[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.309594] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.974200] random: sshd: uninitialized urandom read (32 bytes read) [ 34.272929] random: sshd: uninitialized urandom read (32 bytes read) [ 35.392638] random: sshd: uninitialized urandom read (32 bytes read) [ 107.574313] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. [ 113.039082] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/03 13:34:40 parsed 1 programs 2018/06/03 13:34:40 executed programs: 0 [ 113.589880] IPVS: ftp: loaded support on port[0] = 21 [ 113.605316] IPVS: ftp: loaded support on port[0] = 21 [ 113.629552] IPVS: ftp: loaded support on port[0] = 21 [ 113.648011] IPVS: ftp: loaded support on port[0] = 21 [ 113.656772] IPVS: ftp: loaded support on port[0] = 21 [ 113.659122] IPVS: ftp: loaded support on port[0] = 21 [ 113.669423] IPVS: ftp: loaded support on port[0] = 21 [ 113.684238] IPVS: ftp: loaded support on port[0] = 21 [ 113.937862] ip (4558) used greatest stack depth: 54424 bytes left [ 114.113345] ip (4589) used greatest stack depth: 54040 bytes left [ 114.444056] ================================================================== [ 114.451552] BUG: KMSAN: uninit-value in __list_add_valid+0x1b8/0x450 [ 114.458028] CPU: 0 PID: 4656 Comm: ip Not tainted 4.17.0-rc5+ #103 [ 114.464333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.473670] Call Trace: [ 114.476236] [ 114.478373] dump_stack+0x185/0x1d0 [ 114.481978] ? __list_add_valid+0x1b8/0x450 [ 114.486275] kmsan_report+0x149/0x260 [ 114.490065] __msan_warning_32+0x6e/0xc0 [ 114.494111] __list_add_valid+0x1b8/0x450 [ 114.498236] enqueue_task_fair+0xe02/0x4470 [ 114.502532] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 114.507870] ? update_load_avg+0x2cc0/0x2cc0 [ 114.512255] try_to_wake_up+0x1430/0x20b0 [ 114.516384] wake_up_process+0x34/0x40 [ 114.520246] swake_up+0xfb/0x3b0 [ 114.523584] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 114.529011] rcu_report_qs_rnp+0x767/0x880 [ 114.533309] rcu_process_callbacks+0x932/0x2000 [ 114.537955] ? rcu_scheduler_starting+0xe0/0xe0 [ 114.542601] __do_softirq+0x56d/0x93d [ 114.546376] do_softirq_own_stack+0x2a/0x40 [ 114.550666] [ 114.552877] __local_bh_enable_ip+0x114/0x140 [ 114.557356] _raw_spin_unlock_bh+0x57/0x70 [ 114.561565] igmp6_group_added+0x2f7/0xa00 [ 114.565772] ipv6_dev_mc_inc+0xe9e/0x1130 [ 114.569893] ipv6_add_dev+0x1d5b/0x1ee0 [ 114.573844] addrconf_notify+0x8f0/0x58f0 [ 114.577963] ? __msan_poison_alloca+0x15c/0x1d0 [ 114.582607] ? _cond_resched+0x3c/0xd0 [ 114.586471] ? rcu_all_qs+0x32/0x1f0 [ 114.590161] ? _cond_resched+0x3c/0xd0 [ 114.594022] ? rcu_all_qs+0x32/0x1f0 [ 114.597709] ? mutex_lock+0x31/0x90 [ 114.601420] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 114.606756] ? ip6mr_device_event+0x35f/0x3d0 [ 114.611236] ? dev_forward_change+0xb60/0xb60 [ 114.615716] raw_notifier_call_chain+0x13b/0x250 [ 114.620445] register_netdevice+0x211c/0x26c0 [ 114.624919] veth_newlink+0x1186/0x1480 [ 114.628875] ? veth_validate+0x340/0x340 [ 114.632907] rtnl_newlink+0x272d/0x37a0 [ 114.636863] ? rtnl_newlink+0xca5/0x37a0 [ 114.640907] ? rtnl_setlink+0x770/0x770 [ 114.644855] rtnetlink_rcv_msg+0xa32/0x1560 [ 114.649964] ? do_syscall_64+0x152/0x230 [ 114.654005] ? netlink_sendmsg+0x76e/0x1350 [ 114.658301] ? ___sys_sendmsg+0xec0/0x1310 [ 114.662507] ? __x64_sys_sendmsg+0x331/0x460 [ 114.666886] ? do_syscall_64+0x152/0x230 [ 114.670936] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.676284] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 114.681621] ? lookup_fast+0xbf3/0x1780 [ 114.685570] ? kmsan_set_origin_inline+0x6b/0x120 [ 114.690393] ? kmsan_set_origin+0x9e/0x160 [ 114.694602] netlink_rcv_skb+0x378/0x600 [ 114.698637] ? rtnetlink_bind+0x120/0x120 [ 114.702758] rtnetlink_rcv+0x50/0x60 [ 114.706443] netlink_unicast+0x1678/0x1750 [ 114.710653] ? rtnetlink_net_exit+0xa0/0xa0 [ 114.714964] netlink_sendmsg+0x104f/0x1350 [ 114.719176] ? netlink_getsockopt+0xc80/0xc80 [ 114.723647] ___sys_sendmsg+0xec0/0x1310 [ 114.727682] ? __fdget+0x4e/0x60 [ 114.731021] ? __fget_light+0x57/0x700 [ 114.734878] ? __fdget+0x4e/0x60 [ 114.738214] ? __fget_light+0x1dc/0x700 [ 114.742161] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 114.747498] ? __fget_light+0x1f5/0x700 [ 114.751450] __x64_sys_sendmsg+0x331/0x460 [ 114.755669] do_syscall_64+0x152/0x230 [ 114.759540] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.764704] RIP: 0033:0x7f7495e12320 [ 114.768387] RSP: 002b:00007ffdd3fde5e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.776069] RAX: ffffffffffffffda RBX: 00007ffdd3fe26e0 RCX: 00007f7495e12320 [ 114.783312] RDX: 0000000000000000 RSI: 00007ffdd3fde620 RDI: 0000000000000003 [ 114.790553] RBP: 00007ffdd3fde620 R08: 0000000000000000 R09: 00007f7495e58070 [ 114.797796] R10: 0000000000000000 R11: 0000000000000246 R12: 000000005b13ee73 [ 114.805042] R13: 0000000000000000 R14: 00000000006395c0 R15: 00007ffdd3fe2ec0 [ 114.812286] [ 114.813884] Uninit was stored to memory at: [ 114.818200] kmsan_internal_chain_origin+0x12b/0x210 [ 114.823361] __msan_chain_origin+0x69/0xc0 [ 114.827570] pick_next_task_fair+0x2464/0x2520 [ 114.832123] pick_next_task+0x1b1/0x410 [ 114.836071] __schedule+0x20b/0x730 [ 114.839671] do_task_dead+0xc8/0xf0 [ 114.843278] do_exit+0x340e/0x38d0 [ 114.846793] do_group_exit+0x1a0/0x360 [ 114.850650] __do_sys_exit_group+0x21/0x30 [ 114.854856] __se_sys_exit_group+0x14/0x20 [ 114.859062] __x64_sys_exit_group+0x4c/0x50 [ 114.863356] do_syscall_64+0x152/0x230 [ 114.867227] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.872386] Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave [ 114.879889] Variable was created at: [ 114.883576] _raw_spin_lock_irqsave+0x45/0xf0 [ 114.888056] do_task_dead+0x40/0xf0 [ 114.891652] ================================================================== [ 114.898981] Disabling lock debugging due to kernel taint [ 114.904398] Kernel panic - not syncing: panic_on_warn set ... [ 114.904398] [ 114.911735] CPU: 0 PID: 4656 Comm: ip Tainted: G B 4.17.0-rc5+ #103 [ 114.919411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.928736] Call Trace: [ 114.931296] [ 114.933421] dump_stack+0x185/0x1d0 [ 114.937025] panic+0x39d/0x940 [ 114.940199] ? __list_add_valid+0x1b8/0x450 [ 114.944502] kmsan_report+0x260/0x260 [ 114.948277] __msan_warning_32+0x6e/0xc0 [ 114.952313] __list_add_valid+0x1b8/0x450 [ 114.956435] enqueue_task_fair+0xe02/0x4470 [ 114.960732] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 114.966068] ? update_load_avg+0x2cc0/0x2cc0 [ 114.970451] try_to_wake_up+0x1430/0x20b0 [ 114.974572] wake_up_process+0x34/0x40 [ 114.978432] swake_up+0xfb/0x3b0 [ 114.981859] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 114.987402] rcu_report_qs_rnp+0x767/0x880 [ 114.991613] rcu_process_callbacks+0x932/0x2000 [ 114.996271] ? rcu_scheduler_starting+0xe0/0xe0 [ 115.000912] __do_softirq+0x56d/0x93d [ 115.004688] do_softirq_own_stack+0x2a/0x40 [ 115.008987] [ 115.011199] __local_bh_enable_ip+0x114/0x140 [ 115.015666] _raw_spin_unlock_bh+0x57/0x70 [ 115.019932] igmp6_group_added+0x2f7/0xa00 [ 115.024304] ipv6_dev_mc_inc+0xe9e/0x1130 [ 115.028426] ipv6_add_dev+0x1d5b/0x1ee0 [ 115.032379] addrconf_notify+0x8f0/0x58f0 [ 115.036601] ? __msan_poison_alloca+0x15c/0x1d0 [ 115.041244] ? _cond_resched+0x3c/0xd0 [ 115.045106] ? rcu_all_qs+0x32/0x1f0 [ 115.048793] ? _cond_resched+0x3c/0xd0 [ 115.052653] ? rcu_all_qs+0x32/0x1f0 [ 115.056338] ? mutex_lock+0x31/0x90 [ 115.059940] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 115.065276] ? ip6mr_device_event+0x35f/0x3d0 [ 115.069746] ? dev_forward_change+0xb60/0xb60 [ 115.074217] raw_notifier_call_chain+0x13b/0x250 [ 115.078945] register_netdevice+0x211c/0x26c0 [ 115.083425] veth_newlink+0x1186/0x1480 [ 115.087379] ? veth_validate+0x340/0x340 [ 115.091412] rtnl_newlink+0x272d/0x37a0 [ 115.095357] ? rtnl_newlink+0xca5/0x37a0 [ 115.099416] ? rtnl_setlink+0x770/0x770 [ 115.103364] rtnetlink_rcv_msg+0xa32/0x1560 [ 115.107660] ? do_syscall_64+0x152/0x230 [ 115.111693] ? netlink_sendmsg+0x76e/0x1350 [ 115.115999] ? ___sys_sendmsg+0xec0/0x1310 [ 115.120216] ? __x64_sys_sendmsg+0x331/0x460 [ 115.124758] ? do_syscall_64+0x152/0x230 [ 115.128793] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.134137] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 115.139482] ? lookup_fast+0xbf3/0x1780 [ 115.143440] ? kmsan_set_origin_inline+0x6b/0x120 [ 115.148265] ? kmsan_set_origin+0x9e/0x160 [ 115.152491] netlink_rcv_skb+0x378/0x600 [ 115.156533] ? rtnetlink_bind+0x120/0x120 [ 115.160661] rtnetlink_rcv+0x50/0x60 [ 115.164355] netlink_unicast+0x1678/0x1750 [ 115.168572] ? rtnetlink_net_exit+0xa0/0xa0 [ 115.172879] netlink_sendmsg+0x104f/0x1350 [ 115.177101] ? netlink_getsockopt+0xc80/0xc80 [ 115.181594] ___sys_sendmsg+0xec0/0x1310 [ 115.185636] ? __fdget+0x4e/0x60 [ 115.188981] ? __fget_light+0x57/0x700 [ 115.192848] ? __fdget+0x4e/0x60 [ 115.196196] ? __fget_light+0x1dc/0x700 [ 115.200156] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 115.205614] ? __fget_light+0x1f5/0x700 [ 115.209590] __x64_sys_sendmsg+0x331/0x460 [ 115.213905] do_syscall_64+0x152/0x230 [ 115.217896] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.223081] RIP: 0033:0x7f7495e12320 [ 115.226797] RSP: 002b:00007ffdd3fde5e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.234498] RAX: ffffffffffffffda RBX: 00007ffdd3fe26e0 RCX: 00007f7495e12320 [ 115.241760] RDX: 0000000000000000 RSI: 00007ffdd3fde620 RDI: 0000000000000003 [ 115.249028] RBP: 00007ffdd3fde620 R08: 0000000000000000 R09: 00007f7495e58070 [ 115.256289] R10: 0000000000000000 R11: 0000000000000246 R12: 000000005b13ee73 [ 115.263542] R13: 0000000000000000 R14: 00000000006395c0 R15: 00007ffdd3fe2ec0 [ 116.433233] Shutting down cpus with NMI [ 116.449484] Dumping ftrace buffer: [ 116.453010] (ftrace buffer empty) [ 116.456697] Kernel Offset: disabled [ 116.460306] Rebooting in 86400 seconds..