================================================================================
UBSAN: Undefined behaviour in sound/core/oss/pcm_oss.c:720:23
shift exponent 65535 is too large for 32-bit type 'int'
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
CPU: 1 PID: 19318 Comm: syz-executor.5 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 snd_pcm_oss_period_size sound/core/oss/pcm_oss.c:720 [inline]
 snd_pcm_oss_change_params_locked.cold+0xf7/0x11a sound/core/oss/pcm_oss.c:943
 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1102 [inline]
 snd_pcm_oss_get_active_substream+0x164/0x1c0 sound/core/oss/pcm_oss.c:1119
 snd_pcm_oss_get_channels sound/core/oss/pcm_oss.c:1806 [inline]
 snd_pcm_oss_set_channels+0x244/0x380 sound/core/oss/pcm_oss.c:1798
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
 snd_pcm_oss_ioctl+0x12dd/0x33c0 sound/core/oss/pcm_oss.c:2644
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fdfb38f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000015f40 RCX: 000000000045de59
RDX: 0000000020001580 RSI: 00000000c0045006 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007fff9b671cdf R14: 00007fdfb38f49c0 R15: 000000000118bf2c
================================================================================
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
kauditd_printk_skb: 45 callbacks suppressed
audit: type=1804 audit(1603176156.260:695): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1
audit: type=1804 audit(1603176156.260:696): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1
audit: type=1804 audit(1603176156.290:697): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1
audit: type=1804 audit(1603176156.310:698): pid=19415 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1
audit: type=1804 audit(1603176156.310:699): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1
audit: type=1804 audit(1603176156.310:700): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1
audit: type=1804 audit(1603176156.520:701): pid=19432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/428/bus" dev="sda1" ino=16178 res=1
audit: type=1804 audit(1603176156.520:702): pid=19432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/428/bus" dev="sda1" ino=16178 res=1
audit: type=1804 audit(1603176156.540:703): pid=19438 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/428/bus" dev="sda1" ino=16178 res=1
audit: type=1804 audit(1603176156.540:704): pid=19432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/428/bus" dev="sda1" ino=16178 res=1
overlayfs: filesystem on './bus' not supported as upperdir
IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002
IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002
overlayfs: unrecognized mount option "uppesdir=./bu" or missing value
overlayfs: unrecognized mount option "uppesdir=./bu" or missing value
nla_parse: 9 callbacks suppressed
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
overlayfs: missing 'lowerdir'
overlayfs: missing 'lowerdir'
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
overlayfs: failed to resolve './file1': -2
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
overlayfs: failed to resolve './file0': -2
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
overlayfs: unrecognized mount option "upperdir.?5Or=./file0" or missing value
overlayfs: unrecognized mount option "upperdir.?5Or=./file0" or missing value
Bluetooth: hci0: command 0x0401 tx timeout
kauditd_printk_skb: 52 callbacks suppressed
audit: type=1804 audit(1603176162.470:757): pid=19943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/443/bus" dev="sda1" ino=15828 res=1
audit: type=1804 audit(1603176162.510:758): pid=19943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/443/bus" dev="sda1" ino=15828 res=1
audit: type=1804 audit(1603176162.520:759): pid=19951 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/443/bus" dev="sda1" ino=15828 res=1
audit: type=1804 audit(1603176162.520:760): pid=19943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/443/bus" dev="sda1" ino=15828 res=1
audit: type=1804 audit(1603176163.030:761): pid=19980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/444/bus" dev="sda1" ino=15940 res=1
audit: type=1804 audit(1603176163.120:762): pid=19980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/444/bus" dev="sda1" ino=15940 res=1
overlayfs: filesystem on './bus' not supported as upperdir
audit: type=1804 audit(1603176163.430:763): pid=20015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/445/bus" dev="sda1" ino=15779 res=1
audit: type=1804 audit(1603176163.460:764): pid=20015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/445/bus" dev="sda1" ino=15779 res=1
audit: type=1804 audit(1603176163.480:765): pid=20024 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/445/bus" dev="sda1" ino=15779 res=1
audit: type=1804 audit(1603176163.490:766): pid=20015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/445/bus" dev="sda1" ino=15779 res=1
nla_parse: 18 callbacks suppressed
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
overlayfs: filesystem on './bus' not supported as upperdir
sctp: [Deprecated]: syz-executor.0 (pid 20097) Use of int in maxseg socket option.
Use struct sctp_assoc_value instead
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
dlm: non-version read from control device 0
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
gfs2: invalid mount option: pcr=00000000000000000016
gfs2: can't parse mount arguments
overlayfs: filesystem on './bus' not supported as upperdir
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.