Warning: Permanently added '[localhost]:51800' (ECDSA) to the list of known hosts. syzkaller login: [ 96.016436][ T47] kauditd_printk_skb: 7 callbacks suppressed [ 96.016460][ T47] audit: type=1400 audit(1609068604.644:42): avc: denied { map } for pid=9796 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/12/27 11:30:04 fuzzer started [ 96.664737][ T9803] ================================================================================ [ 96.677758][ T9803] UBSAN: invalid-load in kernel/params.c:302:33 [ 96.686981][ T9803] load of value 255 is not a valid value for type '_Bool' [ 96.704237][ T9803] CPU: 0 PID: 9803 Comm: syz-fuzzer Not tainted 5.10.0-syzkaller #0 [ 96.714059][ T9803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 96.714059][ T9803] Call Trace: [ 96.714059][ T9803] dump_stack+0x107/0x163 [ 96.714059][ T9803] ubsan_epilogue+0xb/0x5a [ 96.714059][ T9803] __ubsan_handle_load_invalid_value.cold+0x62/0x6c [ 96.714059][ T9803] param_get_bool.cold+0x14/0x19 [ 96.714059][ T9803] param_attr_show+0x14a/0x220 [ 96.714059][ T9803] ? kernel_param_unlock+0x40/0x40 [ 96.714059][ T9803] module_attr_show+0x48/0x70 [ 96.714059][ T9803] ? func_ptr_is_kernel_text+0x80/0x80 [ 96.714059][ T9803] sysfs_kf_seq_show+0x1f8/0x400 [ 96.714059][ T9803] seq_read_iter+0x4d3/0x1220 [ 96.714059][ T9803] seq_read+0x3dd/0x5b0 [ 96.714059][ T9803] ? seq_read_iter+0x1220/0x1220 [ 96.714059][ T9803] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 96.714059][ T9803] ? selinux_file_permission+0xcc/0x5a0 [ 96.714059][ T9803] kernfs_fop_read+0xe9/0x590 [ 96.714059][ T9803] ? rw_verify_area+0x11d/0x350 [ 96.714059][ T9803] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 96.714059][ T9803] vfs_read+0x1b5/0x570 [ 96.714059][ T9803] ksys_read+0x12d/0x250 [ 96.714059][ T9803] ? vfs_write+0xa80/0xa80 [ 96.714059][ T9803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 96.714059][ T9803] do_syscall_64+0x2d/0x70 [ 96.714059][ T9803] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 96.714059][ T9803] RIP: 0033:0x4ad4a0 [ 96.714059][ T9803] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 96.714059][ T9803] RSP: 002b:000000c0003c9678 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 96.714059][ T9803] RAX: ffffffffffffffda RBX: 000000c00001e500 RCX: 00000000004ad4a0 [ 96.714059][ T9803] RDX: 0000000000001200 RSI: 000000c000497300 RDI: 0000000000000003 [ 96.714059][ T9803] RBP: 000000c0003c96c8 R08: 0000000000000000 R09: 0000000000000000 [ 96.714059][ T9803] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 96.714059][ T9803] R13: 0000000000000005 R14: 0000000000000005 R15: 0000000000000005 [ 97.029373][ T9803] ================================================================================ [ 97.047626][ T9803] Kernel panic - not syncing: panic_on_warn set ... [ 97.057374][ T9803] CPU: 0 PID: 9803 Comm: syz-fuzzer Not tainted 5.10.0-syzkaller #0 [ 97.073443][ T9803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 97.085584][ T9803] Call Trace: [ 97.085584][ T9803] dump_stack+0x107/0x163 [ 97.085584][ T9803] panic+0x343/0x77f [ 97.085584][ T9803] ? __warn_printk+0xf3/0xf3 [ 97.085584][ T9803] ? ubsan_epilogue+0x3e/0x5a [ 97.085584][ T9803] ubsan_epilogue+0x54/0x5a [ 97.085584][ T9803] __ubsan_handle_load_invalid_value.cold+0x62/0x6c [ 97.085584][ T9803] param_get_bool.cold+0x14/0x19 [ 97.085584][ T9803] param_attr_show+0x14a/0x220 [ 97.085584][ T9803] ? kernel_param_unlock+0x40/0x40 [ 97.085584][ T9803] module_attr_show+0x48/0x70 [ 97.085584][ T9803] ? func_ptr_is_kernel_text+0x80/0x80 [ 97.085584][ T9803] sysfs_kf_seq_show+0x1f8/0x400 [ 97.085584][ T9803] seq_read_iter+0x4d3/0x1220 [ 97.085584][ T9803] seq_read+0x3dd/0x5b0 [ 97.085584][ T9803] ? seq_read_iter+0x1220/0x1220 [ 97.085584][ T9803] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 97.085584][ T9803] ? selinux_file_permission+0xcc/0x5a0 [ 97.085584][ T9803] kernfs_fop_read+0xe9/0x590 [ 97.085584][ T9803] ? rw_verify_area+0x11d/0x350 [ 97.085584][ T9803] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 97.085584][ T9803] vfs_read+0x1b5/0x570 [ 97.085584][ T9803] ksys_read+0x12d/0x250 [ 97.085584][ T9803] ? vfs_write+0xa80/0xa80 [ 97.085584][ T9803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 97.085584][ T9803] do_syscall_64+0x2d/0x70 [ 97.085584][ T9803] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.085584][ T9803] RIP: 0033:0x4ad4a0 [ 97.085584][ T9803] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 97.085584][ T9803] RSP: 002b:000000c0003c9678 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 97.085584][ T9803] RAX: ffffffffffffffda RBX: 000000c00001e500 RCX: 00000000004ad4a0 [ 97.085584][ T9803] RDX: 0000000000001200 RSI: 000000c000497300 RDI: 0000000000000003 [ 97.085584][ T9803] RBP: 000000c0003c96c8 R08: 0000000000000000 R09: 0000000000000000 [ 97.085584][ T9803] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 97.085584][ T9803] R13: 0000000000000005 R14: 0000000000000005 R15: 0000000000000005 [ 97.085584][ T9803] Kernel Offset: disabled [ 97.085584][ T9803] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:30:05 Registers: info registers vcpu 0 RAX=000000000000005d RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff841a5371 RDI=ffffffff9042abe0 RBP=ffffffff9042aba0 RSP=ffffc90001d076c0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff841a5362 R11=000000000000001f R12=000000000000005d R13=0000000000000000 R14=ffffffff9042aba0 R15=dffffc0000000000 RIP=ffffffff841a539c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c000032e90 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000f44100 CR3=0000000016711000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000040f8678000000000 XMM03=73656761705f656775685f786e2f7372 XMM04=000000c0000c7b60000000c0000c7b30 XMM05=000000c0000c7bc0000000c0000c7b90 XMM06=000000c0000c7bf0000000c00007ae10 XMM07=000000c0000d18c0000000c0000c7c20 XMM08=000000c0000c7e60000000c0000c7e30 XMM09=000000c0000c7ec0000000c0000c7e90 XMM10=000000c0000c7f20000000c0000c7ef0 XMM11=000000c0000c7f80000000c0000c7f50 XMM12=000000c0000c7fb0000000c00007ae70 XMM13=000000c0000d4030000000c0000d4000 XMM14=000000c0000d4090000000c0000d4060 XMM15=000000c0000d3440000000c0000d40c0 info registers vcpu 1 RAX=00000000000393c1 RBX=ffff8880112b8380 RCX=ffffffff8912cca0 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffed1002257070 RSP=ffffc9000041fdf8 R8 =0000000000000001 R9 =ffff88802cb35c6b R10=ffffed1005966b8d R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=ffffffff8d7bd6c8 R15=0000000000000000 RIP=ffffffff8915233e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb461cfe000 CR3=0000000016711000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f70c6f7a0b5ed8d XMM02=000000000000000043e0000000000000 XMM03=0000000000000000414e5a0be6666667 XMM04=00000000000000003fd58d3ad23002a3 XMM05=000000c000179400000000c000135300 XMM06=00000000000000003fd3333333333333 XMM07=00000000000000003fd03cf0090a20cd XMM08=00000000000000003fe0092fd907c01c XMM09=00000000000000003f9abf94ba919d20 XMM10=00000000000000003fd6f72e381463a2 XMM11=000000c0002c75f0000000c0002c75d0 XMM12=000000c0002c7600000000c0002c7610 XMM13=000000c0002c7580000000c0002c7570 XMM14=000000c0002c7650000000c0002c7560 XMM15=000000c0002c7590000000c0002c7510 info registers vcpu 2 RAX=dffffc0000000000 RBX=ffff88802cc27380 RCX=0000000000000000 RDX=ffff8880112bc3c0 RSI=0000000000000002 RDI=ffff88802cc27380 RBP=fffffbfff1681e38 RSP=ffffc9000042fcf8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff81668c96 R11=0000000000000000 R12=ffff88802cc27380 R13=ffff88802cc27430 R14=1ffff92000085fa2 R15=0000000000000000 RIP=ffffffff81666d57 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb461c3fca0 CR3=0000000016711000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000c1162e42fefa39ef XMM03=0000000000000000414fffffe0000000 XMM04=61636f6c2f7273752f3a6e6962732f6c XMM05=3a6e6962732f7273752f3a6e69622f6c XMM06=2f3a6e6962732f3a6e69622f7273752f XMM07=3131582f6e69622f7273752f3a6e6962 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=1ffff9200034af18 RCX=0000000000000000 RDX=ffff888020ad5540 RSI=ffffffff8167cfce RDI=0000000000000003 RBP=ffffc90001a57978 RSP=ffffc90001a578a0 R8 =0000000000000000 R9 =ffffffff8f6057bf R10=ffffffff8167cfe3 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000001 R15=0000000000000008 RIP=ffffffff8167cfd0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c000032b10 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7d97bbdcf0 CR3=0000000016711000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f70c6f7a0b5ed8d XMM02=000000000000000043e0000000000000 XMM03=000000c0002c6f70000000c0002c8378 XMM04=000000c0002c81e0000000c0002c8188 XMM05=000000c0002c8060000000c0002c8228 XMM06=000000c0002c81f8000000c0002c8100 XMM07=000000c0002c63b0000000c0002c8090 XMM08=000000c0002c8080000000c0002c8098 XMM09=000000c0002c8038000000c0002c80a0 XMM10=000000c0002c84d0000000c0002c8148 XMM11=000000c0002c8138000000c0002c8108 XMM12=000000c0002c8300000000c0002c81a0 XMM13=000000c0002c84b8000000c0002c83a8 XMM14=000000c0002c8450000000c0002c8428 XMM15=000000c0002cc840000000c0002c8048