[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 123.035328][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 123.035381][ T32] audit: type=1800 audit(1582533896.118:39): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 123.074469][ T32] audit: type=1800 audit(1582533896.148:40): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 127.615848][ T32] audit: type=1400 audit(1582533900.698:41): avc: denied { map } for pid=11232 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.37' (ECDSA) to the list of known hosts. executing program [ 136.050028][ T32] audit: type=1400 audit(1582533909.128:42): avc: denied { map } for pid=11244 comm="syz-executor620" path="/root/syz-executor620964444" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 136.061884][T11244] ===================================================== [ 136.085731][T11244] BUG: KMSAN: uninit-value in caif_seqpkt_sendmsg+0x693/0xf60 [ 136.093267][T11244] CPU: 1 PID: 11244 Comm: syz-executor620 Not tainted 5.6.0-rc2-syzkaller #0 [ 136.102266][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.112322][T11244] Call Trace: [ 136.115601][T11244] dump_stack+0x1c9/0x220 [ 136.119927][T11244] kmsan_report+0xf7/0x1e0 [ 136.124470][T11244] __msan_warning+0x58/0xa0 [ 136.129113][T11244] caif_seqpkt_sendmsg+0x693/0xf60 [ 136.134210][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.140006][T11244] ? security_socket_sendmsg+0x1a8/0x200 [ 136.145641][T11244] ? setsockopt+0x5e0/0x5e0 [ 136.150125][T11244] ____sys_sendmsg+0x12b6/0x1350 [ 136.155075][T11244] __sys_sendmmsg+0x808/0xc90 [ 136.159737][T11244] ? nfs2_xdr_enc_sattrargs+0x58/0x310 [ 136.165302][T11244] ? kmsan_set_origin_checked+0x95/0xf0 [ 136.170864][T11244] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 136.176925][T11244] ? up_read+0x40/0x2b0 [ 136.181070][T11244] ? kmsan_get_metadata+0x11d/0x180 [ 136.186253][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.192053][T11244] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 136.198111][T11244] ? do_user_addr_fault+0xe77/0x1520 [ 136.203514][T11244] ? kmsan_get_metadata+0x4f/0x180 [ 136.208617][T11244] ? kmsan_get_metadata+0x4f/0x180 [ 136.213727][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.219523][T11244] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 136.225239][T11244] ? __x32_compat_sys_sendmsg+0x120/0x120 [ 136.231077][T11244] do_fast_syscall_32+0x3c7/0x6e0 [ 136.236113][T11244] entry_SYSENTER_compat+0x68/0x77 [ 136.241213][T11244] RIP: 0023:0xf7f79d99 [ 136.245266][T11244] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 136.265053][T11244] RSP: 002b:00000000ffbf4d6c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 136.273577][T11244] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007600 [ 136.281599][T11244] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00000000080bb508 [ 136.289557][T11244] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 136.297515][T11244] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 136.305525][T11244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.313522][T11244] [ 136.315892][T11244] Local variable ----iovstack.i@__sys_sendmmsg created at: [ 136.323172][T11244] __sys_sendmmsg+0x6db/0xc90 [ 136.327938][T11244] __sys_sendmmsg+0x6db/0xc90 [ 136.332603][T11244] ===================================================== [ 136.339515][T11244] Disabling lock debugging due to kernel taint [ 136.345696][T11244] Kernel panic - not syncing: panic_on_warn set ... [ 136.352380][T11244] CPU: 1 PID: 11244 Comm: syz-executor620 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 136.362508][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.372658][T11244] Call Trace: [ 136.375950][T11244] dump_stack+0x1c9/0x220 [ 136.380626][T11244] panic+0x3d5/0xc3e [ 136.384534][T11244] kmsan_report+0x1df/0x1e0 [ 136.389026][T11244] __msan_warning+0x58/0xa0 [ 136.394063][T11244] caif_seqpkt_sendmsg+0x693/0xf60 [ 136.399211][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.405024][T11244] ? security_socket_sendmsg+0x1a8/0x200 [ 136.410689][T11244] ? setsockopt+0x5e0/0x5e0 [ 136.415226][T11244] ____sys_sendmsg+0x12b6/0x1350 [ 136.420166][T11244] __sys_sendmmsg+0x808/0xc90 [ 136.424838][T11244] ? nfs2_xdr_enc_sattrargs+0x58/0x310 [ 136.430301][T11244] ? kmsan_set_origin_checked+0x95/0xf0 [ 136.435844][T11244] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 136.442080][T11244] ? up_read+0x40/0x2b0 [ 136.446339][T11244] ? kmsan_get_metadata+0x11d/0x180 [ 136.451665][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.457466][T11244] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 136.463622][T11244] ? do_user_addr_fault+0xe77/0x1520 [ 136.468991][T11244] ? kmsan_get_metadata+0x4f/0x180 [ 136.474095][T11244] ? kmsan_get_metadata+0x4f/0x180 [ 136.479196][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.485004][T11244] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 136.490814][T11244] ? __x32_compat_sys_sendmsg+0x120/0x120 [ 136.496721][T11244] do_fast_syscall_32+0x3c7/0x6e0 [ 136.501848][T11244] entry_SYSENTER_compat+0x68/0x77 [ 136.506945][T11244] RIP: 0023:0xf7f79d99 [ 136.511023][T11244] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 136.530659][T11244] RSP: 002b:00000000ffbf4d6c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 136.539115][T11244] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007600 [ 136.547078][T11244] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00000000080bb508 [ 136.555039][T11244] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 136.562996][T11244] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 136.570959][T11244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.579812][T11244] ------------[ cut here ]------------ [ 136.585319][T11244] kernel BUG at mm/kmsan/kmsan.h:87! [ 136.590619][T11244] invalid opcode: 0000 [#1] SMP [ 136.595518][T11244] CPU: 1 PID: 11244 Comm: syz-executor620 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 136.605758][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.615839][T11244] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 136.622417][T11244] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c a8 b2 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 136.642015][T11244] RSP: 0018:ffff9c1bc15d7608 EFLAGS: 00010046 [ 136.648131][T11244] RAX: 0000000000000002 RBX: 00000000044800ba RCX: 00000000044800ba [ 136.656086][T11244] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9c1bc15d76e4 [ 136.664049][T11244] RBP: ffff9c1bc15d76b0 R08: 0000000000000000 R09: ffff8e6c2fd28ed0 [ 136.672014][T11244] R10: 0000000000000000 R11: ffffffffa9816f70 R12: 0000000000000000 [ 136.679980][T11244] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 136.687939][T11244] FS: 0000000000000000(0000) GS:ffff8e6c2fd00000(0063) knlGS:0000000009e08840 [ 136.696856][T11244] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 136.703468][T11244] CR2: 0000000020007600 CR3: 0000000103403000 CR4: 00000000001406e0 [ 136.711471][T11244] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.719458][T11244] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.727431][T11244] Call Trace: [ 136.730774][T11244] kmsan_check_memory+0xd/0x10 [ 136.735548][T11244] iowrite8+0x99/0x2e0 [ 136.739618][T11244] pvpanic_panic_notify+0x99/0xc0 [ 136.744636][T11244] ? pvpanic_mmio_remove+0x60/0x60 [ 136.749842][T11244] atomic_notifier_call_chain+0x12a/0x240 [ 136.755562][T11244] panic+0x468/0xc3e [ 136.759461][T11244] kmsan_report+0x1df/0x1e0 [ 136.764069][T11244] __msan_warning+0x58/0xa0 [ 136.768571][T11244] caif_seqpkt_sendmsg+0x693/0xf60 [ 136.773671][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.779502][T11244] ? security_socket_sendmsg+0x1a8/0x200 [ 136.785177][T11244] ? setsockopt+0x5e0/0x5e0 [ 136.789664][T11244] ____sys_sendmsg+0x12b6/0x1350 [ 136.794607][T11244] __sys_sendmmsg+0x808/0xc90 [ 136.799274][T11244] ? nfs2_xdr_enc_sattrargs+0x58/0x310 [ 136.804814][T11244] ? kmsan_set_origin_checked+0x95/0xf0 [ 136.810353][T11244] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 136.816560][T11244] ? up_read+0x40/0x2b0 [ 136.820705][T11244] ? kmsan_get_metadata+0x11d/0x180 [ 136.825893][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.831696][T11244] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 136.837752][T11244] ? do_user_addr_fault+0xe77/0x1520 [ 136.843033][T11244] ? kmsan_get_metadata+0x4f/0x180 [ 136.848194][T11244] ? kmsan_get_metadata+0x4f/0x180 [ 136.853300][T11244] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 136.859103][T11244] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 136.865255][T11244] ? __x32_compat_sys_sendmsg+0x120/0x120 [ 136.870968][T11244] do_fast_syscall_32+0x3c7/0x6e0 [ 136.876036][T11244] entry_SYSENTER_compat+0x68/0x77 [ 136.881134][T11244] RIP: 0023:0xf7f79d99 [ 136.885287][T11244] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 136.904912][T11244] RSP: 002b:00000000ffbf4d6c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 136.913522][T11244] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007600 [ 136.921490][T11244] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00000000080bb508 [ 136.929497][T11244] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 136.937460][T11244] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 136.945420][T11244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.953587][T11244] Modules linked in: [ 136.957474][T11244] ---[ end trace 1ae6828646cf908c ]--- [ 136.963448][T11244] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 136.970023][T11244] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c a8 b2 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 136.989616][T11244] RSP: 0018:ffff9c1bc15d7608 EFLAGS: 00010046 [ 136.995669][T11244] RAX: 0000000000000002 RBX: 00000000044800ba RCX: 00000000044800ba [ 137.003635][T11244] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9c1bc15d76e4 [ 137.011597][T11244] RBP: ffff9c1bc15d76b0 R08: 0000000000000000 R09: ffff8e6c2fd28ed0 [ 137.019608][T11244] R10: 0000000000000000 R11: ffffffffa9816f70 R12: 0000000000000000 [ 137.027577][T11244] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 137.035544][T11244] FS: 0000000000000000(0000) GS:ffff8e6c2fd00000(0063) knlGS:0000000009e08840 [ 137.044457][T11244] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 137.051028][T11244] CR2: 0000000020007600 CR3: 0000000103403000 CR4: 00000000001406e0 [ 137.058990][T11244] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.066948][T11244] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.074909][T11244] Kernel panic - not syncing: Fatal exception [ 137.081805][T11244] Kernel Offset: 0x23600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 137.093480][T11244] Rebooting in 86400 seconds..