================================================================================
UBSAN: Undefined behaviour in net/sched/sch_api.c:561:7
shift exponent 129 is too large for 32-bit type 'int'
CPU: 1 PID: 24001 Comm: systemd-udevd Not tainted 4.19.150-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 __qdisc_calculate_pkt_len+0x3bb/0x570 net/sched/sch_api.c:561
 qdisc_calculate_pkt_len include/net/sch_generic.h:697 [inline]
 __dev_xmit_skb net/core/dev.c:3443 [inline]
 __dev_queue_xmit+0x1372/0x2ec0 net/core/dev.c:3807
 neigh_resolve_output+0x55a/0x950 net/core/neighbour.c:1374
 neigh_output include/net/neighbour.h:501 [inline]
 ip6_finish_output2+0x1184/0x2370 net/ipv6/ip6_output.c:120
 ip6_finish_output+0x610/0xcc0 net/ipv6/ip6_output.c:154
 NF_HOOK_COND include/linux/netfilter.h:278 [inline]
 ip6_output+0x205/0x7c0 net/ipv6/ip6_output.c:171
 dst_output include/net/dst.h:455 [inline]
 ip6_local_out+0xaf/0x170 net/ipv6/output_core.c:178
 ip6_send_skb+0xb3/0x300 net/ipv6/ip6_output.c:1699
 ip6_push_pending_frames+0xdd/0x100 net/ipv6/ip6_output.c:1719
 icmpv6_push_pending_frames+0x294/0x470 net/ipv6/icmp.c:288
 icmp6_send+0x1c51/0x2310 net/ipv6/icmp.c:584
 icmpv6_send+0x11e/0x26d net/ipv6/ip6_icmp.c:43
 ip6_link_failure+0x26/0x560 net/ipv6/route.c:2297
 dst_link_failure include/net/dst.h:438 [inline]
 ndisc_error_report+0xc7/0x190 net/ipv6/ndisc.c:695
 neigh_invalidate+0x22c/0x540 net/core/neighbour.c:900
 neigh_timer_handler+0x9b0/0xc70 net/core/neighbour.c:986
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:rcu_lockdep_current_cpu_online+0x27/0x220 kernel/rcu/tree.c:1069
Code: 00 00 00 65 8b 05 d9 00 a3 7e a9 00 00 10 00 75 0a 8b 05 f0 be db 09 85 c0 75 06 b8 01 00 00 00 c3 41 56 bf 01 00 00 00 41 55 <41> 54 55 53 e8 20 19 ee ff 48 8b 05 b9 3f 15 08 41 be 08 00 00 00
RSP: 0000:ffff8880518dfb80 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000001 RBX: ffff888046066440 RCX: ffffffff815f22ec
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
RBP: ffff8880a322a708 R08: 0000000000000000 R09: ffffed1015c6473a
R10: ffff8880ae3239d3 R11: 0000000000000003 R12: 0000000000000000
R13: ffffea0000383200 R14: dffffc0000000000 R15: 000000000000005e
 rcu_read_lock_held+0xc3/0x110 kernel/rcu/update.c:285
 radix_tree_deref_slot include/linux/radix-tree.h:241 [inline]
 filemap_map_pages+0xaa0/0x12b0 mm/filemap.c:2652
 do_fault_around mm/memory.c:3735 [inline]
 do_read_fault mm/memory.c:3769 [inline]
 do_fault mm/memory.c:3903 [inline]
 handle_pte_fault mm/memory.c:4134 [inline]
 __handle_mm_fault+0x2af4/0x4370 mm/memory.c:4258
 handle_mm_fault+0x489/0xb90 mm/memory.c:4295
 __do_page_fault+0x6d8/0xe00 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x7f1c03955ef0
Code: Bad RIP value.
RSP: 002b:00007ffc814a2dc8 EFLAGS: 00010246
RAX: 00000000fbad8001 RBX: 00007ffc814a2fe0 RCX: 0000000000000000
RDX: 00007ffc814a2ef8 RSI: 00007f1c0453a38b RDI: 00007ffc814a2dd0
RBP: 00007f1c0453a38b R08: 0000000000000000 R09: 0000000000000110
R10: 0000000000000522 R11: 00007f1c03965280 R12: 00007ffc814a2ef8
R13: 00007ffc814a3062 R14: 0000000000000000 R15: 000000000000000f
================================================================================
squashfs: SQUASHFS error: unable to read fragment index table
netlink: 'syz-executor.2': attribute type 5 has an invalid length.
squashfs: SQUASHFS error: unable to read fragment index table
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
block nbd3: Attempted send on invalid socket
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
block nbd3: shutting down sockets
print_req_error: I/O error, dev nbd3, sector 3512548010789078
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
print_req_error: I/O error, dev nbd3, sector 3512548010789078
Buffer I/O error on dev nbd3p4, logical block 1716264579708304, async page read
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
encrypted_key: key user:syz not found
encrypted_key: key user:syz not found
encrypted_key: key user:syz not found
encrypted_key: key user:syz not found
encrypted_key: key user:syz not found
encrypted_key: key user:syz not found
encrypted_key: key user:syz not found