[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 59.928095] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 64.468166] random: sshd: uninitialized urandom read (32 bytes read) [ 65.045721] random: sshd: uninitialized urandom read (32 bytes read) [ 66.439572] random: sshd: uninitialized urandom read (32 bytes read) [ 71.891877] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. [ 77.745580] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 78.030853] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 78.049102] ================================================================== [ 78.056476] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 78.064095] CPU: 0 PID: 6198 Comm: syz-executor881 Not tainted 4.19.0-rc4+ #64 [ 78.071444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.080791] Call Trace: [ 78.083382] dump_stack+0x306/0x460 [ 78.087004] ? vmx_set_constant_host_state+0x1778/0x1830 [ 78.092473] kmsan_report+0x1a2/0x2e0 [ 78.096291] __msan_warning+0x7c/0xe0 [ 78.100104] vmx_set_constant_host_state+0x1778/0x1830 [ 78.105449] vmx_create_vcpu+0x3e6f/0x7870 [ 78.109688] ? kmsan_set_origin_inline+0x6b/0x120 [ 78.114630] ? __msan_poison_alloca+0x17a/0x210 [ 78.119329] ? vmx_vm_init+0x340/0x340 [ 78.123215] kvm_arch_vcpu_create+0x25d/0x2f0 [ 78.127713] kvm_vm_ioctl+0x13fd/0x33d0 [ 78.131693] ? __msan_poison_alloca+0x17a/0x210 [ 78.136366] ? do_vfs_ioctl+0x18a/0x2810 [ 78.140422] ? __se_sys_ioctl+0x1da/0x270 [ 78.144563] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 78.149404] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 78.154314] do_vfs_ioctl+0xcf3/0x2810 [ 78.158218] ? security_file_ioctl+0x92/0x200 [ 78.162718] __se_sys_ioctl+0x1da/0x270 [ 78.166704] __x64_sys_ioctl+0x4a/0x70 [ 78.170593] do_syscall_64+0xbe/0x100 [ 78.174394] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 78.179573] RIP: 0033:0x440039 [ 78.182760] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 78.201656] RSP: 002b:00007ffdb3a76a28 EFLAGS: 00000217 ORIG_RAX: 0000000000000010 [ 78.209363] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440039 [ 78.216691] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 78.223961] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 78.231492] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004018c0 [ 78.238756] R13: 0000000000401950 R14: 0000000000000000 R15: 0000000000000000 [ 78.246029] [ 78.247646] Local variable description: ----dt@vmx_set_constant_host_state [ 78.254639] Variable was created at: [ 78.258346] vmx_set_constant_host_state+0x2b0/0x1830 [ 78.263525] vmx_create_vcpu+0x3e6f/0x7870 [ 78.267748] ================================================================== [ 78.275093] Disabling lock debugging due to kernel taint [ 78.280528] Kernel panic - not syncing: panic_on_warn set ... [ 78.280528] [ 78.287887] CPU: 0 PID: 6198 Comm: syz-executor881 Tainted: G B 4.19.0-rc4+ #64 [ 78.296622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.305970] Call Trace: [ 78.308560] dump_stack+0x306/0x460 [ 78.312197] panic+0x54c/0xafa [ 78.315417] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 78.320864] kmsan_report+0x2d3/0x2e0 [ 78.324669] __msan_warning+0x7c/0xe0 [ 78.328470] vmx_set_constant_host_state+0x1778/0x1830 [ 78.333751] vmx_create_vcpu+0x3e6f/0x7870 [ 78.337984] ? kmsan_set_origin_inline+0x6b/0x120 [ 78.342825] ? __msan_poison_alloca+0x17a/0x210 [ 78.347497] ? vmx_vm_init+0x340/0x340 [ 78.351380] kvm_arch_vcpu_create+0x25d/0x2f0 [ 78.355946] kvm_vm_ioctl+0x13fd/0x33d0 [ 78.359943] ? __msan_poison_alloca+0x17a/0x210 [ 78.364680] ? do_vfs_ioctl+0x18a/0x2810 [ 78.368743] ? __se_sys_ioctl+0x1da/0x270 [ 78.372887] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 78.377749] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 78.382592] do_vfs_ioctl+0xcf3/0x2810 [ 78.386492] ? security_file_ioctl+0x92/0x200 [ 78.390992] __se_sys_ioctl+0x1da/0x270 [ 78.394978] __x64_sys_ioctl+0x4a/0x70 [ 78.398864] do_syscall_64+0xbe/0x100 [ 78.402666] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 78.407852] RIP: 0033:0x440039 [ 78.411044] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 78.429942] RSP: 002b:00007ffdb3a76a28 EFLAGS: 00000217 ORIG_RAX: 0000000000000010 [ 78.437646] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440039 [ 78.444908] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 78.452182] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 78.459444] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004018c0 [ 78.466704] R13: 0000000000401950 R14: 0000000000000000 R15: 0000000000000000 [ 78.474932] Kernel Offset: disabled [ 78.478619] Rebooting in 86400 seconds..