IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ================================================================================ UBSAN: shift-out-of-bounds in ./include/net/red.h:310:18 shift exponent 65 is too large for 64-bit type 'long unsigned int' CPU: 1 PID: 3147 Comm: kworker/1:2 Not tainted 5.10.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x107/0x163 lib/dump_stack.c:120 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:395 red_calc_qavg_from_idle_time include/net/red.h:310 [inline] red_calc_qavg include/net/red.h:351 [inline] red_enqueue.cold+0x1a/0x475 net/sched/sch_red.c:77 __dev_xmit_skb net/core/dev.c:3789 [inline] __dev_queue_xmit+0x199e/0x2ec0 net/core/dev.c:4101 neigh_hh_output include/net/neighbour.h:499 [inline] neigh_output include/net/neighbour.h:508 [inline] ip_finish_output2+0xf5d/0x2330 net/ipv4/ip_output.c:230 __ip_finish_output net/ipv4/ip_output.c:308 [inline] __ip_finish_output+0x399/0x650 net/ipv4/ip_output.c:290 ip_finish_output+0x35/0x200 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:290 [inline] ip_output+0x196/0x310 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:441 [inline] ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x5a3/0x9c0 net/ipv4/ip_tunnel_core.c:82 geneve_xmit_skb drivers/net/geneve.c:959 [inline] geneve_xmit+0xfe0/0x3230 drivers/net/geneve.c:1059 __netdev_start_xmit include/linux/netdevice.h:4775 [inline] netdev_start_xmit include/linux/netdevice.h:4789 [inline] xmit_one net/core/dev.c:3556 [inline] dev_hard_start_xmit+0x1eb/0x960 net/core/dev.c:3572 __dev_queue_xmit+0x21de/0x2ec0 net/core/dev.c:4133 neigh_resolve_output net/core/neighbour.c:1491 [inline] neigh_resolve_output+0x4d8/0x7e0 net/core/neighbour.c:1471 neigh_output include/net/neighbour.h:510 [inline] ip6_finish_output2+0x68c/0x1710 net/ipv6/ip6_output.c:117 __ip6_finish_output net/ipv6/ip6_output.c:143 [inline] __ip6_finish_output+0x4be/0xb80 net/ipv6/ip6_output.c:128 ip6_finish_output+0x35/0x200 net/ipv6/ip6_output.c:153 NF_HOOK_COND include/linux/netfilter.h:290 [inline] ip6_output+0x1db/0x520 net/ipv6/ip6_output.c:176 dst_output include/net/dst.h:441 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] ndisc_send_skb+0xacc/0x1850 net/ipv6/ndisc.c:508 ndisc_send_ns+0x3a9/0x850 net/ipv6/ndisc.c:650 addrconf_dad_work+0xc1c/0x1280 net/ipv6/addrconf.c:4116 process_one_work+0x98d/0x1630 kernel/workqueue.c:2275 worker_thread+0x64c/0x1120 kernel/workqueue.c:2421 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 ================================================================================