[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 31.310819] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.821538] random: sshd: uninitialized urandom read (32 bytes read) [ 36.364512] random: sshd: uninitialized urandom read (32 bytes read) [ 37.419407] random: sshd: uninitialized urandom read (32 bytes read) [ 37.628797] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. [ 43.045829] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/22 13:03:03 parsed 1 programs 2018/05/22 13:03:03 executed programs: 0 [ 43.645333] IPVS: ftp: loaded support on port[0] = 21 [ 43.819449] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.825900] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.833363] device bridge_slave_0 entered promiscuous mode [ 43.854954] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.861419] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.868811] device bridge_slave_1 entered promiscuous mode [ 43.889823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.911384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.937598] ip (4564) used greatest stack depth: 54408 bytes left [ 43.973331] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.997727] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.090330] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.097816] team0: Port device team_slave_0 added [ 44.118304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.125584] team0: Port device team_slave_1 added [ 44.146351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.165553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.167136] ip (4587) used greatest stack depth: 54104 bytes left [ 44.192589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.211691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.388702] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.395162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.401925] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.408349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.063871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.128858] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.192140] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.198354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.206590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.264776] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.635864] ================================================================== [ 45.643299] BUG: KMSAN: uninit-value in copy_siginfo_to_user+0x383/0x1270 [ 45.650225] CPU: 0 PID: 4776 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #102 [ 45.657489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.666827] Call Trace: [ 45.669402] dump_stack+0x185/0x1d0 [ 45.673032] ? copy_siginfo_to_user+0x383/0x1270 [ 45.677784] kmsan_report+0x149/0x260 [ 45.681575] __msan_warning_32+0x6e/0xc0 [ 45.685619] copy_siginfo_to_user+0x383/0x1270 [ 45.690199] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 45.695548] ptrace_request+0x1d6a/0x20e0 [ 45.699678] ? __msan_poison_alloca+0x15c/0x1d0 [ 45.704332] ? wait_task_inactive+0x21b/0x990 [ 45.708812] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 45.713465] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 45.718901] ? wait_task_inactive+0x7df/0x990 [ 45.723392] arch_ptrace+0x1f6/0x1230 [ 45.727184] ? ptrace_check_attach+0x182/0x5e0 [ 45.731767] __se_sys_ptrace+0x309/0x850 [ 45.735817] __x64_sys_ptrace+0x11e/0x170 [ 45.739949] do_syscall_64+0x152/0x230 [ 45.743823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.748996] RIP: 0033:0x455a09 [ 45.752175] RSP: 002b:00007ffd18cd3848 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 45.759868] RAX: ffffffffffffffda RBX: 000000000114f914 RCX: 0000000000455a09 [ 45.767127] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 45.774386] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 45.781639] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 45.788890] R13: 000000000000052c R14: 00000000006fbcc0 R15: 000000000000b55f [ 45.796148] [ 45.797760] Local variable description: ----kiov@ptrace_request [ 45.803799] Variable was created at: [ 45.807514] ptrace_request+0x194/0x20e0 [ 45.811575] arch_ptrace+0x1f6/0x1230 [ 45.815352] ================================================================== [ 45.822695] Disabling lock debugging due to kernel taint [ 45.828149] Kernel panic - not syncing: panic_on_warn set ... [ 45.828149] [ 45.835495] CPU: 0 PID: 4776 Comm: syz-executor0 Tainted: G B 4.17.0-rc5+ #102 [ 45.844138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.853474] Call Trace: [ 45.856066] dump_stack+0x185/0x1d0 [ 45.859697] panic+0x39d/0x940 [ 45.862883] ? copy_siginfo_to_user+0x383/0x1270 [ 45.867630] kmsan_report+0x260/0x260 [ 45.871416] __msan_warning_32+0x6e/0xc0 [ 45.875463] copy_siginfo_to_user+0x383/0x1270 [ 45.880039] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 45.885398] ptrace_request+0x1d6a/0x20e0 [ 45.889525] ? __msan_poison_alloca+0x15c/0x1d0 [ 45.894176] ? wait_task_inactive+0x21b/0x990 [ 45.898651] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 45.903303] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 45.908745] ? wait_task_inactive+0x7df/0x990 [ 45.913224] arch_ptrace+0x1f6/0x1230 [ 45.917021] ? ptrace_check_attach+0x182/0x5e0 [ 45.921594] __se_sys_ptrace+0x309/0x850 [ 45.925637] __x64_sys_ptrace+0x11e/0x170 [ 45.929776] do_syscall_64+0x152/0x230 [ 45.933654] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.938832] RIP: 0033:0x455a09 [ 45.942003] RSP: 002b:00007ffd18cd3848 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 45.949708] RAX: ffffffffffffffda RBX: 000000000114f914 RCX: 0000000000455a09 [ 45.956969] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 45.964223] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 45.971476] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 45.978739] R13: 000000000000052c R14: 00000000006fbcc0 R15: 000000000000b55f [ 45.986602] Dumping ftrace buffer: [ 45.990139] (ftrace buffer empty) [ 45.993828] Kernel Offset: disabled [ 45.997438] Rebooting in 86400 seconds..