[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.967493] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.010782] random: sshd: uninitialized urandom read (32 bytes read) [ 26.518636] random: sshd: uninitialized urandom read (32 bytes read) [ 27.238417] random: sshd: uninitialized urandom read (32 bytes read) [ 27.362859] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. [ 32.737885] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/28 07:03:37 parsed 1 programs [ 33.801925] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/28 07:03:39 executed programs: 0 [ 34.891804] IPVS: ftp: loaded support on port[0] = 21 [ 35.034877] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.041309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.048202] device bridge_slave_0 entered promiscuous mode [ 35.060916] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.067308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.074256] device bridge_slave_1 entered promiscuous mode [ 35.086794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.100654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.132450] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.147972] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.193532] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 35.200688] team0: Port device team_slave_0 added [ 35.212332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 35.219389] team0: Port device team_slave_1 added [ 35.231404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.243444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.256402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.270749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.351236] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.357651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.364311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.370651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.662476] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 35.668579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.701122] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 35.734720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.741913] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 35.770537] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 35.776633] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.972709] ================================================================== [ 35.980156] BUG: KASAN: stack-out-of-bounds in notify_die+0x2c2/0x2e0 [ 35.986722] Write of size 8 at addr ffff8801d6dbf1f8 by task syz-executor0/4607 [ 35.994144] [ 35.995755] CPU: 0 PID: 4607 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 36.004135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.013590] Call Trace: [ 36.016166] [ 36.017769] The buggy address belongs to the page: [