================================================================================
UBSAN: Undefined behaviour in net/sched/sch_api.c:561:7
shift exponent 129 is too large for 32-bit type 'int'
CPU: 1 PID: 8518 Comm: kworker/u4:3 Not tainted 4.19.150-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: krdsd rds_connect_worker
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 __qdisc_calculate_pkt_len+0x3bb/0x570 net/sched/sch_api.c:561
 qdisc_calculate_pkt_len include/net/sch_generic.h:697 [inline]
 __dev_xmit_skb net/core/dev.c:3443 [inline]
 __dev_queue_xmit+0x1372/0x2ec0 net/core/dev.c:3807
 neigh_hh_output include/net/neighbour.h:491 [inline]
 neigh_output include/net/neighbour.h:499 [inline]
 ip_finish_output2+0xc04/0x1640 net/ipv4/ip_output.c:230
 ip_finish_output+0x88e/0xd80 net/ipv4/ip_output.c:318
 NF_HOOK_COND include/linux/netfilter.h:278 [inline]
 ip_output+0x203/0x650 net/ipv4/ip_output.c:406
 dst_output include/net/dst.h:455 [inline]
 ip_local_out+0xaf/0x170 net/ipv4/ip_output.c:125
 __ip_queue_xmit+0x8a0/0x1bd0 net/ipv4/ip_output.c:506
 __tcp_transmit_skb+0x1c72/0x36c0 net/ipv4/tcp_output.c:1148
 tcp_transmit_skb net/ipv4/tcp_output.c:1164 [inline]
 tcp_connect+0x1a38/0x2610 net/ipv4/tcp_output.c:3526
 tcp_v4_connect+0x141c/0x1aa0 net/ipv4/tcp_ipv4.c:315
 __inet_stream_connect+0x836/0xe50 net/ipv4/af_inet.c:655
 inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:719
 rds_tcp_conn_path_connect+0x61c/0x880 net/rds/tcp_connect.c:172
 rds_connect_worker+0x194/0x2b0 net/rds/threads.c:175
 process_one_work+0x796/0x14e0 kernel/workqueue.c:2155
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
================================================================================
netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
kauditd_printk_skb: 5 callbacks suppressed
audit: type=1800 audit(1602233174.751:462): pid=11897 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16582 res=0
netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
(syz-executor.5,11920,0):ocfs2_parse_options:1513 ERROR: Invalid heartbeat mount options
(syz-executor.5,11920,0):ocfs2_fill_super:1225 ERROR: status = -22
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
audit: type=1800 audit(1602233175.301:463): pid=11934 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16584 res=0
(syz-executor.5,11920,1):ocfs2_parse_options:1513 ERROR: Invalid heartbeat mount options
(syz-executor.5,11920,1):ocfs2_fill_super:1225 ERROR: status = -22
IPv6: ADDRCONF(NETDEV_UP): bond4: link is not ready
8021q: adding VLAN 0 to HW filter on device bond4
netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
Bluetooth: hci6: sending frame failed (-49)
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
audit: type=1800 audit(1602233176.051:464): pid=12007 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16588 res=0
IPv6: ADDRCONF(NETDEV_UP): bond5: link is not ready
8021q: adding VLAN 0 to HW filter on device bond5
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
audit: type=1800 audit(1602233176.661:465): pid=12071 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16588 res=0
IPv6: ADDRCONF(NETDEV_UP): bond6: link is not ready
8021q: adding VLAN 0 to HW filter on device bond6
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
IPv6: ADDRCONF(NETDEV_UP): bond4: link is not ready
8021q: adding VLAN 0 to HW filter on device bond4
Bluetooth: hci6: command 0x1003 tx timeout
Bluetooth: hci6: sending frame failed (-49)