[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.852430] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.846505] random: sshd: uninitialized urandom read (32 bytes read) [ 23.211550] random: sshd: uninitialized urandom read (32 bytes read) [ 23.930759] random: sshd: uninitialized urandom read (32 bytes read) [ 614.273623] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. [ 619.967215] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 861.151181] INFO: task syz-executor531:4479 blocked for more than 140 seconds. [ 861.158666] Not tainted 4.18.0-rc5-next-20180720+ #12 [ 861.164417] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 861.172422] syz-executor531 D23744 4479 4475 0x00000004 [ 861.178195] Call Trace: [ 861.180981] __schedule+0x87c/0x1ea0 [ 861.184796] ? __sched_text_start+0x8/0x8 [ 861.189094] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 861.193921] ? kasan_check_write+0x14/0x20 [ 861.198375] ? do_raw_spin_lock+0xc1/0x200 [ 861.202768] ? trace_hardirqs_on+0xd/0x10 [ 861.206979] ? prepare_to_wait_event+0x396/0xc70 [ 861.211813] ? prepare_to_wait_exclusive+0x550/0x550 [ 861.216952] ? send_sigio+0x340/0x340 [ 861.220812] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.225251] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 861.229913] schedule+0xfb/0x450 [ 861.233304] ? lock_downgrade+0x8f0/0x8f0 [ 861.237487] ? __schedule+0x1ea0/0x1ea0 [ 861.241486] ? check_same_owner+0x340/0x340 [ 861.245831] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.250452] ? replenish_dl_entity.cold.54+0x37/0x37 [ 861.255642] request_wait_answer+0x4c8/0x920 [ 861.260102] ? fuse_read_forget.isra.22+0xdc0/0xdc0 [ 861.265429] ? finish_wait+0x430/0x430 [ 861.269350] ? send_sigio+0x340/0x340 [ 861.273179] ? lock_acquire+0x1e4/0x540 [ 861.277182] ? finish_wait+0x430/0x430 [ 861.281100] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 861.286629] ? finish_wait+0x430/0x430 [ 861.290596] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 861.295343] ? fuse_dev_ioctl+0x430/0x430 [ 861.299679] ? kasan_check_write+0x14/0x20 [ 861.304000] ? do_raw_spin_lock+0xc1/0x200 [ 861.308355] __fuse_request_send+0x12a/0x1d0 [ 861.312968] fuse_request_send+0x62/0xa0 [ 861.317203] fuse_simple_request+0x33d/0x730 [ 861.321709] fuse_lookup_name+0x3ee/0x830 [ 861.325920] ? fuse_valid_type+0xb0/0xb0 [ 861.330198] ? mutex_lock_nested+0x16/0x20 [ 861.334534] fuse_lookup+0xff/0x4c0 [ 861.338196] ? fuse_lookup_name+0x830/0x830 [ 861.342557] ? lock_release+0xa30/0xa30 [ 861.346686] ? d_lookup+0x221/0x340 [ 861.350361] fuse_atomic_open+0x223/0x350 [ 861.354562] ? fuse_lookup+0x4c0/0x4c0 [ 861.358477] lookup_open+0xdbb/0x1b90 [ 861.362338] ? vfs_link+0xb70/0xb70 [ 861.366120] ? down_read+0xb5/0x1d0 [ 861.369811] ? path_openat+0x26c5/0x5300 [ 861.373919] ? __down_interruptible+0x700/0x700 [ 861.378663] path_openat+0x26e5/0x5300 [ 861.382903] ? lock_acquire+0x1e4/0x540 [ 861.386916] ? is_bpf_text_address+0xae/0x170 [ 861.391450] ? path_lookupat.isra.45+0xc00/0xc00 [ 861.396258] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 861.400962] ? is_bpf_text_address+0xd7/0x170 [ 861.405581] ? kernel_text_address+0x79/0xf0 [ 861.410044] ? __kernel_text_address+0xd/0x40 [ 861.414589] ? unwind_get_return_address+0x61/0xa0 [ 861.419578] ? __save_stack_trace+0x8d/0xf0 [ 861.423946] ? trace_hardirqs_on+0x10/0x10 [ 861.428310] ? save_stack+0xa9/0xd0 [ 861.432060] ? save_stack+0x43/0xd0 [ 861.435704] ? kasan_kmalloc+0xc4/0xe0 [ 861.439709] ? kasan_slab_alloc+0x12/0x20 [ 861.443891] ? kmem_cache_alloc+0x12e/0x760 [ 861.448259] ? prepare_creds+0x80/0x3f0 [ 861.452266] ? prepare_exec_creds+0x11/0xf0 [ 861.456628] ? prepare_bprm_creds+0x70/0x120 [ 861.461268] ? __do_execve_file.isra.36+0x475/0x2760 [ 861.466402] ? __x64_sys_execve+0x8f/0xc0 [ 861.470577] ? do_syscall_64+0x1b9/0x820 [ 861.474663] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.480068] ? mutex_trylock+0x2b0/0x2b0 [ 861.484158] ? save_stack+0xa9/0xd0 [ 861.487825] do_filp_open+0x255/0x380 [ 861.491686] ? may_open_dev+0x100/0x100 [ 861.495717] ? check_same_owner+0x340/0x340 [ 861.500132] ? kasan_unpoison_shadow+0x35/0x50 [ 861.504794] do_open_execat+0x221/0x8e0 [ 861.509049] ? __do_execve_file.isra.36+0x913/0x2760 [ 861.514215] ? unregister_binfmt+0x2a0/0x2a0 [ 861.518870] ? kasan_check_read+0x11/0x20 [ 861.523131] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 861.527838] ? kasan_check_write+0x14/0x20 [ 861.532151] ? do_raw_spin_lock+0xc1/0x200 [ 861.536486] __do_execve_file.isra.36+0x1856/0x2760 [ 861.541676] ? prepare_bprm_creds+0x120/0x120 [ 861.546333] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 861.551555] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 861.556613] ? __check_object_size+0xa3/0x5d7 [ 861.561346] ? usercopy_warn+0x120/0x120 [ 861.565443] ? kasan_check_read+0x11/0x20 [ 861.569654] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.574113] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 861.578749] ? kasan_check_write+0x14/0x20 [ 861.583190] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 861.588850] ? strncpy_from_user+0x3be/0x510 [ 861.593473] ? mpi_free.cold.1+0x19/0x19 [ 861.597675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.603468] ? getname_flags+0x26e/0x5a0 [ 861.607707] __x64_sys_execve+0x8f/0xc0 [ 861.611770] do_syscall_64+0x1b9/0x820 [ 861.615735] ? syscall_return_slowpath+0x5e0/0x5e0 [ 861.620723] ? syscall_return_slowpath+0x31d/0x5e0 [ 861.625707] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 861.630859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 861.635741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.640969] RIP: 0033:0x445869 [ 861.644179] Code: Bad RIP value. [ 861.647594] RSP: 002b:00007f90dca8bda8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 861.655407] RAX: ffffffffffffffda RBX: 00000000006dac3c RCX: 0000000000445869 [ 861.662705] RDX: 0000000020000500 RSI: 0000000020000480 RDI: 00000000200001c0 [ 861.670044] RBP: 00000000006dac38 R08: 00007f90dca8c700 R09: 0000000000000000 [ 861.677423] R10: 00007f90dca8c700 R11: 0000000000000246 R12: 64695f70756f7267 [ 861.684973] R13: 7375662f7665642f R14: 2f30656c69662f2e R15: 0000000000000001 [ 861.692273] INFO: lockdep is turned off. [ 861.696485] NMI backtrace for cpu 1 [ 861.700146] CPU: 1 PID: 900 Comm: khungtaskd Not tainted 4.18.0-rc5-next-20180720+ #12 [ 861.708194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.717559] Call Trace: [ 861.720231] dump_stack+0x1c9/0x2b4 [ 861.723881] ? dump_stack_print_info.cold.2+0x52/0x52 [ 861.729256] ? vprintk_default+0x28/0x30 [ 861.733326] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 861.738526] nmi_cpu_backtrace.cold.3+0x48/0x88 [ 861.743201] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 861.748402] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 861.753678] arch_trigger_cpumask_backtrace+0x14/0x20 [ 861.758867] watchdog+0xb39/0x10b0 [ 861.762502] ? reset_hung_task_detector+0xd0/0xd0 [ 861.767540] ? kasan_check_read+0x11/0x20 [ 861.771873] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.777087] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 861.782990] ? __kthread_parkme+0x58/0x1b0 [ 861.787934] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 861.793046] ? trace_hardirqs_on+0xd/0x10 [ 861.797302] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 861.802915] ? __kthread_parkme+0x106/0x1b0 [ 861.807252] kthread+0x345/0x410 [ 861.810639] ? reset_hung_task_detector+0xd0/0xd0 [ 861.816083] ? kthread_bind+0x40/0x40 [ 861.820143] ret_from_fork+0x3a/0x50 [ 861.824032] Sending NMI from CPU 1 to CPUs 0: [ 861.828618] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 861.829569] Kernel panic - not syncing: hung_task: blocked tasks [ 861.842339] CPU: 1 PID: 900 Comm: khungtaskd Not tainted 4.18.0-rc5-next-20180720+ #12 [ 861.850481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.860099] Call Trace: [ 861.862769] dump_stack+0x1c9/0x2b4 [ 861.866408] ? dump_stack_print_info.cold.2+0x52/0x52 [ 861.871611] ? printk_safe_log_store+0x2f0/0x2f0 [ 861.876481] panic+0x238/0x4e7 [ 861.879687] ? add_taint.cold.5+0x16/0x16 [ 861.883859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.889394] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 861.895290] ? printk_safe_flush+0xd7/0x130 [ 861.899706] watchdog+0xb4a/0x10b0 [ 861.903233] ? reset_hung_task_detector+0xd0/0xd0 [ 861.908074] ? kasan_check_read+0x11/0x20 [ 861.912216] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.916616] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 861.921887] ? __kthread_parkme+0x58/0x1b0 [ 861.926103] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 861.931099] ? trace_hardirqs_on+0xd/0x10 [ 861.935228] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 861.940831] ? __kthread_parkme+0x106/0x1b0 [ 861.945131] kthread+0x345/0x410 [ 861.948480] ? reset_hung_task_detector+0xd0/0xd0 [ 861.953311] ? kthread_bind+0x40/0x40 [ 861.957363] ret_from_fork+0x3a/0x50 [ 861.961630] Dumping ftrace buffer: [ 861.965153] (ftrace buffer empty) [ 861.968850] Kernel Offset: disabled [ 861.972467] Rebooting in 86400 seconds..