[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 27.865930] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.329184] random: sshd: uninitialized urandom read (32 bytes read) [ 32.618983] random: sshd: uninitialized urandom read (32 bytes read) [ 33.664447] random: sshd: uninitialized urandom read (32 bytes read) [ 33.907597] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. [ 39.420505] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/29 01:13:24 parsed 1 programs 2018/05/29 01:13:24 executed programs: 0 [ 39.975380] IPVS: ftp: loaded support on port[0] = 21 [ 40.125292] ip (4482) used greatest stack depth: 54312 bytes left [ 40.140107] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.146522] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.153891] device bridge_slave_0 entered promiscuous mode [ 40.175252] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.181678] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.189313] device bridge_slave_1 entered promiscuous mode [ 40.209378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.230111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.286096] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.309189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.394380] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.401595] team0: Port device team_slave_0 added [ 40.421629] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.428848] team0: Port device team_slave_1 added [ 40.449592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.472012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.494685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.517666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.687618] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.694118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.700926] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.707376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.339450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.401938] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.464352] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.470568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.478745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.478871] ip (4649) used greatest stack depth: 54104 bytes left [ 41.544423] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.900007] ================================================================== [ 41.907436] BUG: KMSAN: uninit-value in copy_siginfo_to_user+0x383/0x1270 [ 41.914355] CPU: 0 PID: 4706 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #102 [ 41.921611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.930939] Call Trace: [ 41.933504] dump_stack+0x185/0x1d0 [ 41.937114] ? copy_siginfo_to_user+0x383/0x1270 [ 41.941847] kmsan_report+0x149/0x260 [ 41.945624] __msan_warning_32+0x6e/0xc0 [ 41.949671] copy_siginfo_to_user+0x383/0x1270 [ 41.954234] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 41.959574] ptrace_request+0x1d6a/0x20e0 [ 41.963695] ? __msan_poison_alloca+0x15c/0x1d0 [ 41.968341] ? wait_task_inactive+0x21b/0x990 [ 41.972811] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 41.977455] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 41.982893] ? wait_task_inactive+0x7df/0x990 [ 41.987368] arch_ptrace+0x1f6/0x1230 [ 41.991146] ? ptrace_check_attach+0x182/0x5e0 [ 41.995704] __se_sys_ptrace+0x309/0x850 [ 41.999747] __x64_sys_ptrace+0x11e/0x170 [ 42.003872] do_syscall_64+0x152/0x230 [ 42.007738] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 42.012902] RIP: 0033:0x455a09 [ 42.016186] RSP: 002b:00007ffcf9955368 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 42.023870] RAX: ffffffffffffffda RBX: 0000000001fd0914 RCX: 0000000000455a09 [ 42.031120] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 42.038374] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 42.045620] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 42.052865] R13: 000000000000052c R14: 00000000006fbcc0 R15: 000000000000a6c7 [ 42.060117] [ 42.061718] Local variable description: ----kiov@ptrace_request [ 42.067747] Variable was created at: [ 42.071446] ptrace_request+0x194/0x20e0 [ 42.075484] arch_ptrace+0x1f6/0x1230 [ 42.079256] ================================================================== [ 42.086585] Disabling lock debugging due to kernel taint [ 42.092009] Kernel panic - not syncing: panic_on_warn set ... [ 42.092009] [ 42.099359] CPU: 0 PID: 4706 Comm: syz-executor0 Tainted: G B 4.17.0-rc5+ #102 [ 42.108006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.117352] Call Trace: [ 42.119914] dump_stack+0x185/0x1d0 [ 42.123520] panic+0x39d/0x940 [ 42.126699] ? copy_siginfo_to_user+0x383/0x1270 [ 42.131431] kmsan_report+0x260/0x260 [ 42.135206] __msan_warning_32+0x6e/0xc0 [ 42.139246] copy_siginfo_to_user+0x383/0x1270 [ 42.143805] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 42.149146] ptrace_request+0x1d6a/0x20e0 [ 42.153279] ? __msan_poison_alloca+0x15c/0x1d0 [ 42.157925] ? wait_task_inactive+0x21b/0x990 [ 42.162408] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 42.167056] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 42.172484] ? wait_task_inactive+0x7df/0x990 [ 42.176959] arch_ptrace+0x1f6/0x1230 [ 42.180735] ? ptrace_check_attach+0x182/0x5e0 [ 42.185294] __se_sys_ptrace+0x309/0x850 [ 42.189332] __x64_sys_ptrace+0x11e/0x170 [ 42.193455] do_syscall_64+0x152/0x230 [ 42.197319] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 42.202484] RIP: 0033:0x455a09 [ 42.205651] RSP: 002b:00007ffcf9955368 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 42.213333] RAX: ffffffffffffffda RBX: 0000000001fd0914 RCX: 0000000000455a09 [ 42.220578] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 42.227832] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 42.235077] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 42.242324] R13: 000000000000052c R14: 00000000006fbcc0 R15: 000000000000a6c7 [ 42.250068] Dumping ftrace buffer: [ 42.253592] (ftrace buffer empty) [ 42.257276] Kernel Offset: disabled [ 42.260880] Rebooting in 86400 seconds..