[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 68.767633][ T8502] ================================================================================ [ 68.777129][ T8502] UBSAN: shift-out-of-bounds in ./include/net/red.h:252:22 [ 68.785874][ T8502] shift exponent 72 is too large for 32-bit type 'int' [ 68.792836][ T8502] CPU: 1 PID: 8502 Comm: syz-executor121 Not tainted 5.10.0-syzkaller #0 [ 68.801281][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.811333][ T8502] Call Trace: [ 68.814619][ T8502] dump_stack+0x107/0x163 [ 68.818960][ T8502] ubsan_epilogue+0xb/0x5a [ 68.823386][ T8502] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 68.830150][ T8502] ? rwlock_bug.part.0+0x90/0x90 [ 68.835097][ T8502] ? kasan_unpoison_shadow+0x33/0x40 [ 68.840397][ T8502] sfq_init.cold+0x4f/0xd5 [ 68.844835][ T8502] ? sfq_perturbation+0x2c0/0x2c0 [ 68.849874][ T8502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.856126][ T8502] ? sfq_perturbation+0x2c0/0x2c0 [ 68.861190][ T8502] qdisc_create+0x4ba/0x13a0 [ 68.865797][ T8502] ? apparmor_capable+0x1d8/0x460 [ 68.870874][ T8502] ? tc_get_qdisc+0xb20/0xb20 [ 68.875596][ T8502] ? __nla_parse+0x3d/0x50 [ 68.880460][ T8502] tc_modify_qdisc+0x4c8/0x1a30 [ 68.885324][ T8502] ? rtnetlink_rcv_msg+0x443/0xb80 [ 68.890435][ T8502] ? qdisc_create+0x13a0/0x13a0 [ 68.895297][ T8502] ? qdisc_create+0x13a0/0x13a0 [ 68.900144][ T8502] rtnetlink_rcv_msg+0x498/0xb80 [ 68.905100][ T8502] ? rtnl_fdb_dump+0xa00/0xa00 [ 68.909882][ T8502] netlink_rcv_skb+0x153/0x420 [ 68.914660][ T8502] ? rtnl_fdb_dump+0xa00/0xa00 [ 68.919421][ T8502] ? netlink_ack+0xab0/0xab0 [ 68.924004][ T8502] ? netlink_deliver_tap+0x2c4/0xc00 [ 68.929291][ T8502] netlink_unicast+0x533/0x7d0 [ 68.934068][ T8502] ? netlink_attachskb+0x870/0x870 [ 68.939169][ T8502] ? _copy_from_iter_full+0x275/0x850 [ 68.944543][ T8502] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.950793][ T8502] ? __phys_addr_symbol+0x2c/0x70 [ 68.955813][ T8502] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 68.961529][ T8502] ? __check_object_size+0x171/0x3f0 [ 68.966847][ T8502] netlink_sendmsg+0x907/0xe40 [ 68.971630][ T8502] ? netlink_unicast+0x7d0/0x7d0 [ 68.976586][ T8502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.982830][ T8502] ? netlink_unicast+0x7d0/0x7d0 [ 68.987779][ T8502] sock_sendmsg+0xcf/0x120 [ 68.992204][ T8502] ____sys_sendmsg+0x6e8/0x810 [ 68.997004][ T8502] ? kernel_sendmsg+0x50/0x50 [ 69.001692][ T8502] ? do_recvmmsg+0x6c0/0x6c0 [ 69.006282][ T8502] ? security_file_alloc+0x34/0x170 [ 69.011482][ T8502] ? fs_reclaim_release+0x9c/0xe0 [ 69.016525][ T8502] ___sys_sendmsg+0xf3/0x170 [ 69.021122][ T8502] ? sendmsg_copy_msghdr+0x160/0x160 [ 69.026414][ T8502] ? lockdep_init_map_waits+0x26a/0x720 [ 69.031960][ T8502] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 69.037942][ T8502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.044189][ T8502] ? percpu_counter_add_batch+0xbd/0x180 [ 69.049826][ T8502] ? find_held_lock+0x2d/0x110 [ 69.054594][ T8502] ? fd_install+0x250/0x6e0 [ 69.059095][ T8502] ? lock_downgrade+0x6d0/0x6d0 [ 69.063951][ T8502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.070190][ T8502] ? __fget_light+0x215/0x280 [ 69.074889][ T8502] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.081143][ T8502] __sys_sendmsg+0xe5/0x1b0 [ 69.085659][ T8502] ? __sys_sendmsg_sock+0xb0/0xb0 [ 69.090687][ T8502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 69.096591][ T8502] do_syscall_64+0x2d/0x70 [ 69.101034][ T8502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.106962][ T8502] RIP: 0033:0x4404f9 [ 69.110874][ T8502] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 69.130514][ T8502] RSP: 002b:00007ffe1ac66318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.139005][ T8502] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404f9 [ 69.147003][ T8502] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 69.154996][ T8502] RBP: 00000000006ca018 R08: 00000000ffffffff R09: 00000000004002c8 [ 69.162996][ T8502] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401d00 [ 69.171016][ T8502] R13: 0000000000401d90 R14: 0000000000000000 R15: 0000000000000000 [ 69.179160][ T8502] ================================================================================ [ 69.188942][ T8502] Kernel panic - not syncing: panic_on_warn set ... [ 69.195547][ T8502] CPU: 1 PID: 8502 Comm: syz-executor121 Not tainted 5.10.0-syzkaller #0 [ 69.203985][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.214063][ T8502] Call Trace: [ 69.217374][ T8502] dump_stack+0x107/0x163 [ 69.221736][ T8502] panic+0x343/0x77f [ 69.225676][ T8502] ? __warn_printk+0xf3/0xf3 [ 69.230387][ T8502] ? ubsan_epilogue+0x3e/0x5a [ 69.235073][ T8502] ubsan_epilogue+0x54/0x5a [ 69.239593][ T8502] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 69.246364][ T8502] ? rwlock_bug.part.0+0x90/0x90 [ 69.251305][ T8502] ? kasan_unpoison_shadow+0x33/0x40 [ 69.256591][ T8502] sfq_init.cold+0x4f/0xd5 [ 69.261030][ T8502] ? sfq_perturbation+0x2c0/0x2c0 [ 69.266053][ T8502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.272315][ T8502] ? sfq_perturbation+0x2c0/0x2c0 [ 69.277349][ T8502] qdisc_create+0x4ba/0x13a0 [ 69.281972][ T8502] ? apparmor_capable+0x1d8/0x460 [ 69.287038][ T8502] ? tc_get_qdisc+0xb20/0xb20 [ 69.291852][ T8502] ? __nla_parse+0x3d/0x50 [ 69.296705][ T8502] tc_modify_qdisc+0x4c8/0x1a30 [ 69.301562][ T8502] ? rtnetlink_rcv_msg+0x443/0xb80 [ 69.306683][ T8502] ? qdisc_create+0x13a0/0x13a0 [ 69.311583][ T8502] ? qdisc_create+0x13a0/0x13a0 [ 69.316453][ T8502] rtnetlink_rcv_msg+0x498/0xb80 [ 69.321397][ T8502] ? rtnl_fdb_dump+0xa00/0xa00 [ 69.326192][ T8502] netlink_rcv_skb+0x153/0x420 [ 69.330954][ T8502] ? rtnl_fdb_dump+0xa00/0xa00 [ 69.335726][ T8502] ? netlink_ack+0xab0/0xab0 [ 69.340321][ T8502] ? netlink_deliver_tap+0x2c4/0xc00 [ 69.345610][ T8502] netlink_unicast+0x533/0x7d0 [ 69.350386][ T8502] ? netlink_attachskb+0x870/0x870 [ 69.355523][ T8502] ? _copy_from_iter_full+0x275/0x850 [ 69.361002][ T8502] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.367587][ T8502] ? __phys_addr_symbol+0x2c/0x70 [ 69.372608][ T8502] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 69.378770][ T8502] ? __check_object_size+0x171/0x3f0 [ 69.384064][ T8502] netlink_sendmsg+0x907/0xe40 [ 69.388835][ T8502] ? netlink_unicast+0x7d0/0x7d0 [ 69.393794][ T8502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.400051][ T8502] ? netlink_unicast+0x7d0/0x7d0 [ 69.404985][ T8502] sock_sendmsg+0xcf/0x120 [ 69.409416][ T8502] ____sys_sendmsg+0x6e8/0x810 [ 69.414199][ T8502] ? kernel_sendmsg+0x50/0x50 [ 69.418887][ T8502] ? do_recvmmsg+0x6c0/0x6c0 [ 69.423480][ T8502] ? security_file_alloc+0x34/0x170 [ 69.428696][ T8502] ? fs_reclaim_release+0x9c/0xe0 [ 69.433740][ T8502] ___sys_sendmsg+0xf3/0x170 [ 69.438615][ T8502] ? sendmsg_copy_msghdr+0x160/0x160 [ 69.443987][ T8502] ? lockdep_init_map_waits+0x26a/0x720 [ 69.449541][ T8502] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 69.455517][ T8502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.462038][ T8502] ? percpu_counter_add_batch+0xbd/0x180 [ 69.467678][ T8502] ? find_held_lock+0x2d/0x110 [ 69.472436][ T8502] ? fd_install+0x250/0x6e0 [ 69.477028][ T8502] ? lock_downgrade+0x6d0/0x6d0 [ 69.482148][ T8502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.488384][ T8502] ? __fget_light+0x215/0x280 [ 69.493332][ T8502] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.499584][ T8502] __sys_sendmsg+0xe5/0x1b0 [ 69.504102][ T8502] ? __sys_sendmsg_sock+0xb0/0xb0 [ 69.509138][ T8502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 69.515486][ T8502] do_syscall_64+0x2d/0x70 [ 69.519896][ T8502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.525799][ T8502] RIP: 0033:0x4404f9 [ 69.529704][ T8502] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 69.549324][ T8502] RSP: 002b:00007ffe1ac66318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.557764][ T8502] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404f9 [ 69.565749][ T8502] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 69.573973][ T8502] RBP: 00000000006ca018 R08: 00000000ffffffff R09: 00000000004002c8 [ 69.581967][ T8502] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401d00 [ 69.589952][ T8502] R13: 0000000000401d90 R14: 0000000000000000 R15: 0000000000000000 [ 69.598623][ T8502] Kernel Offset: disabled [ 69.603044][ T8502] Rebooting in 86400 seconds..