[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.116249] audit: type=1800 audit(1541378205.161:25): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.135871] audit: type=1800 audit(1541378205.171:26): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.155499] audit: type=1800 audit(1541378205.191:27): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 69.242003] PANIC: double fault, error_code: 0x0 [ 69.246981] CPU: 0 PID: 6409 Comm: syz-executor085 Not tainted 4.19.0+ #77 [ 69.254021] ================================================================== [ 69.261462] BUG: KMSAN: uninit-value in irq_work_claim+0x153/0x390 [ 69.267779] CPU: 0 PID: 6409 Comm: syz-executor085 Not tainted 4.19.0+ #77 [ 69.274782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.284129] Call Trace: [ 69.286704] <#DF> [ 69.288857] dump_stack+0x32d/0x480 [ 69.292480] ? irq_work_claim+0x153/0x390 [ 69.296630] kmsan_report+0x1a2/0x2e0 [ 69.300449] kmsan_internal_check_memory+0x34c/0x430 [ 69.305569] kmsan_check_memory+0xb/0x10 [ 69.309732] irq_work_claim+0x153/0x390 [ 69.313710] irq_work_queue+0x44/0x280 [ 69.317596] vprintk_emit+0x693/0x790 [ 69.321491] vprintk_default+0x90/0xa0 [ 69.325508] vprintk_func+0x26b/0x2a0 [ 69.329309] printk+0x1a3/0x1f0 [ 69.332601] dump_stack_print_info+0x2c4/0x3c0 [ 69.337183] show_regs_print_info+0x37/0x40 [ 69.341501] show_regs+0x38/0x170 [ 69.344957] df_debug+0x86/0xb0 [ 69.348247] do_double_fault+0x362/0x480 [ 69.352318] double_fault+0x1e/0x30 [ 69.355944] RIP: 0010:kmsan_get_origin_address+0xa/0x370 [ 69.361396] Code: eb fe 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 48 89 75 c8 48 89 fb 49 bc 00 00 00 00 00 78 [ 69.380302] RSP: 0018:fffffe0000002000 EFLAGS: 00010086 [ 69.385676] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 69.392934] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe0000002150 [ 69.400190] RBP: fffffe0000002018 R08: 0000000000000000 R09: 0000000000000000 [ 69.407448] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 69.414705] R13: fffffe00000021c0 R14: fffffe00000021a8 R15: fffffe00000021a8 [ 69.421979] [ 69.424208] [ 69.427484] kmsan_memmove_origins+0xbd/0x1d0 [ 69.431977] ? kmsan_memmove_shadow+0xad/0xe0 [ 69.436465] __msan_memmove+0x6c/0x80 [ 69.440256] fixup_bad_iret+0x9b/0x130 [ 69.444147] error_entry+0xad/0xc0 [ 69.447684] RIP: 0000: (null) [ 69.451579] Code: Bad RIP value. [ 69.454937] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 69.462641] RAX: 0000000000000000 RBX: ffffffff8ae00e58 RCX: 0000000000000000 [ 69.469904] RDX: 0000000000000000 RSI: 0000006e0000005b RDI: 0000000000000000 [ 69.477180] RBP: 0000000000000000 R08: 00000000004009ae R09: 0000000044000004 [ 69.484442] R10: 00000000004012e0 R11: 0000000000000000 R12: 00000000004009ae [ 69.491710] R13: 0000000044000004 R14: 00000000004012e0 R15: 0000000000000000 [ 69.498994] ? general_protection+0x8/0x30 [ 69.503222] ? general_protection+0x8/0x30 [ 69.507452] [ 69.510798] [ 69.512411] Local variable description: ----__ai_ptr@irq_work_claim [ 69.518798] Variable was created at: [ 69.522503] irq_work_claim+0x4b/0x390 [ 69.526384] irq_work_queue+0x44/0x280 [ 69.530253] [ 69.531872] Byte 7 of 8 is uninitialized [ 69.535921] Memory access of size 8 starts at fffffe000000aa38 [ 69.541875] ================================================================== [ 69.549218] Disabling lock debugging due to kernel taint [ 69.554667] Kernel panic - not syncing: panic_on_warn set ... [ 69.554667] [ 69.562023] CPU: 0 PID: 6409 Comm: syz-executor085 Tainted: G B 4.19.0+ #77 [ 69.570407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.579746] Call Trace: [ 69.582333] <#DF> [ 69.584489] dump_stack+0x32d/0x480 [ 69.588130] panic+0x57e/0xb28 [ 69.591341] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 69.596781] kmsan_report+0x2d3/0x2e0 [ 69.600582] kmsan_internal_check_memory+0x34c/0x430 [ 69.605681] kmsan_check_memory+0xb/0x10 [ 69.609743] irq_work_claim+0x153/0x390 [ 69.613722] irq_work_queue+0x44/0x280 [ 69.617605] vprintk_emit+0x693/0x790 [ 69.621423] vprintk_default+0x90/0xa0 [ 69.625391] vprintk_func+0x26b/0x2a0 [ 69.629180] printk+0x1a3/0x1f0 [ 69.632461] dump_stack_print_info+0x2c4/0x3c0 [ 69.637038] show_regs_print_info+0x37/0x40 [ 69.641349] show_regs+0x38/0x170 [ 69.644794] df_debug+0x86/0xb0 [ 69.648065] do_double_fault+0x362/0x480 [ 69.652122] double_fault+0x1e/0x30 [ 69.655744] RIP: 0010:kmsan_get_origin_address+0xa/0x370 [ 69.661180] Code: eb fe 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 48 89 75 c8 48 89 fb 49 bc 00 00 00 00 00 78 [ 69.680070] RSP: 0018:fffffe0000002000 EFLAGS: 00010086 [ 69.685421] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 69.692683] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe0000002150 [ 69.699941] RBP: fffffe0000002018 R08: 0000000000000000 R09: 0000000000000000 [ 69.707204] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 69.714464] R13: fffffe00000021c0 R14: fffffe00000021a8 R15: fffffe00000021a8 [ 69.721731] [ 69.723960] [ 69.727254] kmsan_memmove_origins+0xbd/0x1d0 [ 69.731740] ? kmsan_memmove_shadow+0xad/0xe0 [ 69.736223] __msan_memmove+0x6c/0x80 [ 69.740035] fixup_bad_iret+0x9b/0x130 [ 69.743917] error_entry+0xad/0xc0 [ 69.747439] RIP: 0000: (null) [ 69.751321] Code: Bad RIP value. [ 69.754676] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 69.762386] RAX: 0000000000000000 RBX: ffffffff8ae00e58 RCX: 0000000000000000 [ 69.769641] RDX: 0000000000000000 RSI: 0000006e0000005b RDI: 0000000000000000 [ 69.776895] RBP: 0000000000000000 R08: 00000000004009ae R09: 0000000044000004 [ 69.784151] R10: 00000000004012e0 R11: 0000000000000000 R12: 00000000004009ae [ 69.791411] R13: 0000000044000004 R14: 00000000004012e0 R15: 0000000000000000 [ 69.798698] ? general_protection+0x8/0x30 [ 69.802937] ? general_protection+0x8/0x30 [ 69.807178] [ 69.811663] Kernel Offset: disabled [ 69.815305] Rebooting in 86400 seconds..