8<--- cut here --- Unable to handle kernel paging request at virtual address ffffffdc when read [ffffffdc] *pgd=80000080007003, *pmd=deffd003, *pte=00000000 Internal error: Oops: 207 [#1] SMP ARM Modules linked in: CPU: 0 UID: 0 PID: 4068 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at strlen+0xc/0x38 lib/string.c:402 LR is at __fortify_strlen include/linux/fortify-string.h:218 [inline] LR is at audit_log_untrustedstring+0x1c/0x30 kernel/audit.c:2203 pc : [<81b62034>] lr : [<8038359c>] psr: 40070013 sp : dfc05c58 ip : dfc05c68 fp : dfc05c64 r10: 82389560 r9 : 8238957c r8 : ffffffdc r7 : 00000000 r6 : 836d3800 r5 : 85d3d5e8 r4 : ffffffdc r3 : 838d8c40 r2 : 00000000 r1 : ffffffdc r0 : ffffffdc Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 8620c640 DAC: fffffffd Register r0 information: non-paged memory Register r1 information: non-paged memory Register r2 information: NULL pointer Register r3 information: slab task_struct start 838d8c40 pointer offset 0 size 3136 Register r4 information: non-paged memory Register r5 information: slab trace_event_file start 85d3d5e8 pointer offset 0 size 56 Register r6 information: slab inode_cache start 836d3800 pointer offset 0 size 376 Register r7 information: NULL pointer Register r8 information: non-paged memory Register r9 information: non-slab/vmalloc memory Register r10 information: non-slab/vmalloc memory Register r11 information: 2-page vmalloc region starting at 0xdfc04000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r12 information: 2-page vmalloc region starting at 0xdfc04000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Process syz.2.17 (pid: 4068, stack limit = 0xdfc04000) Stack: (0xdfc05c58 to 0xdfc06000) 5c40: dfc05c7c dfc05c68 5c60: 8038359c 81b62034 838d9428 85d3d5e8 dfc05cd4 dfc05c80 80844740 8038358c 5c80: ffffffff ffffffff 00000fe4 00000000 805489fc 2e7a7973 37312e32 00000000 5ca0: 00000000 0707fe20 dfc05cd4 847f7000 85408cc0 82389560 00000002 00000000 5cc0: 00000000 8084f424 dfc05cf4 dfc05cd8 80844814 808445d8 82389560 fffffff3 5ce0: 00000000 00000000 dfc05d2c dfc05cf8 8084f5e4 808447ec 82389560 fffffff3 5d00: 00000000 dfc05e54 85408cc0 dfc05e54 85408cc0 86146bc0 82b21e14 00000002 5d20: dfc05d64 dfc05d30 807f0c40 8084f430 00000002 00000000 805dddb8 85408cc0 5d40: 82b21e14 dfc05e54 86146bc0 836d3800 00000000 dfc05db8 dfc05d94 dfc05d68 5d60: 805de930 807f0a84 00000002 00000000 dfc05d94 dfc05e40 836d3880 85408cc0 5d80: 86146bc0 00000002 dfc05dec dfc05d98 805dea98 805de8d8 00000002 00000000 5da0: dfc05db8 8022cb78 86146bc0 dfc05e54 82b21e14 86146bc0 00000000 0707fe20 5dc0: 804d60c4 dfc05e40 dfc05e54 00000002 86146bc0 82b21e14 85408cc0 00000000 5de0: dfc05e1c dfc05df0 805dec0c 805dea04 00000002 00000000 00000000 83e88e00 5e00: dfc05e40 83e88e00 00000004 20001080 dfc05e3c dfc05e20 805dee48 805deb84 5e20: 0000000c 86146bc0 83e88e00 83e88e00 dfc05f84 dfc05e40 805df0a8 805dedfc 5e40: 20001080 86146bc0 00000002 dfc05e54 00000000 75636573 79746972 616d692e 5e60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5e80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5ea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5ec0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5ee0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5f00: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5f20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5f40: 00000000 00000000 00000000 00000000 00000000 0707fe20 ffffffff 00000000 5f60: 00000000 00356318 000000e4 8020029c 838d8c40 000000e4 dfc05fa4 dfc05f88 5f80: 805df2fc 805def4c 20001080 00000002 00000000 838d8c40 00000000 dfc05fa8 5fa0: 80200060 805df2d8 00000000 00000000 00000004 20000080 20001080 00000002 5fc0: 00000000 00000000 00356318 000000e4 003562d8 00000000 003562d8 003562e4 5fe0: 7e96c798 7e96c788 00018fa0 001309d0 60000010 00000004 00000000 00000000 Call trace: [<81b62028>] (strlen) from [<8038359c>] (__fortify_strlen include/linux/fortify-string.h:218 [inline]) [<81b62028>] (strlen) from [<8038359c>] (audit_log_untrustedstring+0x1c/0x30 kernel/audit.c:2203) [<80383580>] (audit_log_untrustedstring) from [<80844740>] (integrity_audit_message+0x174/0x214 security/integrity/integrity_audit.c:60) r5:85d3d5e8 r4:838d9428 [<808445cc>] (integrity_audit_message) from [<80844814>] (integrity_audit_msg+0x34/0x3c security/integrity/integrity_audit.c:32) r10:8084f424 r9:00000000 r8:00000000 r7:00000002 r6:82389560 r5:85408cc0 r4:847f7000 [<808447e0>] (integrity_audit_msg) from [<8084f5e4>] (validate_hash_algo security/integrity/ima/ima_appraise.c:752 [inline]) [<808447e0>] (integrity_audit_msg) from [<8084f5e4>] (ima_inode_setxattr+0x1c0/0x1d0 security/integrity/ima/ima_appraise.c:775) [<8084f424>] (ima_inode_setxattr) from [<807f0c40>] (security_inode_setxattr+0x1c8/0x3e8 security/security.c:1940) r8:00000002 r7:82b21e14 r6:86146bc0 r5:85408cc0 r4:dfc05e54 [<807f0a78>] (security_inode_setxattr) from [<805de930>] (__vfs_setxattr_locked+0x64/0x12c fs/xattr.c:309) r10:dfc05db8 r9:00000000 r8:836d3800 r7:86146bc0 r6:dfc05e54 r5:82b21e14 r4:85408cc0 [<805de8cc>] (__vfs_setxattr_locked) from [<805dea98>] (vfs_setxattr+0xa0/0x180 fs/xattr.c:344) r8:00000002 r7:86146bc0 r6:85408cc0 r5:836d3880 r4:dfc05e40 [<805de9f8>] (vfs_setxattr) from [<805dec0c>] (do_setxattr+0x94/0x9c fs/xattr.c:662) r10:00000000 r9:85408cc0 r8:82b21e14 r7:86146bc0 r6:00000002 r5:dfc05e54 r4:dfc05e40 [<805deb78>] (do_setxattr) from [<805dee48>] (file_setxattr fs/xattr.c:672 [inline]) [<805deb78>] (do_setxattr) from [<805dee48>] (file_setxattr+0x58/0x78 fs/xattr.c:666) r9:20001080 r8:00000004 r7:83e88e00 r6:dfc05e40 r5:83e88e00 r4:00000000 [<805dedf0>] (file_setxattr) from [<805df0a8>] (path_setxattrat+0x168/0x1bc fs/xattr.c:732) r7:83e88e00 r6:83e88e00 r5:86146bc0 r4:0000000c [<805def40>] (path_setxattrat) from [<805df2fc>] (__do_sys_fsetxattr fs/xattr.c:782 [inline]) [<805def40>] (path_setxattrat) from [<805df2fc>] (sys_fsetxattr+0x30/0x38 fs/xattr.c:779) r10:000000e4 r9:838d8c40 r8:8020029c r7:000000e4 r6:00356318 r5:00000000 r4:00000000 [<805df2cc>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdfc05fa8 to 0xdfc05ff0) 5fa0: 00000000 00000000 00000004 20000080 20001080 00000002 5fc0: 00000000 00000000 00356318 000000e4 003562d8 00000000 003562d8 003562e4 5fe0: 7e96c798 7e96c788 00018fa0 001309d0 Code: e89da800 e1a0c00d e92dd800 e24cb004 (e5d03000) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: e89da800 ldm sp, {fp, sp, pc} 4: e1a0c00d mov ip, sp 8: e92dd800 push {fp, ip, lr, pc} c: e24cb004 sub fp, ip, #4 * 10: e5d03000 ldrb r3, [r0] <-- trapping instruction