random: sshd: uninitialized urandom read (32 bytes read, 43 bits of entropy available) random: sshd: uninitialized urandom read (32 bytes read, 43 bits of entropy available) random: nonblocking pool is initialized IPVS: Creating netns size=2552 id=1 ================================================================== BUG: KASAN: slab-out-of-bounds in ip6_dst_idev include/net/ip6_fib.h:141 [inline] BUG: KASAN: slab-out-of-bounds in ip6_xmit+0x1a2c/0x1a70 net/ipv6/ip6_output.c:237 Read of size 8 at addr ffff8801cccbc798 by task syz-executor0/4079 CPU: 0 PID: 4079 Comm: syz-executor0 Not tainted 4.4.120-gd63fdf6 #29 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 0000000000000000 b37f73626f75f742 ffff8800aaff7628 ffffffff81d0408d ffffea0007332f00 ffff8801cccbc798 0000000000000000 ffff8801cccbc798 0000000000000040 ffff8800aaff7660 ffffffff814fe143 ffff8801cccbc798 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x124 lib/dump_stack.c:51 [] print_address_description+0x73/0x260 mm/kasan/report.c:252 [] kasan_report_error mm/kasan/report.c:351 [inline] [] kasan_report+0x285/0x370 mm/kasan/report.c:408 [] __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:429 [] ip6_dst_idev include/net/ip6_fib.h:141 [inline] [] ip6_xmit+0x1a2c/0x1a70 net/ipv6/ip6_output.c:237 [] inet6_csk_xmit+0x246/0x480 net/ipv6/inet6_connection_sock.c:176 [] l2tp_xmit_core net/l2tp/l2tp_core.c:1084 [inline] [] l2tp_xmit_skb+0xc2f/0xea0 net/l2tp/l2tp_core.c:1179 [] pppol2tp_sendmsg+0x584/0x7f0 net/l2tp/l2tp_ppp.c:355 [] sock_sendmsg_nosec net/socket.c:625 [inline] [] sock_sendmsg+0xca/0x110 net/socket.c:635 [] ___sys_sendmsg+0x6c1/0x7c0 net/socket.c:1962 [] __sys_sendmsg+0xd3/0x190 net/socket.c:1996 [] C_SYSC_sendmsg net/compat.c:720 [inline] [] compat_SyS_sendmsg+0x2a/0x40 net/compat.c:718 [] do_syscall_32_irqs_on arch/x86/entry/common.c:392 [inline] [] do_fast_syscall_32+0x321/0x8a0 arch/x86/entry/common.c:459 [] sysenter_flags_fixed+0xd/0x17 Allocated by task 0: (stack is not available) Freed by task 0: (stack is not available) The buggy address belongs to the object at ffff8801cccbc780 which belongs to the cache ip_dst_cache of size 208 The buggy address is located 24 bytes inside of 208-byte region [ffff8801cccbc780, ffff8801cccbc850) The buggy address belongs to the page: ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at kernel/sched/sched.h:796 rq_clock_task kernel/sched/sched.h:796 [inline]() WARNING: CPU: 1 PID: 0 at kernel/sched/sched.h:796 cfs_rq_clock_task kernel/sched/fair.c:4568 [inline]() WARNING: CPU: 1 PID: 0 at kernel/sched/sched.h:796 update_load_avg+0xc6a/0x1b80 kernel/sched/fair.c:3177() Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.120-gd63fdf6 #29 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 0000000000000000 d7448d66f5a1c510 ffff8801d9b5fa28 ffffffff81d0408d ffffffff83843b40 ffff8801d9b5fb00 ffffffff83852b60 0000000000000009 000000000000031c ffff8801d9b5faf0 ffffffff8141ab2a 0000000041b58ab3 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x124 lib/dump_stack.c:51 [] panic+0x1aa/0x388 kernel/panic.c:112 [] warn_slowpath_common+0x125/0x140 kernel/panic.c:455 [] warn_slowpath_null+0x29/0x30 kernel/panic.c:492 [] rq_clock_task kernel/sched/sched.h:796 [inline] [] cfs_rq_clock_task kernel/sched/fair.c:4568 [inline] [] update_load_avg+0xc6a/0x1b80 kernel/sched/fair.c:3177 [] set_next_entity+0x2bd/0x3d0 kernel/sched/fair.c:3688 [] pick_next_task_fair+0xb11/0x2220 kernel/sched/fair.c:7108 [] pick_next_task kernel/sched/core.c:3189 [inline] [] __schedule+0xc44/0x1ca0 kernel/sched/core.c:3306 [] schedule+0x7a/0x1b0 kernel/sched/core.c:3353 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3386 [] cpu_idle_loop kernel/sched/idle.c:279 [inline] [] cpu_startup_entry+0x2c0/0x8f0 kernel/sched/idle.c:301 [] start_secondary+0x304/0x3e0 arch/x86/kernel/smpboot.c:242 Shutting down cpus with NMI Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..