[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.139' (ECDSA) to the list of known hosts. syzkaller login: [ 68.791276][ T8421] FAULT_INJECTION: forcing a failure. [ 68.791276][ T8421] name failslab, interval 1, probability 0, space 0, times 1 [ 68.804084][ T8421] CPU: 1 PID: 8421 Comm: syz-executor922 Not tainted 5.11.0-syzkaller #0 [ 68.812487][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.822533][ T8421] Call Trace: [ 68.825816][ T8421] dump_stack+0xfa/0x151 [ 68.830085][ T8421] should_fail.cold+0x5/0xa [ 68.834590][ T8421] ? tomoyo_realpath_from_path+0xc3/0x620 [ 68.840313][ T8421] ? tomoyo_realpath_from_path+0xc3/0x620 [ 68.846019][ T8421] should_failslab+0x5/0x10 [ 68.850541][ T8421] __kmalloc+0x72/0x3f0 [ 68.854686][ T8421] tomoyo_realpath_from_path+0xc3/0x620 [ 68.860226][ T8421] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 68.866469][ T8421] tomoyo_check_open_permission+0x272/0x380 [ 68.872353][ T8421] ? tomoyo_path_number_perm+0x590/0x590 [ 68.878004][ T8421] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.884072][ T8421] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.890051][ T8421] ? lock_release+0x3bb/0x710 [ 68.894718][ T8421] ? path_get+0x5d/0x80 [ 68.898865][ T8421] ? lock_downgrade+0x6d0/0x6d0 [ 68.903737][ T8421] ? do_raw_spin_lock+0x120/0x2b0 [ 68.908861][ T8421] tomoyo_file_open+0xa3/0xd0 [ 68.913540][ T8421] security_file_open+0x52/0x4f0 [ 68.918467][ T8421] ? __mnt_want_write+0x1bc/0x2a0 [ 68.923485][ T8421] do_dentry_open+0x358/0x11b0 [ 68.928267][ T8421] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.934507][ T8421] ? may_open+0x1e4/0x400 [ 68.938862][ T8421] path_openat+0x1b8e/0x2720 [ 68.943547][ T8421] ? path_lookupat+0x830/0x830 [ 68.948301][ T8421] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.954387][ T8421] ? lock_is_held_type+0xd5/0x130 [ 68.959418][ T8421] do_filp_open+0x17e/0x3c0 [ 68.963921][ T8421] ? may_open_dev+0xf0/0xf0 [ 68.968527][ T8421] ? do_raw_spin_lock+0x120/0x2b0 [ 68.973558][ T8421] ? rwlock_bug.part.0+0x90/0x90 [ 68.978496][ T8421] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.984742][ T8421] ? _raw_spin_unlock+0x24/0x40 [ 68.989582][ T8421] ? alloc_fd+0x2bc/0x640 [ 68.993904][ T8421] do_sys_openat2+0x16d/0x420 [ 68.998585][ T8421] ? debug_object_init_on_stack+0x20/0x20 [ 69.004314][ T8421] ? build_open_flags+0x6f0/0x6f0 [ 69.009331][ T8421] ? blkcg_maybe_throttle_current+0x64d/0xd80 [ 69.015410][ T8421] __x64_sys_openat+0x13f/0x1f0 [ 69.020256][ T8421] ? __ia32_sys_open+0x1c0/0x1c0 [ 69.025186][ T8421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 69.031071][ T8421] do_syscall_64+0x2d/0x70 [ 69.035477][ T8421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.041455][ T8421] RIP: 0033:0x402b17 [ 69.045426][ T8421] Code: 25 00 00 41 00 3d 00 00 41 00 74 47 64 8b 04 25 18 00 00 00 85 c0 75 6b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 95 00 00 00 48 8b 4c 24 28 64 48 2b 0c 25 [ 69.065322][ T8421] RSP: 002b:00007ffe4acef4a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.073848][ T8421] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000402b17 [ 69.081818][ T8421] RDX: 0000000000080001 RSI: 000000000048a288 RDI: 00000000ffffff9c [ 69.089775][ T8421] RBP: 000000000048a288 R08: 0000000000000000 R09: 00007ffe4acef490 [ 69.097731][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080001 [ 69.105689][ T8421] R13: 0000000000000000 R14: 00000000004b6018 R15: 00000000004004a0 [ 69.118556][ T8421] ERROR: Out of memory at tomoyo_realpath_from_path. executing program [ 69.143179][ T8422] IPVS: ftp: loaded support on port[0] = 21 [ 69.195470][ T8422] FAULT_INJECTION: forcing a failure. [ 69.195470][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 69.208556][ T8422] CPU: 0 PID: 8422 Comm: syz-executor922 Not tainted 5.11.0-syzkaller #0 [ 69.217017][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.227083][ T8422] Call Trace: [ 69.230358][ T8422] dump_stack+0xfa/0x151 [ 69.234609][ T8422] should_fail.cold+0x5/0xa [ 69.239308][ T8422] ? __alloc_skb+0x20b/0x340 [ 69.243915][ T8422] should_failslab+0x5/0x10 [ 69.248610][ T8422] kmem_cache_alloc_node+0x55/0x470 [ 69.253807][ T8422] ? lock_release+0x3bb/0x710 [ 69.258509][ T8422] __alloc_skb+0x20b/0x340 [ 69.262941][ T8422] netlink_dump+0x680/0xb70 [ 69.267440][ T8422] ? netlink_insert+0x1670/0x1670 [ 69.272464][ T8422] ? __mutex_unlock_slowpath+0xe2/0x610 [ 69.278011][ T8422] ? unpoison_range+0x3a/0x60 [ 69.282708][ T8422] ? genl_start+0x44a/0x670 [ 69.287215][ T8422] __netlink_dump_start+0x642/0x900 [ 69.292403][ T8422] ? genl_family_rcv_msg_doit+0x320/0x320 [ 69.298132][ T8422] ? nfc_genl_send_device+0x2a0/0x2a0 [ 69.303495][ T8422] genl_family_rcv_msg_dumpit+0x2af/0x310 [ 69.309223][ T8422] ? genl_rcv+0x40/0x40 [ 69.313379][ T8422] ? mutex_lock_io_nested+0xf70/0xf70 [ 69.318747][ T8422] ? __lock_acquire+0x2506/0x54c0 [ 69.323763][ T8422] ? genl_family_rcv_msg_doit+0x320/0x320 [ 69.329483][ T8422] ? genl_unlock+0x20/0x20 [ 69.333892][ T8422] ? genl_parallel_done+0xc0/0xc0 [ 69.338904][ T8422] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 69.345151][ T8422] ? __radix_tree_lookup+0x211/0x2a0 [ 69.350425][ T8422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.356671][ T8422] ? genl_get_cmd+0x3cf/0x480 [ 69.361358][ T8422] genl_rcv_msg+0x434/0x580 [ 69.366126][ T8422] ? genl_get_cmd+0x480/0x480 [ 69.370810][ T8422] ? nfc_genl_dump_devices+0x470/0x470 [ 69.376417][ T8422] ? nfc_genl_send_device+0x2a0/0x2a0 [ 69.381942][ T8422] ? nfc_urelease_event_work+0x2d0/0x2d0 [ 69.387580][ T8422] ? lock_release+0x710/0x710 [ 69.392275][ T8422] ? lock_acquire+0x1bb/0x730 [ 69.396952][ T8422] netlink_rcv_skb+0x153/0x420 [ 69.401727][ T8422] ? genl_get_cmd+0x480/0x480 [ 69.406425][ T8422] ? netlink_ack+0xaa0/0xaa0 [ 69.411040][ T8422] genl_rcv+0x24/0x40 [ 69.415044][ T8422] netlink_unicast+0x533/0x7d0 [ 69.419853][ T8422] ? netlink_attachskb+0x870/0x870 [ 69.424957][ T8422] ? _copy_from_iter_full+0x279/0x850 [ 69.430324][ T8422] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.436575][ T8422] ? __phys_addr_symbol+0x2c/0x70 [ 69.441603][ T8422] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 69.447310][ T8422] ? __check_object_size+0x171/0x3f0 [ 69.452598][ T8422] netlink_sendmsg+0x856/0xd90 [ 69.457367][ T8422] ? netlink_unicast+0x7d0/0x7d0 [ 69.462300][ T8422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.468535][ T8422] ? netlink_unicast+0x7d0/0x7d0 [ 69.473480][ T8422] sock_sendmsg+0xcf/0x120 [ 69.478258][ T8422] ____sys_sendmsg+0x6e8/0x810 [ 69.483025][ T8422] ? kernel_sendmsg+0x50/0x50 [ 69.487692][ T8422] ? do_recvmmsg+0x6d0/0x6d0 [ 69.492375][ T8422] ? _parse_integer+0x132/0x180 [ 69.497225][ T8422] ___sys_sendmsg+0xf3/0x170 [ 69.501829][ T8422] ? sendmsg_copy_msghdr+0x160/0x160 [ 69.507150][ T8422] ? lock_is_held_type+0xd5/0x130 [ 69.512176][ T8422] ? lock_release+0x3bb/0x710 [ 69.516853][ T8422] ? get_pid_task+0x116/0x200 [ 69.521789][ T8422] ? lock_downgrade+0x6d0/0x6d0 [ 69.526638][ T8422] ? lock_is_held_type+0xd5/0x130 [ 69.531655][ T8422] ? find_held_lock+0x2d/0x110 [ 69.536418][ T8422] ? lock_release+0x3bb/0x710 [ 69.541097][ T8422] ? ksys_write+0x12d/0x250 [ 69.545621][ T8422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.551908][ T8422] ? __fget_light+0x215/0x280 [ 69.556585][ T8422] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.562838][ T8422] __sys_sendmsg+0xe5/0x1b0 [ 69.567360][ T8422] ? __sys_sendmsg_sock+0xb0/0xb0 [ 69.572383][ T8422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.578629][ T8422] ? syscall_enter_from_user_mode+0x1d/0x50 [ 69.584522][ T8422] do_syscall_64+0x2d/0x70 [ 69.588945][ T8422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.594977][ T8422] RIP: 0033:0x440489 [ 69.598863][ T8422] Code: 28 c3 e8 7a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 69.618482][ T8422] RSP: 002b:00007ffe4acefa18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.626935][ T8422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000440489 [ 69.634904][ T8422] RDX: 0000000000000000 RSI: 0000000020000900 RDI: 0000000000000005 [ 69.642886][ T8422] RBP: 0000000000000004 R08: 0000000000000001 R09: bb1414ac4acefa47 [ 69.650851][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000005142c0 [ 69.658816][ T8422] R13: 0000000000000000 R14: 00007ffe4acefa28 R15: 00007ffe4acefa24 [ 69.716756][ T3882] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 69.728513][ T3882] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 69.736935][ T3882] CPU: 0 PID: 3882 Comm: kworker/0:3 Not tainted 5.11.0-syzkaller #0 [ 69.745015][ T3882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.755102][ T3882] Workqueue: events netlink_sock_destruct_work [ 69.761302][ T3882] RIP: 0010:klist_iter_exit+0x21/0x80 [ 69.766706][ T3882] Code: 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb e8 24 30 98 fd 48 8d 6b 08 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 <80> 3c 02 00 75 40 4c 8b 63 08 4d 85 e4 74 2e e8 fb 2f 98 fd 31 f6 [ 69.786334][ T3882] RSP: 0018:ffffc9000312fbf8 EFLAGS: 00010202 [ 69.792429][ T3882] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.800407][ T3882] RDX: 0000000000000001 RSI: ffffffff83daa98c RDI: 0000000000000000 [ 69.808383][ T3882] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffffff8d6fc867 [ 69.816361][ T3882] R10: fffffbfff1adf90c R11: 1ffffffff1ede8aa R12: ffff888143cb7540 [ 69.824355][ T3882] R13: 0000000000000000 R14: ffff88801bce1520 R15: ffff8880b9c34980 [ 69.832343][ T3882] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 69.841284][ T3882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.847882][ T3882] CR2: 00007f2a3562f1f0 CR3: 0000000017103000 CR4: 00000000001506f0 [ 69.855861][ T3882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.863846][ T3882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.872606][ T3882] Call Trace: [ 69.875978][ T3882] nfc_genl_dump_devices_done+0x31/0x50 [ 69.881534][ T3882] ? genl_parallel_done+0xc0/0xc0 [ 69.886585][ T3882] genl_lock_done+0x8d/0x100 [ 69.891189][ T3882] netlink_sock_destruct+0x96/0x2b0 [ 69.896397][ T3882] ? perf_trace_netlink_extack+0x400/0x400 [ 69.902212][ T3882] __sk_destruct+0x4b/0x900 [ 69.906726][ T3882] sk_destruct+0xbd/0xe0 [ 69.911089][ T3882] __sk_free+0xef/0x3d0 [ 69.915249][ T3882] sk_free+0x78/0xa0 [ 69.919146][ T3882] process_one_work+0x98d/0x1600 [ 69.924114][ T3882] ? pwq_dec_nr_in_flight+0x320/0x320 [ 69.929494][ T3882] ? rwlock_bug.part.0+0x90/0x90 [ 69.934444][ T3882] ? _raw_spin_lock_irq+0x41/0x50 [ 69.939572][ T3882] worker_thread+0x64c/0x1120 [ 69.944262][ T3882] ? __kthread_parkme+0x13f/0x1e0 [ 69.949292][ T3882] ? process_one_work+0x1600/0x1600 [ 69.954501][ T3882] kthread+0x3b1/0x4a0 [ 69.958573][ T3882] ? __kthread_bind_mask+0xc0/0xc0 [ 69.963687][ T3882] ret_from_fork+0x1f/0x30