================================================================================
UBSAN: Undefined behaviour in ./include/linux/log2.h:71:13
shift exponent 4294967295 is too large for 64-bit type 'long unsigned int'
CPU: 0 PID: 24427 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 __rounddown_pow_of_two include/linux/log2.h:71 [inline]
 snd_pcm_oss_period_size sound/core/oss/pcm_oss.c:711 [inline]
 snd_pcm_oss_change_params_locked.cold+0x115/0x11a sound/core/oss/pcm_oss.c:943
 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1102 [inline]
 snd_pcm_oss_get_active_substream+0x164/0x1c0 sound/core/oss/pcm_oss.c:1119
 snd_pcm_oss_get_channels sound/core/oss/pcm_oss.c:1806 [inline]
 snd_pcm_oss_ioctl+0x1db4/0x3450 sound/core/oss/pcm_oss.c:2649
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f116e326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000080045006 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffd6179bfdf R14: 00007f116e3279c0 R15: 000000000118bf2c
================================================================================
netlink: 'syz-executor.1': attribute type 5 has an invalid length.
netlink: 'syz-executor.5': attribute type 5 has an invalid length.
netlink: 'syz-executor.1': attribute type 5 has an invalid length.
netlink: 'syz-executor.5': attribute type 5 has an invalid length.
================================================================================
UBSAN: Undefined behaviour in ./include/linux/log2.h:61:13
shift exponent 64 is too large for 64-bit type 'long unsigned int'
CPU: 0 PID: 24427 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161
 __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 lib/ubsan.c:422
 __roundup_pow_of_two include/linux/log2.h:61 [inline]
 snd_pcm_oss_period_size sound/core/oss/pcm_oss.c:747 [inline]
 snd_pcm_oss_change_params_locked.cold+0x85/0x11a sound/core/oss/pcm_oss.c:943
 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1102 [inline]
 snd_pcm_oss_get_active_substream+0x164/0x1c0 sound/core/oss/pcm_oss.c:1119
 snd_pcm_oss_get_channels sound/core/oss/pcm_oss.c:1806 [inline]
 snd_pcm_oss_ioctl+0x1db4/0x3450 sound/core/oss/pcm_oss.c:2649
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f116e326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000080045006 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffd6179bfdf R14: 00007f116e3279c0 R15: 000000000118bf2c
================================================================================
audit: type=1804 audit(1603278268.267:28728): pid=24477 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir512815444/syzkaller.RQyIGZ/550/cgroup.controllers" dev="sda1" ino=17125 res=1
audit: type=1804 audit(1603278268.797:28729): pid=24501 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir512815444/syzkaller.RQyIGZ/551/cgroup.controllers" dev="sda1" ino=17128 res=1
audit: type=1804 audit(1603278269.407:28730): pid=24534 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir829606000/syzkaller.JnHEJF/470/cgroup.controllers" dev="sda1" ino=15926 res=1
audit: type=1804 audit(1603278269.437:28731): pid=24521 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir512815444/syzkaller.RQyIGZ/552/cgroup.controllers" dev="sda1" ino=17128 res=1
audit: type=1804 audit(1603278269.557:28732): pid=24526 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir291621035/syzkaller.7okTev/549/cgroup.controllers" dev="sda1" ino=17137 res=1
audit: type=1804 audit(1603278269.747:28733): pid=24536 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir448738594/syzkaller.K4m9OR/466/cgroup.controllers" dev="sda1" ino=17138 res=1
audit: type=1804 audit(1603278269.987:28734): pid=24548 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir291621035/syzkaller.7okTev/550/cgroup.controllers" dev="sda1" ino=17136 res=1
audit: type=1804 audit(1603278270.137:28735): pid=24549 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir829606000/syzkaller.JnHEJF/471/cgroup.controllers" dev="sda1" ino=17139 res=1
audit: type=1804 audit(1603278270.197:28736): pid=24557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir512815444/syzkaller.RQyIGZ/553/cgroup.controllers" dev="sda1" ino=17116 res=1
audit: type=1804 audit(1603278270.267:28737): pid=24561 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir448738594/syzkaller.K4m9OR/467/cgroup.controllers" dev="sda1" ino=17141 res=1
netlink: 'syz-executor.4': attribute type 1 has an invalid length.
input: syz0 as /devices/virtual/input/input30
device bond1 entered promiscuous mode
8021q: adding VLAN 0 to HW filter on device macvlan2
device bond1 left promiscuous mode
input: syz0 as /devices/virtual/input/input31
input: failed to attach handler leds to device input31, error: -6
bond1: Enslaving bridge1 as a backup interface with a down link
netlink: 'syz-executor.4': attribute type 1 has an invalid length.
bond1: Enslaving bridge2 as a backup interface with a down link
input: syz0 as /devices/virtual/input/input32
netlink: 'syz-executor.4': attribute type 1 has an invalid length.
device bond2 entered promiscuous mode
8021q: adding VLAN 0 to HW filter on device macvlan2
device bond2 left promiscuous mode
input: syz0 as /devices/virtual/input/input33
bond2: Enslaving bridge3 as a backup interface with a down link
netlink: 'syz-executor.3': attribute type 1 has an invalid length.
device bond5 entered promiscuous mode
8021q: adding VLAN 0 to HW filter on device macvlan2
device bond5 left promiscuous mode
bond5: Enslaving bridge8 as a backup interface with a down link
netlink: 'syz-executor.3': attribute type 1 has an invalid length.
input: syz0 as /devices/virtual/input/input34
input: syz0 as /devices/virtual/input/input35
netlink: 'syz-executor.4': attribute type 1 has an invalid length.
device bond6 entered promiscuous mode
8021q: adding VLAN 0 to HW filter on device macvlan2
device bond6 left promiscuous mode
input: syz0 as /devices/virtual/input/input36