[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.853142] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.840531] random: sshd: uninitialized urandom read (32 bytes read) [ 35.194248] random: sshd: uninitialized urandom read (32 bytes read) [ 36.286774] random: sshd: uninitialized urandom read (32 bytes read) [ 36.494454] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. [ 41.969916] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/30 18:06:50 parsed 1 programs 2018/05/30 18:06:50 executed programs: 0 [ 42.541723] IPVS: ftp: loaded support on port[0] = 21 [ 42.709083] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.715490] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.723100] device bridge_slave_0 entered promiscuous mode [ 42.743863] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.750275] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.757577] device bridge_slave_1 entered promiscuous mode [ 42.777692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.798459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.840808] ip (4535) used greatest stack depth: 54312 bytes left [ 42.857361] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.880699] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.969964] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.977587] team0: Port device team_slave_0 added [ 42.998296] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.005545] team0: Port device team_slave_1 added [ 43.026184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.049342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.072820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.096403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.274458] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.280904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.287675] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.294131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.939475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.003805] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.067115] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.073347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.081665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.141004] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.514116] ================================================================== [ 44.521539] BUG: KMSAN: uninit-value in copy_siginfo_to_user+0x383/0x1270 [ 44.528462] CPU: 1 PID: 4746 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 44.535724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.545062] Call Trace: [ 44.547631] dump_stack+0x185/0x1d0 [ 44.551237] ? copy_siginfo_to_user+0x383/0x1270 [ 44.555970] kmsan_report+0x149/0x260 [ 44.559746] __msan_warning_32+0x6e/0xc0 [ 44.563784] copy_siginfo_to_user+0x383/0x1270 [ 44.568344] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 44.573684] ptrace_request+0x1d6a/0x20e0 [ 44.577814] ? __msan_poison_alloca+0x15c/0x1d0 [ 44.582464] ? wait_task_inactive+0x21b/0x990 [ 44.586949] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 44.591601] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 44.597037] ? wait_task_inactive+0x7df/0x990 [ 44.601514] arch_ptrace+0x1f6/0x1230 [ 44.605294] ? ptrace_check_attach+0x182/0x5e0 [ 44.609855] __se_sys_ptrace+0x309/0x850 [ 44.613906] __x64_sys_ptrace+0x11e/0x170 [ 44.618051] do_syscall_64+0x152/0x230 [ 44.621929] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.627093] RIP: 0033:0x455a09 [ 44.630259] RSP: 002b:00007ffc971089c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 44.638041] RAX: ffffffffffffffda RBX: 0000000000acf914 RCX: 0000000000455a09 [ 44.645313] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 44.652563] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 44.659814] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 44.667068] R13: 0000000000000558 R14: 00000000006fd0e0 R15: 000000000000b0fe [ 44.674332] [ 44.675935] Local variable description: ----kiov@ptrace_request [ 44.681971] Variable was created at: [ 44.685665] ptrace_request+0x194/0x20e0 [ 44.689703] arch_ptrace+0x1f6/0x1230 [ 44.693483] ================================================================== [ 44.700813] Disabling lock debugging due to kernel taint [ 44.706236] Kernel panic - not syncing: panic_on_warn set ... [ 44.706236] [ 44.713578] CPU: 1 PID: 4746 Comm: syz-executor0 Tainted: G B 4.17.0-rc5+ #103 [ 44.722213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.731544] Call Trace: [ 44.734128] dump_stack+0x185/0x1d0 [ 44.737732] panic+0x39d/0x940 [ 44.740911] ? copy_siginfo_to_user+0x383/0x1270 [ 44.745649] kmsan_report+0x260/0x260 [ 44.749427] __msan_warning_32+0x6e/0xc0 [ 44.753553] copy_siginfo_to_user+0x383/0x1270 [ 44.758112] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 44.763454] ptrace_request+0x1d6a/0x20e0 [ 44.767581] ? __msan_poison_alloca+0x15c/0x1d0 [ 44.772226] ? wait_task_inactive+0x21b/0x990 [ 44.776709] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 44.781358] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 44.786787] ? wait_task_inactive+0x7df/0x990 [ 44.791270] arch_ptrace+0x1f6/0x1230 [ 44.795054] ? ptrace_check_attach+0x182/0x5e0 [ 44.799618] __se_sys_ptrace+0x309/0x850 [ 44.803666] __x64_sys_ptrace+0x11e/0x170 [ 44.807791] do_syscall_64+0x152/0x230 [ 44.811658] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.816826] RIP: 0033:0x455a09 [ 44.819993] RSP: 002b:00007ffc971089c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 44.827689] RAX: ffffffffffffffda RBX: 0000000000acf914 RCX: 0000000000455a09 [ 44.834937] RDX: 0000000000730004 RSI: 0000000000000001 RDI: 0000000000004209 [ 44.842185] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 44.849433] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 44.856696] R13: 0000000000000558 R14: 00000000006fd0e0 R15: 000000000000b0fe [ 44.864479] Dumping ftrace buffer: [ 44.868006] (ftrace buffer empty) [ 44.871689] Kernel Offset: disabled [ 44.875292] Rebooting in 86400 seconds..