[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.082119] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.042490] random: sshd: uninitialized urandom read (32 bytes read) [ 32.368209] random: sshd: uninitialized urandom read (32 bytes read) [ 33.432471] random: sshd: uninitialized urandom read (32 bytes read) [ 33.641611] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. [ 39.040366] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/19 03:08:12 parsed 1 programs 2018/05/19 03:08:12 executed programs: 0 [ 39.590838] IPVS: ftp: loaded support on port[0] = 21 [ 39.753172] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.759572] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.766909] device bridge_slave_0 entered promiscuous mode [ 39.788702] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.795132] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.802421] device bridge_slave_1 entered promiscuous mode [ 39.823270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 39.844095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 39.899953] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.922958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.008420] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.015630] team0: Port device team_slave_0 added [ 40.035416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.042600] team0: Port device team_slave_1 added [ 40.062643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.085401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.103445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.104951] ip (4566) used greatest stack depth: 54376 bytes left [ 40.127938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.302738] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.309153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.315909] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.322299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.792190] ip (4657) used greatest stack depth: 54152 bytes left [ 40.962140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.026522] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.089181] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.095426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.103589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.162650] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.529680] ================================================================== [ 41.537097] BUG: KMSAN: uninit-value in copy_siginfo_to_user+0x397/0x1270 [ 41.544038] CPU: 0 PID: 4754 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #99 [ 41.551210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.560550] Call Trace: [ 41.563124] dump_stack+0x185/0x1d0 [ 41.566731] ? copy_siginfo_to_user+0x397/0x1270 [ 41.571463] kmsan_report+0x149/0x260 [ 41.575240] __msan_warning_32+0x6e/0xc0 [ 41.579278] copy_siginfo_to_user+0x397/0x1270 [ 41.583836] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 41.589196] ptrace_request+0x1d6a/0x20e0 [ 41.593337] ? wait_task_inactive+0x21b/0x990 [ 41.597813] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 41.602460] ? wait_task_inactive+0x21b/0x990 [ 41.606935] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 41.612369] ? wait_task_inactive+0x7df/0x990 [ 41.616848] arch_ptrace+0x1f6/0x1230 [ 41.620628] __se_sys_ptrace+0x309/0x850 [ 41.624668] __x64_sys_ptrace+0x11e/0x170 [ 41.628795] do_syscall_64+0x154/0x220 [ 41.632663] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 41.637828] RIP: 0033:0x455a09 [ 41.640991] RSP: 002b:00007ffcff1fa648 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 41.648679] RAX: ffffffffffffffda RBX: 0000000001d65914 RCX: 0000000000455a09 [ 41.655925] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 41.663192] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 41.670551] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 41.677799] R13: 000000000000052c R14: 00000000006fbcc0 R15: 000000000000a556 [ 41.685047] [ 41.686650] Local variable description: ----kiov@ptrace_request [ 41.692677] Variable was created at: [ 41.696377] ptrace_request+0x194/0x20e0 [ 41.700417] arch_ptrace+0x1f6/0x1230 [ 41.704196] ================================================================== [ 41.711527] Disabling lock debugging due to kernel taint [ 41.716951] Kernel panic - not syncing: panic_on_warn set ... [ 41.716951] [ 41.724292] CPU: 0 PID: 4754 Comm: syz-executor0 Tainted: G B 4.17.0-rc5+ #99 [ 41.733623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.742957] Call Trace: [ 41.745525] dump_stack+0x185/0x1d0 [ 41.749132] panic+0x39d/0x940 [ 41.752311] ? copy_siginfo_to_user+0x397/0x1270 [ 41.757055] kmsan_report+0x260/0x260 [ 41.760833] __msan_warning_32+0x6e/0xc0 [ 41.764871] copy_siginfo_to_user+0x397/0x1270 [ 41.769433] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 41.774786] ptrace_request+0x1d6a/0x20e0 [ 41.778911] ? wait_task_inactive+0x21b/0x990 [ 41.783385] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 41.788037] ? wait_task_inactive+0x21b/0x990 [ 41.792514] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 41.797947] ? wait_task_inactive+0x7df/0x990 [ 41.802429] arch_ptrace+0x1f6/0x1230 [ 41.806214] __se_sys_ptrace+0x309/0x850 [ 41.810255] __x64_sys_ptrace+0x11e/0x170 [ 41.814381] do_syscall_64+0x154/0x220 [ 41.818249] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 41.823417] RIP: 0033:0x455a09 [ 41.826581] RSP: 002b:00007ffcff1fa648 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 41.834270] RAX: ffffffffffffffda RBX: 0000000001d65914 RCX: 0000000000455a09 [ 41.841516] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 41.848762] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 41.856019] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 41.863274] R13: 000000000000052c R14: 00000000006fbcc0 R15: 000000000000a556 [ 41.870963] Dumping ftrace buffer: [ 41.874484] (ftrace buffer empty) [ 41.878169] Kernel Offset: disabled [ 41.881777] Rebooting in 86400 seconds..