microsoft 0003:045E:07DA.0001: hid_field_extract() called with n (128) > 32! (swapper/0)
================================================================================
UBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:1315:20
shift exponent 127 is too large for 32-bit type 'int'
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x9a/0xcc lib/dump_stack.c:120
 ubsan_epilogue+0x5/0x40 lib/ubsan.c:148
 __ubsan_handle_shift_out_of_bounds.cold+0x61/0xe9 lib/ubsan.c:395
 snto32.cold+0x37/0x40 drivers/hid/hid-core.c:1315
 hid_input_field drivers/hid/hid-core.c:1548 [inline]
 hid_report_raw_event+0x501/0xfe0 drivers/hid/hid-core.c:1783
 hid_input_report+0x26f/0x4b0 drivers/hid/hid-core.c:1850
 hid_irq_in+0x4b0/0x620 drivers/hid/usbhid/hid-core.c:284
 __usb_hcd_giveback_urb+0x238/0x3f0 drivers/usb/core/hcd.c:1656
 dummy_timer+0xeb8/0x2e90 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x163/0x4b0 kernel/time/timer.c:1417
 expire_timers kernel/time/timer.c:1462 [inline]
 __run_timers.part.0+0x52a/0x8b0 kernel/time/timer.c:1731
 __run_timers kernel/time/timer.c:1712 [inline]
 run_timer_softirq+0x9c/0x190 kernel/time/timer.c:1744
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu kernel/softirq.c:420 [inline]
 irq_exit_rcu+0x134/0x200 kernel/softirq.c:432
 sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:629
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:79 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:169 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]
RIP: 0010:acpi_idle_do_entry+0x161/0x1c0 drivers/acpi/processor_idle.c:516
Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6d 48 8b 45 00 a8 08 75 c9 e8 7d 21 3e f9 e9 07 00 00 00 0f 00 2d 51 8f b8 00 fb f4 <9c> 58 fa f6 c4 02 74 ae 5d e9 d1 1d 3e f9 48 89 ef 5d e9 c8 f9 ff
RSP: 0018:ffffffff8a407d90 EFLAGS: 00000206
RAX: 0000000000048981 RBX: ffff8880144d1865 RCX: 1ffffffff1860869
RDX: 0000000000000000 RSI: ffffffff888ae7e0 RDI: ffffffff88ddb520
RBP: ffffffff8a4bb380 R08: 0000000000000001 R09: 0000000000000001
R10: fffffbfff1497670 R11: 0000000000000001 R12: 0000000000000001
R13: ffff8880144d1864 R14: ffffffff8b09f4c0 R15: ffff888145c50004
 acpi_idle_enter+0x2c0/0x4b0 drivers/acpi/processor_idle.c:647
 cpuidle_enter_state+0x152/0xb40 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x45/0xa0 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x3e1/0x590 kernel/sched/idle.c:299
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:396
 start_kernel+0x330/0x34d init/main.c:1061
 secondary_startup_64_no_verify+0xb0/0xbb
================================================================================
----------------
Code disassembly (best guess), 5 bytes skipped:
   0:	48 c1 ea 03          	shr    $0x3,%rdx
   4:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   8:	75 6d                	jne    0x77
   a:	48 8b 45 00          	mov    0x0(%rbp),%rax
   e:	a8 08                	test   $0x8,%al
  10:	75 c9                	jne    0xffffffdb
  12:	e8 7d 21 3e f9       	callq  0xf93e2194
  17:	e9 07 00 00 00       	jmpq   0x23
  1c:	0f 00 2d 51 8f b8 00 	verw   0xb88f51(%rip)        # 0xb88f74
  23:	fb                   	sti
  24:	f4                   	hlt
* 25:	9c                   	pushfq <-- trapping instruction
  26:	58                   	pop    %rax
  27:	fa                   	cli
  28:	f6 c4 02             	test   $0x2,%ah
  2b:	74 ae                	je     0xffffffdb
  2d:	5d                   	pop    %rbp
  2e:	e9 d1 1d 3e f9       	jmpq   0xf93e1e04
  33:	48 89 ef             	mov    %rbp,%rdi
  36:	5d                   	pop    %rbp
  37:	e9                   	.byte 0xe9
  38:	c8                   	.byte 0xc8
  39:	f9                   	stc
  3a:	ff                   	.byte 0xff