================================================================================
UBSAN: shift-out-of-bounds in net/core/gen_estimator.c:83:38
shift exponent -108 is negative
CPU: 1 PID: 8206 Comm: syz-executor.4 Not tainted 5.11.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x183/0x22e lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:148 [inline]
 __ubsan_handle_shift_out_of_bounds+0x432/0x4d0 lib/ubsan.c:395
 est_timer+0x8c6/0x950 net/core/gen_estimator.c:83
 call_timer_fn+0xf6/0x210 kernel/time/timer.c:1417
 expire_timers kernel/time/timer.c:1462 [inline]
 __run_timers+0x6ff/0x910 kernel/time/timer.c:1731
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1744
 __do_softirq+0x372/0x7a6 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x9a/0xe0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu+0x22c/0x260 kernel/softirq.c:420
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:432
 sysvec_apic_timer_interrupt+0xe0/0xf0 arch/x86/kernel/apic/apic.c:1096
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628
RIP: 0010:native_irq_enable arch/x86/include/asm/irqflags.h:54 [inline]
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/irqflags.h:94 [inline]
RIP: 0010:do_user_addr_fault+0x19b/0xb20 arch/x86/mm/fault.c:1290
Code: 5c 24 18 48 8b 1b 48 89 de 48 83 e6 03 31 ff e8 3b c3 45 00 48 83 e3 03 74 12 e8 80 be 45 00 e8 fb eb 4b 00 fb bb 54 02 00 00 <eb> 51 49 8d ae 90 00 00 00 48 89 e8 48 c1 e8 03 42 80 3c 20 00 74
RSP: 0000:ffffc90001d6fe78 EFLAGS: 00000286
RAX: 9dfad80757628300 RBX: 0000000000000254 RCX: ffffffff8f8f1a03
RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff81834a30 R09: fffffbfff1ae71fe
R10: fffffbfff1ae71fe R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000045c7ea R14: ffffc90001d6ff58 R15: 0000000000000014
 handle_page_fault arch/x86/mm/fault.c:1450 [inline]
 exc_page_fault+0xa1/0x1e0 arch/x86/mm/fault.c:1506
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:580
RIP: 0033:0x45c7ea
Code: Unable to access opcode bytes at RIP 0x45c7c0.
RSP: 002b:00007ffe77ed33a0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00007ffe77ed33a0 RCX: 000000000045c7ea
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007ffe77ed33e0 R08: 0000000000000001 R09: 000000000181e940
R10: 000000000181ec10 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
================================================================================