================================================================================ UBSAN: shift-out-of-bounds in net/sched/sch_taprio.c:1430:18 shift exponent -2147418108 is negative CPU: 0 PID: 2822 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xf4/0x17e lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_shift_out_of_bounds+0x358/0x3a0 lib/ubsan.c:322 taprio_parse_tc_entry net/sched/sch_taprio.c:1430 [inline] taprio_parse_tc_entries net/sched/sch_taprio.c:1469 [inline] taprio_change+0x556/0x2230 net/sched/sch_taprio.c:1564 qdisc_create+0x42f/0x820 net/sched/sch_api.c:1271 tc_modify_qdisc+0x540/0xcc0 rtnetlink_rcv_msg+0x681/0x750 net/core/rtnetlink.c:6091 netlink_rcv_skb+0x112/0x1e0 net/netlink/af_netlink.c:2540 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x473/0x540 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x583/0x670 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg net/socket.c:734 [inline] ____sys_sendmsg+0x405/0x420 net/socket.c:2482 ___sys_sendmsg+0x2f0/0x330 net/socket.c:2536 __sys_sendmsg net/socket.c:2565 [inline] __do_sys_sendmsg net/socket.c:2574 [inline] __se_sys_sendmsg+0x142/0x1c0 net/socket.c:2572 do_syscall_64+0x46/0xc0 entry_SYSCALL_64_after_hwframe+0x64/0xce RIP: 0033:0x7fa4e0419da9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa4dff9b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fa4e0547f80 RCX: 00007fa4e0419da9 RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 RBP: 00007fa4e046647a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007fa4e0547f80 R15: 00007ffd912fc468 ================================================================================