================================================================================
UBSAN: Undefined behaviour in ./include/net/red.h:272:18
shift exponent 223 is too large for 64-bit type 'long unsigned int'
CPU: 1 PID: 12954 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 red_calc_qavg_from_idle_time include/net/red.h:272 [inline]
 red_adaptative_algo include/net/red.h:404 [inline]
 red_adaptative_timer+0x7ed/0x870 net/sched/sch_red.c:266
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x50/0x90 kernel/locking/spinlock.c:192
Code: c0 f8 89 63 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 3d 48 83 3d 41 5d b2 01 00 74 25 fb 66 0f 1f 44 00 00 <bf> 01 00 00 00 e8 96 d8 9b f9 65 8b 05 ff c0 50 78 85 c0 74 02 5d
RSP: 0018:ffff88804392fb40 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff12c713f RBX: 0000000076d330a8 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff88804da52a84
RBP: ffff8880ae32c2c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae32c2c0
R13: ffff8880485da0c0 R14: ffff8880a00249c0 R15: 0000000000000000
 finish_lock_switch kernel/sched/core.c:2578 [inline]
 finish_task_switch+0x174/0x8b0 kernel/sched/core.c:2678
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x8ed/0x22e0 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 freezable_schedule include/linux/freezer.h:172 [inline]
 do_nanosleep+0x264/0x6c0 kernel/time/hrtimer.c:1691
 hrtimer_nanosleep+0x24d/0x500 kernel/time/hrtimer.c:1745
 __do_sys_nanosleep kernel/time/hrtimer.c:1779 [inline]
 __se_sys_nanosleep kernel/time/hrtimer.c:1766 [inline]
 __x64_sys_nanosleep+0x19d/0x220 kernel/time/hrtimer.c:1766
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c321
Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 cf fb ff c3 48 83 ec 08 e8 0a 47 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 47 00 00 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007fffaae7cc40 EFLAGS: 00000293 ORIG_RAX: 0000000000000023
RAX: ffffffffffffffda RBX: 0000000000197223 RCX: 000000000045c321
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fffaae7cc50
RBP: 0000000000000e6d R08: 0000000000000000 R09: 00000000029f8940
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007
R13: 00007fffaae7cca0 R14: 00000000001971e6 R15: 00007fffaae7ccb0
================================================================================
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=112 sclass=netlink_route_socket pid=19621 comm=syz-executor.3
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=112 sclass=netlink_route_socket pid=19637 comm=syz-executor.3
print_req_error: 8 callbacks suppressed
print_req_error: I/O error, dev loop5, sector 0
efs: cannot read volume header
print_req_error: I/O error, dev loop5, sector 0
efs: cannot read volume header
print_req_error: I/O error, dev loop5, sector 0
efs: cannot read volume header
print_req_error: I/O error, dev loop5, sector 0
efs: cannot read volume header
print_req_error: I/O error, dev loop5, sector 0
efs: cannot read volume header
audit: type=1804 audit(1603035901.089:107): pid=19763 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir920515747/syzkaller.lHv9Uu/1841/bus" dev="sda1" ino=17366 res=1
audit: type=1804 audit(1603035901.149:108): pid=19763 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir920515747/syzkaller.lHv9Uu/1841/bus" dev="sda1" ino=17366 res=1
x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
audit: type=1800 audit(1603035902.539:109): pid=19890 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16074 res=0
audit: type=1800 audit(1603035902.589:110): pid=19890 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16074 res=0
audit: type=1800 audit(1603035902.759:111): pid=19908 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16064 res=0
audit: type=1804 audit(1603035902.829:112): pid=19908 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir494266450/syzkaller.P0CPUh/2002/file0" dev="sda1" ino=16064 res=1
tmpfs: Bad value '0x00000000ffffffff' for mount option 'uid'
tmpfs: Bad value '0x00000000ffffffff' for mount option 'uid'
EXT4-fs warning (device loop2): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop2): mount failed
EXT4-fs warning (device loop2): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop2): mount failed
EXT4-fs warning (device loop2): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop2): mount failed
EXT4-fs warning (device loop2): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop2): mount failed
tmpfs: Bad value 'prefer=static:0	' for mount option 'mpol'
tmpfs: Bad value 'prefer=static:0	' for mount option 'mpol'
EXT4-fs warning (device loop2): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
EXT4-fs (loop2): mount failed
netlink: 'syz-executor.0': attribute type 2 has an invalid length.
netlink: 'syz-executor.0': attribute type 1 has an invalid length.
netlink: 118081 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 'syz-executor.0': attribute type 2 has an invalid length.
netlink: 'syz-executor.0': attribute type 1 has an invalid length.
netlink: 118081 bytes leftover after parsing attributes in process `syz-executor.0'.
EXT4-fs (loop4): revision level too high, forcing read-only mode
netlink: 'syz-executor.0': attribute type 2 has an invalid length.
EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
netlink: 'syz-executor.0': attribute type 1 has an invalid length.
netlink: 118081 bytes leftover after parsing attributes in process `syz-executor.0'.