[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Update UTMP about System Runlevel Changes.
[  OK  ] Started Load/Save RF Kill Switch Status.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.204' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   39.139453] audit: type=1400 audit(1603163061.758:8): avc:  denied  { execmem } for  pid=6509 comm="syz-executor854" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   39.154944] IPVS: ftp: loaded support on port[0] = 21
[   39.197179] ================================================================================
[   39.206452] UBSAN: Undefined behaviour in ./include/net/red.h:214:22
[   39.213092] shift exponent 253 is too large for 32-bit type 'int'
[   39.219465] CPU: 1 PID: 6510 Comm: syz-executor854 Not tainted 4.19.152-syzkaller #0
[   39.227345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   39.237851] Call Trace:
[   39.240452]  dump_stack+0x22c/0x33e
[   39.244208]  ubsan_epilogue+0xe/0x3a
[   39.248057]  __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250
[   39.256140]  ? choke_change+0x41d/0x1410
[   39.260279]  choke_change.cold+0x113/0x11e
[   39.264937]  ? __kmalloc_node+0x38/0x70
[   39.269272]  ? choke_enqueue+0x2cc0/0x2cc0
[   39.275392]  ? choke_change+0x1410/0x1410
[   39.280089]  qdisc_create+0x534/0x1080
[   39.285839]  ? tc_get_qdisc+0xad0/0xad0
[   39.290051]  ? nla_parse+0x1b2/0x290
[   39.294558]  tc_modify_qdisc+0x4c0/0x195b
[   39.298822]  ? qdisc_create+0x1080/0x1080
[   39.303145]  ? rtnetlink_rcv_msg+0x443/0xc10
[   39.307800]  ? qdisc_create+0x1080/0x1080
[   39.312413]  rtnetlink_rcv_msg+0x498/0xc10
[   39.317035]  ? rtnl_get_link+0x270/0x270
[   39.321261]  ? __netlink_lookup+0x481/0x7e0
[   39.325646]  ? find_held_lock+0x2d/0x110
[   39.329870]  netlink_rcv_skb+0x160/0x440
[   39.334072]  ? rtnl_get_link+0x270/0x270
[   39.338304]  ? netlink_ack+0xae0/0xae0
[   39.342215]  netlink_unicast+0x4d5/0x690
[   39.346364]  ? netlink_sendskb+0x110/0x110
[   39.350729]  netlink_sendmsg+0x717/0xcc0
[   39.354818]  ? nlmsg_notify+0x1a0/0x1a0
[   39.362603]  ? __sock_recv_ts_and_drops+0x540/0x540
[   39.368326]  ? nlmsg_notify+0x1a0/0x1a0
[   39.373266]  sock_sendmsg+0xc7/0x130
[   39.377557]  ___sys_sendmsg+0x3b3/0x8f0
[   39.381849]  ? copy_msghdr_from_user+0x440/0x440
[   39.387099]  ? copy_msghdr_from_user+0x267/0x440
[   39.391954]  ? mark_held_locks+0xf0/0xf0
[   39.396413]  ? find_held_lock+0x2d/0x110
[   39.401119]  ? __might_fault+0x11f/0x1d0
[   39.407005]  ? lock_downgrade+0x750/0x750
[   39.412471]  ? lock_acquire+0x170/0x3f0
[   39.418315]  ? __might_fault+0xef/0x1d0
[   39.422759]  __sys_sendmmsg+0x195/0x470
[   39.426741]  ? __ia32_sys_sendmsg+0x220/0x220
[   39.431670]  ? __fget_light+0x1a2/0x230
[   39.435648]  ? sockfd_lookup_light+0xc6/0x180
[   39.440177]  ? __x64_sys_sendmsg+0x159/0x220
[   39.444815]  ? __sys_sendmsg+0x1b0/0x1b0
[   39.448895]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[   39.454253]  __x64_sys_sendmmsg+0x99/0x100
[   39.458529]  ? lockdep_hardirqs_on+0x3c1/0x5e0
[   39.463106]  do_syscall_64+0xf9/0x670
[   39.467055]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   39.472421] RIP: 0033:0x440ed9
[   39.475696] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 0f fc ff c3 66 2e 0f 1f 84 00 00 00 00
[   39.495520] RSP: 002b:00007ffcf050a