[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.404668] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.241621] random: sshd: uninitialized urandom read (32 bytes read) [ 34.579454] random: sshd: uninitialized urandom read (32 bytes read) [ 35.734728] random: sshd: uninitialized urandom read (32 bytes read) [ 90.493479] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. [ 96.137338] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/23 11:35:41 parsed 1 programs [ 97.392774] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/23 11:35:43 executed programs: 0 [ 98.429848] IPVS: ftp: loaded support on port[0] = 21 [ 98.695995] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.702427] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.709996] device bridge_slave_0 entered promiscuous mode [ 98.730181] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.736636] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.743754] device bridge_slave_1 entered promiscuous mode [ 98.763175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 98.783312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 98.807947] ip (4527) used greatest stack depth: 54328 bytes left [ 98.836909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.859386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.941313] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.948508] team0: Port device team_slave_0 added [ 98.967482] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.974645] team0: Port device team_slave_1 added [ 98.993856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.015604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.037522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.059306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.221079] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.227493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.234453] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.240818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.877097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.938784] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 99.999577] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 100.006135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.013324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.068741] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/23 11:35:48 executed programs: 172 2018/06/23 11:35:53 executed programs: 467 2018/06/23 11:35:58 executed programs: 758 2018/06/23 11:36:03 executed programs: 1048 2018/06/23 11:36:08 executed programs: 1344 2018/06/23 11:36:13 executed programs: 1634 2018/06/23 11:36:18 executed programs: 1920 2018/06/23 11:36:23 executed programs: 2206 2018/06/23 11:36:28 executed programs: 2494 2018/06/23 11:36:33 executed programs: 2781 2018/06/23 11:36:38 executed programs: 3068 2018/06/23 11:36:43 executed programs: 3359 2018/06/23 11:36:48 executed programs: 3641 2018/06/23 11:36:53 executed programs: 3925 2018/06/23 11:36:58 executed programs: 4207 [ 178.177218] ================================================================== [ 178.184632] BUG: KMSAN: uninit-value in update_cfs_rq_load_avg+0x1370/0x1aa0 [ 178.191801] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.17.0+ #9 [ 178.197920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.207250] Call Trace: [ 178.209811] [ 178.211949] dump_stack+0x185/0x1d0 [ 178.215559] kmsan_report+0x188/0x2a0 [ 178.219342] __msan_warning_32+0x70/0xc0 [ 178.223385] update_cfs_rq_load_avg+0x1370/0x1aa0 [ 178.228208] ? console_trylock+0x140/0x200 [ 178.232427] update_load_avg+0xe50/0x2cc0 [ 178.236557] ? run_rebalance_domains+0x2b0/0x320 [ 178.241293] ? update_curr+0x90/0x10a0 [ 178.245165] enqueue_task_fair+0x558/0x4490 [ 178.249468] ? __msan_metadata_ptr_for_store_4+0x10/0x20 [ 178.254903] ? update_load_avg+0x2cc0/0x2cc0 [ 178.259292] try_to_wake_up+0x162f/0x2260 [ 178.263424] wake_up_process+0x34/0x40 [ 178.267291] hrtimer_wakeup+0xac/0x100 [ 178.271174] __hrtimer_run_queues+0xc54/0x1630 [ 178.275741] ? hrtimer_init_sleeper+0xc0/0xc0 [ 178.280217] hrtimer_interrupt+0x451/0x13c0 [ 178.284519] ? tick_irq_enter+0x24f/0x3b0 [ 178.288653] ? __msan_poison_alloca+0x15c/0x1d0 [ 178.293306] ? trace_local_timer_entry+0x2f/0x1d0 [ 178.298131] ? hrtimer_init+0x5c0/0x5c0 [ 178.302085] local_apic_timer_interrupt+0x6b/0x250 [ 178.306997] smp_apic_timer_interrupt+0x5a/0x90 [ 178.311647] apic_timer_interrupt+0xf/0x20 [ 178.315859] [ 178.318081] RIP: 0010:default_idle+0x20b/0x3e0 [ 178.322638] RSP: 0018:ffff8801d8e5fdf0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 178.330328] RAX: ffff8801fd432f18 RBX: 0000000000000000 RCX: ffff880000000000 [ 178.337582] RDX: ffff8801fd032f18 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 178.344833] RBP: ffff8801d8e5fe28 R08: 0000000001080020 R09: 0000000000000002 [ 178.352084] R10: 0000000000000000 R11: ffffffff89fef830 R12: ffff8801d8e5fe8f [ 178.359335] R13: ffff8801d8da57c0 R14: ffff8801d8e5fe8c R15: ffff8801d8da6098 [ 178.366594] ? __cpuidle_text_start+0x8/0x8 [ 178.370903] ? __cpuidle_text_start+0x8/0x8 [ 178.375204] arch_cpu_idle+0x26/0x30 [ 178.378911] do_idle+0x36d/0x830 [ 178.382261] cpu_startup_entry+0x45/0x50 [ 178.386311] ? setup_APIC_timer+0x220/0x220 [ 178.390873] start_secondary+0x3c6/0x490 [ 178.395440] secondary_startup_64+0xa5/0xb0 [ 178.399747] [ 178.401351] Uninit was stored to memory at: [ 178.405654] kmsan_internal_chain_origin+0x12b/0x210 [ 178.410735] __msan_chain_origin+0x69/0xc0 [ 178.414970] dequeue_task_fair+0x14ea/0x3300 [ 178.419361] deactivate_task+0x560/0x7d0 [ 178.423408] __schedule+0x164/0x770 [ 178.427023] do_task_dead+0xc8/0xf0 [ 178.430637] do_exit+0x347e/0x3930 [ 178.434159] do_group_exit+0x1a0/0x360 [ 178.438030] get_signal+0x1405/0x1ec0 [ 178.441822] do_signal+0xb8/0x1d20 [ 178.445355] prepare_exit_to_usermode+0x271/0x3a0 [ 178.450185] syscall_return_slowpath+0xe9/0x710 [ 178.454831] do_syscall_64+0x1ad/0x230 [ 178.458701] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 178.463864] [ 178.465470] Uninit was stored to memory at: [ 178.469782] kmsan_internal_chain_origin+0x12b/0x210 [ 178.474863] __msan_chain_origin+0x69/0xc0 [ 178.479075] reweight_entity+0x128b/0x1a30 [ 178.483288] task_tick_fair+0x5f8/0x1050 [ 178.487331] scheduler_tick+0x28d/0x490 [ 178.491285] update_process_times+0x157/0x1a0 [ 178.495758] tick_sched_timer+0x3ba/0x520 [ 178.499884] __hrtimer_run_queues+0xc54/0x1630 [ 178.504451] hrtimer_interrupt+0x451/0x13c0 [ 178.508751] local_apic_timer_interrupt+0x6b/0x250 [ 178.513659] smp_apic_timer_interrupt+0x5a/0x90 [ 178.518298] [ 178.519905] Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave [ 178.527411] Variable was created at: [ 178.531104] _raw_spin_lock_irqsave+0x45/0xf0 [ 178.535576] hrtimer_interrupt+0x107/0x13c0 [ 178.539869] ================================================================== [ 178.547201] Disabling lock debugging due to kernel taint [ 178.552629] Kernel panic - not syncing: panic_on_warn set ... [ 178.552629] [ 178.559972] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 4.17.0+ #9 [ 178.567481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.576820] Call Trace: [ 178.579379] [ 178.581510] dump_stack+0x185/0x1d0 [ 178.585119] panic+0x3d0/0x990 [ 178.588299] kmsan_report+0x29e/0x2a0 [ 178.592078] __msan_warning_32+0x70/0xc0 [ 178.596123] update_cfs_rq_load_avg+0x1370/0x1aa0 [ 178.600948] ? console_trylock+0x140/0x200 [ 178.605166] update_load_avg+0xe50/0x2cc0 [ 178.609296] ? run_rebalance_domains+0x2b0/0x320 [ 178.614034] ? update_curr+0x90/0x10a0 [ 178.617909] enqueue_task_fair+0x558/0x4490 [ 178.622215] ? __msan_metadata_ptr_for_store_4+0x10/0x20 [ 178.627650] ? update_load_avg+0x2cc0/0x2cc0 [ 178.632036] try_to_wake_up+0x162f/0x2260 [ 178.636168] wake_up_process+0x34/0x40 [ 178.640037] hrtimer_wakeup+0xac/0x100 [ 178.643921] __hrtimer_run_queues+0xc54/0x1630 [ 178.648489] ? hrtimer_init_sleeper+0xc0/0xc0 [ 178.652969] hrtimer_interrupt+0x451/0x13c0 [ 178.657273] ? tick_irq_enter+0x24f/0x3b0 [ 178.661406] ? __msan_poison_alloca+0x15c/0x1d0 [ 178.666055] ? trace_local_timer_entry+0x2f/0x1d0 [ 178.670888] ? hrtimer_init+0x5c0/0x5c0 [ 178.674847] local_apic_timer_interrupt+0x6b/0x250 [ 178.679763] smp_apic_timer_interrupt+0x5a/0x90 [ 178.684412] apic_timer_interrupt+0xf/0x20 [ 178.688623] [ 178.690843] RIP: 0010:default_idle+0x20b/0x3e0 [ 178.695403] RSP: 0018:ffff8801d8e5fdf0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 178.703092] RAX: ffff8801fd432f18 RBX: 0000000000000000 RCX: ffff880000000000 [ 178.710357] RDX: ffff8801fd032f18 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 178.717608] RBP: ffff8801d8e5fe28 R08: 0000000001080020 R09: 0000000000000002 [ 178.724860] R10: 0000000000000000 R11: ffffffff89fef830 R12: ffff8801d8e5fe8f [ 178.732808] R13: ffff8801d8da57c0 R14: ffff8801d8e5fe8c R15: ffff8801d8da6098 [ 178.740083] ? __cpuidle_text_start+0x8/0x8 [ 178.744474] ? __cpuidle_text_start+0x8/0x8 [ 178.748785] arch_cpu_idle+0x26/0x30 [ 178.752477] do_idle+0x36d/0x830 [ 178.755830] cpu_startup_entry+0x45/0x50 [ 178.759872] ? setup_APIC_timer+0x220/0x220 [ 178.764178] start_secondary+0x3c6/0x490 [ 178.768219] secondary_startup_64+0xa5/0xb0 [ 179.917267] Shutting down cpus with NMI [ 179.933211] Dumping ftrace buffer: [ 179.936741] (ftrace buffer empty) [ 179.940435] Kernel Offset: disabled [ 179.944043] Rebooting in 86400 seconds..