[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 32.961569] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 34.104331] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.628618] random: sshd: uninitialized urandom read (32 bytes read) [ 35.835428] random: sshd: uninitialized urandom read (32 bytes read) [ 36.078702] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. [ 41.645063] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/09 21:39:59 parsed 1 programs 2018/05/09 21:39:59 executed programs: 0 [ 42.199469] IPVS: ftp: loaded support on port[0] = 21 [ 42.228875] IPVS: ftp: loaded support on port[0] = 21 [ 42.252238] IPVS: ftp: loaded support on port[0] = 21 [ 42.274001] IPVS: ftp: loaded support on port[0] = 21 [ 42.296338] IPVS: ftp: loaded support on port[0] = 21 [ 42.303382] IPVS: ftp: loaded support on port[0] = 21 [ 42.305739] IPVS: ftp: loaded support on port[0] = 21 [ 42.319124] IPVS: ftp: loaded support on port[0] = 21 2018/05/09 21:40:04 executed programs: 285 2018/05/09 21:40:09 executed programs: 584 2018/05/09 21:40:14 executed programs: 877 2018/05/09 21:40:19 executed programs: 1173 2018/05/09 21:40:24 executed programs: 1471 2018/05/09 21:40:29 executed programs: 1775 2018/05/09 21:40:34 executed programs: 2078 2018/05/09 21:40:39 executed programs: 2375 2018/05/09 21:40:44 executed programs: 2675 2018/05/09 21:40:49 executed programs: 2975 [ 94.896240] ================================================================== [ 94.903699] BUG: KMSAN: uninit-value in get_page_from_freelist+0x64c5/0xb600 [ 94.910873] CPU: 1 PID: 16098 Comm: syz-executor7 Not tainted 4.17.0-rc3+ #88 [ 94.918156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.927490] Call Trace: [ 94.930062] dump_stack+0x185/0x1d0 [ 94.933672] ? get_page_from_freelist+0x64c5/0xb600 [ 94.938676] kmsan_report+0x142/0x240 [ 94.942460] __msan_warning_32+0x6c/0xb0 [ 94.946502] get_page_from_freelist+0x64c5/0xb600 [ 94.951332] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 94.956763] ? update_stack_state+0x885/0xa40 [ 94.961246] ? page_fault+0x1e/0x30 [ 94.964855] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 94.970284] ? update_stack_state+0x885/0xa40 [ 94.974762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 94.980119] ? is_bpf_text_address+0xb4/0x4b0 [ 94.984597] ? __is_insn_slot_addr+0x198/0x1c0 [ 94.989162] ? kernel_text_address+0x34d/0x3a0 [ 94.993728] ? __kernel_text_address+0x34/0xe0 [ 94.998296] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.003136] ? __next_zones_zonelist+0x15f/0x290 [ 95.007877] __alloc_pages_nodemask+0x7aa/0x5dd0 [ 95.012613] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.017440] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 95.022789] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.027622] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.032446] ? __msan_poison_alloca+0x15c/0x1d0 [ 95.037188] ? kmsan_set_origin+0x9e/0x160 [ 95.041417] alloc_pages_vma+0x1565/0x1800 [ 95.045641] do_huge_pmd_anonymous_page+0xbdb/0x2550 [ 95.050735] handle_mm_fault+0x428f/0x7e50 [ 95.054952] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.059783] __do_page_fault+0xec4/0x1a10 [ 95.063942] ? page_fault+0x1e/0x30 [ 95.067550] do_page_fault+0xd3/0x260 [ 95.071334] ? page_fault+0x8/0x30 [ 95.074856] page_fault+0x1e/0x30 [ 95.078295] RIP: 0033:0x407695 [ 95.081470] RSP: 002b:0000000000a3e940 EFLAGS: 00010246 [ 95.086812] RAX: 0000000020bba000 RBX: 0000000000000000 RCX: 0000000000000002 [ 95.094062] RDX: dcf5ba2ffbbce7a7 RSI: 0000000000000000 RDI: 00000000019af848 [ 95.101309] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000730028 [ 95.108567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.115814] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000175bd [ 95.123064] [ 95.124665] Uninit was stored to memory at: [ 95.128969] kmsan_internal_chain_origin+0x12b/0x210 [ 95.134049] __msan_chain_origin+0x69/0xc0 [ 95.138264] __free_one_page+0x16cb/0x1800 [ 95.142475] __free_pages_ok+0x87f/0x16b0 [ 95.146603] free_compound_page+0x8e/0xc0 [ 95.150732] free_transhuge_page+0x3bc/0x470 [ 95.155120] release_pages+0x702/0x1670 [ 95.159082] free_pages_and_swap_cache+0x55b/0x580 [ 95.163992] unmap_page_range+0x3228/0x3be0 [ 95.168296] unmap_single_vma+0x45b/0x5f0 [ 95.172439] unmap_vmas+0x1f4/0x360 [ 95.176132] exit_mmap+0x3da/0x950 [ 95.179655] __mmput+0x16c/0x610 [ 95.183005] mmput+0xab/0xf0 [ 95.186006] exit_mm+0x6ed/0x7a0 [ 95.189357] do_exit+0xc01/0x38d0 [ 95.192794] do_group_exit+0x1a0/0x360 [ 95.196664] get_signal+0x1320/0x1f20 [ 95.200445] do_signal+0xb8/0x1c80 [ 95.204138] prepare_exit_to_usermode+0x271/0x3a0 [ 95.208961] syscall_return_slowpath+0xe9/0x700 [ 95.213611] do_syscall_64+0x1a6/0x220 [ 95.217481] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 95.222646] Uninit was created at: [ 95.226170] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 95.231167] kmsan_alloc_page+0x82/0xe0 [ 95.235141] __alloc_pages_nodemask+0xf8e/0x5dd0 [ 95.239884] alloc_pages_current+0x6b5/0x970 [ 95.244274] __get_free_pages+0x2d/0xc0 [ 95.248228] unmap_page_range+0x26d2/0x3be0 [ 95.252531] unmap_single_vma+0x45b/0x5f0 [ 95.256657] unmap_vmas+0x1f4/0x360 [ 95.260267] exit_mmap+0x3da/0x950 [ 95.263793] __mmput+0x16c/0x610 [ 95.267138] mmput+0xab/0xf0 [ 95.270140] exit_mm+0x6ed/0x7a0 [ 95.273487] do_exit+0xc01/0x38d0 [ 95.276920] do_group_exit+0x1a0/0x360 [ 95.280964] get_signal+0x1320/0x1f20 [ 95.284746] do_signal+0xb8/0x1c80 [ 95.288266] prepare_exit_to_usermode+0x271/0x3a0 [ 95.294131] syscall_return_slowpath+0xe9/0x700 [ 95.298785] do_syscall_64+0x1a6/0x220 [ 95.302760] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 95.307924] ================================================================== [ 95.315257] Disabling lock debugging due to kernel taint [ 95.320686] Kernel panic - not syncing: panic_on_warn set ... [ 95.320686] [ 95.328040] CPU: 1 PID: 16098 Comm: syz-executor7 Tainted: G B 4.17.0-rc3+ #88 [ 95.336680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.346020] Call Trace: [ 95.348592] dump_stack+0x185/0x1d0 [ 95.352205] panic+0x39d/0x940 [ 95.355399] ? get_page_from_freelist+0x64c5/0xb600 [ 95.360410] kmsan_report+0x238/0x240 [ 95.364195] __msan_warning_32+0x6c/0xb0 [ 95.368241] get_page_from_freelist+0x64c5/0xb600 [ 95.373065] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 95.378497] ? update_stack_state+0x885/0xa40 [ 95.382977] ? page_fault+0x1e/0x30 [ 95.386583] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 95.392014] ? update_stack_state+0x885/0xa40 [ 95.396490] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 95.401836] ? is_bpf_text_address+0xb4/0x4b0 [ 95.406311] ? __is_insn_slot_addr+0x198/0x1c0 [ 95.410879] ? kernel_text_address+0x34d/0x3a0 [ 95.415440] ? __kernel_text_address+0x34/0xe0 [ 95.420012] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.424852] ? __next_zones_zonelist+0x15f/0x290 [ 95.429592] __alloc_pages_nodemask+0x7aa/0x5dd0 [ 95.434335] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.439158] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 95.444501] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.449335] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.454155] ? __msan_poison_alloca+0x15c/0x1d0 [ 95.458809] ? kmsan_set_origin+0x9e/0x160 [ 95.463063] alloc_pages_vma+0x1565/0x1800 [ 95.467292] do_huge_pmd_anonymous_page+0xbdb/0x2550 [ 95.472386] handle_mm_fault+0x428f/0x7e50 [ 95.476604] ? kmsan_set_origin_inline+0x6b/0x120 [ 95.481440] __do_page_fault+0xec4/0x1a10 [ 95.485576] ? page_fault+0x1e/0x30 [ 95.489192] do_page_fault+0xd3/0x260 [ 95.492974] ? page_fault+0x8/0x30 [ 95.496501] page_fault+0x1e/0x30 [ 95.499934] RIP: 0033:0x407695 [ 95.503103] RSP: 002b:0000000000a3e940 EFLAGS: 00010246 [ 95.508444] RAX: 0000000020bba000 RBX: 0000000000000000 RCX: 0000000000000002 [ 95.515693] RDX: dcf5ba2ffbbce7a7 RSI: 0000000000000000 RDI: 00000000019af848 [ 95.522944] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000730028 [ 95.530193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.537701] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000175bd [ 96.669805] Shutting down cpus with NMI [ 96.685514] Dumping ftrace buffer: [ 96.689045] (ftrace buffer empty) [ 96.692737] Kernel Offset: disabled [ 96.696351] Rebooting in 86400 seconds..