[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 26.115912] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 29.570479] random: sshd: uninitialized urandom read (32 bytes read) [ 29.845326] random: sshd: uninitialized urandom read (32 bytes read) [ 30.915753] random: sshd: uninitialized urandom read (32 bytes read) [ 31.960775] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. [ 37.412491] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/28 02:05:59 parsed 1 programs 2018/05/28 02:05:59 executed programs: 0 [ 37.952222] IPVS: ftp: loaded support on port[0] = 21 [ 38.105120] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.111512] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.118703] device bridge_slave_0 entered promiscuous mode [ 38.137736] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.144111] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.151294] device bridge_slave_1 entered promiscuous mode [ 38.169815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.189532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.241289] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.262818] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.341493] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.348627] team0: Port device team_slave_0 added [ 38.367133] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.374591] team0: Port device team_slave_1 added [ 38.395296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.416907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.438692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.460540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.619097] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.625503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.632250] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.638634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.211500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.269360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.326321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 39.332505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.339851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.395201] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.726669] ================================================================== [ 39.734080] BUG: KMSAN: uninit-value in copy_siginfo_to_user+0x383/0x1270 [ 39.740997] CPU: 0 PID: 4705 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #102 [ 39.748247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.757574] Call Trace: [ 39.760135] dump_stack+0x185/0x1d0 [ 39.763740] ? copy_siginfo_to_user+0x383/0x1270 [ 39.768471] kmsan_report+0x149/0x260 [ 39.772247] __msan_warning_32+0x6e/0xc0 [ 39.776282] copy_siginfo_to_user+0x383/0x1270 [ 39.780840] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 39.786178] ptrace_request+0x1d6a/0x20e0 [ 39.790300] ? __msan_poison_alloca+0x15c/0x1d0 [ 39.794944] ? wait_task_inactive+0x21b/0x990 [ 39.799416] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 39.804060] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 39.809487] ? wait_task_inactive+0x7df/0x990 [ 39.813962] arch_ptrace+0x1f6/0x1230 [ 39.817738] ? ptrace_check_attach+0x182/0x5e0 [ 39.822293] __se_sys_ptrace+0x309/0x850 [ 39.826332] __x64_sys_ptrace+0x11e/0x170 [ 39.830455] do_syscall_64+0x152/0x230 [ 39.834320] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 39.839482] RIP: 0033:0x455a09 [ 39.842643] RSP: 002b:00007ffea3dc1b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 39.850324] RAX: ffffffffffffffda RBX: 0000000001d00914 RCX: 0000000000455a09 [ 39.857568] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 39.864811] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 39.872058] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 39.879303] R13: 000000000000052c R14: 00000000006fbcc0 R15: 0000000000009e4a [ 39.886548] [ 39.888146] Local variable description: ----kiov@ptrace_request [ 39.894171] Variable was created at: [ 39.897858] ptrace_request+0x194/0x20e0 [ 39.901893] arch_ptrace+0x1f6/0x1230 [ 39.905661] ================================================================== [ 39.912990] Disabling lock debugging due to kernel taint [ 39.918412] Kernel panic - not syncing: panic_on_warn set ... [ 39.918412] [ 39.925749] CPU: 0 PID: 4705 Comm: syz-executor0 Tainted: G B 4.17.0-rc5+ #102 [ 39.934379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.943704] Call Trace: [ 39.946264] dump_stack+0x185/0x1d0 [ 39.949866] panic+0x39d/0x940 [ 39.953052] ? copy_siginfo_to_user+0x383/0x1270 [ 39.957786] kmsan_report+0x260/0x260 [ 39.961562] __msan_warning_32+0x6e/0xc0 [ 39.965598] copy_siginfo_to_user+0x383/0x1270 [ 39.970157] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 39.975496] ptrace_request+0x1d6a/0x20e0 [ 39.979617] ? __msan_poison_alloca+0x15c/0x1d0 [ 39.984258] ? wait_task_inactive+0x21b/0x990 [ 39.988728] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 39.993372] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 39.998798] ? wait_task_inactive+0x7df/0x990 [ 40.003271] arch_ptrace+0x1f6/0x1230 [ 40.007053] ? ptrace_check_attach+0x182/0x5e0 [ 40.011608] __se_sys_ptrace+0x309/0x850 [ 40.015645] __x64_sys_ptrace+0x11e/0x170 [ 40.019770] do_syscall_64+0x152/0x230 [ 40.023633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 40.028795] RIP: 0033:0x455a09 [ 40.031958] RSP: 002b:00007ffea3dc1b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 40.039638] RAX: ffffffffffffffda RBX: 0000000001d00914 RCX: 0000000000455a09 [ 40.046881] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 40.054124] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 40.061368] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 40.068611] R13: 000000000000052c R14: 00000000006fbcc0 R15: 0000000000009e4a [ 40.076351] Dumping ftrace buffer: [ 40.079864] (ftrace buffer empty) [ 40.083546] Kernel Offset: disabled [ 40.087149] Rebooting in 86400 seconds..