[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.521502] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.311182] random: sshd: uninitialized urandom read (32 bytes read) [ 31.645397] random: sshd: uninitialized urandom read (32 bytes read) [ 32.693393] random: sshd: uninitialized urandom read (32 bytes read) [ 32.900906] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.46' (ECDSA) to the list of known hosts. [ 38.390488] random: sshd: uninitialized urandom read (32 bytes read) [ 38.453511] Not allocated shadow for addr ffff8801d39dc000 (page ffffea000af5b280) [ 38.461233] Attempted to access 270 bytes [ 38.465473] ------------[ cut here ]------------ [ 38.470208] kernel BUG at mm/kmsan/kmsan.c:1341! [ 38.474942] invalid opcode: 0000 [#1] SMP PTI [ 38.479409] Dumping ftrace buffer: [ 38.482927] (ftrace buffer empty) [ 38.486610] Modules linked in: [ 38.489787] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.17.0-rc3+ #94 [ 38.496336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.505676] RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 [ 38.511271] RSP: 0018:ffff88021fc0e3c0 EFLAGS: 00010082 [ 38.516613] RAX: 000000000000001d RBX: 0000000000000740 RCX: 0000000000000000 [ 38.523856] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 38.531101] RBP: ffff88021fc0e3d8 R08: 0000000000000000 R09: 0000000000000001 [ 38.538345] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d39dc000 [ 38.545616] R13: 000000000000010e R14: 0000000000000001 R15: 000000000000010e [ 38.552868] FS: 0000000000000000(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 38.561072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.566926] CR2: 00005593057334b8 CR3: 000000019cac8000 CR4: 00000000001406f0 [ 38.574175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.581421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.588670] Call Trace: [ 38.591228] [ 38.593359] kmsan_internal_unpoison_shadow+0x5c/0xe0 [ 38.598524] kmsan_unpoison_shadow+0x66/0xb0 [ 38.602907] virtqueue_get_buf_ctx+0x742/0xa20 [ 38.607468] virtqueue_get_buf+0x72/0x90 [ 38.611504] start_xmit+0x293/0x29a0 [ 38.615195] ? packet_rcv+0x21a0/0x21a0 [ 38.619145] ? virtnet_close+0x2c0/0x2c0 [ 38.623185] dev_hard_start_xmit+0x5f1/0xc70 [ 38.627570] sch_direct_xmit+0x540/0x8f0 [ 38.631606] __qdisc_run+0x1785/0x3730 [ 38.635470] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 38.640810] __dev_queue_xmit+0x1d50/0x3520 [ 38.645104] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 38.650446] dev_queue_xmit+0x4b/0x60 [ 38.654229] ip_finish_output2+0x12a1/0x1470 [ 38.658619] ip_finish_output+0xcb2/0xff0 [ 38.662742] ip_output+0x505/0x5d0 [ 38.666259] ? ip_mc_finish_output+0x3b0/0x3b0 [ 38.670819] ? ip_finish_output+0xff0/0xff0 [ 38.675117] ip_queue_xmit+0x1a1e/0x1d10 [ 38.679153] ? kmsan_set_origin_inline+0x6b/0x120 [ 38.683975] ? kmsan_set_origin+0x9e/0x160 [ 38.688186] ? ip_output+0x5d0/0x5d0 [ 38.691878] tcp_transmit_skb+0x3d81/0x53d0 [ 38.696182] tcp_send_ack+0x7e3/0x910 [ 38.699960] tcp_rcv_established+0x2ad0/0x2bb0 [ 38.704522] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 38.709861] tcp_v4_do_rcv+0x6cd/0xd90 [ 38.713725] tcp_v4_rcv+0x675c/0x6cd0 [ 38.717500] ? kmsan_set_origin_inline+0x6b/0x120 [ 38.722321] ? ip_local_deliver_finish+0x27b/0xec0 [ 38.727238] ? raw_local_deliver+0xe2/0x1660 [ 38.731623] ? ip_local_deliver+0x43c/0x4e0 [ 38.735921] ? tcp_filter+0x280/0x280 [ 38.739699] ip_local_deliver_finish+0x874/0xec0 [ 38.744439] ip_local_deliver+0x43c/0x4e0 [ 38.748563] ? ip_local_deliver+0x4e0/0x4e0 [ 38.752864] ? ip_call_ra_chain+0x7c0/0x7c0 [ 38.757163] ip_rcv_finish+0xa36/0x1d00 [ 38.761111] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 38.766450] ? nf_hook_slow+0x36f/0x3d0 [ 38.770411] ip_rcv+0x118f/0x16d0 [ 38.773838] ? ip_rcv+0x16d0/0x16d0 [ 38.777449] __netif_receive_skb_core+0x47df/0x4a90 [ 38.782443] ? ip_local_deliver_finish+0xec0/0xec0 [ 38.787356] netif_receive_skb_internal+0x49d/0x630 [ 38.792355] napi_gro_receive+0x6a2/0xb50 [ 38.796487] receive_buf+0x4be2/0x6700 [ 38.800351] ? kmsan_set_origin+0x9e/0x160 [ 38.804564] virtnet_poll+0x98c/0x1520 [ 38.808428] ? refill_work+0x2c0/0x2c0 [ 38.812288] net_rx_action+0x7c1/0x1a70 [ 38.816238] ? net_tx_action+0xab0/0xab0 [ 38.820275] __do_softirq+0x56d/0x93d [ 38.824054] irq_exit+0x202/0x240 [ 38.827482] exiting_irq+0xe/0x10 [ 38.830911] do_IRQ+0x17d/0x1c0 [ 38.834166] common_interrupt+0xf/0xf [ 38.837940] [ 38.840153] RIP: 0010:default_idle+0x1fb/0x3c0 [ 38.844708] RSP: 0018:ffffffff8ac0fd88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9 [ 38.852389] RAX: ffff8801fd431cf8 RBX: 0000000000000000 RCX: ffff880000000000 [ 38.859644] RDX: ffff8801fd031cf8 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 38.866893] RBP: ffffffff8ac0fdc0 R08: 0000000001080020 R09: 0000000000000002 [ 38.874139] R10: 00000008f7e94bc0 R11: 0000000000000000 R12: ffffffff8ac372c0 [ 38.881384] R13: ffffffff8ac37b98 R14: ffffffff8ac0fe24 R15: ffffffff8ac37b98 [ 38.888640] ? default_idle+0x6b/0x3c0 [ 38.892502] ? __cpuidle_text_start+0x8/0x8 [ 38.896804] arch_cpu_idle+0x20/0x30 [ 38.900493] do_idle+0x458/0x850 [ 38.903837] cpu_startup_entry+0x45/0x50 [ 38.907877] rest_init+0x1c1/0x1f0 [ 38.911394] ? time_init+0x30/0x30 [ 38.914912] start_kernel+0x10fa/0x1110 [ 38.918863] x86_64_start_kernel+0x2fa/0x310 [ 38.923249] secondary_startup_64+0xa5/0xb0 [ 38.927542] Code: 75 29 48 c7 c7 a4 fe 9f 8a 31 c0 e8 cd 29 83 ff 80 3c 25 f8 73 53 8b 00 75 11 48 c7 c7 d4 fe 9f 8a 31 c0 4c 89 fe e8 b2 29 83 ff <0f> 0b eb fe 48 3d ff ff ff 1f 0f 87 a2 fe ff ff 48 8b 1c 25 10 [ 38.946627] RIP: kmsan_get_shadow_address+0x1ce/0x1f0 RSP: ffff88021fc0e3c0 [ 38.953712] ---[ end trace f9fffdb8cb1ff02b ]--- [ 38.958439] Kernel panic - not syncing: Fatal exception in interrupt [ 38.965381] Dumping ftrace buffer: [ 38.968904] (ftrace buffer empty) [ 38.972597] Kernel Offset: disabled [ 38.976198] Rebooting in 86400 seconds..