[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.507210] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.872674] random: sshd: uninitialized urandom read (32 bytes read) [ 22.139929] random: sshd: uninitialized urandom read (32 bytes read) [ 22.898603] random: sshd: uninitialized urandom read (32 bytes read) [ 23.019049] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. [ 28.401082] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/02 15:23:42 parsed 1 programs 2018/05/02 15:23:42 executed programs: 0 [ 28.837870] IPVS: Creating netns size=2536 id=1 2018/05/02 15:23:47 executed programs: 870 [ 35.730464] ================================================================== [ 35.737838] BUG: KASAN: out-of-bounds in __unwind_start+0x37c/0x3c0 [ 35.744212] Read of size 8 at addr ffff8801b4a97810 by task syz-executor0/6912 [ 35.751537] [ 35.753142] CPU: 1 PID: 6912 Comm: syz-executor0 Not tainted 4.9.97-g1321d42 #16 [ 35.760651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.769977] ffff8801d713f760 ffffffff81eb0b69 ffffea0006d2a5c0 ffff8801b4a97810 [ 35.777956] 0000000000000000 ffff8801b4a97818 ffff8801d713f898 ffff8801d713f798 [ 35.785935] ffffffff8156540b ffff8801b4a97810 0000000000000008 0000000000000000 [ 35.793916] Call Trace: [ 35.796477] [] dump_stack+0xc1/0x128 [ 35.801812] [] print_address_description+0x6c/0x234 [ 35.808448] [] kasan_report.cold.6+0x242/0x2fe [ 35.814659] [] ? __unwind_start+0x37c/0x3c0 [ 35.820602] [] __asan_report_load8_noabort+0x14/0x20 [ 35.827322] [] __unwind_start+0x37c/0x3c0 [ 35.833090] [] ? ptrace_may_access+0x24/0x50 [ 35.839119] [] __save_stack_trace+0x59/0xf0 [ 35.845061] [] save_stack_trace_tsk+0x48/0x70 [ 35.851177] [] proc_pid_stack+0x148/0x220 [ 35.856945] [] ? lock_trace+0xc0/0xc0 [ 35.862369] [] proc_single_show+0xfd/0x170 [ 35.868227] [] seq_read+0x4b6/0x12e0 [ 35.873566] [] ? seq_dentry+0x290/0x290 [ 35.879163] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 35.887624] [] ? fsnotify+0x1100/0x1100 [ 35.893229] [] do_loop_readv_writev.part.18+0xd5/0x280 [ 35.900127] [] compat_do_readv_writev+0x567/0x7a0 [ 35.906595] [] ? do_pwritev+0x240/0x240 [ 35.912195] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 35.919093] [] ? debug_check_no_obj_freed+0x2ec/0x930 [ 35.925918] [] ? check_preemption_disabled+0x3b/0x170 [ 35.932727] [] ? __fget+0x20a/0x3b0 [ 35.937978] [] ? __fget+0x231/0x3b0 [ 35.943231] [] ? __fget+0x47/0x3b0 [ 35.948389] [] compat_readv+0xe2/0x150 [ 35.953902] [] do_compat_preadv64+0x152/0x180 [ 35.960014] [] ? do_compat_readv+0x1d0/0x1d0 [ 35.966040] [] ? up_read+0x1a/0x40 [ 35.971206] [] compat_SyS_preadv+0x3b/0x50 [ 35.977067] [] ? compat_SyS_preadv64+0x40/0x40 [ 35.983268] [] do_fast_syscall_32+0x2f7/0x870 [ 35.989383] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.996018] [] entry_SYSENTER_compat+0x90/0xa2 [ 36.002216] [ 36.003812] The buggy address belongs to the page: [ 36.008711] page:ffffea0006d2a5c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 36.016939] flags: 0x8000000000000000() [ 36.020892] page dumped because: kasan: bad access detected [ 36.026573] [ 36.028178] Memory state around the buggy address: [ 36.033077] ffff8801b4a97700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.040411] ffff8801b4a97780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.047741] >ffff8801b4a97800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.055074] ^ [ 36.059191] ffff8801b4a97880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.066519] ffff8801b4a97900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.073844] ================================================================== [ 36.081169] Disabling lock debugging due to kernel taint [ 36.086695] Kernel panic - not syncing: panic_on_warn set ... [ 36.086695] [ 36.094043] CPU: 1 PID: 6912 Comm: syz-executor0 Tainted: G B 4.9.97-g1321d42 #16 [ 36.102759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.112085] ffff8801d713f6c0 ffffffff81eb0b69 ffffffff843c4d05 00000000ffffffff [ 36.120061] 0000000000000000 0000000000000001 ffff8801d713f898 ffff8801d713f780 [ 36.128036] ffffffff8141f975 0000000041b58ab3 ffffffff843b8408 ffffffff8141f7b6 [ 36.136011] Call Trace: [ 36.138579] [] dump_stack+0xc1/0x128 [ 36.143913] [] panic+0x1bf/0x3bc [ 36.148898] [] ? add_taint.cold.6+0x16/0x16 [ 36.154839] [] ? ___preempt_schedule+0x16/0x18 [ 36.161040] [] kasan_end_report+0x47/0x4f [ 36.166806] [] kasan_report.cold.6+0x76/0x2fe [ 36.172927] [] ? __unwind_start+0x37c/0x3c0 [ 36.178869] [] __asan_report_load8_noabort+0x14/0x20 [ 36.185590] [] __unwind_start+0x37c/0x3c0 [ 36.191366] [] ? ptrace_may_access+0x24/0x50 [ 36.197400] [] __save_stack_trace+0x59/0xf0 [ 36.203346] [] save_stack_trace_tsk+0x48/0x70 [ 36.209467] [] proc_pid_stack+0x148/0x220 [ 36.215232] [] ? lock_trace+0xc0/0xc0 [ 36.220652] [] proc_single_show+0xfd/0x170 [ 36.226506] [] seq_read+0x4b6/0x12e0 [ 36.231838] [] ? seq_dentry+0x290/0x290 [ 36.237434] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 36.245891] [] ? fsnotify+0x1100/0x1100 [ 36.251487] [] do_loop_readv_writev.part.18+0xd5/0x280 [ 36.258388] [] compat_do_readv_writev+0x567/0x7a0 [ 36.264859] [] ? do_pwritev+0x240/0x240 [ 36.270456] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 36.277352] [] ? debug_check_no_obj_freed+0x2ec/0x930 [ 36.284160] [] ? check_preemption_disabled+0x3b/0x170 [ 36.290972] [] ? __fget+0x20a/0x3b0 [ 36.296218] [] ? __fget+0x231/0x3b0 [ 36.301475] [] ? __fget+0x47/0x3b0 [ 36.306639] [] compat_readv+0xe2/0x150 [ 36.312146] [] do_compat_preadv64+0x152/0x180 [ 36.318265] [] ? do_compat_readv+0x1d0/0x1d0 [ 36.324302] [] ? up_read+0x1a/0x40 [ 36.329474] [] compat_SyS_preadv+0x3b/0x50 [ 36.335334] [] ? compat_SyS_preadv64+0x40/0x40 [ 36.341541] [] do_fast_syscall_32+0x2f7/0x870 [ 36.347664] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.354311] [] entry_SYSENTER_compat+0x90/0xa2 [ 36.360968] Dumping ftrace buffer: [ 36.364477] (ftrace buffer empty) [ 36.368156] Kernel Offset: disabled [ 36.371751] Rebooting in 86400 seconds..