[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.984085] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.891778] random: sshd: uninitialized urandom read (32 bytes read) [ 32.175821] random: sshd: uninitialized urandom read (32 bytes read) [ 33.310691] random: sshd: uninitialized urandom read (32 bytes read) [ 33.516593] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. [ 38.964399] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 39.074998] ================================================================== [ 39.082432] BUG: KMSAN: uninit-value in nfqnl_recv_config+0x939/0x17d0 [ 39.089090] CPU: 1 PID: 4521 Comm: syz-executor120 Not tainted 4.17.0+ #5 [ 39.095993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.105325] Call Trace: [ 39.107892] dump_stack+0x185/0x1d0 [ 39.111497] kmsan_report+0x188/0x2a0 [ 39.115279] __msan_warning_32+0x70/0xc0 [ 39.119318] nfqnl_recv_config+0x939/0x17d0 [ 39.123621] ? mutex_lock+0x31/0x90 [ 39.127232] ? nfqnl_recv_verdict+0x2330/0x2330 [ 39.131973] nfnetlink_rcv_msg+0xb2e/0xc80 [ 39.136193] netlink_rcv_skb+0x37e/0x600 [ 39.140234] ? nfnetlink_bind+0x1d0/0x1d0 [ 39.144363] nfnetlink_rcv+0x2fe/0x680 [ 39.148232] ? nfnetlink_net_exit_batch+0x270/0x270 [ 39.153225] netlink_unicast+0x1680/0x1750 [ 39.157443] ? nfnetlink_net_exit_batch+0x270/0x270 [ 39.162439] netlink_sendmsg+0x104f/0x1350 [ 39.166653] ? netlink_getsockopt+0xc60/0xc60 [ 39.171126] ___sys_sendmsg+0xec8/0x1320 [ 39.175167] ? __fdget+0x4e/0x60 [ 39.178509] ? __fget_light+0x57/0x700 [ 39.182373] ? __fdget+0x4e/0x60 [ 39.185717] ? __fget_light+0x1dc/0x700 [ 39.189668] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 39.195017] ? __fget_light+0x1f5/0x700 [ 39.198978] __x64_sys_sendmsg+0x331/0x460 [ 39.203202] ? ___sys_sendmsg+0x1320/0x1320 [ 39.207501] do_syscall_64+0x15b/0x230 [ 39.211382] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 39.216565] RIP: 0033:0x43fd59 [ 39.219731] RSP: 002b:00007ffde0e30d28 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 39.227413] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd59 [ 39.234660] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 39.241913] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 39.249158] R10: 00000000004002c8 R11: 0000000000000213 R12: 0000000000401680 [ 39.256406] R13: 0000000000401710 R14: 0000000000000000 R15: 0000000000000000 [ 39.263667] [ 39.265270] Uninit was created at: [ 39.268791] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 39.273871] kmsan_kmalloc+0x94/0x100 [ 39.277647] kmsan_slab_alloc+0x10/0x20 [ 39.281597] __kmalloc_node_track_caller+0xb35/0x11b0 [ 39.286767] __alloc_skb+0x2cb/0x9e0 [ 39.290460] netlink_sendmsg+0x76e/0x1350 [ 39.294581] ___sys_sendmsg+0xec8/0x1320 [ 39.298625] __x64_sys_sendmsg+0x331/0x460 [ 39.302845] do_syscall_64+0x15b/0x230 [ 39.306711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 39.311879] ================================================================== [ 39.319212] Disabling lock debugging due to kernel taint [ 39.324636] Kernel panic - not syncing: panic_on_warn set ... [ 39.324636] [ 39.331979] CPU: 1 PID: 4521 Comm: syz-executor120 Tainted: G B 4.17.0+ #5 [ 39.340269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.349604] Call Trace: [ 39.352192] dump_stack+0x185/0x1d0 [ 39.355799] panic+0x3d0/0x990 [ 39.358975] kmsan_report+0x29e/0x2a0 [ 39.362767] __msan_warning_32+0x70/0xc0 [ 39.366811] nfqnl_recv_config+0x939/0x17d0 [ 39.371109] ? mutex_lock+0x31/0x90 [ 39.374718] ? nfqnl_recv_verdict+0x2330/0x2330 [ 39.379371] nfnetlink_rcv_msg+0xb2e/0xc80 [ 39.383588] netlink_rcv_skb+0x37e/0x600 [ 39.387635] ? nfnetlink_bind+0x1d0/0x1d0 [ 39.391771] nfnetlink_rcv+0x2fe/0x680 [ 39.395637] ? nfnetlink_net_exit_batch+0x270/0x270 [ 39.400630] netlink_unicast+0x1680/0x1750 [ 39.404845] ? nfnetlink_net_exit_batch+0x270/0x270 [ 39.409848] netlink_sendmsg+0x104f/0x1350 [ 39.414076] ? netlink_getsockopt+0xc60/0xc60 [ 39.418556] ___sys_sendmsg+0xec8/0x1320 [ 39.422608] ? __fdget+0x4e/0x60 [ 39.425951] ? __fget_light+0x57/0x700 [ 39.429816] ? __fdget+0x4e/0x60 [ 39.433168] ? __fget_light+0x1dc/0x700 [ 39.437129] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 39.442471] ? __fget_light+0x1f5/0x700 [ 39.446430] __x64_sys_sendmsg+0x331/0x460 [ 39.450646] ? ___sys_sendmsg+0x1320/0x1320 [ 39.454945] do_syscall_64+0x15b/0x230 [ 39.458823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 39.463990] RIP: 0033:0x43fd59 [ 39.467158] RSP: 002b:00007ffde0e30d28 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 39.474844] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd59 [ 39.482100] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 39.489353] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 39.496604] R10: 00000000004002c8 R11: 0000000000000213 R12: 0000000000401680 [ 39.503849] R13: 0000000000401710 R14: 0000000000000000 R15: 0000000000000000 [ 39.511640] Dumping ftrace buffer: [ 39.515162] (ftrace buffer empty) [ 39.518855] Kernel Offset: disabled [ 39.522456] Rebooting in 86400 seconds..