================================================================================ UBSAN: shift-out-of-bounds in ./include/net/red.h:312:18 shift exponent 109 is too large for 64-bit type 'unsigned long' CPU: 0 PID: 21009 Comm: kworker/0:7 Not tainted 5.12.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x125/0x19e lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:148 [inline] __ubsan_handle_shift_out_of_bounds+0x432/0x4d0 lib/ubsan.c:327 red_calc_qavg_from_idle_time include/net/red.h:312 [inline] red_adaptative_algo include/net/red.h:444 [inline] red_adaptative_timer+0x70f/0x730 net/sched/sch_red.c:324 call_timer_fn+0x91/0x160 kernel/time/timer.c:1431 expire_timers kernel/time/timer.c:1476 [inline] __run_timers+0x6c0/0x8a0 kernel/time/timer.c:1745 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1758 __do_softirq+0x318/0x714 kernel/softirq.c:345 invoke_softirq kernel/softirq.c:221 [inline] __irq_exit_rcu+0x1d8/0x200 kernel/softirq.c:422 irq_exit_rcu+0x5/0x20 kernel/softirq.c:434 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632 RIP: 0010:console_unlock+0xa40/0xca0 kernel/printk/printk.c:2586 Code: 19 e8 c4 51 18 00 f6 44 24 0f 01 0f 84 b9 f7 ff ff eb 1d 0f 1f 80 00 00 00 00 e8 ab 51 18 00 e8 b6 4a 1e 00 fb f6 44 24 0f 01 <0f> 84 9a f7 ff ff e8 95 51 18 00 48 c7 c7 54 ae 6f 8b be 1b 0a 00 RSP: 0018:ffffc90002c2f280 EFLAGS: 00000246 RAX: 64263e1aa8979800 RBX: 0000000000000000 RCX: ffffffff815c802a RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90002c2f3a0 R08: dffffc0000000000 R09: fffffbfff1f29aa9 R10: fffffbfff1f29aa9 R11: 0000000000000000 R12: dffffc0000000000 R13: 1ffffffff19ee079 R14: 0000000000000000 R15: 1ffffffff19ee072 vprintk_emit+0x143/0x1f0 kernel/printk/printk.c:2098 dev_vprintk_emit+0x246/0x2a5 drivers/base/core.c:4434 dev_printk_emit+0x6a/0x8c drivers/base/core.c:4445 _dev_warn+0xb9/0xdb drivers/base/core.c:4501 usb_parse_interface+0x821/0x9c0 drivers/usb/core/config.c:593 usb_parse_configuration+0xfc6/0x1570 drivers/usb/core/config.c:795 usb_get_configuration+0x359/0x650 drivers/usb/core/config.c:944 usb_enumerate_device drivers/usb/core/hub.c:2388 [inline] usb_new_device+0xf6/0x1730 drivers/usb/core/hub.c:2524 hub_port_connect+0xffb/0x25b0 drivers/usb/core/hub.c:5223 hub_port_connect_change+0x5c6/0xab0 drivers/usb/core/hub.c:5363 port_event+0xa6f/0x10b0 drivers/usb/core/hub.c:5509 hub_event+0x417/0xcb0 drivers/usb/core/hub.c:5591 process_one_work+0x789/0xfd0 kernel/workqueue.c:2275 worker_thread+0xac1/0x1300 kernel/workqueue.c:2421 kthread+0x39a/0x3c0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 ================================================================================