================================================================================ UBSAN: shift-out-of-bounds in kernel/sched/fair.c:7712:14 shift exponent 197 is too large for 64-bit type 'unsigned long' CPU: 1 PID: 15610 Comm: kworker/u4:9 Not tainted 5.12.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_mcast_mla_update Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x202/0x31e lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:148 [inline] __ubsan_handle_shift_out_of_bounds+0x42e/0x4d0 lib/ubsan.c:327 detach_tasks+0xe07/0x1250 kernel/sched/fair.c:7712 load_balance+0x3e17/0x5f20 kernel/sched/fair.c:9641 rebalance_domains+0x551/0xab0 kernel/sched/fair.c:10029 __do_softirq+0x372/0x7a6 kernel/softirq.c:559 invoke_softirq kernel/softirq.c:433 [inline] __irq_exit_rcu+0x22c/0x260 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 kernel/locking/spinlock.c:191 Code: f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2a 2b 14 f8 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 2f 61 a5 f7 65 8b 05 40 07 51 76 85 c0 74 3f 48 c7 04 24 0e 36 RSP: 0018:ffffc900028df880 EFLAGS: 00000206 RAX: 1ffff9200051bf14 RBX: ffffffff90e41f60 RCX: ffffffff81612179 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffffc900028df918 R08: dffffc0000000000 R09: fffffbfff1ffe3cb R10: fffffbfff1ffe3cb R11: 0000000000000000 R12: dffffc0000000000 R13: 1ffff9200051bf10 R14: ffffc900028df8a0 R15: 0000000000000a02 __debug_check_no_obj_freed lib/debugobjects.c:997 [inline] debug_check_no_obj_freed+0x5a2/0x650 lib/debugobjects.c:1018 slab_free_hook mm/slub.c:1555 [inline] slab_free_freelist_hook+0x161/0x270 mm/slub.c:1601 slab_free mm/slub.c:3162 [inline] kfree+0xcf/0x2d0 mm/slub.c:4214 batadv_mcast_mla_list_free net/batman-adv/multicast.c:671 [inline] __batadv_mcast_mla_update net/batman-adv/multicast.c:926 [inline] batadv_mcast_mla_update+0x3740/0x3c30 net/batman-adv/multicast.c:948 process_one_work+0x833/0x10c0 kernel/workqueue.c:2275 worker_thread+0xac1/0x1300 kernel/workqueue.c:2421 kthread+0x39a/0x3c0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 ================================================================================