================================================================================
UBSAN: shift-out-of-bounds in ./include/net/red.h:312:18
shift exponent 109 is too large for 64-bit type 'unsigned long'
CPU: 1 PID: 13106 Comm: systemd-udevd Not tainted 5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x137/0x1be lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:148 [inline]
 __ubsan_handle_shift_out_of_bounds+0x432/0x4d0 lib/ubsan.c:395
 red_calc_qavg_from_idle_time include/net/red.h:312 [inline]
 red_adaptative_algo include/net/red.h:444 [inline]
 red_adaptative_timer+0x729/0x750 net/sched/sch_red.c:324
 call_timer_fn+0x91/0x160 kernel/time/timer.c:1417
 expire_timers kernel/time/timer.c:1462 [inline]
 __run_timers+0x6c0/0x8a0 kernel/time/timer.c:1731
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1744
 __do_softirq+0x318/0x714 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x9a/0xe0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu+0x1d8/0x200 kernel/softirq.c:420
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:432
 sysvec_apic_timer_interrupt+0xe0/0xf0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:629
RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:87 [inline]
RIP: 0010:lock_is_held_type+0x2e/0x160 kernel/locking/lockdep.c:5474
Code: 56 41 55 41 54 53 48 83 ec 18 65 48 8b 04 25 28 00 00 00 48 89 44 24 10 bd 01 00 00 00 83 3d ec 10 6b 04 00 0f 84 e4 00 00 00 <65> 8b 05 5b 46 b9 76 85 c0 0f 85 d5 00 00 00 65 4c 8b 2c 25 80 ef
RSP: 0018:ffffc9000219fc20 EFLAGS: 00000202
RAX: cdccb1c61a593b00 RBX: 0000000000000000 RCX: 0000000080000001
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8c7115e0
RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1b67326
R10: fffffbfff1b67326 R11: 0000000000000000 R12: dffffc0000000000
R13: ffff888069b40818 R14: ffff8880668e9120 R15: ffff88801c9a5558
 lock_is_held include/linux/lockdep.h:271 [inline]
 rcu_read_lock_sched_held+0x41/0xb0 kernel/rcu/update.c:123
 trace_lock_release+0x61/0x140 include/trace/events/lock.h:58
 lock_release+0x27/0x6b0 kernel/locking/lockdep.c:5453
 strncpy_from_user+0x2d/0x350 lib/strncpy_from_user.c:117
 getname_flags+0xf0/0x640 fs/namei.c:149
 user_path_at_empty+0x28/0x50 fs/namei.c:2649
 user_path_at include/linux/namei.h:59 [inline]
 vfs_statx+0x8f/0x320 fs/stat.c:185
 vfs_fstatat fs/stat.c:207 [inline]
 vfs_stat include/linux/fs.h:3118 [inline]
 __do_sys_newstat fs/stat.c:349 [inline]
 __se_sys_newstat fs/stat.c:345 [inline]
 __x64_sys_newstat+0x81/0xd0 fs/stat.c:345
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f5e885db295
Code: 00 00 00 e8 5d 01 00 00 48 83 c4 18 c3 0f 1f 84 00 00 00 00 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 d1 db 2b 00 f7 d8 64 89
RSP: 002b:00007ffe0a0fedf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 0000557e830b1234 RCX: 00007f5e885db295
RDX: 00007ffe0a0ff270 RSI: 00007ffe0a0ff270 RDI: 00007ffe0a0fee70
RBP: 0000557e824e0dfc R08: fffc000000000000 R09: 0000000000000000
R10: 38e0cc0d4110aba1 R11: 0000000000000246 R12: 0000557e830bb6b0
R13: 00007ffe0a0ff270 R14: 00007ffe0a0fee70 R15: 0000557e830a6ca0
================================================================================