batman_adv: Cannot find parent device
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:87:38
shift exponent -246 is negative
CPU: 1 PID: 7958 Comm: kworker/u4:7 Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 est_timer.cold+0x96/0x126 net/core/gen_estimator.c:87
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:kfree+0x123/0x250 mm/slab.c:3823
Code: 89 ea 48 89 ee 4c 89 e7 e8 ea ec ff ff f6 c7 02 74 ca e8 b0 6f cc ff 48 83 3d 20 bc b8 07 00 0f 84 1b 01 00 00 48 89 df 57 9d <0f> 1f 44 00 00 5b 5d 41 5c 41 5d c3 65 8b 05 8a b3 56 7e 83 f8 3f
RSP: 0018:ffff88804bf4fc98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffff110097e75c2
RDX: 0000000000000000 RSI: ffff88804bf3adf0 RDI: 0000000000000286
RBP: ffff8880864ebb40 R08: 0000000000400000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88812c3f67c0
R13: ffffffff878fcd7d R14: ffff88808977b200 R15: ffff8880864ebb40
 batadv_iv_send_outstanding_bat_ogm_packet+0x2bd/0x890 net/batman-adv/bat_iv_ogm.c:1875
 process_one_work+0x796/0x14e0 kernel/workqueue.c:2155
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:88:23
shift exponent 255 is too large for 64-bit type 'long long unsigned int'
CPU: 1 PID: 7958 Comm: kworker/u4:7 Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 est_timer.cold+0xd6/0x126 net/core/gen_estimator.c:88
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:kfree+0x123/0x250 mm/slab.c:3823
Code: 89 ea 48 89 ee 4c 89 e7 e8 ea ec ff ff f6 c7 02 74 ca e8 b0 6f cc ff 48 83 3d 20 bc b8 07 00 0f 84 1b 01 00 00 48 89 df 57 9d <0f> 1f 44 00 00 5b 5d 41 5c 41 5d c3 65 8b 05 8a b3 56 7e 83 f8 3f
RSP: 0018:ffff88804bf4fc98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffff110097e75c2
RDX: 0000000000000000 RSI: ffff88804bf3adf0 RDI: 0000000000000286
RBP: ffff8880864ebb40 R08: 0000000000400000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88812c3f67c0
R13: ffffffff878fcd7d R14: ffff88808977b200 R15: ffff8880864ebb40
 batadv_iv_send_outstanding_bat_ogm_packet+0x2bd/0x890 net/batman-adv/bat_iv_ogm.c:1875
 process_one_work+0x796/0x14e0 kernel/workqueue.c:2155
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:90:46
shift exponent -246 is negative
CPU: 1 PID: 7958 Comm: kworker/u4:7 Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 est_timer.cold+0x17/0x126 net/core/gen_estimator.c:90
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:kfree+0x123/0x250 mm/slab.c:3823
Code: 89 ea 48 89 ee 4c 89 e7 e8 ea ec ff ff f6 c7 02 74 ca e8 b0 6f cc ff 48 83 3d 20 bc b8 07 00 0f 84 1b 01 00 00 48 89 df 57 9d <0f> 1f 44 00 00 5b 5d 41 5c 41 5d c3 65 8b 05 8a b3 56 7e 83 f8 3f
RSP: 0018:ffff88804bf4fc98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffff110097e75c2
RDX: 0000000000000000 RSI: ffff88804bf3adf0 RDI: 0000000000000286
RBP: ffff8880864ebb40 R08: 0000000000400000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88812c3f67c0
R13: ffffffff878fcd7d R14: ffff88808977b200 R15: ffff8880864ebb40
 batadv_iv_send_outstanding_bat_ogm_packet+0x2bd/0x890 net/batman-adv/bat_iv_ogm.c:1875
 process_one_work+0x796/0x14e0 kernel/workqueue.c:2155
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
================================================================================
================================================================================
UBSAN: Undefined behaviour in net/core/gen_estimator.c:91:22
shift exponent 255 is too large for 64-bit type 'long long unsigned int'
CPU: 1 PID: 7958 Comm: kworker/u4:7 Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 est_timer.cold+0x5b/0x126 net/core/gen_estimator.c:91
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:kfree+0x123/0x250 mm/slab.c:3823
Code: 89 ea 48 89 ee 4c 89 e7 e8 ea ec ff ff f6 c7 02 74 ca e8 b0 6f cc ff 48 83 3d 20 bc b8 07 00 0f 84 1b 01 00 00 48 89 df 57 9d <0f> 1f 44 00 00 5b 5d 41 5c 41 5d c3 65 8b 05 8a b3 56 7e 83 f8 3f
RSP: 0018:ffff88804bf4fc98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffff110097e75c2
RDX: 0000000000000000 RSI: ffff88804bf3adf0 RDI: 0000000000000286
RBP: ffff8880864ebb40 R08: 0000000000400000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88812c3f67c0
R13: ffffffff878fcd7d R14: ffff88808977b200 R15: ffff8880864ebb40
 batadv_iv_send_outstanding_bat_ogm_packet+0x2bd/0x890 net/batman-adv/bat_iv_ogm.c:1875
 process_one_work+0x796/0x14e0 kernel/workqueue.c:2155
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
================================================================================
batman_adv: batadv0: Adding interface: gretap1
batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
batman_adv: batadv0: Interface activated: gretap1
netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
batman_adv: Cannot find parent device
batman_adv: batadv0: Adding interface: gretap2
batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
batman_adv: batadv0: Interface activated: gretap2
overlayfs: filesystem on './bus' not supported as upperdir
netlink: 'syz-executor.4': attribute type 9 has an invalid length.
netlink: 'syz-executor.4': attribute type 2 has an invalid length.
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 'syz-executor.4': attribute type 9 has an invalid length.
netlink: 'syz-executor.4': attribute type 2 has an invalid length.
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
input: syz0 as /devices/virtual/input/input11
blktrace: Concurrent blktraces are not allowed on loop0
blktrace: Concurrent blktraces are not allowed on loop0
kvm [18370]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0xffffffff0000000f
kvm [18401]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0xffffffff0000000f
xt_CT: You must specify a L4 protocol and not use inversions on it
xt_CT: You must specify a L4 protocol and not use inversions on it

**********************************************************
**   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
**                                                      **
** trace_printk() being used. Allocating extra memory.  **
**                                                      **
** This means that this is a DEBUG kernel and it is     **
audit: type=1800 audit(1601433920.546:68): pid=18481 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=4 res=0
** unsafe for production use.                           **
**                                                      **
** If you see this message and you are not debugging    **
** the kernel, report this immediately to your vendor!  **
audit: type=1804 audit(1601433920.626:69): pid=18489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir588933156/syzkaller.zAUXH1/263/file1/file0" dev="loop2" ino=4 res=1
**                                                      **
**   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
**********************************************************
hfs: dir_umask requires a value
hfs: unable to parse mount options
IPVS: ftp: loaded support on port[0] = 21
overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
overlayfs: filesystem on './file0' not supported as upperdir
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
audit: type=1800 audit(1601433923.456:70): pid=18664 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15795 res=0
snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present
snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present
kvm [18742]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024
snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present
kvm [18742]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000028
kvm [18742]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000018
kvm [18742]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000030
kvm [18742]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024
kvm [18742]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000028
kvm [18742]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000007a
netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present
snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present