[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.232072] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 31.300346] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.681361] random: sshd: uninitialized urandom read (32 bytes read) [ 32.891786] random: sshd: uninitialized urandom read (32 bytes read) [ 59.482105] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. [ 65.054308] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/24 00:51:36 parsed 1 programs [ 66.340643] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/24 00:51:38 executed programs: 0 [ 67.569659] IPVS: ftp: loaded support on port[0] = 21 [ 67.581750] IPVS: ftp: loaded support on port[0] = 21 [ 67.585040] IPVS: ftp: loaded support on port[0] = 21 [ 67.595373] IPVS: ftp: loaded support on port[0] = 21 [ 67.617988] IPVS: ftp: loaded support on port[0] = 21 [ 67.627363] IPVS: ftp: loaded support on port[0] = 21 [ 67.637582] IPVS: ftp: loaded support on port[0] = 21 [ 67.637930] IPVS: ftp: loaded support on port[0] = 21 [ 68.258420] ip (4660) used greatest stack depth: 54352 bytes left [ 68.575645] ip (4727) used greatest stack depth: 54344 bytes left [ 68.770358] ip (4762) used greatest stack depth: 54056 bytes left [ 68.835555] ================================================================== [ 68.842952] BUG: KMSAN: uninit-value in __list_del_entry_valid+0x23a/0x440 [ 68.849981] CPU: 0 PID: 4783 Comm: ip Not tainted 4.17.0+ #9 [ 68.855752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.865086] Call Trace: [ 68.867665] dump_stack+0x185/0x1d0 [ 68.871270] kmsan_report+0x188/0x2a0 [ 68.875049] __msan_warning_32+0x70/0xc0 [ 68.879097] __list_del_entry_valid+0x23a/0x440 [ 68.883754] dequeue_task_fair+0xad7/0x3300 [ 68.888054] ? kernel_poison_pages+0x40/0x360 [ 68.892528] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.897870] ? enqueue_task_fair+0x4490/0x4490 [ 68.902429] deactivate_task+0x560/0x7d0 [ 68.906471] __schedule+0x164/0x770 [ 68.910086] schedule_preempt_disabled+0x1cc/0x2f0 [ 68.914994] __mutex_lock+0xb5e/0x1af0 [ 68.918875] __mutex_lock_slowpath+0x2c/0x30 [ 68.923259] mutex_lock+0x62/0x90 [ 68.926697] rtnetlink_rcv_msg+0x8b3/0x1570 [ 68.930999] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.936339] ? netlink_sendmsg+0x76e/0x1350 [ 68.940641] ? kmsan_set_origin_inline+0x6b/0x120 [ 68.945557] ? __msan_poison_alloca+0x15c/0x1d0 [ 68.950215] ? __should_failslab+0x278/0x2a0 [ 68.954615] ? kmsan_set_origin_inline+0x6b/0x120 [ 68.959536] ? kmsan_set_origin+0x9e/0x160 [ 68.963757] netlink_rcv_skb+0x37e/0x600 [ 68.967797] ? rtnetlink_bind+0x120/0x120 [ 68.971934] rtnetlink_rcv+0x50/0x60 [ 68.975624] netlink_unicast+0x1680/0x1750 [ 68.979839] ? rtnetlink_net_exit+0xa0/0xa0 [ 68.984140] netlink_sendmsg+0x104f/0x1350 [ 68.988365] ? netlink_getsockopt+0xc60/0xc60 [ 68.992861] __sys_sendto+0x6c4/0x7e0 [ 68.996646] ? filemap_fault+0x2590/0x2590 [ 69.000872] __x64_sys_sendto+0x1a1/0x210 [ 69.005002] ? __sys_sendto+0x7e0/0x7e0 [ 69.008967] do_syscall_64+0x15b/0x230 [ 69.012836] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.018001] RIP: 0033:0x7fdd01347282 [ 69.021708] RSP: 002b:00007ffef0f208a0 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.029394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdd01347282 [ 69.036667] RDX: 0000000000000020 RSI: 00007ffef0f208e0 RDI: 0000000000000003 [ 69.043930] RBP: 00007ffef0f22f64 R08: 0000000000000000 R09: 0000000000000000 [ 69.051178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 69.058443] R13: 00007ffef0f21060 R14: 00007ffef0f21068 R15: 0000000000000000 [ 69.065698] [ 69.067302] Uninit was stored to memory at: [ 69.071611] kmsan_internal_chain_origin+0x12b/0x210 [ 69.076707] __msan_chain_origin+0x69/0xc0 [ 69.080920] pick_next_task_fair+0x2474/0x2530 [ 69.085488] pick_next_task+0x1ba/0x420 [ 69.089439] __schedule+0x20f/0x770 [ 69.093044] do_task_dead+0xc8/0xf0 [ 69.096650] do_exit+0x347e/0x3930 [ 69.100166] do_group_exit+0x1a0/0x360 [ 69.104040] __do_sys_exit_group+0x21/0x30 [ 69.108263] __se_sys_exit_group+0x14/0x20 [ 69.112476] __x64_sys_exit_group+0x4c/0x50 [ 69.116777] do_syscall_64+0x15b/0x230 [ 69.120658] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.125831] [ 69.127436] Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave [ 69.134949] Variable was created at: [ 69.138642] _raw_spin_lock_irqsave+0x45/0xf0 [ 69.143125] do_task_dead+0x40/0xf0 [ 69.146735] ================================================================== [ 69.154076] Disabling lock debugging due to kernel taint [ 69.159499] Kernel panic - not syncing: panic_on_warn set ... [ 69.159499] [ 69.166840] CPU: 0 PID: 4783 Comm: ip Tainted: G B 4.17.0+ #9 [ 69.174001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.183329] Call Trace: [ 69.185898] dump_stack+0x185/0x1d0 [ 69.189506] panic+0x3d0/0x990 [ 69.192681] kmsan_report+0x29e/0x2a0 [ 69.196476] __msan_warning_32+0x70/0xc0 [ 69.200523] __list_del_entry_valid+0x23a/0x440 [ 69.205170] dequeue_task_fair+0xad7/0x3300 [ 69.209485] ? kernel_poison_pages+0x40/0x360 [ 69.213964] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 69.219313] ? enqueue_task_fair+0x4490/0x4490 [ 69.223874] deactivate_task+0x560/0x7d0 [ 69.227929] __schedule+0x164/0x770 [ 69.231549] schedule_preempt_disabled+0x1cc/0x2f0 [ 69.236461] __mutex_lock+0xb5e/0x1af0 [ 69.240343] __mutex_lock_slowpath+0x2c/0x30 [ 69.244733] mutex_lock+0x62/0x90 [ 69.248252] rtnetlink_rcv_msg+0x8b3/0x1570 [ 69.252575] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.258004] ? netlink_sendmsg+0x76e/0x1350 [ 69.262307] ? kmsan_set_origin_inline+0x6b/0x120 [ 69.267130] ? __msan_poison_alloca+0x15c/0x1d0 [ 69.271775] ? __should_failslab+0x278/0x2a0 [ 69.276164] ? kmsan_set_origin_inline+0x6b/0x120 [ 69.280998] ? kmsan_set_origin+0x9e/0x160 [ 69.285223] netlink_rcv_skb+0x37e/0x600 [ 69.289271] ? rtnetlink_bind+0x120/0x120 [ 69.293397] rtnetlink_rcv+0x50/0x60 [ 69.297089] netlink_unicast+0x1680/0x1750 [ 69.301304] ? rtnetlink_net_exit+0xa0/0xa0 [ 69.305604] netlink_sendmsg+0x104f/0x1350 [ 69.309907] ? netlink_getsockopt+0xc60/0xc60 [ 69.314389] __sys_sendto+0x6c4/0x7e0 [ 69.318171] ? filemap_fault+0x2590/0x2590 [ 69.322390] __x64_sys_sendto+0x1a1/0x210 [ 69.326517] ? __sys_sendto+0x7e0/0x7e0 [ 69.330468] do_syscall_64+0x15b/0x230 [ 69.334335] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.339509] RIP: 0033:0x7fdd01347282 [ 69.343208] RSP: 002b:00007ffef0f208a0 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.350904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdd01347282 [ 69.358161] RDX: 0000000000000020 RSI: 00007ffef0f208e0 RDI: 0000000000000003 [ 69.365416] RBP: 00007ffef0f22f64 R08: 0000000000000000 R09: 0000000000000000 [ 69.372663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 69.379909] R13: 00007ffef0f21060 R14: 00007ffef0f21068 R15: 0000000000000000 [ 70.551911] Shutting down cpus with NMI [ 70.568657] Dumping ftrace buffer: [ 70.572200] (ftrace buffer empty) [ 70.575899] Kernel Offset: disabled [ 70.579511] Rebooting in 86400 seconds..