[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok [ 125.449218][ T32] kauditd_printk_skb: 4 callbacks suppressed 8[?25h[?0c. [[ 125.449268][ T32] audit: type=1800 audit(1582402457.511:39): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 ....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 125.499787][ T32] audit: type=1800 audit(1582402457.551:40): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 128.706673][ T32] audit: type=1400 audit(1582402460.771:41): avc: denied { map } for pid=11647 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 128.762209][T11645] sshd (11645) used greatest stack depth: 3352 bytes left Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. executing program [ 137.158056][ T32] audit: type=1400 audit(1582402469.221:42): avc: denied { map } for pid=11659 comm="syz-executor923" path="/root/syz-executor923420532" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 137.170887][T11659] ===================================================== [ 137.185626][ T32] audit: type=1400 audit(1582402469.221:43): avc: denied { integrity } for pid=11659 comm="syz-executor923" lockdown_reason="hibernation" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 137.192282][T11659] BUG: KMSAN: uninit-value in kmsan_check_memory+0xd/0x10 [ 137.192298][T11659] CPU: 1 PID: 11659 Comm: syz-executor923 Not tainted 5.6.0-rc2-syzkaller #0 [ 137.192305][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.192311][T11659] Call Trace: [ 137.192333][T11659] dump_stack+0x1c9/0x220 [ 137.192358][T11659] kmsan_report+0xf7/0x1e0 [ 137.192383][T11659] kmsan_internal_check_memory+0x358/0x3d0 [ 137.192404][T11659] ? __msan_poison_alloca+0xf0/0x120 [ 137.192458][T11659] kmsan_check_memory+0xd/0x10 [ 137.273444][T11659] snapshot_compat_ioctl+0x559/0x650 [ 137.278755][T11659] ? snapshot_ioctl+0x14f0/0x14f0 [ 137.283781][T11659] __se_compat_sys_ioctl+0x57c/0xed0 [ 137.289071][T11659] ? kmsan_get_metadata+0x4f/0x180 [ 137.294175][T11659] __ia32_compat_sys_ioctl+0xd9/0x110 [ 137.299594][T11659] ? compat_ptr_ioctl+0x150/0x150 [ 137.304719][T11659] do_fast_syscall_32+0x3c7/0x6e0 [ 137.309737][T11659] entry_SYSENTER_compat+0x68/0x77 [ 137.314840][T11659] RIP: 0023:0xf7f70d99 [ 137.318892][T11659] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 137.338799][T11659] RSP: 002b:00000000ffec145c EFLAGS: 00000213 ORIG_RAX: 0000000000000036 [ 137.347215][T11659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080083313 [ 137.355188][T11659] RDX: 0000000000000000 RSI: 00000000080ea078 RDI: 00000000ffec14b0 [ 137.363156][T11659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.371219][T11659] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 137.379182][T11659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.387328][T11659] [ 137.389708][T11659] Uninit was stored to memory at: [ 137.394721][T11659] kmsan_internal_chain_origin+0xad/0x130 [ 137.400454][T11659] __msan_chain_origin+0x50/0x90 [ 137.405404][T11659] snapshot_compat_ioctl+0x5e0/0x650 [ 137.410689][T11659] __se_compat_sys_ioctl+0x57c/0xed0 [ 137.416085][T11659] __ia32_compat_sys_ioctl+0xd9/0x110 [ 137.421441][T11659] do_fast_syscall_32+0x3c7/0x6e0 [ 137.426522][T11659] entry_SYSENTER_compat+0x68/0x77 [ 137.431612][T11659] [ 137.433919][T11659] Local variable ----offset@snapshot_compat_ioctl created at: [ 137.441372][T11659] snapshot_compat_ioctl+0x324/0x650 [ 137.446733][T11659] snapshot_compat_ioctl+0x324/0x650 [ 137.451998][T11659] [ 137.455816][T11659] Bytes 0-7 of 8 are uninitialized [ 137.460921][T11659] Memory access of size 8 starts at ffff9946c156bd30 [ 137.467796][T11659] ===================================================== [ 137.474834][T11659] Disabling lock debugging due to kernel taint [ 137.481101][T11659] Kernel panic - not syncing: panic_on_warn set ... [ 137.487687][T11659] CPU: 1 PID: 11659 Comm: syz-executor923 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 137.497906][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.508105][T11659] Call Trace: [ 137.511526][T11659] dump_stack+0x1c9/0x220 [ 137.515978][T11659] panic+0x3d5/0xc3e [ 137.520081][T11659] kmsan_report+0x1df/0x1e0 [ 137.524585][T11659] kmsan_internal_check_memory+0x358/0x3d0 [ 137.530422][T11659] ? __msan_poison_alloca+0xf0/0x120 [ 137.535703][T11659] kmsan_check_memory+0xd/0x10 [ 137.540543][T11659] snapshot_compat_ioctl+0x559/0x650 [ 137.545834][T11659] ? snapshot_ioctl+0x14f0/0x14f0 [ 137.550916][T11659] __se_compat_sys_ioctl+0x57c/0xed0 [ 137.556479][T11659] ? kmsan_get_metadata+0x4f/0x180 [ 137.561734][T11659] __ia32_compat_sys_ioctl+0xd9/0x110 [ 137.568158][T11659] ? compat_ptr_ioctl+0x150/0x150 [ 137.573174][T11659] do_fast_syscall_32+0x3c7/0x6e0 [ 137.578268][T11659] entry_SYSENTER_compat+0x68/0x77 [ 137.583428][T11659] RIP: 0023:0xf7f70d99 [ 137.587478][T11659] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 137.607183][T11659] RSP: 002b:00000000ffec145c EFLAGS: 00000213 ORIG_RAX: 0000000000000036 [ 137.615752][T11659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080083313 [ 137.624125][T11659] RDX: 0000000000000000 RSI: 00000000080ea078 RDI: 00000000ffec14b0 [ 137.632099][T11659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.640187][T11659] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 137.648503][T11659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.658158][T11659] Kernel Offset: 0x12a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 137.669892][T11659] Rebooting in 86400 seconds..