[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.717327] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.611133] random: sshd: uninitialized urandom read (32 bytes read) [ 31.979728] random: sshd: uninitialized urandom read (32 bytes read) [ 33.126691] random: sshd: uninitialized urandom read (32 bytes read) [ 37.037443] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. [ 42.519715] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/14 09:50:59 parsed 1 programs [ 43.420742] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/14 09:51:00 executed programs: 0 [ 44.318567] IPVS: ftp: loaded support on port[0] = 21 [ 44.332235] IPVS: ftp: loaded support on port[0] = 21 [ 44.337376] IPVS: ftp: loaded support on port[0] = 21 [ 44.341730] IPVS: ftp: loaded support on port[0] = 21 [ 44.355511] IPVS: ftp: loaded support on port[0] = 21 [ 44.371542] IPVS: ftp: loaded support on port[0] = 21 [ 44.375370] IPVS: ftp: loaded support on port[0] = 21 [ 44.395952] IPVS: ftp: loaded support on port[0] = 21 [ 45.079252] ip (4702) used greatest stack depth: 54424 bytes left [ 45.312137] ip (4747) used greatest stack depth: 54344 bytes left [ 45.384455] ip (4764) used greatest stack depth: 54056 bytes left [ 45.438944] ================================================================== [ 45.446331] BUG: KMSAN: uninit-value in __list_add_valid+0x1b8/0x450 [ 45.452801] CPU: 0 PID: 4552 Comm: syz-executor0 Not tainted 4.17.0+ #6 [ 45.459524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.468852] Call Trace: [ 45.471415] dump_stack+0x185/0x1d0 [ 45.475017] kmsan_report+0x188/0x2a0 [ 45.478791] __msan_warning_32+0x70/0xc0 [ 45.482826] __list_add_valid+0x1b8/0x450 [ 45.486953] enqueue_task_fair+0xe12/0x4490 [ 45.491258] ? update_load_avg+0x2cc0/0x2cc0 [ 45.495645] wake_up_new_task+0xd34/0x1850 [ 45.499861] _do_fork+0x799/0xf60 [ 45.503292] __x64_sys_clone+0x15e/0x1b0 [ 45.507329] ? __ia32_sys_vfork+0x70/0x70 [ 45.511448] do_syscall_64+0x15b/0x230 [ 45.515309] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.520478] RIP: 0033:0x41f949 [ 45.523640] RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 45.531326] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f949 [ 45.538571] RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011 [ 45.545812] RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 0000000000000015 [ 45.553063] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fe60 [ 45.560308] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 45.567555] [ 45.569165] Uninit was stored to memory at: [ 45.573465] kmsan_internal_chain_origin+0x12b/0x210 [ 45.578541] __msan_chain_origin+0x69/0xc0 [ 45.582751] pick_next_task_fair+0x2474/0x2530 [ 45.587304] pick_next_task+0x1ba/0x420 [ 45.591253] __schedule+0x20f/0x770 [ 45.594855] do_task_dead+0xc8/0xf0 [ 45.598454] do_exit+0x347e/0x3930 [ 45.601967] do_group_exit+0x1a0/0x360 [ 45.605827] __do_sys_exit_group+0x21/0x30 [ 45.610035] __se_sys_exit_group+0x14/0x20 [ 45.614247] __x64_sys_exit_group+0x4c/0x50 [ 45.618537] do_syscall_64+0x15b/0x230 [ 45.622401] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.627560] Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave [ 45.635065] Variable was created at: [ 45.638751] _raw_spin_lock_irqsave+0x45/0xf0 [ 45.643228] do_task_dead+0x40/0xf0 [ 45.646821] ================================================================== [ 45.654148] Disabling lock debugging due to kernel taint [ 45.659574] Kernel panic - not syncing: panic_on_warn set ... [ 45.659574] [ 45.666911] CPU: 0 PID: 4552 Comm: syz-executor0 Tainted: G B 4.17.0+ #6 [ 45.675029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.684353] Call Trace: [ 45.686913] dump_stack+0x185/0x1d0 [ 45.690514] panic+0x3d0/0x990 [ 45.693683] kmsan_report+0x29e/0x2a0 [ 45.697459] __msan_warning_32+0x70/0xc0 [ 45.701495] __list_add_valid+0x1b8/0x450 [ 45.705626] enqueue_task_fair+0xe12/0x4490 [ 45.709926] ? update_load_avg+0x2cc0/0x2cc0 [ 45.714307] wake_up_new_task+0xd34/0x1850 [ 45.718519] _do_fork+0x799/0xf60 [ 45.721949] __x64_sys_clone+0x15e/0x1b0 [ 45.725984] ? __ia32_sys_vfork+0x70/0x70 [ 45.730105] do_syscall_64+0x15b/0x230 [ 45.733966] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.739127] RIP: 0033:0x41f949 [ 45.742301] RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 45.749982] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f949 [ 45.757226] RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011 [ 45.764469] RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 0000000000000015 [ 45.771724] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fe60 [ 45.778969] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 46.976046] Shutting down cpus with NMI [ 46.992462] Dumping ftrace buffer: [ 46.995999] (ftrace buffer empty) [ 46.999687] Kernel Offset: disabled [ 47.003295] Rebooting in 86400 seconds..