[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.945521] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.597360] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 21.966774] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 22.901637] random: sshd: uninitialized urandom read (32 bytes read, 101 bits of entropy available) [ 34.936513] random: sshd: uninitialized urandom read (32 bytes read, 111 bits of entropy available) Warning: Permanently added 'ci-android-44-kasan-gce-1,10.128.0.53' (ECDSA) to the list of known hosts. [ 40.410790] random: sshd: uninitialized urandom read (32 bytes read, 119 bits of entropy available) executing program [ 40.558523] ================================================================== [ 40.566263] BUG: KASAN: stack-out-of-bounds in strnlen+0xc1/0xd0 [ 40.572407] Read of size 1 at addr ffff8800b1617d04 by task syzkaller571346/3345 [ 40.579933] [ 40.581592] CPU: 0 PID: 3345 Comm: syzkaller571346 Not tainted 4.4.107-g610c835 #12 [ 40.589381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.598743] 0000000000000000 2a6869ff3369ed8e ffff8800b1617758 ffffffff81d0457d [ 40.606791] ffffea0002c585c0 ffff8800b1617d04 0000000000000000 ffff8800b1617d04 [ 40.614824] ffffffff856b29c0 ffff8800b1617790 ffffffff814fbb23 ffff8800b1617d04 [ 40.622843] Call Trace: [ 40.625434] [] dump_stack+0xc1/0x124 [ 40.630806] [] print_address_description+0x73/0x260 [ 40.637479] [] kasan_report+0x285/0x370 [ 40.643104] [] ? strnlen+0xc1/0xd0 [ 40.648296] [] __asan_report_load1_noabort+0x14/0x20 [ 40.655054] [] strnlen+0xc1/0xd0 [ 40.660064] [] string.isra.4+0x4c/0x240 [ 40.665667] [] ? format_decode+0x118/0xa50 [ 40.671531] [] vsnprintf+0x766/0x15f0 [ 40.676959] [] ? pointer.isra.22+0xa00/0xa00 [ 40.683002] [] vscnprintf+0x2d/0x60 [ 40.688280] [] vprintk_emit+0xdb/0x850 [ 40.693803] [] ? mark_held_locks+0xaf/0x100 [ 40.699754] [] vprintk+0x28/0x30 [ 40.704782] [] vprintk_default+0x1d/0x30 [ 40.710699] [] printk+0xb7/0xe2 [ 40.715609] [] ? pm_qos_get_value.part.4+0xb/0xb [ 40.721997] [] ? __ww_mutex_lock+0x14f0/0x14f0 [ 40.728217] [] do_ip_vs_set_ctl+0x9b7/0xba0 [ 40.734223] [] ? ip_vs_genl_set_cmd+0x9a0/0x9a0 [ 40.740524] [] ? __lock_is_held+0xa1/0xf0 [ 40.746308] [] ? mark_held_locks+0xaf/0x100 [ 40.752268] [] ? mutex_lock_nested+0x5d4/0x850 [ 40.759363] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 40.766185] [] ? mutex_unlock+0x9/0x10 [ 40.771705] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 40.778785] [] nf_setsockopt+0x67/0xc0 [ 40.784306] [] ip_setsockopt+0xa1/0xb0 [ 40.789841] [] udp_setsockopt+0x45/0x80 [ 40.795457] [] sock_common_setsockopt+0x95/0xd0 [ 40.801772] [] SyS_setsockopt+0x160/0x250 [ 40.807587] [] ? vmacache_update+0xfe/0x130 [ 40.813562] [] ? SyS_recv+0x40/0x40 [ 40.818836] [] ? retint_user+0x18/0x20 [ 40.824368] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 40.830954] [] entry_SYSCALL_64_fastpath+0x16/0x76 [ 40.837529] [ 40.839147] The buggy address belongs to the page: [ 40.844062] page:ffffea0002c585c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 40.852184] flags: 0x4000000000000000() [ 40.856245] page dumped because: kasan: bad access detected [ 40.861944] [ 40.863555] Memory state around the buggy address: [ 40.868475] ffff8800b1617c00: 00 00 00 00 00 04 f2 f2 f2 f2 f2 f2 00 00 00 00 [ 40.875808] ffff8800b1617c80: 00 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 00 [ 40.883160] >ffff8800b1617d00: 04 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.890512] ^ [ 40.893877] ffff8800b1617d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.901230] ffff8800b1617e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.908588] ================================================================== [ 40.915939] Kernel panic - not syncing: panic_on_warn set ... [ 40.915939] [ 40.923297] CPU: 0 PID: 3345 Comm: syzkaller571346 Tainted: G B 4.4.107-g610c835 #12 [ 40.932303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.941639] 0000000000000000 2a6869ff3369ed8e ffff8800b16176b0 ffffffff81d0457d [ 40.949613] ffffffff83fb2cde ffff8800b1617788 0000000000000000 ffff8800b1617d04 [ 40.957575] ffffffff856b29c0 ffff8800b1617778 ffffffff8141774a 0000000041b58ab3 [ 40.965538] Call Trace: [ 40.968107] [] dump_stack+0xc1/0x124 [ 40.973451] [] panic+0x1aa/0x388 [ 40.978453] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 40.985364] [] ? pm_qos_get_value.part.4+0xb/0xb [ 40.991750] [] kasan_end_report+0x50/0x50 [ 40.997527] [] kasan_report+0x15c/0x370 [ 41.003152] [] ? strnlen+0xc1/0xd0 [ 41.008319] [] __asan_report_load1_noabort+0x14/0x20 [ 41.015042] [] strnlen+0xc1/0xd0 [ 41.020029] [] string.isra.4+0x4c/0x240 [ 41.025631] [] ? format_decode+0x118/0xa50 [ 41.031499] [] vsnprintf+0x766/0x15f0 [ 41.036941] [] ? pointer.isra.22+0xa00/0xa00 [ 41.042980] [] vscnprintf+0x2d/0x60 [ 41.048239] [] vprintk_emit+0xdb/0x850 [ 41.053754] [] ? mark_held_locks+0xaf/0x100 [ 41.059707] [] vprintk+0x28/0x30 [ 41.064699] [] vprintk_default+0x1d/0x30 [ 41.070384] [] printk+0xb7/0xe2 [ 41.075294] [] ? pm_qos_get_value.part.4+0xb/0xb [ 41.081678] [] ? __ww_mutex_lock+0x14f0/0x14f0 [ 41.087906] [] do_ip_vs_set_ctl+0x9b7/0xba0 [ 41.093855] [] ? ip_vs_genl_set_cmd+0x9a0/0x9a0 [ 41.100156] [] ? __lock_is_held+0xa1/0xf0 [ 41.105930] [] ? mark_held_locks+0xaf/0x100 [ 41.111888] [] ? mutex_lock_nested+0x5d4/0x850 [ 41.118100] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 41.124918] [] ? mutex_unlock+0x9/0x10 [ 41.130437] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 41.137530] [] nf_setsockopt+0x67/0xc0 [ 41.143060] [] ip_setsockopt+0xa1/0xb0 [ 41.148586] [] udp_setsockopt+0x45/0x80 [ 41.154196] [] sock_common_setsockopt+0x95/0xd0 [ 41.160514] [] SyS_setsockopt+0x160/0x250 [ 41.166292] [] ? vmacache_update+0xfe/0x130 [ 41.172238] [] ? SyS_recv+0x40/0x40 [ 41.177491] [] ? retint_user+0x18/0x20 [ 41.183010] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 41.189574] [] entry_SYSCALL_64_fastpath+0x16/0x76 [ 41.196515] Dumping ftrace buffer: [ 41.200031] (ftrace buffer empty) [ 41.203712] Kernel Offset: disabled [ 41.207310] Rebooting in 86400 seconds..