================================================================================ UBSAN: Undefined behaviour in arch/x86/kernel/uprobes.c:276:56 index 4 is out of range for type 'insn_byte_t [4]' netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. CPU: 1 PID: 16898 Comm: syz-executor.5 Not tainted 4.19.149-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x22c/0x33e lib/dump_stack.c:118 ubsan_epilogue+0xe/0x3a lib/ubsan.c:161 __ubsan_handle_out_of_bounds.cold+0x63/0x6f lib/ubsan.c:383 is_prefix_bad arch/x86/kernel/uprobes.c:276 [inline] uprobe_init_insn arch/x86/kernel/uprobes.c:299 [inline] arch_uprobe_analyze_insn+0x9d8/0xaa0 arch/x86/kernel/uprobes.c:868 prepare_uprobe kernel/events/uprobes.c:611 [inline] install_breakpoint kernel/events/uprobes.c:654 [inline] register_for_each_vma+0xbf5/0xe50 kernel/events/uprobes.c:822 uprobe_apply+0xeb/0x160 kernel/events/uprobes.c:970 uprobe_perf_open kernel/trace/trace_uprobe.c:1067 [inline] trace_uprobe_register+0x4ac/0x6f0 kernel/trace/trace_uprobe.c:1207 perf_trace_event_open kernel/trace/trace_event_perf.c:181 [inline] perf_trace_event_init kernel/trace/trace_event_perf.c:203 [inline] perf_trace_event_init+0x175/0xaa0 kernel/trace/trace_event_perf.c:190 perf_uprobe_init+0x165/0x200 kernel/trace/trace_event_perf.c:330 perf_uprobe_event_init+0xf8/0x190 kernel/events/core.c:8587 perf_try_init_event+0x124/0x2e0 kernel/events/core.c:9860 perf_init_event kernel/events/core.c:9891 [inline] perf_event_alloc.part.0+0x1bad/0x3000 kernel/events/core.c:10165 perf_event_alloc kernel/events/core.c:10535 [inline] __do_sys_perf_event_open kernel/events/core.c:10636 [inline] __se_sys_perf_event_open+0x54e/0x27c0 kernel/events/core.c:10525 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45de89 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fe49b4c6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 0000000000024cc0 RCX: 000000000045de89 RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000080 RBP: 000000000118bf70 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000118bf2c R13: 00007ffedf3c876f R14: 00007fe49b4c79c0 R15: 000000000118bf2c ================================================================================ netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. audit: type=1804 audit(1601749033.903:125): pid=16923 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/311/cgroup.controllers" dev="sda1" ino=16044 res=1 XFS (loop3): Invalid superblock magic number audit: type=1400 audit(1601749034.103:126): avc: denied { block_suspend } for pid=16962 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 kauditd_printk_skb: 2 callbacks suppressed audit: type=1804 audit(1601749037.443:129): pid=17050 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/314/cgroup.controllers" dev="sda1" ino=16114 res=1 audit: type=1804 audit(1601749037.943:130): pid=17095 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/315/cgroup.controllers" dev="sda1" ino=16146 res=1 audit: type=1804 audit(1601749038.773:131): pid=17159 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/316/cgroup.controllers" dev="sda1" ino=16071 res=1 IPVS: ftp: loaded support on port[0] = 21 audit: type=1804 audit(1601749039.203:132): pid=17186 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir018630775/syzkaller.MNpJ1U/433/bus/file0" dev="overlay" ino=16226 res=1 audit: type=1804 audit(1601749039.303:133): pid=17195 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/317/cgroup.controllers" dev="sda1" ino=16242 res=1 IPVS: ftp: loaded support on port[0] = 21 overlayfs: './file0' not a directory audit: type=1804 audit(1601749039.983:134): pid=17245 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir018630775/syzkaller.MNpJ1U/433/bus/bus/file0" dev="overlay" ino=15955 res=1 audit: type=1804 audit(1601749040.053:135): pid=17255 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/318/cgroup.controllers" dev="sda1" ino=16274 res=1 audit: type=1804 audit(1601749042.253:136): pid=17320 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/319/cgroup.controllers" dev="sda1" ino=16004 res=1 IPVS: ftp: loaded support on port[0] = 21 audit: type=1804 audit(1601749042.753:137): pid=17348 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/320/cgroup.controllers" dev="sda1" ino=16004 res=1 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 audit: type=1804 audit(1601749043.253:138): pid=17401 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749624790/syzkaller.tPl8cQ/321/cgroup.controllers" dev="sda1" ino=16211 res=1