================================================================================
UBSAN: Undefined behaviour in ./include/net/red.h:272:18
shift exponent 102 is too large for 64-bit type 'long unsigned int'
CPU: 1 PID: 10372 Comm: syz-executor.2 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 red_calc_qavg_from_idle_time include/net/red.h:272 [inline]
 red_calc_qavg include/net/red.h:313 [inline]
 red_enqueue+0x2064/0x2200 net/sched/sch_red.c:68
 __dev_xmit_skb net/core/dev.c:3494 [inline]
 __dev_queue_xmit+0x14df/0x2ec0 net/core/dev.c:3807
 neigh_hh_output include/net/neighbour.h:491 [inline]
 neigh_output include/net/neighbour.h:499 [inline]
 ip_finish_output2+0xc04/0x16b0 net/ipv4/ip_output.c:230
 ip_finish_output+0x88e/0xd80 net/ipv4/ip_output.c:318
 NF_HOOK_COND include/linux/netfilter.h:278 [inline]
 ip_output+0x203/0x650 net/ipv4/ip_output.c:406
 dst_output include/net/dst.h:455 [inline]
 ip_local_out+0xaf/0x170 net/ipv4/ip_output.c:125
 ip_send_skb+0x3e/0xe0 net/ipv4/ip_output.c:1447
 udp_send_skb+0x72a/0x1240 net/ipv4/udp.c:848
 udp_sendmsg+0x1cdb/0x2590 net/ipv4/udp.c:1135
 udpv6_sendmsg+0x1536/0x2b90 net/ipv6/udp.c:1224
 inet_sendmsg+0x174/0x640 net/ipv4/af_inet.c:798
 sock_sendmsg_nosec net/socket.c:622 [inline]
 sock_sendmsg+0xc7/0x130 net/socket.c:632
 ___sys_sendmsg+0x3b3/0x8f0 net/socket.c:2115
 __sys_sendmmsg+0x195/0x470 net/socket.c:2210
 __do_sys_sendmmsg net/socket.c:2239 [inline]
 __se_sys_sendmmsg net/socket.c:2236 [inline]
 __x64_sys_sendmmsg+0x99/0x100 net/socket.c:2236
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f11c2137c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045de59
RDX: 0000000000000002 RSI: 0000000020007500 RDI: 0000000000000003
RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffdc01ca49f R14: 00007f11c21389c0 R15: 000000000118bf2c
================================================================================
print_req_error: I/O error, dev loop7, sector 0
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
overlayfs: filesystem on './bus' not supported as upperdir
device bond1 entered promiscuous mode
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'.
device veth3 entered promiscuous mode
bond1: Enslaving veth3 as an active interface with an up link
bond1 (unregistering): Releasing backup interface veth3
bond1 (unregistering): Released all slaves
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'.
device veth5 entered promiscuous mode
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond1 entered promiscuous mode
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'.
device veth3 entered promiscuous mode
bond1: making interface veth3 the new active one
bond1: Enslaving veth3 as an active interface with an up link
bond1 (unregistering): Releasing backup interface veth3
bond1 (unregistering): Released all slaves
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond1 entered promiscuous mode
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'.
device veth5 entered promiscuous mode
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond2 entered promiscuous mode
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'.
device veth7 entered promiscuous mode
bond2: making interface veth7 the new active one
bond2: Enslaving veth7 as an active interface with an up link
bond2 (unregistering): Releasing backup interface veth7
bond2 (unregistering): Released all slaves
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond2 entered promiscuous mode
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'.
device veth9 entered promiscuous mode
bond2: making interface veth9 the new active one
bond2: Enslaving veth9 as an active interface with an up link
bond2 (unregistering): Releasing backup interface veth9
bond2 (unregistering): Released all slaves
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond2 entered promiscuous mode
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'.
device veth11 entered promiscuous mode
bond2: making interface veth11 the new active one
bond2: Enslaving veth11 as an active interface with an up link
bond2 (unregistering): Releasing backup interface veth11
bond2 (unregistering): Released all slaves
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond2 entered promiscuous mode
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'.
device veth13 entered promiscuous mode
bond2: making interface veth13 the new active one
bond2: Enslaving veth13 as an active interface with an up link
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond3 entered promiscuous mode
device veth15 entered promiscuous mode
bond3: making interface veth15 the new active one
bond3: Enslaving veth15 as an active interface with an up link
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond4 entered promiscuous mode
nla_parse: 1 callbacks suppressed
netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'.
device veth17 entered promiscuous mode
bond4: making interface veth17 the new active one
bond4: Enslaving veth17 as an active interface with an up link
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond5 entered promiscuous mode
bond5 (unregistering): Released all slaves
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
device bond5 entered promiscuous mode
device batadv0 entered promiscuous mode
bond5 (unregistering): Released all slaves
8021q: adding VLAN 0 to HW filter on device batadv0
device wlan1 entered promiscuous mode
8021q: adding VLAN 0 to HW filter on device batadv0
device wlan1 left promiscuous mode