================================================================================
UBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:1315:20
shift exponent 4294967295 is too large for 32-bit type 'int'
CPU: 0 PID: 13280 Comm: systemd-udevd Not tainted 5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x137/0x1be lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:148 [inline]
 __ubsan_handle_shift_out_of_bounds+0x432/0x4d0 lib/ubsan.c:395
 snto32 drivers/hid/hid-core.c:1315 [inline]
 hid_input_field drivers/hid/hid-core.c:1548 [inline]
 hid_report_raw_event+0xa9d/0x1480 drivers/hid/hid-core.c:1783
 hid_input_report+0x3f6/0x4d0 drivers/hid/hid-core.c:1850
 hid_irq_in+0x48d/0x690 drivers/hid/usbhid/hid-core.c:284
 __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1656
 dummy_timer+0xa22/0x2e70 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x91/0x160 kernel/time/timer.c:1417
 expire_timers kernel/time/timer.c:1462 [inline]
 __run_timers+0x6c0/0x8a0 kernel/time/timer.c:1731
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1744
 __do_softirq+0x318/0x714 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x9a/0xe0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu+0x1d8/0x200 kernel/softirq.c:420
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:432
 sysvec_apic_timer_interrupt+0xe0/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:629
RIP: 0010:lock_acquire+0x144/0x5e0 arch/x86/include/asm/irqflags.h:41
Code: c7 20 8b ae 89 e8 2c 4c ed 07 b8 ff ff ff ff 65 0f c1 05 1f 82 a6 7e 83 f8 01 0f 85 09 02 00 00 48 89 5c 24 18 ff 74 24 18 9d <65> 48 8b 04 25 28 00 00 00 48 3b 44 24 50 0f 85 32 04 00 00 48 83
RSP: 0018:ffffc9000c91f6f0 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 0000000000000246 RCX: ffff88806c565cc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000002 R08: dffffc0000000000 R09: fffffbfff1f21891
R10: fffffbfff1f21891 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88806c565cc4 R15: 0000000000000000
 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:259
 rcu_read_lock include/linux/rcupdate.h:648 [inline]
 is_bpf_text_address+0x27/0x270 kernel/bpf/core.c:700
 kernel_text_address kernel/extable.c:151 [inline]
 __kernel_text_address+0x93/0x100 kernel/extable.c:105
 unwind_get_return_address+0x48/0x80 arch/x86/kernel/unwind_orc.c:318
 arch_stack_walk+0x98/0xe0 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0xad/0x150 kernel/stacktrace.c:121
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:46 [inline]
 set_alloc_info mm/kasan/common.c:401 [inline]
 ____kasan_kmalloc+0xbd/0xf0 mm/kasan/common.c:429
 kasan_slab_alloc include/linux/kasan.h:209 [inline]
 slab_post_alloc_hook mm/slab.h:512 [inline]
 slab_alloc_node mm/slub.c:2892 [inline]
 slab_alloc mm/slub.c:2900 [inline]
 __kmalloc+0x207/0x330 mm/slub.c:3981
 kmalloc include/linux/slab.h:557 [inline]
 tomoyo_realpath_from_path+0xd8/0x610 security/tomoyo/realpath.c:254
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x191/0x570 security/tomoyo/file.c:822
 security_inode_getattr+0xc0/0x140 security/security.c:1280
 vfs_getattr fs/stat.c:121 [inline]
 vfs_statx+0xe8/0x320 fs/stat.c:189
 vfs_fstatat fs/stat.c:207 [inline]
 vfs_lstat include/linux/fs.h:3122 [inline]
 __do_sys_newlstat fs/stat.c:362 [inline]
 __se_sys_newlstat fs/stat.c:356 [inline]
 __x64_sys_newlstat+0x81/0xd0 fs/stat.c:356
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f42c2742335
Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89
RSP: 002b:00007ffcc7217d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
RAX: ffffffffffffffda RBX: 00005634b985a330 RCX: 00007f42c2742335
RDX: 00007ffcc7217d40 RSI: 00007ffcc7217d40 RDI: 00005634b9859330
RBP: 00007ffcc7217e00 R08: 00007f42c2a01208 R09: 0000000000001010
R10: 00000000000004b0 R11: 0000000000000246 R12: 00005634b9859330
R13: 00005634b985933c R14: 00005634b983fd75 R15: 00005634b983fd7c
================================================================================