[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 118.601748][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 118.601800][ T32] audit: type=1800 audit(1584686722.646:39): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 118.629960][ T32] audit: type=1800 audit(1584686722.656:40): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 123.353992][ T32] audit: type=1400 audit(1584686727.396:41): avc: denied { map } for pid=11408 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 123.408371][T11406] sshd (11406) used greatest stack depth: 3352 bytes left Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. [ 131.767054][ T32] audit: type=1400 audit(1584686735.816:42): avc: denied { map } for pid=11420 comm="syz-executor690" path="/root/syz-executor690673227" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 131.806509][T11421] IPVS: ftp: loaded support on port[0] = 21 executing program [ 131.879690][T11421] ===================================================== [ 131.886843][T11421] BUG: KMSAN: uninit-value in tcf_exts_change+0xc9/0xf0 [ 131.893770][T11421] CPU: 1 PID: 11421 Comm: syz-executor690 Not tainted 5.6.0-rc6-syzkaller #0 [ 131.902509][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.912553][T11421] Call Trace: [ 131.915872][T11421] dump_stack+0x1c9/0x220 [ 131.920201][T11421] kmsan_report+0xf7/0x1e0 [ 131.924623][T11421] __msan_warning+0x58/0xa0 [ 131.929132][T11421] tcf_exts_change+0xc9/0xf0 [ 131.933728][T11421] tcindex_change+0x2fe4/0x4130 [ 131.938582][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 131.943836][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 131.949031][T11421] ? tcindex_get+0x520/0x520 [ 131.953607][T11421] tc_new_tfilter+0x31a8/0x4f40 [ 131.958512][T11421] ? security_capable+0x1cb/0x220 [ 131.963553][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 131.968790][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 131.974597][T11421] ? tcf_tunnel_encap_put_tunnel+0x40/0x40 [ 131.980403][T11421] rtnetlink_rcv_msg+0xcb7/0x1570 [ 131.985521][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 131.990624][T11421] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 131.996866][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.001978][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.007180][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.013242][T11421] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 132.019297][T11421] ? rhashtable_jhash2+0x3ac/0x4d0 [ 132.024405][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.029605][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.034706][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.039807][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.045040][T11421] ? kmsan_set_origin_checked+0x95/0xf0 [ 132.050576][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.055762][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.061557][T11421] netlink_rcv_skb+0x451/0x650 [ 132.066344][T11421] ? rtnetlink_bind+0x120/0x120 [ 132.071194][T11421] rtnetlink_rcv+0x50/0x60 [ 132.075600][T11421] netlink_unicast+0xf9e/0x1100 [ 132.080442][T11421] ? rtnetlink_net_exit+0x90/0x90 [ 132.085461][T11421] netlink_sendmsg+0x1246/0x14d0 [ 132.090400][T11421] ? netlink_getsockopt+0x1440/0x1440 [ 132.095761][T11421] ____sys_sendmsg+0x12b6/0x1350 [ 132.100701][T11421] __sys_sendmsg+0x451/0x5f0 [ 132.105317][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.110519][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.115851][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.121717][T11421] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 132.127775][T11421] ? prepare_exit_to_usermode+0x1ca/0x520 [ 132.133489][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.138592][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.143696][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.149498][T11421] __ia32_compat_sys_sendmsg+0xed/0x130 [ 132.155168][T11421] ? compat_mc_getsockopt+0x19a0/0x19a0 [ 132.160751][T11421] do_fast_syscall_32+0x3c7/0x6e0 [ 132.165800][T11421] entry_SYSENTER_compat+0x68/0x77 [ 132.170905][T11421] RIP: 0023:0xf7f72d99 [ 132.174963][T11421] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 132.194553][T11421] RSP: 002b:00000000ffda6fcc EFLAGS: 00000286 ORIG_RAX: 0000000000000172 [ 132.202944][T11421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 132.210896][T11421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000005b [ 132.218848][T11421] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 132.226800][T11421] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 132.234751][T11421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.242709][T11421] [ 132.245015][T11421] Uninit was created at: [ 132.249242][T11421] kmsan_save_stack_with_flags+0x3c/0x90 [ 132.254849][T11421] kmsan_alloc_page+0x12a/0x310 [ 132.259696][T11421] __alloc_pages_nodemask+0x5712/0x5e80 [ 132.265222][T11421] alloc_pages_current+0x67d/0x990 [ 132.271048][T11421] alloc_slab_page+0x111/0x12f0 [ 132.275886][T11421] new_slab+0x2bc/0x1130 [ 132.280101][T11421] ___slab_alloc+0x1533/0x1f30 [ 132.284866][T11421] kmem_cache_alloc_trace+0xb0a/0xd70 [ 132.290824][T11421] tcindex_init+0x7d/0x220 [ 132.295228][T11421] tc_new_tfilter+0x2c8a/0x4f40 [ 132.300068][T11421] rtnetlink_rcv_msg+0xcb7/0x1570 [ 132.305085][T11421] netlink_rcv_skb+0x451/0x650 [ 132.309828][T11421] rtnetlink_rcv+0x50/0x60 [ 132.314217][T11421] netlink_unicast+0xf9e/0x1100 [ 132.319041][T11421] netlink_sendmsg+0x1246/0x14d0 [ 132.323952][T11421] ____sys_sendmsg+0x12b6/0x1350 [ 132.328868][T11421] __sys_sendmsg+0x451/0x5f0 [ 132.333796][T11421] __ia32_compat_sys_sendmsg+0xed/0x130 [ 132.339318][T11421] do_fast_syscall_32+0x3c7/0x6e0 [ 132.344317][T11421] entry_SYSENTER_compat+0x68/0x77 [ 132.349399][T11421] ===================================================== [ 132.356303][T11421] Disabling lock debugging due to kernel taint [ 132.362441][T11421] Kernel panic - not syncing: panic_on_warn set ... [ 132.369024][T11421] CPU: 1 PID: 11421 Comm: syz-executor690 Tainted: G B 5.6.0-rc6-syzkaller #0 [ 132.379143][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.389195][T11421] Call Trace: [ 132.392467][T11421] dump_stack+0x1c9/0x220 [ 132.396779][T11421] panic+0x3d5/0xc3e [ 132.400670][T11421] kmsan_report+0x1df/0x1e0 [ 132.405158][T11421] __msan_warning+0x58/0xa0 [ 132.409640][T11421] tcf_exts_change+0xc9/0xf0 [ 132.414208][T11421] tcindex_change+0x2fe4/0x4130 [ 132.419056][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.424256][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.429432][T11421] ? tcindex_get+0x520/0x520 [ 132.434000][T11421] tc_new_tfilter+0x31a8/0x4f40 [ 132.438852][T11421] ? security_capable+0x1cb/0x220 [ 132.443854][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.449041][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.454830][T11421] ? tcf_tunnel_encap_put_tunnel+0x40/0x40 [ 132.460614][T11421] rtnetlink_rcv_msg+0xcb7/0x1570 [ 132.465622][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.470730][T11421] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 132.476864][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.481952][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.487046][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.492831][T11421] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 132.498875][T11421] ? rhashtable_jhash2+0x3ac/0x4d0 [ 132.503978][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.509169][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.514256][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.519354][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.524485][T11421] ? kmsan_set_origin_checked+0x95/0xf0 [ 132.530024][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.535213][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.540996][T11421] netlink_rcv_skb+0x451/0x650 [ 132.545741][T11421] ? rtnetlink_bind+0x120/0x120 [ 132.550590][T11421] rtnetlink_rcv+0x50/0x60 [ 132.554987][T11421] netlink_unicast+0xf9e/0x1100 [ 132.559816][T11421] ? rtnetlink_net_exit+0x90/0x90 [ 132.564841][T11421] netlink_sendmsg+0x1246/0x14d0 [ 132.569769][T11421] ? netlink_getsockopt+0x1440/0x1440 [ 132.575116][T11421] ____sys_sendmsg+0x12b6/0x1350 [ 132.580068][T11421] __sys_sendmsg+0x451/0x5f0 [ 132.584666][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.589855][T11421] ? kmsan_get_metadata+0x11d/0x180 [ 132.595031][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.600813][T11421] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 132.606858][T11421] ? prepare_exit_to_usermode+0x1ca/0x520 [ 132.612555][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.617645][T11421] ? kmsan_get_metadata+0x4f/0x180 [ 132.622733][T11421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 132.628586][T11421] __ia32_compat_sys_sendmsg+0xed/0x130 [ 132.634137][T11421] ? compat_mc_getsockopt+0x19a0/0x19a0 [ 132.639675][T11421] do_fast_syscall_32+0x3c7/0x6e0 [ 132.644709][T11421] entry_SYSENTER_compat+0x68/0x77 [ 132.649833][T11421] RIP: 0023:0xf7f72d99 [ 132.653885][T11421] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 132.673472][T11421] RSP: 002b:00000000ffda6fcc EFLAGS: 00000286 ORIG_RAX: 0000000000000172 [ 132.681860][T11421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 132.689811][T11421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000005b [ 132.697765][T11421] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 132.705724][T11421] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 132.713674][T11421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.722870][T11421] Kernel Offset: 0x17200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 132.734487][T11421] Rebooting in 86400 seconds..