================================================================================ UBSAN: shift-out-of-bounds in net/ieee802154/nl802154.c:914:44 shift exponent -1 is negative CPU: 0 PID: 8211 Comm: syz-executor.0 Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: linux,dummy-virt (DT) Call trace: dump_backtrace+0x0/0x3e0 arch/arm64/include/asm/pointer_auth.h:76 show_stack+0x18/0x70 arch/arm64/kernel/stacktrace.c:191 __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x120/0x1a8 lib/dump_stack.c:120 ubsan_epilogue+0x10/0x54 lib/ubsan.c:148 __ubsan_handle_shift_out_of_bounds+0x128/0x180 lib/ubsan.c:327 nl802154_new_interface+0x644/0x650 net/ieee802154/nl802154.c:914 genl_family_rcv_msg_doit+0x1b8/0x2a0 net/netlink/genetlink.c:739 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] genl_rcv_msg+0x24c/0x42c net/netlink/genetlink.c:800 netlink_rcv_skb+0x198/0x34c net/netlink/af_netlink.c:2502 genl_rcv+0x38/0x50 net/netlink/genetlink.c:811 netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline] netlink_unicast+0x3e0/0x670 net/netlink/af_netlink.c:1338 netlink_sendmsg+0x610/0xa20 net/netlink/af_netlink.c:1927 sock_sendmsg_nosec net/socket.c:654 [inline] sock_sendmsg+0xc0/0xf4 net/socket.c:674 ____sys_sendmsg+0x548/0x6d0 net/socket.c:2350 ___sys_sendmsg+0xf4/0x170 net/socket.c:2404 __sys_sendmsg+0xbc/0x150 net/socket.c:2433 __do_sys_sendmsg net/socket.c:2442 [inline] __se_sys_sendmsg net/socket.c:2440 [inline] __arm64_sys_sendmsg+0x70/0xa0 net/socket.c:2440 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.0+0xf0/0x2c0 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xa4/0xd0 arch/arm64/kernel/syscall.c:168 el0_svc+0x24/0x34 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x1a4/0x1b0 arch/arm64/kernel/entry-common.c:432 el0_sync+0x170/0x180 arch/arm64/kernel/entry.S:699 ================================================================================