(unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) ================================================================================ UBSAN: Undefined behaviour in ./include/linux/log2.h:61:13 shift exponent 64 is too large for 64-bit type 'long unsigned int' CPU: 1 PID: 19433 Comm: syz-executor.2 Not tainted 4.19.152-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 __roundup_pow_of_two include/linux/log2.h:61 [inline] snd_pcm_oss_period_size sound/core/oss/pcm_oss.c:747 [inline] snd_pcm_oss_change_params_locked.cold+0x6d/0x11a sound/core/oss/pcm_oss.c:943 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1102 [inline] snd_pcm_oss_get_active_substream+0x164/0x1c0 sound/core/oss/pcm_oss.c:1119 snd_pcm_oss_get_channels sound/core/oss/pcm_oss.c:1806 [inline] snd_pcm_oss_set_channels+0x244/0x380 sound/core/oss/pcm_oss.c:1798 snd_pcm_oss_ioctl+0x12dd/0x33c0 sound/core/oss/pcm_oss.c:2644 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45de59 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f9ba104bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000015f40 RCX: 000000000045de59 RDX: 0000000020000180 RSI: 00000000c0045006 RDI: 0000000000000003 RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c R13: 00007ffce605595f R14: 00007f9ba104c9c0 R15: 000000000118bf2c ================================================================================ (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) kvm_set_msr_common: 191 callbacks suppressed kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0xdc7d nla_parse: 16 callbacks suppressed netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0xb82b (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x93e1 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x6f98 (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x4aca kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x26c4 kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x27a kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0xde23 kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0xb9a4 kvm [19561]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x94f4 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) x_tables: duplicate underflow at hook 2 (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) nla_parse: 24 callbacks suppressed netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) ================================================================================ UBSAN: Undefined behaviour in sound/core/oss/pcm_oss.c:720:23 shift exponent 65533 is too large for 32-bit type 'int' CPU: 0 PID: 20091 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422 snd_pcm_oss_period_size sound/core/oss/pcm_oss.c:720 [inline] snd_pcm_oss_change_params_locked.cold+0xf7/0x11a sound/core/oss/pcm_oss.c:943 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1102 [inline] snd_pcm_oss_make_ready+0xe6/0x2e0 sound/core/oss/pcm_oss.c:1161 snd_pcm_oss_sync+0x1de/0x870 sound/core/oss/pcm_oss.c:1722 snd_pcm_oss_release+0x26c/0x300 sound/core/oss/pcm_oss.c:2561 __fput+0x2ce/0x8a0 fs/file_table.c:278 task_work_run+0x141/0x1c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x269/0x2c0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x57c/0x670 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4177b1 Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffca0f1cd80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004177b1 RDX: 0000001b32620000 RSI: 000000000000183f RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000078ccd83f R09: 0000000078ccd843 R10: 00007ffca0f1ce60 R11: 0000000000000293 R12: ffffffffffffffff R13: 0000000000258294 R14: 00000000000003e8 R15: 000000000118bf2c ================================================================================ (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) xt_connbytes: Forcing CT accounting to be enabled Cannot find add_set index 0 as target