[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 34.677346] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.897993] random: sshd: uninitialized urandom read (32 bytes read) [ 37.438017] random: sshd: uninitialized urandom read (32 bytes read) [ 39.348791] random: sshd: uninitialized urandom read (32 bytes read) [ 587.392002] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. [ 592.899607] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 861.151400] INFO: task syz-executor375:4558 blocked for more than 140 seconds. [ 861.158958] Not tainted 4.18.0-rc4+ #27 [ 861.163515] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 861.171537] syz-executor375 D57104 4558 4554 0x00000004 [ 861.177382] Call Trace: [ 861.180086] __schedule+0x652/0x780 [ 861.183794] schedule+0x1cc/0x300 [ 861.187374] __fuse_request_send+0x105a/0x1a90 [ 861.192057] ? init_wait_entry+0x1a0/0x1a0 [ 861.196407] fuse_simple_request+0x9cc/0xc10 [ 861.200885] fuse_lookup_name+0x472/0xc80 [ 861.205142] ? rcu_all_qs+0x3f/0x210 [ 861.208932] fuse_lookup+0x193/0x810 [ 861.212746] ? kmsan_set_origin_inline+0x6b/0x120 [ 861.217680] fuse_atomic_open+0x2b7/0x1f00 [ 861.221975] ? fuse_dentry_revalidate+0x13d0/0x13d0 [ 861.227152] ? __list_add_valid+0xb8/0x450 [ 861.231513] ? d_alloc_parallel+0x2172/0x2470 [ 861.236130] ? rcu_all_qs+0x3f/0x210 [ 861.239899] ? fuse_rename2+0x4e0/0x4e0 [ 861.243937] path_openat+0x1fa2/0x69c0 [ 861.247965] ? hash_netport6_del+0x21c/0x1a10 [ 861.252536] ? do_filp_open+0x88/0x740 [ 861.256463] do_filp_open+0x2c1/0x740 [ 861.260345] do_open_execat+0x1d1/0x720 [ 861.264384] __do_execve_file+0xb6f/0x3020 [ 861.268727] ? strncpy_from_user+0x3bc/0x4b0 [ 861.273216] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 861.278681] __x64_sys_execve+0x131/0x180 [ 861.282885] ? set_binfmt+0x1b0/0x1b0 [ 861.286785] do_syscall_64+0x15b/0x230 [ 861.290749] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 861.296006] RIP: 0033:0x445889 [ 861.299223] Code: Bad RIP value. [ 861.302665] RSP: 002b:00007f11e6f42da8 EFLAGS: 00000297 ORIG_RAX: 000000000000003b [ 861.310469] RAX: ffffffffffffffda RBX: 00000000006dac3c RCX: 0000000000445889 [ 861.317810] RDX: 0000000020000500 RSI: 0000000020000480 RDI: 00000000200001c0 [ 861.325132] RBP: 00000000006dac38 R08: 00007f11e6f43700 R09: 0000000000000000 [ 861.332463] R10: 00007f11e6f43700 R11: 0000000000000297 R12: 64695f70756f7267 [ 861.339789] R13: 7375662f7665642f R14: 2f30656c69662f2e R15: 0000000000000001 [ 861.347127] NMI backtrace for cpu 1 [ 861.350834] CPU: 1 PID: 809 Comm: khungtaskd Not tainted 4.18.0-rc4+ #27 [ 861.357665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.367011] Call Trace: [ 861.369657] dump_stack+0x185/0x1e0 [ 861.373282] nmi_trigger_cpumask_backtrace+0x26f/0x4e0 [ 861.378572] ? arch_trigger_cpumask_backtrace+0x40/0x40 [ 861.383935] arch_trigger_cpumask_backtrace+0x2c/0x40 [ 861.389149] trigger_all_cpu_backtrace+0x2b/0x30 [ 861.393896] watchdog+0x1107/0x1130 [ 861.397555] kthread+0x473/0x4b0 [ 861.400927] ? reset_hung_task_detector+0x30/0x30 [ 861.405761] ? kthread_blkcg+0xf0/0xf0 [ 861.409732] ret_from_fork+0x35/0x40 [ 861.413540] Sending NMI from CPU 1 to CPUs 0: [ 861.418203] ------------[ cut here ]------------ [ 861.423004] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 861.428133] invalid opcode: 0000 [#1] SMP PTI [ 861.432638] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.18.0-rc4+ #27 [ 861.439223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.448593] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 861.453247] Code: 00 74 27 65 8b 04 25 80 90 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 80 90 03 00 65 c6 04 25 15 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 861.472710] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 861.478084] RAX: 0000000080000100 RBX: 0000000000000001 RCX: 00000000c0000101 [ 861.485361] RDX: 00000000ffff8802 RSI: ffffffff8a40136c RDI: ffffea00003f05a0 [ 861.492629] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 861.499903] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 861.507174] R13: 0000000000000000 R14: 000000019249e000 R15: 0000000000000000 [ 861.514463] FS: 0000000000000000(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 861.522700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.528584] CR2: ffffffffff600400 CR3: 000000019249e000 CR4: 00000000001406f0 [ 861.535854] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 861.543121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 861.550388] Call Trace: [ 861.552991] [ 861.555205] ? end_repeat_nmi+0x19/0x8e [ 861.559187] ? end_repeat_nmi+0x7/0x8e [ 861.563128] ? task_change_group_fair+0xda0/0xda0 [ 861.567979] ? update_cfs_rq_load_avg+0x917/0x1aa0 [ 861.572913] ? update_cfs_rq_load_avg+0x917/0x1aa0 [ 861.577850] ? update_cfs_rq_load_avg+0x917/0x1aa0 [ 861.582781] [ 861.585054] [ 861.587231] ? update_blocked_averages+0x607/0xe60 [ 861.592174] ? _nohz_idle_balance+0xbb5/0xe80 [ 861.596677] ? __msan_poison_alloca+0x183/0x220 [ 861.601361] ? kmsan_set_origin_inline+0x6b/0x120 [ 861.606207] ? __msan_poison_alloca+0x183/0x220 [ 861.610886] ? run_rebalance_domains+0x40/0x350 [ 861.615563] ? run_rebalance_domains+0x288/0x350 [ 861.620352] ? task_change_group_fair+0xda0/0xda0 [ 861.625224] ? __do_softirq+0x55f/0x934 [ 861.629266] ? irq_exit+0x22a/0x270 [ 861.632900] ? scheduler_ipi+0x25f/0x490 [ 861.636991] ? flat_init_apic_ldr+0x170/0x170 [ 861.641494] ? smp_reschedule_interrupt+0xc7/0x430 [ 861.646430] ? reschedule_interrupt+0xf/0x20 [ 861.650828] [ 861.653072] ? __cpuidle_text_start+0x8/0x8 [ 861.657398] ? default_idle+0x210/0x3f0 [ 861.661386] ? __cpuidle_text_start+0x8/0x8 [ 861.665717] ? __cpuidle_text_start+0x8/0x8 [ 861.670076] ? arch_cpu_idle+0x26/0x30 [ 861.673989] ? do_idle+0x36c/0x830 [ 861.677564] ? cpu_startup_entry+0x105/0x150 [ 861.681976] ? rest_init+0x1c1/0x1f0 [ 861.685746] ? hpet_time_init+0xd0/0xe0 [ 861.689728] ? start_kernel+0x11bd/0x11e0 [ 861.693880] ? x86_64_start_kernel+0xf0/0x100 [ 861.698417] ? secondary_startup_64+0xa5/0xb0 [ 861.702925] Modules linked in: [ 861.706130] Dumping ftrace buffer: [ 861.709659] (ftrace buffer empty) [ 861.713382] ---[ end trace dc5c57ef0e568b13 ]--- [ 861.718161] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 861.722814] Code: 00 74 27 65 8b 04 25 80 90 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 80 90 03 00 65 c6 04 25 15 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 861.742259] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 861.747622] RAX: 0000000080000100 RBX: 0000000000000001 RCX: 00000000c0000101 [ 861.754895] RDX: 00000000ffff8802 RSI: ffffffff8a40136c RDI: ffffea00003f05a0 [ 861.762171] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 861.769434] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 861.776703] R13: 0000000000000000 R14: 000000019249e000 R15: 0000000000000000 [ 861.783975] FS: 0000000000000000(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 861.792206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.798082] CR2: ffffffffff600400 CR3: 000000019249e000 CR4: 00000000001406f0 [ 861.805351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 861.812628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 861.819949] Kernel panic - not syncing: Fatal exception in interrupt [ 863.025871] Shutting down cpus with NMI [ 863.029998] ------------[ cut here ]------------ [ 863.034774] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 863.039908] invalid opcode: 0000 [#2] SMP PTI [ 863.043356] Dumping ftrace buffer: [ 863.044436] CPU: 1 PID: 809 Comm: khungtaskd Tainted: G D 4.18.0-rc4+ #27 [ 863.048239] (ftrace buffer empty) [ 863.056439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.060138] Kernel Offset: disabled [[ 8 8663.3.007371935]19 R5]e bRoeobotoitnig ngin i8n6 840604 0s0e cosnedcson..d s ..2 /0x70 [ 863.081789] Code: 00 74 27 65 8b 04 25 80 90 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 80 90 03 00 65 c6 04 25 15 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 863.101513] RSP: 0018:fffffe0000049ea8 EFLAGS: 00010046 [ 863.106898] RAX: 0000000000010000 RBX: 0000000000000001 RCX: 00000000c0000101 [ 863.114180] RDX: 00000000ffff8802 RSI: ffffffff8a40136c RDI: ffff88021fcb9d00 [ 863.121460] RBP: fffffe0000049ef9 R08: 0000000000000000 R09: 0000000000000000 [ 863.128736] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 863.136015] R13: 0000000000000000 R14: 00000001c2422000 R15: 0000000000000000 [ 863.143301] FS: 0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 863.151535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 863.157433] CR2: 000000000044585f CR3: 00000001c2422000 CR4: 00000000001406e0 [ 863.164744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 863.172028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 863.179303] Call Trace: [ 863.181920] [ 863.184102] ? end_repeat_nmi+0x19/0x8e [ 863.188094] ? end_repeat_nmi+0x7/0x8e [ 863.192024] ? __msan_metadata_ptr_for_store_2+0x20/0x20 [ 863.197495] ? __msan_metadata_ptr_for_store_2+0x20/0x20 [ 863.202964] ? __msan_metadata_ptr_for_store_2+0x20/0x20 [ 863.208418] [ 863.210650] [ 863.212823] ? queued_spin_lock_slowpath+0x726/0xb90 [ 863.218935] ? _raw_spin_lock+0x79/0x80 [ 863.222928] ? try_to_wake_up+0x11c9/0x22c0 [ 863.227283] ? default_wake_function+0x92/0xb0 [ 863.231912] ? autoremove_wake_function+0x54/0x320 [ 863.236864] ? __wake_up_common+0x45a/0xa50 [ 863.241226] ? init_wait_entry+0x1a0/0x1a0 [ 863.245504] ? __wake_up_common_lock+0x1a6/0x3b0 [ 863.250293] ? __wake_up+0x4a/0x60 [ 863.253850] ? console_cpu_notify+0xc0/0xc0 [ 863.258217] ? wake_up_klogd_work_func+0xb8/0xe0 [ 863.263111] ? irq_work_tick+0x52d/0x6b0 [ 863.267228] ? update_process_times+0x14b/0x1a0 [ 863.271938] ? tick_sched_timer+0x3bf/0x520 [ 863.276286] ? __hrtimer_run_queues+0xc74/0x1680 [ 863.281094] ? tick_setup_sched_timer+0x600/0x600 [ 863.285996] ? hrtimer_interrupt+0x451/0x13c0 [ 863.290544] ? kmsan_set_origin_inline+0x6b/0x120 [ 863.295416] ? hrtimer_init+0x5f0/0x5f0 [ 863.299440] ? local_apic_timer_interrupt+0x6b/0x250 [ 863.304571] ? smp_apic_timer_interrupt+0x5a/0x90 [ 863.309432] ? apic_timer_interrupt+0xf/0x20 [ 863.313925] [ 863.316182] ? delay_loop+0x50/0x50 [ 863.319825] ? delay_tsc+0xa2/0xe0 [ 863.323380] ? delay_tsc+0x16/0xe0 [ 863.326935] ? delay_loop+0x50/0x50 [ 863.330578] ? __const_udelay+0xb2/0xe0 [ 863.334582] ? nmi_trigger_cpumask_backtrace+0x449/0x4e0 [ 863.340054] ? arch_trigger_cpumask_backtrace+0x40/0x40 [ 863.345452] ? arch_trigger_cpumask_backtrace+0x2c/0x40 [ 863.350837] ? trigger_all_cpu_backtrace+0x2b/0x30 [ 863.355778] ? watchdog+0x1107/0x1130 [ 863.359628] ? kthread+0x473/0x4b0 [ 863.363233] ? reset_hung_task_detector+0x30/0x30 [ 863.368100] ? kthread_blkcg+0xf0/0xf0 [ 863.372028] ? ret_from_fork+0x35/0x40 [ 863.375917] Modules linked in: [ 863.379122] Dumping ftrace buffer: [ 863.382657] (ftrace buffer empty) [ 863.386382] ---[ end trace dc5c57ef0e568b14 ]--- [ 863.391161] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 863.395828] Code: 00 74 27 65 8b 04 25 80 90 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 80 90 03 00 65 c6 04 25 15 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 863.415425] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 863.420811] RAX: 0000000080000100 RBX: 0000000000000001 RCX: 00000000c0000101 [ 863.428093] RDX: 00000000ffff8802 RSI: ffffffff8a40136c RDI: ffffea00003f05a0 [ 863.435374] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 863.442650] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 863.449927] R13: 0000000000000000 R14: 000000019249e000 R15: 0000000000000000 [ 863.457214] FS: 0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 863.465458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 863.471355] CR2: 000000000044585f CR3: 00000001c2422000 CR4: 00000000001406e0 [ 863.478636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 863.485914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400