[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 38.605285] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.640701] random: sshd: uninitialized urandom read (32 bytes read) [ 42.006693] random: sshd: uninitialized urandom read (32 bytes read) [ 42.921191] random: sshd: uninitialized urandom read (32 bytes read) [ 43.215826] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.11' (ECDSA) to the list of known hosts. [ 49.447977] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 53.462834] general protection fault: 0000 [#1] SMP PTI [ 53.468252] CPU: 0 PID: 4484 Comm: sshd Not tainted 4.18.0-rc8+ #34 [ 53.474655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.484030] RIP: 0010:__x86_indirect_thunk_r11+0x10/0x20 [ 53.489476] Code: 90 0f ae e8 eb f9 4c 89 14 24 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 90 0f ae e8 eb f9 4c 89 1c 24 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 [ 53.499795] PANIC: double fault, error_code: 0x0 [ 53.508912] RSP: 0018:ffff8801bccaf480 EFLAGS: 00010006 [ 53.513747] CPU: 1 PID: 4961 Comm: syz-executor612 Not tainted 4.18.0-rc8+ #34 [ 53.519062] RAX: 0000000000000000 RBX: ffff88021fc39090 RCX: ffff8801a1d3bb00 [ 53.519094] RDX: ffffffff8a1af000 RSI: 0000000000000002 RDI: ffff8801bccaf4f8 [ 53.526451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.533701] RBP: ffff8801bccaf610 R08: 0000000000000000 R09: ffff88021fc39090 [ 53.533733] R10: 0000000000000000 R11: 4c000000a8be0000 R12: ffffffff8119870e [ 53.541044] RIP: 0010:task_kmsan_context_state+0x0/0x110 [ 53.550339] R13: 0000000000000000 R14: 4c000000a8be0000 R15: 0000000000000000 [ 53.550375] FS: 00007f7219f277c0(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 53.557631] Code: [ 53.564889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.564920] CR2: 000000000000125c CR3: 00000001a9a50000 CR4: 00000000001406f0 [ 53.570360] 0f [ 53.577637] Call Trace: [ 53.585857] 00 [ 53.588030] ? handle_mm_fault+0x27e8/0x7ea0 [ 53.593886] 00 [ 53.601174] ? fput+0x40/0x2e0 [ 53.603047] 5b [ 53.605668] __do_page_fault+0xc8b/0x17e0 [ 53.607516] 41 [ 53.611944] do_page_fault+0x98/0xd0 [ 53.613808] 5e [ 53.617012] page_fault+0x1e/0x30 [ 53.618888] 41 [ 53.623054] RIP: 0010:depot_fetch_stack+0x18/0x40 [ 53.624921] 5f [ 53.628634] Code: [ 53.630524] 5d [ 53.633972] fe [ 53.635860] c3 [ 53.640683] ff ff [ 53.642596] 41 [ 53.644725] 90 90 [ 53.646642] 8b [ 53.648509] 90 90 [ 53.650417] be [ 53.652544] 90 90 [ 53.654456] 90 [ 53.656587] 90 90 [ 53.658495] 0c [ 53.660627] 90 90 [ 53.662536] 00 [ 53.664664] 90 90 [ 53.666575] 00 [ 53.668701] 90 90 [ 53.670618] e8 [ 53.672749] 90 89 [ 53.674660] b4 [ 53.676792] f8 25 [ 53.678700] 49 [ 53.680832] ff ff [ 53.682743] 00 [ 53.684874] 1f 00 [ 53.686788] 00 [ 53.688914] 48 8b [ 53.690824] eb [ 53.692953] 04 c5 [ 53.694862] a1 [ 53.696988] 10 f5 [ 53.698901] 90 [ 53.701031] 25 8a [ 53.702938] 90 [ 53.705065] c1 ef [ 53.706978] 8a [ 53.709108] 11 81 [ 53.711021] 04 [ 53.713148] e7 f0 [ 53.715059] 25 [ 53.717187] 3f 00 [ 53.719095] 38 [ 53.721238] 00 <8b> [ 53.723180] f5 [ 53.725310] 4c 38 [ 53.727218] 15 [ 53.729343] 0c 89 [ 53.731248] 8a [ 53.733550] 4e 04 [ 53.735458] c3 [ 53.737590] 89 0e [ 53.739499] 0f [ 53.741630] 48 01 [ 53.743537] 1f [ 53.745663] f8 48 [ 53.747572] 84 [ 53.749703] 83 c0 [ 53.751619] 00 [ 53.753749] 18 48 [ 53.755656] 00 [ 53.757789] 89 46 [ 53.759698] 00 [ 53.761826] 08 c7 [ 53.763740] 00 [ 53.765863] 46 [ 53.767773] 00 [ 53.769929] RSP: 0018:ffff8801bccaf818 EFLAGS: 00010006 [ 53.771814] <55> [ 53.775848] 48 [ 53.777723] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 53.777767] RDX: ffffffff8a1af000 RSI: ffff8801bccaf820 RDI: 0000000000001250 [ 53.779640] 89 [ 53.784991] RBP: ffff8801bccaf878 R08: 0000000000000000 R09: ffff88021fc39090 [ 53.785018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 53.787075] e5 [ 53.788972] R13: 00000000a4a3a028 R14: ffffffff81a9cea0 R15: ffff8801a1d3bb00 [ 53.796240] 41 [ 53.803535] ? handle_mm_fault+0xeb0/0x7ea0 [ 53.805397] 57 [ 53.812687] ? kmsan_report+0x7b/0x2a0 [ 53.819946] 41 [ 53.821855] __msan_warning+0x70/0xc0 [ 53.829104] 56 [ 53.831014] handle_mm_fault+0xeb0/0x7ea0 [ 53.835314] 41 [ 53.837219] ? kmsan_set_origin_inline+0x6b/0x120 [ 53.841089] 54 [ 53.843013] __do_page_fault+0xc8b/0x17e0 [ 53.846764] 53 48 83 [ 53.848713] do_page_fault+0x98/0xd0 [ 53.852837] ec [ 53.854743] page_fault+0x1e/0x30 [ 53.859575] 10 [ 53.861478] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 53.865602] 65 [ 53.867994] Code: 38 [ 53.871736] 44 [ 53.873594] 4c 89 [ 53.877069] 8b [ 53.878934] 47 20 [ 53.884578] 3c [ 53.886450] 4c 89 [ 53.888881] 25 [ 53.890752] 4f 28 [ 53.892924] 20 [ 53.894790] 4c 89 [ 53.896958] a1 [ 53.898830] 57 30 [ 53.902863] 4c 89 [ 53.905044] RSP: 0018:ffff8801a1f58000 EFLAGS: 00010083 [ 53.906896] 5f 38 [ 53.910939] 48 8d [ 53.913128] RAX: 0000000088c00a77 RBX: 0000000000000000 RCX: ffffffff88c00a77 [ 53.915242] 76 40 [ 53.920646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801a1f58048 [ 53.922766] 48 8d [ 53.924954] RBP: ffff8801a1f58008 R08: 0000000000000000 R09: 0000000000000000 [ 53.932192] 7f 40 [ 53.934388] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 53.941628] ff c9 [ 53.943823] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801a1f58048 [ 53.951060] 75 b6 [ 53.953531] FS: 0000000001638880(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 53.960907] 89 d1 [ 53.963101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.970335] 83 e2 [ 53.972531] CR2: ffff8801a1f57ff8 CR3: 00000001bc4ee000 CR4: 00000000001406e0 [ 53.980720] 07 c1 [ 53.982906] Call Trace: [ 53.988767] e9 03 [ 53.990946] Kernel panic - not syncing: Machine halted. [ 53.998190] 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 54.019409] RSP: 0018:ffff8801bccafc50 EFLAGS: 00010202 [ 54.024781] RAX: ffffffff84050b1b RBX: 00007ffea9baf100 RCX: 0000000000000002 [ 54.032049] RDX: 0000000000000000 RSI: ffff8801bccafce0 RDI: 00007ffea9baf1a0 [ 54.039317] RBP: ffff8801bccafcb8 R08: 00000000000001a3 R09: 0000000000000002 [ 54.046589] R10: 0000000000000000 R11: ffffffff810c8d30 R12: 0000000000000000 [ 54.053858] R13: ffff8801bccafc58 R14: 0000000000000000 R15: ffff8801a1d3c3f8 [ 54.061447] ? time_cpufreq_notifier+0x730/0x730 [ 54.066209] ? _copy_to_user+0xbb/0x180 [ 54.070194] ? _copy_to_user+0xed/0x180 [ 54.074184] poll_select_copy_remaining+0x4b8/0x6c0 [ 54.079224] __se_sys_select+0x279/0x5e0 [ 54.083311] __x64_sys_select+0x15d/0x1b0 [ 54.087474] ? do_select+0x2bf0/0x2bf0 [ 54.091364] do_syscall_64+0x15b/0x220 [ 54.095270] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 54.100465] RIP: 0033:0x7f72182c7dd3 [ 54.104171] Code: 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 83 3d 25 48 2b 00 00 75 13 49 89 ca b8 17 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 ab 2f 01 00 48 89 04 24 [ 54.123595] RSP: 002b:00007ffea9baf178 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 54.131310] RAX: ffffffffffffffda RBX: 00007ffea9baf200 RCX: 00007f72182c7dd3 [ 54.138673] RDX: 000056257b849a70 RSI: 000056257b849a90 RDI: 000000000000000c [ 54.145943] RBP: 000056257a4ab8dc R08: 00007ffea9baf1a0 R09: 0101010101010101 [ 54.153212] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea9baf208 [ 54.160480] R13: 0000000000000000 R14: 00007ffea9baf1f8 R15: 00007ffea9baf1fc [ 54.167771] Modules linked in: [ 54.171109] Dumping ftrace buffer: [ 54.174643] (ftrace buffer empty) [ 54.178359] ---[ end trace f9e4018acf99933a ]--- [ 54.183144] RIP: 0010:__x86_indirect_thunk_r11+0x10/0x20 [ 54.188586] Code: 90 0f ae e8 eb f9 4c 89 14 24 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 90 0f ae e8 eb f9 4c 89 1c 24 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 [ 54.208028] RSP: 0018:ffff8801bccaf480 EFLAGS: 00010006 [ 54.213418] RAX: 0000000000000000 RBX: ffff88021fc39090 RCX: ffff8801a1d3bb00 [ 54.220781] RDX: ffffffff8a1af000 RSI: 0000000000000002 RDI: ffff8801bccaf4f8 [ 54.228056] RBP: ffff8801bccaf610 R08: 0000000000000000 R09: ffff88021fc39090 [ 54.235328] R10: 0000000000000000 R11: 4c000000a8be0000 R12: ffffffff8119870e [ 54.242600] R13: 0000000000000000 R14: 4c000000a8be0000 R15: 0000000000000000 [ 54.249872] FS: 00007f7219f277c0(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 54.258102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.263993] CR2: 000000000000125c CR3: 00000001a9a50000 CR4: 00000000001406f0 [ 55.310855] Shutting down cpus with NMI [ 55.314940] ------------[ cut here ]------------ [ 55.319709] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 55.324851] invalid opcode: 0000 [#2] SMP PTI [ 55.327971] Dumping ftrace buffer: [ 55.329375] CPU: 0 PID: 4484 Comm: sshd Tainted: G D 4.18.0-rc8+ #34 [ 55.332902] (ftrace buffer empty) [ 55.340682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.340739] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [[ 5 55.53.5335384884]8] C odCeo:d e0:0 0 0 s e t: disabled [ 55.358554] Rebooting in 86400 seconds.. [ 55.368551] 74 27 65 8b 04 25 80 90 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 80 90 03 00 65 c6 04 25 15 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 55.387177] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 55.392542] RAX: 0000000080000000 RBX: 0000000000000001 RCX: 00000000c0000101 [ 55.399814] RDX: 00000000ffff8802 RSI: ffffffff88c0136c RDI: ffff88021fc3a040 [ 55.407084] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 55.414350] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 55.421623] R13: 0000000000000000 R14: 00000001a9a50000 R15: 0000000000000000 [ 55.428896] FS: 00007f7219f277c0(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 55.437121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.443001] CR2: 000000000000125c CR3: 00000001a9a50000 CR4: 00000000001406f0 [ 55.450271] Call Trace: [ 55.452855] [ 55.455013] ? end_repeat_nmi+0x19/0x8e [ 55.458997] ? end_repeat_nmi+0x7/0x8e [ 55.462899] ? write_ext_msg+0x920/0x920 [ 55.466969] ? panic_smp_self_stop+0xe/0xd0 [ 55.471325] ? panic_smp_self_stop+0x12/0xd0 [ 55.475749] ? panic_smp_self_stop+0x12/0xd0 [ 55.480179] ? panic_smp_self_stop+0x12/0xd0 [ 55.484582] [ 55.486827] ? panic+0x13a/0x9a0 [ 55.490219] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 55.495585] ? __show_regs+0xbb1/0xda0 [ 55.499488] ? oops_end+0x2cd/0x2d0 [ 55.503123] ? die+0x124/0x140 [ 55.506332] ? do_general_protection+0x60b/0x780 [ 55.511095] ? alloc_pages_current+0x6b1/0x970 [ 55.515691] ? general_protection+0x1e/0x30 [ 55.520015] ? do_page_fault+0x3e/0xd0 [ 55.523916] ? __x86_indirect_thunk_r11+0x10/0x20 [ 55.528773] ? handle_mm_fault+0x27e8/0x7ea0 [ 55.533183] ? fput+0x40/0x2e0 [ 55.536416] ? __do_page_fault+0xc8b/0x17e0 [ 55.540776] ? do_page_fault+0x98/0xd0 [ 55.544669] ? page_fault+0x1e/0x30 [ 55.548307] ? handle_mm_fault+0xeb0/0x7ea0 [ 55.552678] ? depot_fetch_stack+0x18/0x40 [ 55.556929] ? kmsan_report+0x7b/0x2a0 [ 55.560827] ? __msan_warning+0x70/0xc0 [ 55.564808] ? handle_mm_fault+0xeb0/0x7ea0 [ 55.569136] ? kmsan_set_origin_inline+0x6b/0x120 [ 55.574013] ? __do_page_fault+0xc8b/0x17e0 [ 55.578373] ? do_page_fault+0x98/0xd0 [ 55.582270] ? page_fault+0x1e/0x30 [ 55.585920] ? time_cpufreq_notifier+0x730/0x730 [ 55.590683] ? _copy_to_user+0xbb/0x180 [ 55.594667] ? copy_user_generic_unrolled+0x89/0xc0 [ 55.599691] ? _copy_to_user+0xed/0x180 [ 55.603681] ? poll_select_copy_remaining+0x4b8/0x6c0 [ 55.608897] ? __se_sys_select+0x279/0x5e0 [ 55.613159] ? __x64_sys_select+0x15d/0x1b0 [ 55.617498] ? do_select+0x2bf0/0x2bf0 [ 55.621392] ? do_syscall_64+0x15b/0x220 [ 55.625466] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 55.630848] Modules linked in: [ 55.634045] Dumping ftrace buffer: [ 55.637580] (ftrace buffer empty) [ 55.641292] ---[ end trace f9e4018acf99933b ]--- [ 55.646054] RIP: 0010:__x86_indirect_thunk_r11+0x10/0x20 [ 55.651494] Code: 90 0f ae e8 eb f9 4c 89 14 24 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 90 0f ae e8 eb f9 4c 89 1c 24 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 [ 55.670911] RSP: 0018:ffff8801bccaf480 EFLAGS: 00010006 [ 55.676280] RAX: 0000000000000000 RBX: ffff88021fc39090 RCX: ffff8801a1d3bb00 [ 55.683562] RDX: ffffffff8a1af000 RSI: 0000000000000002 RDI: ffff8801bccaf4f8 [ 55.690834] RBP: ffff8801bccaf610 R08: 0000000000000000 R09: ffff88021fc39090 [ 55.698104] R10: 0000000000000000 R11: 4c000000a8be0000 R12: ffffffff8119870e [ 55.705377] R13: 0000000000000000 R14: 4c000000a8be0000 R15: 0000000000000000 [ 55.712650] FS: 00007f7219f277c0(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 55.720873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.726768] CR2: 000000000000125c CR3: 00000001a9a50000 CR4: 00000000001406f0