[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.831495] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.540122] random: sshd: uninitialized urandom read (32 bytes read) [ 36.033377] random: sshd: uninitialized urandom read (32 bytes read) [ 37.184575] random: sshd: uninitialized urandom read (32 bytes read) [ 84.988787] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. [ 90.598294] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/10 21:56:45 parsed 1 programs [ 91.882529] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/10 21:56:47 executed programs: 0 [ 93.086844] IPVS: ftp: loaded support on port[0] = 21 [ 93.087903] IPVS: ftp: loaded support on port[0] = 21 [ 93.101740] IPVS: ftp: loaded support on port[0] = 21 [ 93.108371] IPVS: ftp: loaded support on port[0] = 21 [ 93.108970] IPVS: ftp: loaded support on port[0] = 21 [ 93.118517] IPVS: ftp: loaded support on port[0] = 21 [ 93.126128] IPVS: ftp: loaded support on port[0] = 21 [ 93.141626] IPVS: ftp: loaded support on port[0] = 21 [ 93.367526] ip (4550) used greatest stack depth: 54536 bytes left [ 93.711045] ================================================================== [ 93.718437] BUG: KMSAN: uninit-value in __list_add_valid+0x1b8/0x450 [ 93.724911] CPU: 1 PID: 4626 Comm: ip Not tainted 4.17.0+ #5 [ 93.730680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.740094] Call Trace: [ 93.742650] [ 93.744782] dump_stack+0x185/0x1d0 [ 93.748387] kmsan_report+0x188/0x2a0 [ 93.752165] __msan_warning_32+0x70/0xc0 [ 93.756201] __list_add_valid+0x1b8/0x450 [ 93.760327] enqueue_task_fair+0xe12/0x4490 [ 93.764690] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 93.770029] ? update_load_avg+0x2cc0/0x2cc0 [ 93.774417] try_to_wake_up+0x162f/0x2260 [ 93.778559] wake_up_process+0x34/0x40 [ 93.782425] process_timeout+0x59/0x70 [ 93.786290] call_timer_fn+0x280/0x5d0 [ 93.790151] ? run_local_timers+0x100/0x100 [ 93.794447] __run_timers+0xd96/0x11b0 [ 93.798326] ? run_local_timers+0x100/0x100 [ 93.802675] ? irq_exit+0x202/0x240 [ 93.806279] ? run_timer_softirq+0x14/0x70 [ 93.810576] ? timers_dead_cpu+0x1010/0x1010 [ 93.814957] run_timer_softirq+0x43/0x70 [ 93.818994] __do_softirq+0x592/0x979 [ 93.822770] irq_exit+0x202/0x240 [ 93.826199] exiting_irq+0xe/0x10 [ 93.829644] smp_apic_timer_interrupt+0x64/0x90 [ 93.834288] apic_timer_interrupt+0xf/0x20 [ 93.838502] [ 93.840724] RIP: 0010:kmsan_kmalloc+0xc6/0x100 [ 93.845278] RSP: 0018:ffff88019ec4fc60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 93.852959] RAX: 0000000000000246 RBX: ffff8801d86adc00 RCX: 000000000000002b [ 93.860215] RDX: 000000000000002a RSI: ffffea000b128128 RDI: ffff8801d86adc00 [ 93.867460] RBP: ffff88019ec4fca0 R08: 00000000010000c0 R09: 0000000000000003 [ 93.874715] R10: 0000000000000002 R11: ffffffff81c9aa40 R12: ffff88021f00dc80 [ 93.881962] R13: ffff8801a7979d40 R14: 00000000000000a8 R15: 00000000014000c0 [ 93.889213] ? __ia32_sys_faccessat+0x120/0x120 [ 93.893861] kmsan_slab_alloc+0x10/0x20 [ 93.897809] kmem_cache_alloc+0x68c/0xb70 [ 93.901935] ? prepare_creds+0x65/0x5e0 [ 93.905885] prepare_creds+0x65/0x5e0 [ 93.909660] ? do_faccessat+0x94/0xbc0 [ 93.913537] ? __x64_sys_access+0x9c/0xd0 [ 93.917670] ? __x64_sys_access+0x9c/0xd0 [ 93.921795] do_faccessat+0xed/0xbc0 [ 93.925486] ? kmsan_set_origin_inline+0x6b/0x120 [ 93.930301] ? __msan_poison_alloca+0x15c/0x1d0 [ 93.934944] __x64_sys_access+0x9c/0xd0 [ 93.938890] ? __ia32_sys_faccessat+0x120/0x120 [ 93.943534] do_syscall_64+0x15b/0x230 [ 93.947401] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 93.952578] RIP: 0033:0x7f8f03a1a267 [ 93.956261] RSP: 002b:00007ffceff87f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 93.963942] RAX: ffffffffffffffda RBX: 00000000004032f9 RCX: 00007f8f03a1a267 [ 93.971186] RDX: 000000000000001d RSI: 0000000000000000 RDI: 00007f8f03a1e2e6 [ 93.978431] RBP: 00007f8f03c1d000 R08: 00007f8f03c25570 R09: 0000000000000000 [ 93.985675] R10: 000000006ffffeff R11: 0000000000000246 R12: 00007f8f03c251c8 [ 93.992918] R13: 00007f8f03c1d718 R14: 00000000000033ef R15: 00007f8f03c25570 [ 94.000163] [ 94.001763] Uninit was stored to memory at: [ 94.006062] kmsan_internal_chain_origin+0x12b/0x210 [ 94.011224] __msan_chain_origin+0x69/0xc0 [ 94.015434] pick_next_task_fair+0x2474/0x2530 [ 94.020000] pick_next_task+0x1ba/0x420 [ 94.023951] __schedule+0x20f/0x770 [ 94.027555] do_task_dead+0xc8/0xf0 [ 94.031156] do_exit+0x347e/0x3930 [ 94.034672] do_group_exit+0x1a0/0x360 [ 94.038542] __do_sys_exit_group+0x21/0x30 [ 94.042754] __se_sys_exit_group+0x14/0x20 [ 94.046969] __x64_sys_exit_group+0x4c/0x50 [ 94.051270] do_syscall_64+0x15b/0x230 [ 94.055134] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.060295] Local variable description: ----tlb.i@ldt_arch_exit_mmap [ 94.066756] Variable was created at: [ 94.070443] ldt_arch_exit_mmap+0x46/0x160 [ 94.074652] exit_mmap+0x410/0x980 [ 94.078161] ================================================================== [ 94.085500] Disabling lock debugging due to kernel taint [ 94.090924] Kernel panic - not syncing: panic_on_warn set ... [ 94.090924] [ 94.098262] CPU: 1 PID: 4626 Comm: ip Tainted: G B 4.17.0+ #5 [ 94.105419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.114746] Call Trace: [ 94.117309] [ 94.119438] dump_stack+0x185/0x1d0 [ 94.123049] panic+0x3d0/0x990 [ 94.126224] kmsan_report+0x29e/0x2a0 [ 94.129998] __msan_warning_32+0x70/0xc0 [ 94.134032] __list_add_valid+0x1b8/0x450 [ 94.138164] enqueue_task_fair+0xe12/0x4490 [ 94.142462] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 94.147804] ? update_load_avg+0x2cc0/0x2cc0 [ 94.152195] try_to_wake_up+0x162f/0x2260 [ 94.156407] wake_up_process+0x34/0x40 [ 94.160287] process_timeout+0x59/0x70 [ 94.164170] call_timer_fn+0x280/0x5d0 [ 94.168056] ? run_local_timers+0x100/0x100 [ 94.172385] __run_timers+0xd96/0x11b0 [ 94.176287] ? run_local_timers+0x100/0x100 [ 94.180626] ? irq_exit+0x202/0x240 [ 94.184233] ? run_timer_softirq+0x14/0x70 [ 94.188443] ? timers_dead_cpu+0x1010/0x1010 [ 94.192835] run_timer_softirq+0x43/0x70 [ 94.196882] __do_softirq+0x592/0x979 [ 94.200671] irq_exit+0x202/0x240 [ 94.204189] exiting_irq+0xe/0x10 [ 94.207618] smp_apic_timer_interrupt+0x64/0x90 [ 94.212260] apic_timer_interrupt+0xf/0x20 [ 94.216477] [ 94.218692] RIP: 0010:kmsan_kmalloc+0xc6/0x100 [ 94.223254] RSP: 0018:ffff88019ec4fc60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 94.230936] RAX: 0000000000000246 RBX: ffff8801d86adc00 RCX: 000000000000002b [ 94.238201] RDX: 000000000000002a RSI: ffffea000b128128 RDI: ffff8801d86adc00 [ 94.245448] RBP: ffff88019ec4fca0 R08: 00000000010000c0 R09: 0000000000000003 [ 94.252781] R10: 0000000000000002 R11: ffffffff81c9aa40 R12: ffff88021f00dc80 [ 94.260025] R13: ffff8801a7979d40 R14: 00000000000000a8 R15: 00000000014000c0 [ 94.267364] ? __ia32_sys_faccessat+0x120/0x120 [ 94.272019] kmsan_slab_alloc+0x10/0x20 [ 94.275968] kmem_cache_alloc+0x68c/0xb70 [ 94.280092] ? prepare_creds+0x65/0x5e0 [ 94.284044] prepare_creds+0x65/0x5e0 [ 94.287826] ? do_faccessat+0x94/0xbc0 [ 94.291689] ? __x64_sys_access+0x9c/0xd0 [ 94.295811] ? __x64_sys_access+0x9c/0xd0 [ 94.299931] do_faccessat+0xed/0xbc0 [ 94.303623] ? kmsan_set_origin_inline+0x6b/0x120 [ 94.308442] ? __msan_poison_alloca+0x15c/0x1d0 [ 94.313108] __x64_sys_access+0x9c/0xd0 [ 94.317080] ? __ia32_sys_faccessat+0x120/0x120 [ 94.321741] do_syscall_64+0x15b/0x230 [ 94.325707] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.330874] RIP: 0033:0x7f8f03a1a267 [ 94.334573] RSP: 002b:00007ffceff87f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 94.342253] RAX: ffffffffffffffda RBX: 00000000004032f9 RCX: 00007f8f03a1a267 [ 94.349499] RDX: 000000000000001d RSI: 0000000000000000 RDI: 00007f8f03a1e2e6 [ 94.356744] RBP: 00007f8f03c1d000 R08: 00007f8f03c25570 R09: 0000000000000000 [ 94.363989] R10: 000000006ffffeff R11: 0000000000000246 R12: 00007f8f03c251c8 [ 94.371242] R13: 00007f8f03c1d718 R14: 00000000000033ef R15: 00007f8f03c25570 [ 95.469980] Shutting down cpus with NMI [ 95.486243] Dumping ftrace buffer: [ 95.489802] (ftrace buffer empty) [ 95.493508] Kernel Offset: disabled [ 95.497115] Rebooting in 86400 seconds..