neighbour: ndisc_cache: neighbor table overflow! ================================================================================ UBSAN: shift-out-of-bounds in ./include/net/red.h:310:18 shift exponent 71 is too large for 64-bit type 'long unsigned int' CPU: 0 PID: 26 Comm: kworker/u4:2 Not tainted 5.9.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy15 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x77/0xa0 lib/dump_stack.c:118 ubsan_epilogue+0x5/0x40 lib/ubsan.c:148 __ubsan_handle_shift_out_of_bounds.cold.13+0x14/0x98 lib/ubsan.c:395 red_calc_qavg_from_idle_time include/net/red.h:310 [inline] red_adaptative_algo include/net/red.h:442 [inline] red_adaptative_timer+0x1eb/0x200 net/sched/sch_red.c:324 call_timer_fn+0xa7/0x370 kernel/time/timer.c:1413 expire_timers kernel/time/timer.c:1458 [inline] __run_timers kernel/time/timer.c:1755 [inline] run_timer_softirq+0x259/0x690 kernel/time/timer.c:1768 __do_softirq+0xee/0x631 kernel/softirq.c:298 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:706 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline] do_softirq_own_stack+0x73/0x90 arch/x86/kernel/irq_64.c:77 invoke_softirq kernel/softirq.c:393 [inline] __irq_exit_rcu kernel/softirq.c:423 [inline] irq_exit_rcu+0xc9/0xf0 kernel/softirq.c:435 sysvec_apic_timer_interrupt+0x57/0xe0 arch/x86/kernel/apic/apic.c:1091 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:581 RIP: 0010:console_unlock+0x2f2/0x5c0 kernel/printk/printk.c:2534 Code: 00 e8 12 ba fe ff 48 c7 c6 74 e8 28 81 48 c7 c7 a0 f3 f3 84 e8 ff b9 fe ff e8 2a 2c 00 00 4d 85 ed 0f 85 b8 02 00 00 41 56 9d <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 8b 0d 08 0a cb 03 RSP: 0018:ffffc90000d3bca0 EFLAGS: 00000297 RAX: 00000000000a39eb RBX: 0000000000000001 RCX: 0000000000000006 RDX: 0000000000000000 RSI: ffffffff84ab720e RDI: ffffffff8495ea86 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 R10: ffff88813acd8000 R11: 0000000000000046 R12: 0000000000000057 R13: 0000000000000200 R14: 0000000000000297 R15: ffffffff870fce20 vprintk_emit+0x1fd/0x300 kernel/printk/printk.c:2029 printk+0x53/0x6a kernel/printk/printk.c:2078 ieee80211_sta_find_ibss net/mac80211/ibss.c:1481 [inline] ieee80211_ibss_work.cold.28+0x194/0x2d3 net/mac80211/ibss.c:1707 process_one_work+0x26a/0x650 kernel/workqueue.c:2269 worker_thread+0x38/0x390 kernel/workqueue.c:2415 kthread+0x148/0x170 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 ================================================================================