================================================================================
UBSAN: Undefined behaviour in ./include/net/sch_generic.h:1051:7
shift exponent 129 is too large for 32-bit type 'int'
CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 4.19.149-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 qdisc_l2t include/net/sch_generic.h:1051 [inline]
 cbq_update net/sched/sch_cbq.c:567 [inline]
 cbq_dequeue.cold+0x189/0x18e net/sched/sch_cbq.c:814
 dequeue_skb net/sched/sch_generic.c:282 [inline]
 qdisc_restart net/sched/sch_generic.c:385 [inline]
 __qdisc_run+0x1b9/0x1680 net/sched/sch_generic.c:403
 qdisc_run include/net/pkt_sched.h:120 [inline]
 net_tx_action+0x520/0xce0 net/core/dev.c:4592
 __do_softirq+0x27d/0xad2 kernel/softirq.c:292
 run_ksoftirqd+0x57/0x130 kernel/softirq.c:653
 smpboot_thread_fn+0x66e/0xa30 kernel/smpboot.c:164
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
================================================================================
hfsplus: unable to find HFS+ superblock
hfsplus: unable to find HFS+ superblock
EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated
EXT4-fs (loop3): get root inode failed
EXT4-fs (loop3): mount failed
IPVS: ftp: loaded support on port[0] = 21
EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated
hfsplus: unable to find HFS+ superblock
EXT4-fs (loop3): get root inode failed
EXT4-fs (loop3): mount failed
hfsplus: unable to find HFS+ superblock
IPVS: ftp: loaded support on port[0] = 21
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
ntfs: (device loop3): parse_options(): The disable_sparse option requires a boolean argument.
hfsplus: unable to find HFS+ superblock
ntfs: (device loop3): parse_options(): The disable_sparse option requires a boolean argument.
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option ""
REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option ""
FAT-fs (loop5): bogus number of reserved sectors
audit: type=1800 audit(1601594783.749:9): pid=8637 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15826 res=0
FAT-fs (loop5): Can't find a valid FAT filesystem
FAT-fs (loop5): bogus number of reserved sectors
FAT-fs (loop5): Can't find a valid FAT filesystem
Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
netlink: 288 bytes leftover after parsing attributes in process `syz-executor.5'.
hfsplus: unable to find HFS+ superblock
hfsplus: unable to find HFS+ superblock
hfsplus: unable to find HFS+ superblock
audit: type=1400 audit(1601594786.399:10): avc:  denied  { set_context_mgr } for  pid=8857 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1
binder: 8857:8859 unknown command 0
binder: 8857:8859 ioctl c0306201 20000200 returned -22
ntfs: (device loop5): parse_options(): NLS character set a not found. Using previous one maccroatian.
ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size.
ntfs: (device loop5): parse_options(): NLS character set a not found. Using previous one maccroatian.
ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size.
ntfs: (device loop5): parse_options(): NLS character set a not found. Using previous one maccroatian.
ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size.
ntfs: (device loop5): parse_options(): NLS character set a not found. Using previous one maccroatian.
ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size.
encrypted_key: insufficient parameters specified
encrypted_key: insufficient parameters specified
ntfs: (device loop5): parse_options(): NLS character set a not found. Using previous one maccroatian.
ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size.
overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.