./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4268074269 <...> forked to background, child pid 3056 no interfaces have a carrier [ 71.583575][ T3057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.608318][ T3057] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 95.143330][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. execve("./syz-executor4268074269", ["./syz-executor4268074269"], 0x7ffd98171640 /* 10 vars */) = 0 brk(NULL) = 0x555556126000 brk(0x555556126c40) = 0x555556126c40 arch_prctl(ARCH_SET_FS, 0x555556126300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4268074269", 4096) = 28 brk(0x555556147c40) = 0x555556147c40 brk(0x555556148000) = 0x555556148000 mprotect(0x7f86e27bf000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3490 attached , child_tidptr=0x5555561265d0) = 3490 [pid 3490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3490] setpgid(0, 0) = 0 [pid 3490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3490] write(3, "1000", 4) = 4 [pid 3490] close(3) = 0 [pid 3490] openat(AT_FDCWD, "/proc/self/ns/user", O_RDWR) = -1 EPERM (Operation not permitted) [pid 3490] openat(AT_FDCWD, "/proc/self/ns/user", O_RDONLY) = 3 [ 105.574659][ T3490] ===================================================== [ 105.581880][ T3490] BUG: KMSAN: uninit-value in tomoyo_path_chown+0x121/0x240 [ 105.589313][ T3490] tomoyo_path_chown+0x121/0x240 [ 105.594669][ T3490] security_path_chown+0x17d/0x260 [ 105.599871][ T3490] chown_common+0x9f2/0xef0 [ 105.604564][ T3490] ksys_fchown+0x229/0x360 [ 105.609091][ T3490] __x64_sys_fchown+0x8a/0xe0 [ 105.613964][ T3490] do_syscall_64+0x3d/0xb0 [ 105.618471][ T3490] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 105.624532][ T3490] [ 105.626899][ T3490] Local variable newattrs created at: [ 105.632399][ T3490] chown_common+0xd1/0xef0 [ 105.636934][ T3490] ksys_fchown+0x229/0x360 [ 105.641466][ T3490] [ 105.643890][ T3490] CPU: 0 PID: 3490 Comm: syz-executor426 Not tainted 6.0.0-rc2-syzkaller-47460-g3a2b6b904ea7 #0 [ 105.654441][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 105.664610][ T3490] ===================================================== [ 105.671606][ T3490] Disabling lock debugging due to kernel taint [ 105.677958][ T3490] Kernel panic - not syncing: kmsan.panic set ... [ 105.684427][ T3490] CPU: 0 PID: 3490 Comm: syz-executor426 Tainted: G B 6.0.0-rc2-syzkaller-47460-g3a2b6b904ea7 #0 [ 105.696403][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 105.706547][ T3490] Call Trace: [ 105.709873][ T3490] [ 105.712846][ T3490] dump_stack_lvl+0x1c8/0x256 [ 105.717664][ T3490] dump_stack+0x1a/0x1c [ 105.721912][ T3490] panic+0x4d3/0xc69 [ 105.725958][ T3490] kmsan_report+0x2cc/0x2d0 [ 105.730584][ T3490] ? update_misfit_status+0x2c/0xb30 [ 105.735957][ T3490] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 105.741858][ T3490] ? __msan_warning+0x92/0x110 [ 105.746720][ T3490] ? tomoyo_path_chown+0x121/0x240 [ 105.751954][ T3490] ? security_path_chown+0x17d/0x260 [ 105.757364][ T3490] ? chown_common+0x9f2/0xef0 [ 105.762152][ T3490] ? ksys_fchown+0x229/0x360 [ 105.766828][ T3490] ? __x64_sys_fchown+0x8a/0xe0 [ 105.771810][ T3490] ? do_syscall_64+0x3d/0xb0 [ 105.776492][ T3490] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 105.782647][ T3490] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 105.788552][ T3490] ? switch_mm_irqs_off+0x9a/0x980 [ 105.793801][ T3490] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 105.799722][ T3490] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 105.805677][ T3490] ? chown_common+0xd1/0xef0 [ 105.810380][ T3490] ? ksys_fchown+0x229/0x360 [ 105.815054][ T3490] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 105.820986][ T3490] ? chown_common+0xd1/0xef0 [ 105.825664][ T3490] ? filter_irq_stacks+0x160/0x1a0 [ 105.830887][ T3490] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 105.836785][ T3490] __msan_warning+0x92/0x110 [ 105.841481][ T3490] tomoyo_path_chown+0x121/0x240 [ 105.846518][ T3490] ? tomoyo_path_chmod+0x50/0x50 [ 105.851595][ T3490] security_path_chown+0x17d/0x260 [ 105.856823][ T3490] chown_common+0x9f2/0xef0 [ 105.861443][ T3490] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 105.867385][ T3490] ksys_fchown+0x229/0x360 [ 105.871884][ T3490] __x64_sys_fchown+0x8a/0xe0 [ 105.876676][ T3490] do_syscall_64+0x3d/0xb0 [ 105.881170][ T3490] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 105.887221][ T3490] RIP: 0033:0x7f86e2752d39 [ 105.891725][ T3490] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 105.911457][ T3490] RSP: 002b:00007ffc1a7ecaf8 EFLAGS: 00000286 ORIG_RAX: 000000000000005d [ 105.919980][ T3490] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86e2752d39 [ 105.928027][ T3490] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000003 [ 105.936095][ T3490] RBP: 0000000000000000 R08: 00007ffc1a7ec990 R09: 0000000000000000 [ 105.944145][ T3490] R10: 00000000ffffffff R11: 0000000000000286 R12: 00007ffc1a7ecb20 [ 105.952183][ T3490] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 105.960269][ T3490] [ 105.963534][ T3490] Kernel Offset: disabled [ 105.967899][ T3490] Rebooting in 86400 seconds..