================================================================================
UBSAN: shift-out-of-bounds in ./include/net/red.h:312:18
shift exponent 108 is too large for 64-bit type 'long unsigned int'
CPU: 1 PID: 10612 Comm: syz-executor.3 Not tainted 5.12.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x141/0x1d7 lib/dump_stack.c:120
 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148
 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:327
 red_calc_qavg_from_idle_time include/net/red.h:312 [inline]
 red_adaptative_algo include/net/red.h:444 [inline]
 red_adaptative_timer.cold+0x1bd/0x26c net/sched/sch_red.c:324
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1431
 expire_timers kernel/time/timer.c:1476 [inline]
 __run_timers.part.0+0x67c/0xa50 kernel/time/timer.c:1745
 __run_timers kernel/time/timer.c:1726 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1758
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu kernel/softirq.c:422 [inline]
 irq_exit_rcu+0x134/0x200 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:instrument_atomic_read include/linux/instrumented.h:71 [inline]
RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:27 [inline]
RIP: 0010:lock_page_memcg+0x1c3/0x510 mm/memcontrol.c:2157
Code: 81 4c 89 ff e8 1e 57 9c ff 4d 85 ed 0f 85 42 01 00 00 9c 58 f6 c4 02 0f 85 c9 01 00 00 4d 85 ed 74 01 fb 4c 8d ab 00 0c 00 00 <be> 04 00 00 00 4c 89 ef e8 90 3b fa ff 4c 89 e8 48 c1 e8 03 42 0f
RSP: 0000:ffffc900018dfaa8 EFLAGS: 00000206
RAX: 0000000000000006 RBX: ffff88801150a000 RCX: 1ffffffff1f5750a
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900018dfb08 R08: 0000000000000001 R09: ffffffff8fab38b7
R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
R13: ffff88801150ac00 R14: fffff940001883b7 R15: ffff88801150a688
 page_add_file_rmap+0x36/0xc00 mm/rmap.c:1218
 do_set_pte+0x360/0x550 mm/memory.c:3758
 filemap_map_pages+0xd0d/0x1860 mm/filemap.c:3134
 do_fault_around mm/memory.c:3920 [inline]
 do_read_fault mm/memory.c:3934 [inline]
 do_fault mm/memory.c:4067 [inline]
 handle_pte_fault mm/memory.c:4318 [inline]
 __handle_mm_fault+0x333d/0x4f70 mm/memory.c:4453
 handle_mm_fault+0x1bc/0x7e0 mm/memory.c:4551
 do_user_addr_fault+0x483/0x1210 arch/x86/mm/fault.c:1390
 handle_page_fault arch/x86/mm/fault.c:1475 [inline]
 exc_page_fault+0x9e/0x180 arch/x86/mm/fault.c:1531
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:577
RIP: 0033:0x47b7bb
Code: b9 cd cc cc cc cc cc cc cc 66 0f 1f 44 00 00 48 89 f8 48 89 f9 49 83 e8 01 49 f7 e1 48 c1 ea 03 48 8d 04 92 48 01 c0 48 29 c1 <0f> b6 04 0e 41 88 00 48 89 f8 48 89 d7 48 83 f8 09 77 d2 4c 89 c0
RSP: 002b:0000000000a9f598 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000003
RDX: 0000000000000000 RSI: 00000000004e4a60 RDI: 0000000000000003
RBP: 0000000000a9faf0 R08: 0000000000a9fab7 R09: cccccccccccccccd
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000a9fb10
R13: 00000000004bf907 R14: 0000000000a9fc90 R15: 0000000000000075
================================================================================