[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.075398] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.404202] random: sshd: uninitialized urandom read (32 bytes read) [ 33.741791] random: sshd: uninitialized urandom read (32 bytes read) [ 34.838777] random: sshd: uninitialized urandom read (32 bytes read) [ 35.043815] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. [ 40.540688] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 40.649116] ================================================================== [ 40.656514] BUG: KMSAN: uninit-value in nfqnl_recv_config+0xb17/0x17c0 [ 40.663162] CPU: 1 PID: 4482 Comm: syz-executor508 Not tainted 4.17.0-rc5+ #102 [ 40.670630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.679968] Call Trace: [ 40.682545] dump_stack+0x185/0x1d0 [ 40.686169] ? nfqnl_recv_config+0xb17/0x17c0 [ 40.690648] kmsan_report+0x149/0x260 [ 40.694436] __msan_warning_32+0x6e/0xc0 [ 40.698482] nfqnl_recv_config+0xb17/0x17c0 [ 40.702783] ? mutex_lock+0x31/0x90 [ 40.706389] ? nfqnl_recv_verdict+0x2310/0x2310 [ 40.711035] nfnetlink_rcv_msg+0xb39/0xc80 [ 40.715252] netlink_rcv_skb+0x378/0x600 [ 40.719294] ? nfnetlink_bind+0x1d0/0x1d0 [ 40.723422] nfnetlink_rcv+0x2fe/0x680 [ 40.727288] ? nfnetlink_net_exit_batch+0x270/0x270 [ 40.732283] netlink_unicast+0x1678/0x1750 [ 40.736529] ? nfnetlink_net_exit_batch+0x270/0x270 [ 40.741531] netlink_sendmsg+0x104f/0x1350 [ 40.745748] ? netlink_getsockopt+0xc80/0xc80 [ 40.750221] ___sys_sendmsg+0xec0/0x1310 [ 40.754262] ? __fdget+0x4e/0x60 [ 40.757606] ? __fget_light+0x57/0x700 [ 40.761473] ? __fdget+0x4e/0x60 [ 40.764823] ? __fget_light+0x1dc/0x700 [ 40.768779] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 40.774118] ? __fget_light+0x1f5/0x700 [ 40.778421] __x64_sys_sendmsg+0x331/0x460 [ 40.782640] do_syscall_64+0x152/0x230 [ 40.786510] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 40.791679] RIP: 0033:0x43fd59 [ 40.794854] RSP: 002b:00007fffd73fd7b8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 40.802539] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd59 [ 40.809786] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 40.817034] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 40.824280] R10: 00000000004002c8 R11: 0000000000000213 R12: 0000000000401680 [ 40.831532] R13: 0000000000401710 R14: 0000000000000000 R15: 0000000000000000 [ 40.838786] [ 40.840390] Uninit was created at: [ 40.843910] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 40.848993] kmsan_kmalloc+0x94/0x100 [ 40.852771] kmsan_slab_alloc+0x10/0x20 [ 40.856720] __kmalloc_node_track_caller+0xb32/0x11b0 [ 40.861886] __alloc_skb+0x2cb/0x9e0 [ 40.865577] netlink_sendmsg+0x76e/0x1350 [ 40.869705] ___sys_sendmsg+0xec0/0x1310 [ 40.873744] __x64_sys_sendmsg+0x331/0x460 [ 40.877964] do_syscall_64+0x152/0x230 [ 40.881849] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 40.887012] ================================================================== [ 40.894344] Disabling lock debugging due to kernel taint [ 40.899770] Kernel panic - not syncing: panic_on_warn set ... [ 40.899770] [ 40.907112] CPU: 1 PID: 4482 Comm: syz-executor508 Tainted: G B 4.17.0-rc5+ #102 [ 40.915924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.925255] Call Trace: [ 40.927826] dump_stack+0x185/0x1d0 [ 40.931435] panic+0x39d/0x940 [ 40.934621] ? nfqnl_recv_config+0xb17/0x17c0 [ 40.939097] kmsan_report+0x260/0x260 [ 40.942884] __msan_warning_32+0x6e/0xc0 [ 40.946939] nfqnl_recv_config+0xb17/0x17c0 [ 40.951241] ? mutex_lock+0x31/0x90 [ 40.954847] ? nfqnl_recv_verdict+0x2310/0x2310 [ 40.959495] nfnetlink_rcv_msg+0xb39/0xc80 [ 40.963710] netlink_rcv_skb+0x378/0x600 [ 40.967758] ? nfnetlink_bind+0x1d0/0x1d0 [ 40.971882] nfnetlink_rcv+0x2fe/0x680 [ 40.975746] ? nfnetlink_net_exit_batch+0x270/0x270 [ 40.980743] netlink_unicast+0x1678/0x1750 [ 40.984959] ? nfnetlink_net_exit_batch+0x270/0x270 [ 40.989971] netlink_sendmsg+0x104f/0x1350 [ 40.994187] ? netlink_getsockopt+0xc80/0xc80 [ 40.998657] ___sys_sendmsg+0xec0/0x1310 [ 41.002698] ? __fdget+0x4e/0x60 [ 41.006048] ? __fget_light+0x57/0x700 [ 41.009911] ? __fdget+0x4e/0x60 [ 41.013251] ? __fget_light+0x1dc/0x700 [ 41.017205] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 41.022541] ? __fget_light+0x1f5/0x700 [ 41.026495] __x64_sys_sendmsg+0x331/0x460 [ 41.030709] do_syscall_64+0x152/0x230 [ 41.034579] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 41.039744] RIP: 0033:0x43fd59 [ 41.042909] RSP: 002b:00007fffd73fd7b8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 41.050593] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd59 [ 41.057842] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 41.065088] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 41.072336] R10: 00000000004002c8 R11: 0000000000000213 R12: 0000000000401680 [ 41.079589] R13: 0000000000401710 R14: 0000000000000000 R15: 0000000000000000 [ 41.087612] Dumping ftrace buffer: [ 41.091130] (ftrace buffer empty) [ 41.094823] Kernel Offset: disabled [ 41.098429] Rebooting in 86400 seconds..