================================================================================
UBSAN: Undefined behaviour in ./include/net/red.h:272:18
shift exponent 71 is too large for 64-bit type 'long unsigned int'
CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy7 ieee80211_iface_work
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 red_calc_qavg_from_idle_time include/net/red.h:272 [inline]
 red_adaptative_algo include/net/red.h:404 [inline]
 red_adaptative_timer+0x7ed/0x870 net/sched/sch_red.c:266
 call_timer_fn+0x177/0x760 kernel/time/timer.c:1338
 expire_timers+0x243/0x500 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x259/0x730 kernel/time/timer.c:1716
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x22d/0x270 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x15f/0x5d0 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:__sanitizer_cov_trace_switch+0x35/0x80 kernel/kcov.c:224
Code: 53 48 8b 46 08 48 83 f8 20 74 5c 77 3f 48 83 f8 08 74 4c 48 83 f8 10 75 2c 41 bc 03 00 00 00 4c 8b 6d 00 31 db 4d 85 ed 74 1b <48> 8b 74 dd 10 4c 89 e7 48 83 c3 01 48 8b 4c 24 20 e8 55 fe ff ff
RSP: 0018:ffff8880a9a0f600 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 000000000000000e RCX: ffffffff875bdd04
RDX: 00000000000000dd RSI: ffff8880a99f61c0 RDI: 0000000000000001
RBP: ffffffff88ce2d80 R08: 0000000000000001 R09: 0000000000000065
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: 000000000000001a R14: ffff88809e648dd5 R15: ffff88809e648dd3
 ieee802_11_parse_elems_crc+0x1c4/0x1bf0 net/mac80211/util.c:798
 ieee802_11_parse_elems net/mac80211/ieee80211_i.h:1947 [inline]
 ieee80211_rx_mgmt_probe_beacon+0x17a/0x1750 net/mac80211/ibss.c:1604
 ieee80211_ibss_rx_queued_mgmt+0xeae/0x1940 net/mac80211/ibss.c:1634
 ieee80211_iface_work+0x607/0x900 net/mac80211/iface.c:1345
 process_one_work+0x796/0x14e0 kernel/workqueue.c:2155
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
================================================================================
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
SET target dimension over the limit!
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
SET target dimension over the limit!
SET target dimension over the limit!
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
SET target dimension over the limit!
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
SET target dimension over the limit!
SET target dimension over the limit!
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.