================================================================================
UBSAN: shift-out-of-bounds in net/sched/sch_api.c:579:10
shift exponent 255 is too large for 32-bit type 'int'
CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 5.11.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x107/0x163 lib/dump_stack.c:120
 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148
 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:395
 __qdisc_calculate_pkt_len.cold+0x1b/0xcf net/sched/sch_api.c:579
 qdisc_calculate_pkt_len include/net/sch_generic.h:779 [inline]
 __dev_xmit_skb net/core/dev.c:3761 [inline]
 __dev_queue_xmit+0x1276/0x2dd0 net/core/dev.c:4119
 br_dev_queue_push_xmit+0x4ca/0x6e0 net/bridge/br_forward.c:52
 br_nf_dev_queue_xmit+0x424/0x1930 net/bridge/br_netfilter_hooks.c:808
 NF_HOOK include/linux/netfilter.h:301 [inline]
 NF_HOOK include/linux/netfilter.h:295 [inline]
 br_nf_post_routing+0x1088/0x1b20 net/bridge/br_netfilter_hooks.c:854
 nf_hook_entry_hookfn include/linux/netfilter.h:136 [inline]
 nf_hook_slow+0xc5/0x1e0 net/netfilter/core.c:589
 nf_hook+0x3a1/0x670 include/linux/netfilter.h:256
 NF_HOOK include/linux/netfilter.h:299 [inline]
 br_forward_finish+0x7f/0xd0 net/bridge/br_forward.c:65
 br_nf_hook_thresh+0x2bd/0x350 net/bridge/br_netfilter_hooks.c:1025
 br_nf_forward_finish+0x7cb/0xc30 net/bridge/br_netfilter_hooks.c:564
 NF_HOOK include/linux/netfilter.h:301 [inline]
 NF_HOOK include/linux/netfilter.h:295 [inline]
 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:634 [inline]
 br_nf_forward_ip+0x538/0x1c70 net/bridge/br_netfilter_hooks.c:575
 nf_hook_entry_hookfn include/linux/netfilter.h:136 [inline]
 nf_hook_slow+0xc5/0x1e0 net/netfilter/core.c:589
 nf_hook+0x3a1/0x670 include/linux/netfilter.h:256
 NF_HOOK include/linux/netfilter.h:299 [inline]
 __br_forward+0x1aa/0x610 net/bridge/br_forward.c:109
 deliver_clone net/bridge/br_forward.c:125 [inline]
 br_flood+0x367/0x450 net/bridge/br_forward.c:232
 br_handle_frame_finish+0xe68/0x1680 net/bridge/br_input.c:162
 br_nf_hook_thresh+0x2bd/0x350 net/bridge/br_netfilter_hooks.c:1025
 br_nf_pre_routing_finish_ipv6+0x69e/0xd80 net/bridge/br_netfilter_ipv6.c:206
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing_ipv6+0x42f/0x7a0 net/bridge/br_netfilter_ipv6.c:236
 br_nf_pre_routing+0x1622/0x1e60 net/bridge/br_netfilter_hooks.c:505
 nf_hook_entry_hookfn include/linux/netfilter.h:136 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:224 [inline]
 br_handle_frame+0x980/0x1180 net/bridge/br_input.c:367
 __netif_receive_skb_core+0xa0f/0x38a0 net/core/dev.c:5217
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5321
 __netif_receive_skb+0x27/0x1c0 net/core/dev.c:5437
 process_backlog+0x232/0x6c0 net/core/dev.c:6327
 napi_poll net/core/dev.c:6805 [inline]
 net_rx_action+0x461/0xe10 net/core/dev.c:6888
 __do_softirq+0x2bc/0xa29 kernel/softirq.c:343
 run_ksoftirqd kernel/softirq.c:650 [inline]
 run_ksoftirqd+0x2d/0x50 kernel/softirq.c:642
 smpboot_thread_fn+0x655/0x9e0 kernel/smpboot.c:165
 kthread+0x3b1/0x4a0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296
================================================================================