[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 58.470041] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 60.765994] random: sshd: uninitialized urandom read (32 bytes read) [ 61.297726] random: sshd: uninitialized urandom read (32 bytes read) [ 62.609198] random: sshd: uninitialized urandom read (32 bytes read) [ 66.817234] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. [ 72.567627] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 72.842994] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 72.860749] ================================================================== [ 72.868136] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 72.875750] CPU: 0 PID: 6126 Comm: syz-executor986 Not tainted 4.19.0-rc4+ #65 [ 72.883106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.892452] Call Trace: [ 72.895041] dump_stack+0x306/0x460 [ 72.898676] ? vmx_set_constant_host_state+0x1778/0x1830 [ 72.904166] kmsan_report+0x1a2/0x2e0 [ 72.907974] __msan_warning+0x7c/0xe0 [ 72.911775] vmx_set_constant_host_state+0x1778/0x1830 [ 72.917067] vmx_create_vcpu+0x3e6f/0x7870 [ 72.921294] ? kmsan_set_origin_inline+0x6b/0x120 [ 72.926149] ? __msan_poison_alloca+0x17a/0x210 [ 72.930824] ? vmx_vm_init+0x340/0x340 [ 72.934712] kvm_arch_vcpu_create+0x25d/0x2f0 [ 72.939207] kvm_vm_ioctl+0x13fd/0x33d0 [ 72.943188] ? __msan_poison_alloca+0x17a/0x210 [ 72.947852] ? kmsan_set_origin_inline+0x6b/0x120 [ 72.952700] ? do_vfs_ioctl+0x18a/0x2810 [ 72.956757] ? __se_sys_ioctl+0x1da/0x270 [ 72.960898] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 72.965733] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 72.970570] do_vfs_ioctl+0xcf3/0x2810 [ 72.974464] ? security_file_ioctl+0x92/0x200 [ 72.978965] __se_sys_ioctl+0x1da/0x270 [ 72.982948] __x64_sys_ioctl+0x4a/0x70 [ 72.986833] do_syscall_64+0xbe/0x100 [ 72.990647] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 72.995845] RIP: 0033:0x440039 [ 72.999029] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.017923] RSP: 002b:00007ffc4849b678 EFLAGS: 00000217 ORIG_RAX: 0000000000000010 [ 73.025642] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440039 [ 73.032909] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 73.040168] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 73.047428] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004018c0 [ 73.054707] R13: 0000000000401950 R14: 0000000000000000 R15: 0000000000000000 [ 73.062009] [ 73.063624] Local variable description: ----dt@vmx_set_constant_host_state [ 73.070627] Variable was created at: [ 73.074335] vmx_set_constant_host_state+0x2b0/0x1830 [ 73.079515] vmx_create_vcpu+0x3e6f/0x7870 [ 73.083737] ================================================================== [ 73.091097] Disabling lock debugging due to kernel taint [ 73.096536] Kernel panic - not syncing: panic_on_warn set ... [ 73.096536] [ 73.103912] CPU: 0 PID: 6126 Comm: syz-executor986 Tainted: G B 4.19.0-rc4+ #65 [ 73.112650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.122000] Call Trace: [ 73.124593] dump_stack+0x306/0x460 [ 73.128225] panic+0x54c/0xafa [ 73.131441] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 73.136895] kmsan_report+0x2d3/0x2e0 [ 73.140713] __msan_warning+0x7c/0xe0 [ 73.144517] vmx_set_constant_host_state+0x1778/0x1830 [ 73.149814] vmx_create_vcpu+0x3e6f/0x7870 [ 73.154047] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.158887] ? __msan_poison_alloca+0x17a/0x210 [ 73.163562] ? vmx_vm_init+0x340/0x340 [ 73.167448] kvm_arch_vcpu_create+0x25d/0x2f0 [ 73.171951] kvm_vm_ioctl+0x13fd/0x33d0 [ 73.175929] ? __msan_poison_alloca+0x17a/0x210 [ 73.180609] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.185454] ? do_vfs_ioctl+0x18a/0x2810 [ 73.189512] ? __se_sys_ioctl+0x1da/0x270 [ 73.193679] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 73.198522] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 73.203361] do_vfs_ioctl+0xcf3/0x2810 [ 73.207282] ? security_file_ioctl+0x92/0x200 [ 73.211785] __se_sys_ioctl+0x1da/0x270 [ 73.215780] __x64_sys_ioctl+0x4a/0x70 [ 73.219700] do_syscall_64+0xbe/0x100 [ 73.223516] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 73.228697] RIP: 0033:0x440039 [ 73.231888] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.250781] RSP: 002b:00007ffc4849b678 EFLAGS: 00000217 ORIG_RAX: 0000000000000010 [ 73.258488] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440039 [ 73.265751] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 73.273015] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 73.280286] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004018c0 [ 73.287600] R13: 0000000000401950 R14: 0000000000000000 R15: 0000000000000000 [ 73.295792] Kernel Offset: disabled [ 73.299433] Rebooting in 86400 seconds..