================================================================================
UBSAN: shift-out-of-bounds in net/core/gen_estimator.c:83:38
shift exponent -24 is negative
CPU: 0 PID: 17119 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x107/0x163 lib/dump_stack.c:120
 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148
 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:395
 est_timer.cold+0xbb/0x12d net/core/gen_estimator.c:83
 call_timer_fn+0x1a5/0x710 kernel/time/timer.c:1417
 expire_timers kernel/time/timer.c:1462 [inline]
 __run_timers+0x6f6/0xb10 kernel/time/timer.c:1731
 run_timer_softirq+0x7d/0x140 kernel/time/timer.c:1744
 __do_softirq+0x2cb/0xad5 kernel/softirq.c:298
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:393 [inline]
 __irq_exit_rcu kernel/softirq.c:423 [inline]
 irq_exit_rcu+0x18a/0x1b0 kernel/softirq.c:435
 sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1096
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:166 [inline]
RIP: 0010:unwind_next_frame+0x2f8/0x2610 arch/x86/kernel/unwind_orc.c:443
Code: 48 89 4c 24 18 e8 08 bf 87 00 4c 8b 44 24 38 48 8b 44 24 30 44 8b 5c 24 28 8b 54 24 20 48 8b 4c 24 18 46 8b 04 85 c0 a5 24 8f <44> 89 df 48 8d 34 7f 48 8d b4 36 48 9b 83 8e 41 83 c0 01 48 81 fe
RSP: 0018:ffffc9000109f228 EFLAGS: 00000246
RAX: 000000000000f1ba RBX: 1ffff92000213e4f RCX: ffffffff81f1ba45
RDX: 0000000000086083 RSI: 0000000000000007 RDI: ffffffff8f286cac
RBP: 0000000000000001 R08: 0000000000039184 R09: 0000000000000000
R10: fffff52000213e6d R11: 0000000000039177 R12: ffffc9000109f358
R13: ffffc9000109f345 R14: ffffc9000109f360 R15: ffffc9000109f310
 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:48
 kasan_set_track mm/kasan/common.c:56 [inline]
 __kasan_kmalloc.constprop.0+0xc2/0xd0 mm/kasan/common.c:461
 slab_post_alloc_hook mm/slab.h:512 [inline]
 slab_alloc_node mm/slub.c:2889 [inline]
 slab_alloc mm/slub.c:2897 [inline]
 kmem_cache_alloc+0x145/0x350 mm/slub.c:2902
 kmem_cache_zalloc include/linux/slab.h:672 [inline]
 __kernfs_new_node+0xd4/0x8f0 fs/kernfs/dir.c:626
 kernfs_new_node+0x93/0x120 fs/kernfs/dir.c:688
 __kernfs_create_file+0x51/0x350 fs/kernfs/file.c:1002
 sysfs_add_file_mode_ns+0x226/0x540 fs/sysfs/file.c:306
 create_files fs/sysfs/group.c:64 [inline]
 internal_create_group+0x328/0xb90 fs/sysfs/group.c:149
 internal_create_groups.part.0+0x90/0x140 fs/sysfs/group.c:189
 internal_create_groups fs/sysfs/group.c:185 [inline]
 sysfs_create_groups+0x25/0x50 fs/sysfs/group.c:215
 device_add_groups drivers/base/core.c:2186 [inline]
 device_add_attrs drivers/base/core.c:2334 [inline]
 device_add+0x7fd/0x1d90 drivers/base/core.c:3042
 netdev_register_kobject+0x181/0x430 net/core/net-sysfs.c:1898
 register_netdevice+0xdbe/0x1700 net/core/dev.c:10028
 register_netdev+0x2d/0x50 net/core/dev.c:10159
 ip6_tnl_init_net+0x2cc/0x400 net/ipv6/ip6_tunnel.c:2277
 ops_init+0xaf/0x4a0 net/core/net_namespace.c:152
 setup_net+0x2de/0x850 net/core/net_namespace.c:342
 copy_net_ns+0x376/0x7b0 net/core/net_namespace.c:483
 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xbd/0x230 kernel/nsproxy.c:226
 ksys_unshare+0x445/0x8e0 kernel/fork.c:2957
 __do_sys_unshare kernel/fork.c:3025 [inline]
 __se_sys_unshare kernel/fork.c:3023 [inline]
 __x64_sys_unshare+0x2d/0x40 kernel/fork.c:3023
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45e229
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f80d9726c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e229
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000
RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c
R13: 00007ffeb6f30b7f R14: 00007f80d97279c0 R15: 000000000119bf8c
================================================================================