================================================================================ UBSAN: shift-out-of-bounds in net/sched/sch_api.c:572:7 shift exponent 144 is too large for 32-bit type 'int' CPU: 1 PID: 8646 Comm: kworker/1:4 Tainted: G W 5.14.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: mld mld_ifc_work Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:105 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:327 __qdisc_calculate_pkt_len.cold+0x62/0xcf net/sched/sch_api.c:572 qdisc_calculate_pkt_len include/net/sch_generic.h:837 [inline] __dev_xmit_skb net/core/dev.c:3856 [inline] __dev_queue_xmit+0x1166/0x36c0 net/core/dev.c:4241 neigh_hh_output include/net/neighbour.h:499 [inline] neigh_output include/net/neighbour.h:508 [inline] ip_finish_output2+0xef0/0x2220 net/ipv4/ip_output.c:230 __ip_finish_output net/ipv4/ip_output.c:308 [inline] __ip_finish_output+0x396/0x640 net/ipv4/ip_output.c:290 ip_finish_output+0x32/0x200 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip_output+0x196/0x310 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:448 [inline] ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x5a3/0x9c0 net/ipv4/ip_tunnel_core.c:82 geneve_xmit_skb drivers/net/geneve.c:971 [inline] geneve_xmit+0x1186/0x3440 drivers/net/geneve.c:1082 __netdev_start_xmit include/linux/netdevice.h:4944 [inline] netdev_start_xmit include/linux/netdevice.h:4958 [inline] xmit_one net/core/dev.c:3658 [inline] dev_hard_start_xmit+0x1eb/0x920 net/core/dev.c:3674 __dev_queue_xmit+0x29ee/0x36c0 net/core/dev.c:4273 neigh_resolve_output net/core/neighbour.c:1496 [inline] neigh_resolve_output+0x50e/0x820 net/core/neighbour.c:1476 neigh_output include/net/neighbour.h:510 [inline] ip6_finish_output2+0x686/0x1700 net/ipv6/ip6_output.c:117 __ip6_finish_output net/ipv6/ip6_output.c:182 [inline] __ip6_finish_output+0x4c1/0x1050 net/ipv6/ip6_output.c:161 ip6_finish_output+0x32/0x200 net/ipv6/ip6_output.c:192 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x1e4/0x530 net/ipv6/ip6_output.c:215 dst_output include/net/dst.h:448 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] mld_sendpack+0x8d4/0xdc0 net/ipv6/mcast.c:1823 mld_send_cr net/ipv6/mcast.c:2124 [inline] mld_ifc_work+0x71c/0xdc0 net/ipv6/mcast.c:2655 process_one_work+0x98d/0x1630 kernel/workqueue.c:2276 worker_thread+0x658/0x11f0 kernel/workqueue.c:2422 kthread+0x3e5/0x4d0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 ================================================================================