Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. [ 38.879427] audit: type=1400 audit(1600902423.870:8): avc: denied { execmem } for pid=6488 comm="syz-executor747" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 38.898936] IPVS: ftp: loaded support on port[0] = 21 [ 38.983466] chnl_net:caif_netlink_parms(): no params data found [ 39.046086] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.053458] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.061757] device bridge_slave_0 entered promiscuous mode [ 39.070175] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.076580] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.084278] device bridge_slave_1 entered promiscuous mode [ 39.103578] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.113149] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.132154] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.140790] team0: Port device team_slave_0 added [ 39.146326] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.155103] team0: Port device team_slave_1 added [ 39.170684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.176930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.202183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.213783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.220103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.245385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.256387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.264220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.284595] device hsr_slave_0 entered promiscuous mode [ 39.290382] device hsr_slave_1 entered promiscuous mode [ 39.296435] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.303765] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.371883] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.378287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.385190] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.391670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.426089] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 39.433794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.442755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.451648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.461019] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.467984] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.475591] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 39.485960] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 39.492392] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.502418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.510063] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.516385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.540004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.547600] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.554039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.562605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.570705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.578340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.586300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.594646] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 39.601102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.608343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.623220] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 39.630861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.637498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.649376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.663869] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 39.673539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.711123] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 39.718138] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 39.725309] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 39.735846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.743737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.751743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.761774] device veth0_vlan entered promiscuous mode [ 39.771781] device veth1_vlan entered promiscuous mode [ 39.777663] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 39.787285] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 39.800002] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 39.810197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.817414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.825547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.835040] device veth0_macvtap entered promiscuous mode [ 39.842054] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 39.852113] device veth1_macvtap entered promiscuous mode [ 39.865553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 39.874805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 39.885777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.893504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.902461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.913241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.921080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.039851] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 40.046762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.070370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.087047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.104249] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 40.112521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.127472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 40.135312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.328791] ================================================================================ [ 40.337982] UBSAN: Undefined behaviour in ./include/net/red.h:272:18 [ 40.344496] shift exponent 103 is too large for 64-bit type 'long unsigned int' [ 40.351924] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.147-syzkaller #0 [ 40.359036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.368497] Call Trace: [ 40.371056] [ 40.373189] dump_stack+0x22c/0x33e [ 40.376798] ubsan_epilogue+0xe/0x3a [ 40.380495] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 40.386739] ? kvm_clock_get_cycles+0x14/0x30 [ 40.391218] ? ktime_get+0x21b/0x320 [ 40.394956] red_enqueue+0x2064/0x2200 [ 40.398825] ? red_graft+0x320/0x320 [ 40.402516] ? __dev_queue_xmit+0x1425/0x2ec0 [ 40.406991] __dev_queue_xmit+0x14e1/0x2ec0 [ 40.411293] ? __lock_acquire+0x6ec/0x3ff0 [ 40.415504] ? netdev_pick_tx+0x350/0x350 [ 40.419654] ? mark_held_locks+0xa6/0xf0 [ 40.424057] ? ip_finish_output2+0x1073/0x1640 [ 40.428627] ip_finish_output2+0xc04/0x1640 [ 40.432936] ? ip_reply_glue_bits+0xb0/0xb0 [ 40.437238] ? lock_downgrade+0x750/0x750 [ 40.441387] ip_finish_output+0x88e/0xd80 [ 40.445515] ip_output+0x203/0x650 [ 40.449035] ? ip_mc_output+0xff0/0xff0 [ 40.452995] ? ip_fragment.constprop.0+0x240/0x240 [ 40.457915] ? prandom_u32+0xa3/0x100 [ 40.461701] ip_local_out+0xaf/0x170 [ 40.465414] iptunnel_xmit+0x63e/0xa30 [ 40.469285] geneve_xmit+0xeb4/0x2a20 [ 40.473072] ? geneve_fill_metadata_dst+0xd00/0xd00 [ 40.478071] ? netif_skb_features+0x3f9/0xb20 [ 40.482552] dev_hard_start_xmit+0x1a8/0x960 [ 40.486953] __dev_queue_xmit+0x276a/0x2ec0 [ 40.491271] ? netdev_pick_tx+0x350/0x350 [ 40.495402] ? ip6_finish_output+0x610/0xcc0 [ 40.499806] ? mark_held_locks+0xa6/0xf0 [ 40.503846] ? ip6_finish_output2+0x1777/0x2370 [ 40.508495] ip6_finish_output2+0xe78/0x2370 [ 40.512893] ? ip6_append_data+0x300/0x300 [ 40.517106] ? lock_downgrade+0x750/0x750 [ 40.521240] ? check_preemption_disabled+0x41/0x2b0 [ 40.526248] ip6_finish_output+0x610/0xcc0 [ 40.530464] ip6_output+0x205/0x7c0 [ 40.534175] ? ip6_finish_output+0xcc0/0xcc0 [ 40.538576] ? ip6_fragment+0x3390/0x3390 [ 40.542715] ? check_preemption_disabled+0x41/0x2b0 [ 40.547710] mld_sendpack+0x6c1/0x1120 [ 40.551577] ? add_grhead+0x223/0x330 [ 40.555383] ? igmp6_mc_seq_stop+0x1a0/0x1a0 [ 40.559772] ? icmpv6_rcv.cold+0x94/0x94 [ 40.563810] ? mld_ifc_timer_expire+0x604/0xc00 [ 40.568461] ? mld_ifc_timer_expire+0x4a3/0xc00 [ 40.573109] ? __local_bh_enable_ip+0x159/0x2a0 [ 40.577755] ? lockdep_hardirqs_on+0x29f/0x5e0 [ 40.582321] mld_ifc_timer_expire+0x616/0xc00 [ 40.586814] call_timer_fn+0x177/0x760 [ 40.590681] ? mld_clear_delrec+0x380/0x380 [ 40.594982] ? init_timer_key+0x370/0x370 [ 40.599124] ? _raw_spin_unlock_irq+0x24/0x90 [ 40.603598] ? mld_clear_delrec+0x380/0x380 [ 40.607894] expire_timers+0x243/0x500 [ 40.611775] run_timer_softirq+0x259/0x730 [ 40.615991] ? expire_timers+0x500/0x500 [ 40.620030] ? kvm_sched_clock_read+0x14/0x40 [ 40.624503] ? sched_clock+0x2a/0x50 [ 40.628194] ? sched_clock_cpu+0x18/0x260 [ 40.632319] ? check_preemption_disabled+0x41/0x2b0 [ 40.637315] __do_softirq+0x27d/0xad2 [ 40.641100] irq_exit+0x22d/0x270 [ 40.644532] smp_apic_timer_interrupt+0x15f/0x5d0 [ 40.649356] apic_timer_interrupt+0xf/0x20 [ 40.653577] [ 40.655793] RIP: 0010:native_safe_halt+0xe/0x10 [ 40.660447] Code: e9 73 fd ff ff 48 89 df e8 1f 82 fc f9 e9 59 ff ff ff 90 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d a4 d8 59 00 fb f4 90 e9 07 00 00 00 0f 00 2d 94 d8 59 00 f4 c3 90 90 41 56 41 55 [ 40.679594] RSP: 0018:ffffffff89407d40 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 40.687279] RAX: 1ffffffff12c7138 RBX: dffffc0000000000 RCX: 0000000000000000 [ 40.694526] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff89481284 [ 40.701782] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 40.709031] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff896389b0 [ 40.716276] R13: 1ffffffff1280fb2 R14: 0000000000000000 R15: 0000000000000000 [ 40.723540] default_idle+0x49/0x320 [ 40.727233] do_idle+0x2f8/0x500 [ 40.730593] ? arch_cpu_idle_exit+0x80/0x80 [ 40.734894] ? check_preemption_disabled+0x41/0x2b0 [ 40.739892] cpu_startup_entry+0xc5/0xd6 [ 40.743944] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 40.749035] ? cpu_in_idle+0x20/0x20 [ 40.752729] ? preempt_count_add+0xaf/0x190 [ 40.757029] ? schedule_preempt_disabled+0x19/0x20 [ 40.761939] ? trace_event_define_fields_vector_free_moved+0xab/0xab [ 40.768410] start_kernel+0x93d/0x978 [ 40.772189] ? mem_encrypt_init+0x5/0x5 [ 40.776140] ? x86_family+0x3d/0x50 [ 40.779744] ? load_ucode_bsp+0x2e3/0x357 [ 40.783887] secondary_startup_64+0xa4/0xb0 [ 40.788193] ================================================================================