================================================================================ UBSAN: shift-out-of-bounds in net/sched/sch_api.c:572:7 shift exponent 255 is too large for 32-bit type 'int' CPU: 1 PID: 1054 Comm: kworker/1:2 Not tainted 5.15.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: wg-crypt-wg0 wg_packet_tx_worker Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x201/0x2d8 lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_shift_out_of_bounds+0x494/0x530 lib/ubsan.c:330 __qdisc_calculate_pkt_len+0x348/0x3a0 net/sched/sch_api.c:572 qdisc_calculate_pkt_len include/net/sch_generic.h:837 [inline] __dev_xmit_skb net/core/dev.c:3786 [inline] __dev_queue_xmit+0x985/0x34c0 net/core/dev.c:4170 neigh_hh_output include/net/neighbour.h:499 [inline] neigh_output include/net/neighbour.h:508 [inline] ip6_finish_output2+0xecc/0x14c0 net/ipv6/ip6_output.c:126 ip6tunnel_xmit include/net/ip6_tunnel.h:160 [inline] udp_tunnel6_xmit_skb+0x4d7/0x8f0 net/ipv6/ip6_udp_tunnel.c:109 send6+0x667/0xa90 drivers/net/wireguard/socket.c:152 wg_socket_send_skb_to_peer+0x111/0x1d0 drivers/net/wireguard/socket.c:177 wg_packet_create_data_done drivers/net/wireguard/send.c:251 [inline] wg_packet_tx_worker+0x1b7/0x840 drivers/net/wireguard/send.c:276 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 ================================================================================ Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 1054 Comm: kworker/1:2 Not tainted 5.15.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: wg-crypt-wg0 wg_packet_tx_worker Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 panic+0x2d6/0x810 kernel/panic.c:232 ubsan_epilogue lib/ubsan.c:165 [inline] __ubsan_handle_shift_out_of_bounds+0x52e/0x530 lib/ubsan.c:330 __qdisc_calculate_pkt_len+0x348/0x3a0 net/sched/sch_api.c:572 qdisc_calculate_pkt_len include/net/sch_generic.h:837 [inline] __dev_xmit_skb net/core/dev.c:3786 [inline] __dev_queue_xmit+0x985/0x34c0 net/core/dev.c:4170 neigh_hh_output include/net/neighbour.h:499 [inline] neigh_output include/net/neighbour.h:508 [inline] ip6_finish_output2+0xecc/0x14c0 net/ipv6/ip6_output.c:126 ip6tunnel_xmit include/net/ip6_tunnel.h:160 [inline] udp_tunnel6_xmit_skb+0x4d7/0x8f0 net/ipv6/ip6_udp_tunnel.c:109 send6+0x667/0xa90 drivers/net/wireguard/socket.c:152 wg_socket_send_skb_to_peer+0x111/0x1d0 drivers/net/wireguard/socket.c:177 wg_packet_create_data_done drivers/net/wireguard/send.c:251 [inline] wg_packet_tx_worker+0x1b7/0x840 drivers/net/wireguard/send.c:276 process_one_work+0x853/0x1140 kernel/workqueue.c:2297 worker_thread+0xac1/0x1320 kernel/workqueue.c:2444 kthread+0x453/0x480 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 Kernel Offset: disabled Rebooting in 86400 seconds..