[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 106.670814][ T30] audit: type=1800 audit(1565355799.719:25): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 106.702808][ T30] audit: type=1800 audit(1565355799.749:26): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 106.723055][ T30] audit: type=1800 audit(1565355799.759:27): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.109' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 117.165985][T11812] ================================================================== [ 117.174101][T11812] BUG: KMSAN: uninit-value in nh_valid_get_del_req+0x6f1/0x8c0 [ 117.181764][T11812] CPU: 0 PID: 11812 Comm: syz-executor444 Not tainted 5.3.0-rc3+ #17 [ 117.189836][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.199888][T11812] Call Trace: [ 117.203189][T11812] dump_stack+0x191/0x1f0 [ 117.207531][T11812] kmsan_report+0x162/0x2d0 [ 117.212047][T11812] __msan_warning+0x75/0xe0 [ 117.216557][T11812] nh_valid_get_del_req+0x6f1/0x8c0 [ 117.221785][T11812] ? rtnetlink_rcv_msg+0x115a/0x1580 [ 117.227068][T11812] rtm_del_nexthop+0x1b1/0x610 [ 117.231842][T11812] ? rtm_new_nexthop+0x98e0/0x98e0 [ 117.236957][T11812] rtnetlink_rcv_msg+0x115a/0x1580 [ 117.242088][T11812] ? do_syscall_64+0xbc/0xf0 [ 117.246670][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.252672][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.258658][T11812] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 117.264731][T11812] ? rhashtable_jhash2+0x3a9/0x4d0 [ 117.270157][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.276250][T11812] ? kmsan_set_origin+0x26d/0x340 [ 117.281266][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.287256][T11812] netlink_rcv_skb+0x431/0x620 [ 117.292027][T11812] ? rtnetlink_bind+0x120/0x120 [ 117.296928][T11812] rtnetlink_rcv+0x50/0x60 [ 117.301354][T11812] netlink_unicast+0xf6c/0x1050 [ 117.306233][T11812] netlink_sendmsg+0x110f/0x1330 [ 117.311192][T11812] ? netlink_getsockopt+0x1430/0x1430 [ 117.316563][T11812] ___sys_sendmsg+0x14ff/0x1590 [ 117.321436][T11812] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 117.327591][T11812] ? kmsan_internal_check_memory+0x27a/0x8d0 [ 117.333565][T11812] ? kmsan_get_metadata_or_null+0x208/0x290 [ 117.339480][T11812] ? __msan_get_context_state+0x9/0x20 [ 117.345093][T11812] ? rcu_all_qs+0x23/0x240 [ 117.349512][T11812] __sys_sendmmsg+0x53a/0xae0 [ 117.354188][T11812] ? alloc_file_pseudo+0x4a7/0x4e0 [ 117.359346][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.365344][T11812] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 117.371400][T11812] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 117.377111][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.383102][T11812] __se_sys_sendmmsg+0xbd/0xe0 [ 117.387890][T11812] __x64_sys_sendmmsg+0x56/0x70 [ 117.392737][T11812] do_syscall_64+0xbc/0xf0 [ 117.397162][T11812] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 117.403046][T11812] RIP: 0033:0x440259 [ 117.406940][T11812] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 117.426568][T11812] RSP: 002b:00007fff15f10d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.444002][T11812] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440259 [ 117.452084][T11812] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 117.460273][T11812] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 117.468253][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ae0 [ 117.476357][T11812] R13: 0000000000401b70 R14: 0000000000000000 R15: 0000000000000000 [ 117.484430][T11812] [ 117.486740][T11812] Uninit was created at: [ 117.490977][T11812] kmsan_internal_poison_shadow+0x53/0xa0 [ 117.496690][T11812] kmsan_slab_alloc+0xaa/0x120 [ 117.501441][T11812] __kmalloc_node_track_caller+0xb55/0x1320 [ 117.507455][T11812] __alloc_skb+0x306/0xa10 [ 117.511872][T11812] netlink_sendmsg+0x783/0x1330 [ 117.516725][T11812] ___sys_sendmsg+0x14ff/0x1590 [ 117.521580][T11812] __sys_sendmmsg+0x53a/0xae0 [ 117.526366][T11812] __se_sys_sendmmsg+0xbd/0xe0 [ 117.531118][T11812] __x64_sys_sendmmsg+0x56/0x70 [ 117.535982][T11812] do_syscall_64+0xbc/0xf0 [ 117.540399][T11812] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 117.546266][T11812] ================================================================== [ 117.554313][T11812] Disabling lock debugging due to kernel taint [ 117.561003][T11812] Kernel panic - not syncing: panic_on_warn set ... [ 117.567618][T11812] CPU: 0 PID: 11812 Comm: syz-executor444 Tainted: G B 5.3.0-rc3+ #17 [ 117.577060][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.587109][T11812] Call Trace: [ 117.590411][T11812] dump_stack+0x191/0x1f0 [ 117.594787][T11812] panic+0x3c9/0xc1e [ 117.598709][T11812] kmsan_report+0x2ca/0x2d0 [ 117.603209][T11812] __msan_warning+0x75/0xe0 [ 117.608607][T11812] nh_valid_get_del_req+0x6f1/0x8c0 [ 117.613837][T11812] ? rtnetlink_rcv_msg+0x115a/0x1580 [ 117.619149][T11812] rtm_del_nexthop+0x1b1/0x610 [ 117.624008][T11812] ? rtm_new_nexthop+0x98e0/0x98e0 [ 117.629427][T11812] rtnetlink_rcv_msg+0x115a/0x1580 [ 117.634633][T11812] ? do_syscall_64+0xbc/0xf0 [ 117.639210][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.645191][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.651164][T11812] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 117.657225][T11812] ? rhashtable_jhash2+0x3a9/0x4d0 [ 117.662337][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.668426][T11812] ? kmsan_set_origin+0x26d/0x340 [ 117.673443][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.679619][T11812] netlink_rcv_skb+0x431/0x620 [ 117.684404][T11812] ? rtnetlink_bind+0x120/0x120 [ 117.689375][T11812] rtnetlink_rcv+0x50/0x60 [ 117.693794][T11812] netlink_unicast+0xf6c/0x1050 [ 117.698666][T11812] netlink_sendmsg+0x110f/0x1330 [ 117.703620][T11812] ? netlink_getsockopt+0x1430/0x1430 [ 117.708984][T11812] ___sys_sendmsg+0x14ff/0x1590 [ 117.713897][T11812] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 117.720827][T11812] ? kmsan_internal_check_memory+0x27a/0x8d0 [ 117.727156][T11812] ? kmsan_get_metadata_or_null+0x208/0x290 [ 117.733055][T11812] ? __msan_get_context_state+0x9/0x20 [ 117.739173][T11812] ? rcu_all_qs+0x23/0x240 [ 117.743688][T11812] __sys_sendmmsg+0x53a/0xae0 [ 117.748776][T11812] ? alloc_file_pseudo+0x4a7/0x4e0 [ 117.754198][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.760320][T11812] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 117.766552][T11812] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 117.772270][T11812] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 117.779032][T11812] __se_sys_sendmmsg+0xbd/0xe0 [ 117.783804][T11812] __x64_sys_sendmmsg+0x56/0x70 [ 117.788670][T11812] do_syscall_64+0xbc/0xf0 [ 117.793080][T11812] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 117.799809][T11812] RIP: 0033:0x440259 [ 117.803691][T11812] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 117.823305][T11812] RSP: 002b:00007fff15f10d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.831714][T11812] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440259 [ 117.840487][T11812] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 117.848540][T11812] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 117.864784][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ae0 [ 117.873124][T11812] R13: 0000000000401b70 R14: 0000000000000000 R15: 0000000000000000 [ 117.884048][T11812] Kernel Offset: disabled [ 117.888394][T11812] Rebooting in 86400 seconds..