================================================================================
UBSAN: shift-out-of-bounds in ./include/net/red.h:312:18
shift exponent 109 is too large for 64-bit type 'long unsigned int'
CPU: 1 PID: 11793 Comm: syz-executor.2 Not tainted 5.12.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0xfa/0x151 lib/dump_stack.c:120
 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148
 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:327
 red_calc_qavg_from_idle_time include/net/red.h:312 [inline]
 red_adaptative_algo include/net/red.h:444 [inline]
 red_adaptative_timer.cold+0x1bd/0x26c net/sched/sch_red.c:324
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1431
 expire_timers kernel/time/timer.c:1476 [inline]
 __run_timers.part.0+0x67c/0xa50 kernel/time/timer.c:1745
 __run_timers kernel/time/timer.c:1726 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1758
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu kernel/softirq.c:422 [inline]
 irq_exit_rcu+0x134/0x200 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:__preempt_count_add arch/x86/include/asm/preempt.h:80 [inline]
RIP: 0010:rcu_is_watching+0x2/0xc0 kernel/rcu/tree.c:1168
Code: 48 89 ef 5d e9 2f a0 a5 07 48 c7 c7 8c 5e c6 8d 48 89 34 24 e8 af 9e 57 00 48 8b 34 24 eb bb 66 0f 1f 84 00 00 00 00 00 55 53 <65> ff 05 27 44 a2 7e e8 f2 47 a3 07 48 c7 c3 c0 5f 03 00 83 f8 07
RSP: 0018:ffffc9000b0f7598 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffffc9000b0f76a8 RCX: ffffc9000df4c000
RDX: 0000000000040000 RSI: ffffffff83df0f1e RDI: 0000000000000003
RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
R10: ffffffff83df0f10 R11: 0000000000000000 R12: ffffea0000e93b00
R13: fffffffffffffffe R14: 0000000000000000 R15: fffff5200161eed7
 rcu_read_lock_held_common kernel/rcu/update.c:108 [inline]
 rcu_read_lock_held+0x18/0x40 kernel/rcu/update.c:309
 xa_entry include/linux/xarray.h:1180 [inline]
 xas_find+0x463/0x7e0 lib/xarray.c:1261
 find_get_entry mm/filemap.c:1835 [inline]
 find_lock_entries+0x16e/0x13b0 mm/filemap.c:1949
 shmem_undo_range+0x188/0x1640 mm/shmem.c:910
 shmem_truncate_range mm/shmem.c:1030 [inline]
 shmem_evict_inode+0x3a4/0xbd0 mm/shmem.c:1132
 evict+0x2ed/0x6b0 fs/inode.c:578
 iput_final fs/inode.c:1654 [inline]
 iput.part.0+0x57e/0x810 fs/inode.c:1680
 iput+0x58/0x70 fs/inode.c:1670
 dentry_unlink_inode+0x2b1/0x3d0 fs/dcache.c:374
 __dentry_kill+0x3c0/0x640 fs/dcache.c:580
 dentry_kill fs/dcache.c:706 [inline]
 dput+0x72a/0xbc0 fs/dcache.c:886
 __fput+0x3ae/0x920 fs/file_table.c:293
 task_work_run+0xdd/0x1a0 kernel/task_work.c:140
 get_signal+0x1c89/0x2100 kernel/signal.c:2554
 arch_do_signal_or_restart+0x2a8/0x1eb0 arch/x86/kernel/signal.c:811
 handle_signal_work kernel/entry/common.c:147 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x148/0x250 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x19/0x50 kernel/entry/common.c:301
 __do_fast_syscall_32+0x62/0x80 arch/x86/entry/common.c:142
 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:164
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f79549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f55315fc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0
RAX: 0000000020000000 RBX: 0000000020000000 RCX: 0000000000b36000
RDX: 0000000001000007 RSI: 0000000000009031 RDI: 00000000ffffffff
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
================================================================================