[ 69.112061][ T31] audit: type=1800 audit(1566047333.141:27): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 69.167338][ T31] audit: type=1800 audit(1566047333.191:28): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 70.361404][ T31] audit: type=1800 audit(1566047334.401:29): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 70.383968][ T31] audit: type=1800 audit(1566047334.431:30): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.200' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 81.313342][T11026] ================================================================== [ 81.321414][T11026] BUG: KMSAN: uninit-value in rtm_new_nexthop+0x447/0x98e0 [ 81.328585][T11026] CPU: 0 PID: 11026 Comm: syz-executor768 Not tainted 5.3.0-rc3+ #17 [ 81.336610][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.346632][T11026] Call Trace: [ 81.349892][T11026] dump_stack+0x191/0x1f0 [ 81.354196][T11026] kmsan_report+0x162/0x2d0 [ 81.358667][T11026] __msan_warning+0x75/0xe0 [ 81.363141][T11026] rtm_new_nexthop+0x447/0x98e0 [ 81.367983][T11026] ? refcount_dec_and_test_checked+0x14c/0x210 [ 81.374115][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.380060][T11026] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 81.386100][T11026] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 81.392137][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.398187][T11026] ? local_bh_enable+0x40/0x40 [ 81.402924][T11026] rtnetlink_rcv_msg+0x115a/0x1580 [ 81.408010][T11026] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 81.414078][T11026] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 81.420115][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.426065][T11026] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 81.432099][T11026] ? rhashtable_jhash2+0x3a9/0x4d0 [ 81.437178][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.443125][T11026] ? kmsan_set_origin+0x26d/0x340 [ 81.448116][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.454064][T11026] netlink_rcv_skb+0x431/0x620 [ 81.458813][T11026] ? rtnetlink_bind+0x120/0x120 [ 81.463639][T11026] rtnetlink_rcv+0x50/0x60 [ 81.468022][T11026] netlink_unicast+0xf6c/0x1050 [ 81.472857][T11026] netlink_sendmsg+0x110f/0x1330 [ 81.477772][T11026] ? netlink_getsockopt+0x1430/0x1430 [ 81.483108][T11026] ___sys_sendmsg+0x14ff/0x1590 [ 81.487938][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.493886][T11026] ? __fget_light+0x19f/0x710 [ 81.498632][T11026] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 81.504666][T11026] ? __fget_light+0x1b8/0x710 [ 81.509312][T11026] ? kmsan_get_metadata_or_null+0x208/0x290 [ 81.515173][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.521119][T11026] __se_sys_sendmsg+0x305/0x460 [ 81.525946][T11026] __x64_sys_sendmsg+0x4a/0x70 [ 81.530679][T11026] do_syscall_64+0xbc/0xf0 [ 81.535062][T11026] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 81.540918][T11026] RIP: 0033:0x4401e9 [ 81.544778][T11026] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 81.564348][T11026] RSP: 002b:00007ffef5128b58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.572726][T11026] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401e9 [ 81.580677][T11026] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 81.588625][T11026] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 81.596568][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a70 [ 81.604509][T11026] R13: 0000000000401b00 R14: 0000000000000000 R15: 0000000000000000 [ 81.612457][T11026] [ 81.614752][T11026] Uninit was created at: [ 81.618962][T11026] kmsan_internal_poison_shadow+0x53/0xa0 [ 81.624647][T11026] kmsan_slab_alloc+0xaa/0x120 [ 81.629379][T11026] __kmalloc_node_track_caller+0xb55/0x1320 [ 81.635237][T11026] __alloc_skb+0x306/0xa10 [ 81.639622][T11026] netlink_sendmsg+0x783/0x1330 [ 81.644450][T11026] ___sys_sendmsg+0x14ff/0x1590 [ 81.649269][T11026] __se_sys_sendmsg+0x305/0x460 [ 81.654088][T11026] __x64_sys_sendmsg+0x4a/0x70 [ 81.658816][T11026] do_syscall_64+0xbc/0xf0 [ 81.663202][T11026] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 81.669054][T11026] ================================================================== [ 81.677077][T11026] Disabling lock debugging due to kernel taint [ 81.683197][T11026] Kernel panic - not syncing: panic_on_warn set ... [ 81.689750][T11026] CPU: 0 PID: 11026 Comm: syz-executor768 Tainted: G B 5.3.0-rc3+ #17 [ 81.699163][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.709185][T11026] Call Trace: [ 81.712445][T11026] dump_stack+0x191/0x1f0 [ 81.716745][T11026] panic+0x3c9/0xc1e [ 81.720618][T11026] kmsan_report+0x2ca/0x2d0 [ 81.725091][T11026] __msan_warning+0x75/0xe0 [ 81.729562][T11026] rtm_new_nexthop+0x447/0x98e0 [ 81.734409][T11026] ? refcount_dec_and_test_checked+0x14c/0x210 [ 81.740535][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.746481][T11026] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 81.752549][T11026] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 81.758584][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.764533][T11026] ? local_bh_enable+0x40/0x40 [ 81.769262][T11026] rtnetlink_rcv_msg+0x115a/0x1580 [ 81.774348][T11026] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 81.780381][T11026] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 81.786416][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.792362][T11026] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 81.798392][T11026] ? rhashtable_jhash2+0x3a9/0x4d0 [ 81.803472][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.809422][T11026] ? kmsan_set_origin+0x26d/0x340 [ 81.814417][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.820369][T11026] netlink_rcv_skb+0x431/0x620 [ 81.825102][T11026] ? rtnetlink_bind+0x120/0x120 [ 81.829933][T11026] rtnetlink_rcv+0x50/0x60 [ 81.834318][T11026] netlink_unicast+0xf6c/0x1050 [ 81.839143][T11026] netlink_sendmsg+0x110f/0x1330 [ 81.844062][T11026] ? netlink_getsockopt+0x1430/0x1430 [ 81.849398][T11026] ___sys_sendmsg+0x14ff/0x1590 [ 81.854232][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.860178][T11026] ? __fget_light+0x19f/0x710 [ 81.864826][T11026] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 81.870860][T11026] ? __fget_light+0x1b8/0x710 [ 81.875508][T11026] ? kmsan_get_metadata_or_null+0x208/0x290 [ 81.881370][T11026] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 81.887318][T11026] __se_sys_sendmsg+0x305/0x460 [ 81.892143][T11026] __x64_sys_sendmsg+0x4a/0x70 [ 81.896875][T11026] do_syscall_64+0xbc/0xf0 [ 81.901262][T11026] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 81.907122][T11026] RIP: 0033:0x4401e9 [ 81.910982][T11026] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 81.930553][T11026] RSP: 002b:00007ffef5128b58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.938929][T11026] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401e9 [ 81.946866][T11026] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 81.954806][T11026] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 81.962744][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a70 [ 81.970684][T11026] R13: 0000000000401b00 R14: 0000000000000000 R15: 0000000000000000 [ 81.979634][T11026] Kernel Offset: disabled [ 81.983944][T11026] Rebooting in 86400 seconds..