[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 14.109184] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.051466] random: sshd: uninitialized urandom read (32 bytes read) [ 19.376847] random: sshd: uninitialized urandom read (32 bytes read) [ 20.355637] random: sshd: uninitialized urandom read (32 bytes read) [ 20.498715] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. [ 25.993357] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/10 22:00:03 parsed 1 programs [ 27.206625] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/10 22:00:05 executed programs: 0 [ 28.751758] IPVS: Creating netns size=2536 id=1 [ 28.783964] IPVS: Creating netns size=2536 id=2 [ 28.808541] IPVS: Creating netns size=2536 id=3 [ 28.824232] IPVS: Creating netns size=2536 id=4 [ 28.851530] IPVS: Creating netns size=2536 id=5 [ 28.873620] IPVS: Creating netns size=2536 id=6 [ 28.916178] IPVS: Creating netns size=2536 id=7 [ 28.932098] IPVS: Creating netns size=2536 id=8 [ 29.018518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.031976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.124749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.168023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.175805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.201709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.263234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.285855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.304768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.326666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.346575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.360053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.372547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.384546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.397726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.405170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.412768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.440214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.455057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.467573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.481668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.498007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.511899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.542656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.552730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.563027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.573342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.583711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.592622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.612484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.624721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.637889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.651047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.666682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.674928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.687915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.696076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.713955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.741506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.765358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.782939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.792755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.804693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.812693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.824533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.836658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.848768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.861122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.877394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.885434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.894539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.903648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.915349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.925416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 29.938089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.951312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.961093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.969564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.978232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 29.990108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.998043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.006871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 30.016571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.025424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.040021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 30.051619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.061402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.072895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 30.083165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.091095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.103967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 30.130002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 30.156817] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 30.166635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.174730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.195830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 30.209582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.217104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.943584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.102198] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.113104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.120366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.131274] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.266660] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.275821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.283856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.293571] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.429870] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.436068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.443779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.453029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.464922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.474565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.576275] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.588029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.594771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.612219] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.623205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.634065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.643922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.659639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.666397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.675896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.737403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.743816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.753483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.773502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.916955] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.926613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.933601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.272589] hrtimer: interrupt took 29210 ns 2018/07/10 22:00:11 executed programs: 8 2018/07/10 22:00:16 executed programs: 52 2018/07/10 22:00:21 executed programs: 96 2018/07/10 22:00:26 executed programs: 140 2018/07/10 22:00:31 executed programs: 184 2018/07/10 22:00:36 executed programs: 228 2018/07/10 22:00:41 executed programs: 271 2018/07/10 22:00:46 executed programs: 315 2018/07/10 22:00:51 executed programs: 358 2018/07/10 22:00:57 executed programs: 403 [ 82.377031] kasan: CONFIG_KASAN_INLINE enabled [ 82.381690] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 82.389084] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 82.395302] Dumping ftrace buffer: [ 82.398833] (ftrace buffer empty) [ 82.402541] Modules linked in: [ 82.405854] CPU: 0 PID: 9388 Comm: syz-executor3 Not tainted 4.9.111-g03c70fe #6 [ 82.413367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.422705] task: ffff8801d6d7e000 task.stack: ffff8801c6110000 [ 82.428749] RIP: 0010:[] [] perf_output_read+0x62d/0x12e0 [ 82.437633] RSP: 0018:ffff8801c6116ff0 EFLAGS: 00010207 [ 82.443062] RAX: 000000000000001b RBX: 0000000000000004 RCX: 0000000000000000 [ 82.450330] RDX: 0000000000000000 RSI: ffffffff813fd5af RDI: 00000000000000dc [ 82.457611] RBP: ffff8801c6117150 R08: ffffed003969ba09 R09: ffffed003969ba08 [ 82.464868] R10: ffffed003969ba08 R11: ffff8801cb4dd047 R12: ffff8801d7226dc8 [ 82.472118] R13: ffff8801c6117318 R14: dffffc0000000000 R15: ffff8801d7226d50 [ 82.479367] FS: 00007f3bc5cb2700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 82.487604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.493470] CR2: 0000000000000001 CR3: 00000001bea7c000 CR4: 00000000001606f0 [ 82.500721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.507971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.515231] Stack: [ 82.517356] ffff8801d97b029c 00000000000000b8 ffff8801c6117320 ffffed0038c22e64 [ 82.525370] 0000000000000008 0000000000000000 ffff8801cc20c400 ffffed0038c22e67 [ 82.533391] 1ffff10038c22e0d ffff8801cc20cca0 ffff8801c6117338 ffff8801c6117330 [ 82.541396] Call Trace: [ 82.543974] [] ? perf_mmap_fault+0x570/0x570 [ 82.550021] [] ? perf_output_copy+0x15e/0x1e0 [ 82.556161] [] perf_output_sample+0xedb/0x1770 [ 82.562389] [] ? put_callchain_buffers+0x60/0x60 [ 82.568907] [] ? sched_clock_cpu+0x144/0x1c0 [ 82.574947] [] ? perf_event__output_id_sample+0x80/0x80 [ 82.581943] [] ? perf_callchain+0x158/0x1a0 [ 82.587893] [] perf_event_output_forward+0x126/0x230 [ 82.594627] [] ? perf_prepare_sample+0xf40/0xf40 [ 82.601009] [] ? perf_prepare_sample+0xf40/0xf40 [ 82.607419] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 82.614247] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 82.620817] [] ? __this_cpu_preempt_check+0x1c/0x20 [ 82.627462] [] __perf_event_overflow+0x11f/0x320 [ 82.633852] [] perf_swevent_overflow+0x161/0x1f0 [ 82.640240] [] perf_swevent_event+0x115/0x270 [ 82.646369] [] perf_tp_event+0x234/0x660 [ 82.652078] [] ? pagecache_get_page+0x131/0x720 [ 82.658387] [] ? perf_swevent_put_recursion_context+0xa0/0xa0 [ 82.665899] [] ? __find_get_block_slow+0x263/0x330 [ 82.672456] [] ? __might_sleep+0x95/0x1a0 [ 82.678229] [] ? unmap_underlying_metadata+0x88/0x100 [ 82.685059] [] ? ext4_da_write_end+0x7a9/0xbf0 [ 82.691282] [] ? ext4_inode_attach_jinode.part.74+0x150/0x150 [ 82.698794] [] ? __breadahead+0xf0/0xf0 [ 82.704397] [] ? ext4_inode_attach_jinode.part.74+0x150/0x150 [ 82.711912] [] ? check_preemption_disabled+0x3b/0x170 [ 82.718732] [] ? check_preemption_disabled+0x3b/0x170 [ 82.725551] [] perf_trace_run_bpf_submit+0xec/0x140 [ 82.732223] [] perf_trace_android_fs_data_end_template+0x2f4/0x4a0 [ 82.740181] [] ? __blockdev_direct_IO+0xd0/0xd0 [ 82.746482] [] ? ext4_write_end+0xdb0/0xdb0 [ 82.752445] [] ? lock_is_held+0xff/0x140 [ 82.758136] [] ? __blockdev_direct_IO+0xd0/0xd0 [ 82.764433] [] ext4_da_write_end+0x7a9/0xbf0 [ 82.770490] [] generic_perform_write+0x3b9/0x510 [ 82.776891] [] ? page_endio+0x180/0x180 [ 82.782503] [] ? file_update_time+0xbc/0x390 [ 82.788563] [] ? current_time+0xd0/0xd0 [ 82.794178] [] ? check_preemption_disabled+0x3b/0x170 [ 82.801000] [] ? retint_kernel+0x2d/0x2d [ 82.806691] [] __generic_file_write_iter+0x352/0x540 [ 82.813523] [] ? ext4_file_write_iter+0x2dd/0xd90 [ 82.820089] [] ext4_file_write_iter+0x463/0xd90 [ 82.826386] [] ? putname+0xdb/0x110 [ 82.831657] [] ? mark_held_locks+0xc7/0x130 [ 82.837615] [] ? ext4_file_open+0x920/0x920 [ 82.843574] [] ? mark_held_locks+0xc7/0x130 [ 82.849543] [] ? retint_kernel+0x2d/0x2d [ 82.855265] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 82.862093] [] ? iov_iter_init+0xaf/0x1d0 [ 82.867868] [] __vfs_write+0x3e0/0x580 [ 82.873416] [] ? check_preemption_disabled+0x3b/0x170 [ 82.880232] [] ? default_llseek+0x280/0x280 [ 82.886188] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 82.892841] [] ? __sb_start_write+0x161/0x300 [ 82.898984] [] vfs_write+0x187/0x530 [ 82.904330] [] SyS_write+0xd9/0x1c0 [ 82.909586] [] ? SyS_read+0x1c0/0x1c0 [ 82.915044] [] ? do_syscall_64+0x48/0x490 [ 82.920832] [] ? SyS_read+0x1c0/0x1c0 [ 82.926262] [] do_syscall_64+0x1a6/0x490 [ 82.931956] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 82.938872] Code: 74 08 3c 03 0f 8e 52 0a 00 00 41 83 bf 88 00 00 00 01 0f 84 14 07 00 00 e8 61 14 f6 ff 48 8d bb d8 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 12 0a 00 00 48 8b 9b d8 00 00 00 48 85 db [ 82.965939] RIP [] perf_output_read+0x62d/0x12e0 [ 82.972457] RSP [ 82.976186] ---[ end trace 11a657e1111a2a8d ]--- [ 82.980953] Kernel panic - not syncing: Fatal exception [ 82.986880] Dumping ftrace buffer: [ 82.990427] (ftrace buffer empty) [ 82.994111] Kernel Offset: disabled [ 82.998493] Rebooting in 86400 seconds..