[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 56.217874] random: sshd: uninitialized urandom read (32 bytes read) [ 56.790692] kauditd_printk_skb: 9 callbacks suppressed [ 56.790700] audit: type=1400 audit(1555007015.752:35): avc: denied { map } for pid=6897 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 56.849010] random: sshd: uninitialized urandom read (32 bytes read) [ 57.408443] random: sshd: uninitialized urandom read (32 bytes read) [ 57.589496] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. [ 63.272509] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 63.391676] audit: type=1400 audit(1555007022.352:36): avc: denied { map } for pid=6909 comm="syz-executor027" path="/root/syz-executor027474892" dev="sda1" ino=16461 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 63.397817] INFO: trying to register non-static key. [ 63.423284] the code is fine but needs lockdep annotation. [ 63.429031] turning off the locking correctness validator. [ 63.435203] CPU: 1 PID: 6909 Comm: syz-executor027 Not tainted 4.14.111 #1 [ 63.442397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.453876] Call Trace: [ 63.456460] dump_stack+0x138/0x19c [ 63.460176] register_lock_class+0x2fd/0x1730 [ 63.464760] ? cpuacct_charge+0x1db/0x360 [ 63.468972] ? find_held_lock+0x35/0x130 [ 63.473082] ? check_noncircular+0x20/0x20 [ 63.477398] __lock_acquire+0x147/0x45e0 [ 63.481556] ? save_trace+0x290/0x290 [ 63.485351] ? __lock_acquire+0x5f9/0x45e0 [ 63.489752] ? __lock_is_held+0xb6/0x140 [ 63.493810] ? trace_hardirqs_on+0x10/0x10 [ 63.498292] ? trace_hardirqs_on+0x10/0x10 [ 63.502902] ? save_trace+0x290/0x290 [ 63.506688] ? check_preemption_disabled+0x3c/0x250 [ 63.511685] ? finish_task_switch+0x178/0x660 [ 63.516159] ? find_held_lock+0x35/0x130 [ 63.520289] lock_acquire+0x16f/0x430 [ 63.524066] ? flush_work+0x84/0x730 [ 63.527756] flush_work+0xae/0x730 [ 63.531273] ? flush_work+0x84/0x730 [ 63.535134] ? insert_work+0x320/0x320 [ 63.538996] ? finish_task_switch+0x178/0x660 [ 63.543588] ? finish_task_switch+0x14d/0x660 [ 63.548130] ? __switch_to_asm+0x24/0x60 [ 63.552184] ? __switch_to_asm+0x30/0x60 [ 63.556226] ? __schedule+0x7c6/0x1cf0 [ 63.560096] ? mark_held_locks+0xb1/0x100 [ 63.564398] ? __cancel_work_timer+0x166/0x480 [ 63.568993] __cancel_work_timer+0x2f0/0x480 [ 63.573387] ? cancel_delayed_work+0x20/0x20 [ 63.577785] ? preempt_schedule+0x4b/0x60 [ 63.581933] ? smc_accept_dequeue+0x3b6/0x5e0 [ 63.586567] ? __local_bh_enable_ip+0x15e/0x1a0 [ 63.591226] cancel_work_sync+0x18/0x20 [ 63.595183] smc_close_active+0x6d2/0xc10 [ 63.599316] smc_release+0x45f/0x640 [ 63.603009] __sock_release+0xd3/0x2c0 [ 63.607092] ? __sock_release+0x2c0/0x2c0 [ 63.611289] sock_close+0x1b/0x30 [ 63.614845] __fput+0x277/0x7a0 [ 63.618105] ____fput+0x16/0x20 [ 63.621371] task_work_run+0x119/0x190 [ 63.625252] do_exit+0x7df/0x2c10 [ 63.628697] ? mm_update_next_owner+0x5d0/0x5d0 [ 63.633449] ? release_sock+0x14c/0x1c0 [ 63.637474] ? smc_listen+0x141/0x400 [ 63.641261] ? SyS_listen+0x186/0x230 [ 63.645042] do_group_exit+0x111/0x330 [ 63.648925] SyS_exit_group+0x1d/0x20 [ 63.652709] ? do_group_exit+0x330/0x330 [ 63.656763] do_syscall_64+0x1eb/0x630 [ 63.660636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 63.665482] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 63.670657] RIP: 0033:0x43ed88 [ 63.673832] RSP: 002b:00007ffe79a72bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 63.681526] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ed88 [ 63.688780] RDX: 0000000000000000 RSI: 0000000