================================================================================
UBSAN: shift-out-of-bounds in ./include/net/red.h:312:18
shift exponent 135 is too large for 64-bit type 'long unsigned int'
CPU: 0 PID: 12 Comm: ksoftirqd/0 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x141/0x1d7 lib/dump_stack.c:120
 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148
 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:395
 red_calc_qavg_from_idle_time include/net/red.h:312 [inline]
 red_calc_qavg include/net/red.h:353 [inline]
 choke_enqueue.cold+0x18/0x3dd net/sched/sch_choke.c:221
 __dev_xmit_skb net/core/dev.c:3837 [inline]
 __dev_queue_xmit+0x1943/0x2e00 net/core/dev.c:4150
 br_dev_queue_push_xmit+0x252/0x740 net/bridge/br_forward.c:51
 br_nf_dev_queue_xmit+0x424/0x1930 net/bridge/br_netfilter_hooks.c:808
 NF_HOOK include/linux/netfilter.h:301 [inline]
 NF_HOOK include/linux/netfilter.h:295 [inline]
 br_nf_post_routing+0x1088/0x1b20 net/bridge/br_netfilter_hooks.c:854
 nf_hook_entry_hookfn include/linux/netfilter.h:136 [inline]
 nf_hook_slow+0xc5/0x1e0 net/netfilter/core.c:589
 nf_hook+0x3a1/0x670 include/linux/netfilter.h:256
 NF_HOOK include/linux/netfilter.h:299 [inline]
 br_forward_finish+0x7f/0xd0 net/bridge/br_forward.c:64
 br_nf_hook_thresh+0x2bd/0x350 net/bridge/br_netfilter_hooks.c:1025
 br_nf_forward_finish+0x7cb/0xc30 net/bridge/br_netfilter_hooks.c:564
 NF_HOOK include/linux/netfilter.h:301 [inline]
 NF_HOOK include/linux/netfilter.h:295 [inline]
 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:634 [inline]
 br_nf_forward_ip+0x538/0x1c70 net/bridge/br_netfilter_hooks.c:575
 nf_hook_entry_hookfn include/linux/netfilter.h:136 [inline]
 nf_hook_slow+0xc5/0x1e0 net/netfilter/core.c:589
 nf_hook+0x3a1/0x670 include/linux/netfilter.h:256
 NF_HOOK include/linux/netfilter.h:299 [inline]
 __br_forward+0x1aa/0x610 net/bridge/br_forward.c:108
 deliver_clone net/bridge/br_forward.c:124 [inline]
 br_flood+0x367/0x450 net/bridge/br_forward.c:231
 br_handle_frame_finish+0xe68/0x1680 net/bridge/br_input.c:162
 br_nf_hook_thresh+0x2bd/0x350 net/bridge/br_netfilter_hooks.c:1025
 br_nf_pre_routing_finish_ipv6+0x69e/0xd80 net/bridge/br_netfilter_ipv6.c:206
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing_ipv6+0x42f/0x7a0 net/bridge/br_netfilter_ipv6.c:236
 br_nf_pre_routing+0x1622/0x1e60 net/bridge/br_netfilter_hooks.c:505
 nf_hook_entry_hookfn include/linux/netfilter.h:136 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:224 [inline]
 br_handle_frame+0x980/0x1180 net/bridge/br_input.c:367
 __netif_receive_skb_core+0xc4f/0x37f0 net/core/dev.c:5260
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5363
 __netif_receive_skb+0x27/0x1c0 net/core/dev.c:5479
 process_backlog+0x232/0x6c0 net/core/dev.c:6346
 __napi_poll+0xaf/0x440 net/core/dev.c:6892
 napi_poll net/core/dev.c:6959 [inline]
 net_rx_action+0x801/0xb40 net/core/dev.c:7036
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:343
 run_ksoftirqd kernel/softirq.c:650 [inline]
 run_ksoftirqd+0x2d/0x60 kernel/softirq.c:642
 smpboot_thread_fn+0x655/0x9e0 kernel/smpboot.c:165
 kthread+0x3b1/0x4a0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
================================================================================