Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:52538' (ECDSA) to the list of known hosts. syzkaller login: [ 100.920967][ T46] kauditd_printk_skb: 7 callbacks suppressed [ 100.920987][ T46] audit: type=1400 audit(1609073261.409:42): avc: denied { map } for pid=10021 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/12/27 12:47:41 fuzzer started [ 101.492040][T10027] ================================================================================ [ 101.504661][T10027] UBSAN: invalid-load in kernel/params.c:302:33 [ 101.512310][T10027] load of value 255 is not a valid value for type '_Bool' [ 101.523705][T10027] CPU: 0 PID: 10027 Comm: syz-fuzzer Not tainted 5.10.0-syzkaller #0 [ 101.533363][T10027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 101.533586][T10027] Call Trace: [ 101.533586][T10027] dump_stack+0x107/0x163 [ 101.533586][T10027] ubsan_epilogue+0xb/0x5a [ 101.533586][T10027] __ubsan_handle_load_invalid_value.cold+0x62/0x6c [ 101.533586][T10027] param_get_bool.cold+0x14/0x19 [ 101.533586][T10027] param_attr_show+0x14a/0x220 [ 101.533586][T10027] ? kernel_param_unlock+0x40/0x40 [ 101.533586][T10027] module_attr_show+0x48/0x70 [ 101.533586][T10027] ? func_ptr_is_kernel_text+0x80/0x80 [ 101.533586][T10027] sysfs_kf_seq_show+0x1f8/0x400 [ 101.533586][T10027] seq_read_iter+0x4d3/0x1220 [ 101.533586][T10027] seq_read+0x3dd/0x5b0 [ 101.533586][T10027] ? seq_read_iter+0x1220/0x1220 [ 101.533586][T10027] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 101.533586][T10027] ? selinux_file_permission+0xcc/0x5a0 [ 101.533586][T10027] kernfs_fop_read+0xe9/0x590 [ 101.533586][T10027] ? rw_verify_area+0x11d/0x350 [ 101.533586][T10027] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 101.533586][T10027] vfs_read+0x1b5/0x570 [ 101.533586][T10027] ksys_read+0x12d/0x250 [ 101.533586][T10027] ? vfs_write+0xa80/0xa80 [ 101.533586][T10027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 101.533586][T10027] do_syscall_64+0x2d/0x70 [ 101.533586][T10027] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.533586][T10027] RIP: 0033:0x4ad4a0 [ 101.533586][T10027] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 101.533586][T10027] RSP: 002b:000000c0001bb678 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 101.533586][T10027] RAX: ffffffffffffffda RBX: 000000c000022f00 RCX: 00000000004ad4a0 [ 101.533586][T10027] RDX: 0000000000001200 RSI: 000000c0003c3300 RDI: 0000000000000003 [ 101.533586][T10027] RBP: 000000c0001bb6c8 R08: 0000000000000000 R09: 0000000000000000 [ 101.533586][T10027] R10: 0000000000000000 R11: 0000000000000212 R12: ffffffffffffffff [ 101.533586][T10027] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000005 [ 101.835824][T10027] ================================================================================ [ 101.847304][T10027] Kernel panic - not syncing: panic_on_warn set ... [ 101.854994][T10027] CPU: 0 PID: 10027 Comm: syz-fuzzer Not tainted 5.10.0-syzkaller #0 [ 101.857186][T10027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 101.857186][T10027] Call Trace: [ 101.857186][T10027] dump_stack+0x107/0x163 [ 101.857186][T10027] panic+0x343/0x77f [ 101.857186][T10027] ? __warn_printk+0xf3/0xf3 [ 101.857186][T10027] ? ubsan_epilogue+0x3e/0x5a [ 101.857186][T10027] ubsan_epilogue+0x54/0x5a [ 101.857186][T10027] __ubsan_handle_load_invalid_value.cold+0x62/0x6c [ 101.857186][T10027] param_get_bool.cold+0x14/0x19 [ 101.857186][T10027] param_attr_show+0x14a/0x220 [ 101.857186][T10027] ? kernel_param_unlock+0x40/0x40 [ 101.857186][T10027] module_attr_show+0x48/0x70 [ 101.857186][T10027] ? func_ptr_is_kernel_text+0x80/0x80 [ 101.857186][T10027] sysfs_kf_seq_show+0x1f8/0x400 [ 101.857186][T10027] seq_read_iter+0x4d3/0x1220 [ 101.857186][T10027] seq_read+0x3dd/0x5b0 [ 101.857186][T10027] ? seq_read_iter+0x1220/0x1220 [ 101.857186][T10027] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 101.857186][T10027] ? selinux_file_permission+0xcc/0x5a0 [ 101.857186][T10027] kernfs_fop_read+0xe9/0x590 [ 101.857186][T10027] ? rw_verify_area+0x11d/0x350 [ 101.857186][T10027] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 101.857186][T10027] vfs_read+0x1b5/0x570 [ 101.857186][T10027] ksys_read+0x12d/0x250 [ 101.857186][T10027] ? vfs_write+0xa80/0xa80 [ 101.857186][T10027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 101.857186][T10027] do_syscall_64+0x2d/0x70 [ 101.857186][T10027] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.857186][T10027] RIP: 0033:0x4ad4a0 [ 101.857186][T10027] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 101.857186][T10027] RSP: 002b:000000c0001bb678 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 101.857186][T10027] RAX: ffffffffffffffda RBX: 000000c000022f00 RCX: 00000000004ad4a0 [ 101.857186][T10027] RDX: 0000000000001200 RSI: 000000c0003c3300 RDI: 0000000000000003 [ 101.857186][T10027] RBP: 000000c0001bb6c8 R08: 0000000000000000 R09: 0000000000000000 [ 101.857186][T10027] R10: 0000000000000000 R11: 0000000000000212 R12: ffffffffffffffff [ 101.857186][T10027] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000005 [ 101.857186][T10027] Kernel Offset: disabled [ 101.857186][T10027] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:47:42 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff841a541c RDI=ffffffff9042abe0 RBP=ffffffff9042aba0 RSP=ffffc90001027668 R8 =000000000000004f R9 =0000000000000000 R10=ffffffff841a540d R11=000000000000001f R12=0000000000000000 R13=fffffbfff20855c7 R14=fffffbfff208557e R15=dffffc0000000000 RIP=ffffffff841a5444 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c000276410 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5be03ebcf0 CR3=0000000024a84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000184c300000000000000001 XMM02=6574656d617261702f6d766b2f656c75 XMM03=73656761705f656775685f786e2f7372 XMM04=0000000000000009000000c0002b6650 XMM05=0000000000000007000000c0002b7650 XMM06=0000000000000004000000c0002b7658 XMM07=0000000000000007000000c0002b7660 XMM08=000000000000000e000000c0002b7670 XMM09=0000000000000005000000c0002b7667 XMM10=000000000000000e000000c0002b7680 XMM11=000000000000000b000000c0002b7690 XMM12=0000000000000010000000c0002b76a0 XMM13=000000c0002ba0400000000000000001 XMM14=000000c0004d60300000000000000005 XMM15=00000000000000010000000000000001 info registers vcpu 1 RAX=000000000003e86f RBX=ffff8880112b8380 RCX=ffffffff8912cca0 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffed1002257070 RSP=ffffc9000041fdf8 R8 =0000000000000001 R9 =ffff88802cb35c6b R10=ffffed1005966b8d R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=ffffffff8d7bd6c8 R15=0000000000000000 RIP=ffffffff8915233e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000f44100 CR3=0000000024a84000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=532e29646d432a282e636578652f736f XMM03=00000000000000000000000000000000 XMM04=7865206f7420676e6979727420726f72 XMM05=7865203a2773756c7031636327206365 XMM06=69662068637573206f4e203a70766365 XMM07=0a79726f74636572696420726f20656c XMM08=0000000000b9a5a093ed648382c753b5 XMM09=000000000045c0c10000000000000000 XMM10=000000c00000ca80000000c000378160 XMM11=0000000000b9a4c000000000010bb820 XMM12=0000000000b9a4c00000000001057680 XMM13=29286e69616d20746e690a64656c6c61 XMM14=6f6c6c6548222866746e697270207b20 XMM15=0a7d203b29226e5c21646c726f57202c info registers vcpu 2 RAX=0000000000038d27 RBX=ffff8880112bc3c0 RCX=ffffffff8912cca0 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffed1002257878 RSP=ffffc9000042fdf8 R8 =0000000000000001 R9 =ffff88802cc35c6b R10=ffffed1005986b8d R11=0000000000000000 R12=0000000000000002 R13=0000000000000002 R14=ffffffff8d7bd6c8 R15=0000000000000000 RIP=ffffffff8915233e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb7306f8068 CR3=000000001f0b4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=545b5d3031333231352e31303120205b XMM01=00000000000000000000000000000000 XMM02=00000000000001210000000000435455 XMM03=3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d XMM04=3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d XMM05=3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d XMM06=6473223d766564202264746f6d223d65 XMM07=00000000000000002000000000000020 XMM08=ffffff0000000000ff000000000000ff XMM09=00000000000000000000000000000000 XMM10=ffffff00000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000042801 RBX=ffff8880112e0400 RCX=ffffffff8912cca0 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffed100225c080 RSP=ffffc9000043fdf8 R8 =0000000000000001 R9 =ffff88802cd35c6b R10=ffffed10059a6b8d R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffffffff8d7bd6c8 R15=0000000000000000 RIP=ffffffff8915233e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fec046201b0 CR3=000000001f0b4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a276c6f6f425f27206570797420726f XMM01=5d3031333231352e31303120205b203a XMM02=65756c61762064696c6176206120746f XMM03=6e207369203535322065756c61762066 XMM04=6f2064616f6c205d3732303031545b5d XMM05=5d3031333231352e31303120205b203a XMM06=3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d XMM07=2036333a37343a323120373220636544 XMM08=ffffff0000000000ff000000000000ff XMM09=00000000000000000000000000000000 XMM10=ffffff00000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000