.052640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 41.261839] ================================================================================ [ 41.270607] UBSAN: Undefined behaviour in ./include/net/red.h:272:18 [ 41.277090] shift exponent 103 is too large for 64-bit type 'long unsigned int' [ 41.284524] CPU: 0 PID: 6493 Comm: syz-executor747 Not tainted 4.19.150-syzkaller #0 [ 41.292408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.301914] Call Trace: [ 41.304493] [ 41.306717] dump_stack+0x22c/0x33e [ 41.310353] ubsan_epilogue+0xe/0x3a [ 41.314049] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 41.320176] ? kvm_clock_get_cycles+0x14/0x30 [ 41.324661] ? ktime_get+0x21b/0x320 [ 41.328365] red_enqueue+0x2064/0x2200 [ 41.332235] ? red_graft+0x320/0x320 [ 41.335926] ? __dev_queue_xmit+0x1425/0x2ec0 [ 41.340406] __dev_queue_xmit+0x14e1/0x2ec0 [ 41.344726] ? __lock_acquire+0x6ec/0x3ff0 [ 41.348940] ? netdev_pick_tx+0x350/0x350 [ 41.353075] ? mark_held_locks+0xa6/0xf0 [ 41.357114] ? ip_finish_output2+0x1073/0x1640 [ 41.361677] ip_finish_output2+0xc04/0x1640 [ 41.365991] ? ip_reply_glue_bits+0xb0/0xb0 [ 41.370291] ? lock_downgrade+0x750/0x750 [ 41.374431] ip_finish_output+0x88e/0xd80 [ 41.378566] ip_output+0x203/0x650 [ 41.382106] ? ip_mc_output+0xff0/0xff0 [ 41.386060] ? ip_fragment.constprop.0+0x240/0x240 [ 41.391055] ? prandom_u32+0xa3/0x100 [ 41.394838] ip_local_out+0xaf/0x170 [ 41.398532] iptunnel_xmit+0x63e/0xa30 [ 41.402404] geneve_xmit+0xf46/0x2ac0 [ 41.406209] ? geneve_fill_metadata_dst+0x1590/0x1590 [ 41.411386] ? netif_skb_features+0x3f9/0xb20 [ 41.415867] dev_hard_start_xmit+0x1a8/0x960 [ 41.420258] __dev_queue_xmit+0x276a/0x2ec0 [ 41.424569] ? netdev_pick_tx+0x350/0x350 [ 41.428740] ? ip6_finish_output+0x610/0xcc0 [ 41.433159] ? mark_held_locks+0xa6/0xf0 [ 41.437206] ? ip6_finish_output2+0x1777/0x2370 [ 41.441859] ip6_finish_output2+0xe78/0x2370 [ 41.446269] ? ip6_append_data+0x300/0x300 [ 41.450484] ? lock_downgrade+0x750/0x750 [ 41.454613] ? check_preemption_disabled+0x41/0x2b0 [ 41.459649] ip6_finish_output+0x610/0xcc0 [ 41.463879] ip6_output+0x205/0x7c0 [ 41.467498] ? ip6_finish_output+0xcc0/0xcc0 [ 41.471887] ? ip6_fragment+0x3390/0x3390 [ 41.476015] ? check_preemption_disabled+0x41/0x2b0 [ 41.481038] mld_sendpack+0x6c1/0x1120 [ 41.484913] ? add_grhead+0x223/0x330 [ 41.488692] ? igmp6_mc_seq_stop+0x1a0/0x1a0 [ 41.493081] ? icmpv6_rcv.cold+0x94/0x94 [ 41.497122] ? mld_ifc_timer_expire+0x604/0xc00 [ 41.501775] ? mld_ifc_timer_expire+0x4a3/0xc00 [ 41.506421] ? __local_bh_enable_ip+0x159/0x2a0 [ 41.511095] ? lockdep_hardirqs_on+0x29f/0x5e0 [ 41.515687] mld_ifc_timer_expire+0x616/0xc00 [ 41.520174] call_timer_fn+0x177/0x760 [ 41.524045] ? mld_clear_delrec+0x380/0x380 [ 41.528348] ? init_timer_key+0x370/0x370 [ 41.532476] ? mark_held_locks+0xa6/0xf0 [ 41.536515] ? _raw_spin_unlock_irq+0x24/0x90 [ 41.541023] ? mld_clear_delrec+0x380/0x380 [ 41.545340] expire_timers+0x243/0x500 [ 41.549215] run_timer_softirq+0x259/0x730 [ 41.553435] ? expire_timers+0x500/0x500 [ 41.557491] ? kvm_sched_clock_read+0x2a/0x40 [ 41.561986] __do_softirq+0x27d/0xad2 [ 41.565839] irq_exit+0x22d/0x270 [ 41.569305] smp_apic_timer_interrupt+0x15f/0x5d0 [ 41.574154] apic_timer_interrupt+0xf/0x20 [ 41.578383] [ 41.580621] RIP: 0010:__local_bh_enable_ip+0x18d/0x2a0 [ 41.585967] Code: 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 08 01 00 00 48 83 3d 18 66 1f 08 00 0f 84 ac 00 00 00 fb 66 0f 1f 44 00 00 <65> 8b 05 dc c9 bd 7e 85 c0 0f 84 a4 00 00 00 5b 5d 41 5c c3 44 0f [ 41.604868] RSP: 0018:ffff88808dd9f780 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 41.612560] RAX: 1ffffffff12c713f RBX: 0000000000000200 RCX: 1ffff1101480e135 [ 41.619940] RDX: dffffc0000000000 RSI: ffff8880a4070988 RDI: ffff8880a4070984 [ 41.627215] RBP: ffffffff864b278b R08: 0000000000000001 R09: 0000000000000000 [ 41.634475] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a4070100 [ 41.641792] R13: 00000000000058d0 R14: ffff88808dd9f838 R15: 0000000000000001 [ 41.649100] ? nf_ct_iterate_cleanup+0x1fb/0x510 [ 41.653914] nf_ct_iterate_cleanup+0x224/0x510 [ 41.658495] ? nf_ct_port_nlattr_to_tuple+0x190/0x190 [ 41.663685] nf_ct_iterate_cleanup_net+0x113/0x170 [ 41.668599] ? nf_nat_masquerade_ipv6_unregister_notifier+0x60/0x60 [ 41.674986] ? nf_ct_iterate_cleanup+0x510/0x510 [ 41.679722] ? nf_nat_masquerade_ipv6_unregister_notifier+0x60/0x60 [ 41.686109] ? inet6_ifinfo_notify+0x140/0x140 [ 41.690673] masq_device_event+0xae/0xe0 [ 41.694727] notifier_call_chain+0xc0/0x230 [ 41.699040] dev_close_many+0x323/0x670 [ 41.703006] ? __dev_close_many+0x300/0x300 [ 41.707307] ? lock_downgrade+0x750/0x750 [ 41.711450] rollback_registered_many+0x2e8/0xf00 [ 41.716273] ? trace_hardirqs_off+0x64/0x200 [ 41.720661] ? generic_xdp_install+0x5c0/0x5c0 [ 41.725245] ? round_jiffies_up_relative+0xd0/0xd0 [ 41.730162] ? find_held_lock+0x2d/0x110 [ 41.734212] ? mark_held_locks+0xa6/0xf0 [ 41.738254] rollback_registered+0xe9/0x1b0 [ 41.742557] ? rollback_registered_many+0xf00/0xf00 [ 41.747554] ? linkwatch_schedule_work+0x135/0x170 [ 41.752482] unregister_netdevice_queue+0x1de/0x400 [ 41.757480] __tun_detach+0x1129/0x1480 [ 41.761548] ? __tun_detach+0x1480/0x1480 [ 41.765674] tun_chr_close+0xf6/0x1a0 [ 41.769451] __fput+0x2ce/0x8a0 [ 41.772725] task_work_run+0x141/0x1c0 [ 41.776593] do_exit+0xc09/0x2d80 [ 41.780035] ? find_held_lock+0x2d/0x110 [ 41.784074] ? __close_fd+0x1f3/0x220 [ 41.787852] ? mm_update_next_owner+0x660/0x660 [ 41.792503] ? lock_downgrade+0x750/0x750 [ 41.796632] ? lock_acquire+0x170/0x3f0 [ 41.800611] do_group_exit+0x125/0x320 [ 41.804503] __x64_sys_exit_group+0x3a/0x50 [ 41.808812] do_syscall_64+0xf9/0x670 [ 41.812603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.817783] RIP: 0033:0x443418 [ 41.820973] Code: Bad RIP value. [ 41.824317] RSP: 002b:00007ffcc8fe5be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 41.832019] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000443418 [ 41.839277] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 41.846535] RBP: 00000000004c9970 R08: 00000000000000e7 R09: ffffffffffffffd4 [ 41.853797] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 41.861061] R13: 00000000006de260 R14: 0000000000000000 R15: 0000000000000000 [ 41.868317] ================================================================================