[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.394127] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [ 12.865928] random: sshd: uninitialized urandom read (32 bytes read) [ 13.002946] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 13.798965] random: sshd: uninitialized urandom read (32 bytes read) [ 17.427600] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. [ 22.939132] random: sshd: uninitialized urandom read (32 bytes read) 2018/04/29 09:13:24 parsed 1 programs 2018/04/29 09:13:24 executed programs: 0 [ 23.348792] IPVS: Creating netns size=2536 id=1 2018/04/29 09:13:29 executed programs: 1001 2018/04/29 09:13:34 executed programs: 2006 [ 35.848865] ================================================================== [ 35.856246] BUG: KASAN: out-of-bounds in __unwind_start+0x37c/0x3c0 [ 35.862625] Read of size 8 at addr ffff8801d55ff810 by task syz-executor0/10150 [ 35.870037] [ 35.871639] CPU: 1 PID: 10150 Comm: syz-executor0 Not tainted 4.9.96-g71fce1e #13 [ 35.879236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.888562] ffff8801d56bf760 ffffffff81eb0b69 ffffea0007557fc0 ffff8801d55ff810 [ 35.896554] 0000000000000000 ffff8801d55ff818 ffff8801d56bf898 ffff8801d56bf798 [ 35.904538] ffffffff8156540b ffff8801d55ff810 0000000000000008 0000000000000000 [ 35.912523] Call Trace: [ 35.915091] [] dump_stack+0xc1/0x128 [ 35.920425] [] print_address_description+0x6c/0x234 [ 35.927061] [] kasan_report.cold.6+0x242/0x2fe [ 35.933265] [] ? __unwind_start+0x37c/0x3c0 [ 35.939208] [] __asan_report_load8_noabort+0x14/0x20 [ 35.945931] [] __unwind_start+0x37c/0x3c0 [ 35.951699] [] ? ptrace_may_access+0x24/0x50 [ 35.957733] [] __save_stack_trace+0x59/0xf0 [ 35.963677] [] save_stack_trace_tsk+0x48/0x70 [ 35.969795] [] proc_pid_stack+0x148/0x220 [ 35.975561] [] ? lock_trace+0xc0/0xc0 [ 35.980984] [] proc_single_show+0xfd/0x170 [ 35.986840] [] seq_read+0x4b6/0x12e0 [ 35.992175] [] ? seq_dentry+0x290/0x290 [ 35.997791] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 36.006251] [] ? fsnotify+0x1100/0x1100 [ 36.011849] [] do_loop_readv_writev.part.18+0xd5/0x280 [ 36.018747] [] compat_do_readv_writev+0x567/0x7a0 [ 36.025216] [] ? do_pwritev+0x240/0x240 [ 36.030816] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 36.037726] [] ? debug_check_no_obj_freed+0x2ec/0x930 [ 36.044537] [] ? __fget+0x20a/0x3b0 [ 36.049783] [] ? __fget+0x231/0x3b0 [ 36.055030] [] ? __fget+0x47/0x3b0 [ 36.060189] [] compat_readv+0xe2/0x150 [ 36.065695] [] do_compat_preadv64+0x152/0x180 [ 36.071815] [] ? do_compat_readv+0x1d0/0x1d0 [ 36.077851] [] ? up_read+0x1a/0x40 [ 36.083013] [] compat_SyS_preadv+0x3b/0x50 [ 36.088872] [] ? compat_SyS_preadv64+0x40/0x40 [ 36.095074] [] do_fast_syscall_32+0x2f7/0x870 [ 36.101189] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.107824] [] entry_SYSENTER_compat+0x90/0xa2 [ 36.114024] [ 36.115620] The buggy address belongs to the page: [ 36.120522] page:ffffea0007557fc0 count:0 mapcount:0 mapping: (null) index:0x0 [ 36.128751] flags: 0x8000000000000000() [ 36.132690] page dumped because: kasan: bad access detected [ 36.138367] [ 36.139965] Memory state around the buggy address: [ 36.144866] ffff8801d55ff700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.152197] ffff8801d55ff780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.159549] >ffff8801d55ff800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.166877] ^ [ 36.170993] ffff8801d55ff880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.178322] ffff8801d55ff900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.185647] ================================================================== [ 36.192975] Disabling lock debugging due to kernel taint [ 36.199268] Kernel panic - not syncing: panic_on_warn set ... [ 36.199268] [ 36.206627] CPU: 1 PID: 10150 Comm: syz-executor0 Tainted: G B 4.9.96-g71fce1e #13 [ 36.215432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.224759] ffff8801d56bf6c0 ffffffff81eb0b69 ffffffff841c492d 00000000ffffffff [ 36.232740] 0000000000000000 0000000000000001 ffff8801d56bf898 ffff8801d56bf780 [ 36.240714] ffffffff8141f975 0000000041b58ab3 ffffffff841b8030 ffffffff8141f7b6 [ 36.248690] Call Trace: [ 36.251251] [] dump_stack+0xc1/0x128 [ 36.256591] [] panic+0x1bf/0x3bc [ 36.261585] [] ? add_taint.cold.6+0x16/0x16 [ 36.267533] [] ? ___preempt_schedule+0x16/0x18 [ 36.273741] [] kasan_end_report+0x47/0x4f [ 36.279508] [] kasan_report.cold.6+0x76/0x2fe [ 36.285631] [] ? __unwind_start+0x37c/0x3c0 [ 36.291574] [] __asan_report_load8_noabort+0x14/0x20 [ 36.298301] [] __unwind_start+0x37c/0x3c0 [ 36.304078] [] ? ptrace_may_access+0x24/0x50 [ 36.310106] [] __save_stack_trace+0x59/0xf0 [ 36.316132] [] save_stack_trace_tsk+0x48/0x70 [ 36.322248] [] proc_pid_stack+0x148/0x220 [ 36.328015] [] ? lock_trace+0xc0/0xc0 [ 36.333436] [] proc_single_show+0xfd/0x170 [ 36.339290] [] seq_read+0x4b6/0x12e0 [ 36.344623] [] ? seq_dentry+0x290/0x290 [ 36.350221] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 36.358680] [] ? fsnotify+0x1100/0x1100 [ 36.364277] [] do_loop_readv_writev.part.18+0xd5/0x280 [ 36.371173] [] compat_do_readv_writev+0x567/0x7a0 [ 36.377635] [] ? do_pwritev+0x240/0x240 [ 36.383231] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 36.390139] [] ? debug_check_no_obj_freed+0x2ec/0x930 [ 36.396954] [] ? __fget+0x20a/0x3b0 [ 36.402207] [] ? __fget+0x231/0x3b0 [ 36.407453] [] ? __fget+0x47/0x3b0 [ 36.412611] [] compat_readv+0xe2/0x150 [ 36.418121] [] do_compat_preadv64+0x152/0x180 [ 36.424235] [] ? do_compat_readv+0x1d0/0x1d0 [ 36.430263] [] ? up_read+0x1a/0x40 [ 36.435424] [] compat_SyS_preadv+0x3b/0x50 [ 36.441276] [] ? compat_SyS_preadv64+0x40/0x40 [ 36.447479] [] do_fast_syscall_32+0x2f7/0x870 [ 36.453592] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.460237] [] entry_SYSENTER_compat+0x90/0xa2 [ 36.466870] Dumping ftrace buffer: [ 36.470382] (ftrace buffer empty) [ 36.474061] Kernel Offset: disabled [ 36.477657] Rebooting in 86400 seconds..