[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.819643] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.260625] random: sshd: uninitialized urandom read (32 bytes read) [ 23.530832] random: sshd: uninitialized urandom read (32 bytes read) [ 24.376232] random: sshd: uninitialized urandom read (32 bytes read) [ 24.552488] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts. [ 30.064045] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.263010] kasan: CONFIG_KASAN_INLINE enabled [ 30.267653] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 30.275015] general protection fault: 0000 [#1] SMP KASAN [ 30.280537] CPU: 0 PID: 4555 Comm: syz-executor410 Not tainted 4.18.0-rc3+ #134 [ 30.287962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.297319] RIP: 0010:__lock_acquire+0x245/0x5020 [ 30.302134] Code: 28 00 00 00 0f 85 03 34 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 c6 35 00 00 49 81 7d 00 60 86 e7 89 0f 84 42 ff [ 30.321262] RSP: 0018:ffff8801b6e77340 EFLAGS: 00010002 [ 30.326605] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 30.333952] RDX: 0000000000000049 RSI: 0000000000000000 RDI: ffffffff88f1b060 [ 30.341205] RBP: ffff8801b6e776d0 R08: 0000000000000001 R09: 0000000000000000 [ 30.348458] R10: ffffed003b5c46d6 R11: 0000000000000001 R12: 0000000000000000 [ 30.355716] R13: 0000000000000248 R14: ffff8801affea2c0 R15: 0000000000000000 [ 30.362968] FS: 00007fe810897700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 30.371182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.377042] CR2: 00007ffe0bdfbfd8 CR3: 00000001afc66000 CR4: 00000000001406f0 [ 30.384294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.391551] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.399244] Call Trace: [ 30.401823] ? print_usage_bug+0xc0/0xc0 [ 30.405872] ? trace_hardirqs_on+0x10/0x10 [ 30.410113] ? __lock_acquire+0x7fc/0x5020 [ 30.415556] ? lock_downgrade+0x8f0/0x8f0 [ 30.419692] ? trace_hardirqs_on+0x10/0x10 [ 30.423912] ? is_bpf_text_address+0xd7/0x170 [ 30.428391] ? kernel_text_address+0x79/0xf0 [ 30.432782] ? __kernel_text_address+0xd/0x40 [ 30.437263] ? unwind_get_return_address+0x61/0xa0 [ 30.442188] ? __save_stack_trace+0x8d/0xf0 [ 30.446499] ? save_stack+0xa9/0xd0 [ 30.450286] lock_acquire+0x1e4/0x540 [ 30.454076] ? smap_list_hash_remove+0xa3/0x470 [ 30.458912] ? lock_release+0xa30/0xa30 [ 30.462878] ? graph_lock+0x170/0x170 [ 30.466662] ? print_usage_bug+0xc0/0xc0 [ 30.470705] ? find_held_lock+0x36/0x1c0 [ 30.474752] _raw_spin_lock_bh+0x31/0x40 [ 30.478795] ? smap_list_hash_remove+0xa3/0x470 [ 30.483451] smap_list_hash_remove+0xa3/0x470 [ 30.487930] ? psock_map_pop.isra.26+0x3b0/0x3b0 [ 30.492671] ? __lock_is_held+0xb5/0x140 [ 30.496721] sock_hash_ctx_update_elem.isra.27+0x1140/0x1690 [ 30.502504] ? sock_map_free+0x530/0x530 [ 30.506560] ? rcu_is_watching+0x8c/0x150 [ 30.510701] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 30.515094] ? __fget+0x414/0x670 [ 30.518531] ? expand_files.part.8+0x9c0/0x9c0 [ 30.523133] ? find_held_lock+0x36/0x1c0 [ 30.527189] sock_hash_update_elem+0x157/0x2f0 [ 30.531770] ? bpf_sock_hash_update+0x90/0x90 [ 30.536272] ? kasan_check_read+0x11/0x20 [ 30.540403] ? rcu_is_watching+0x8c/0x150 [ 30.544542] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 30.548938] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 30.554471] ? bpf_sock_hash_update+0x90/0x90 [ 30.559037] map_update_elem+0x5c4/0xc90 [ 30.563081] __x64_sys_bpf+0x32d/0x510 [ 30.566951] ? bpf_prog_get+0x20/0x20 [ 30.570804] ? do_syscall_64+0x9a/0x820 [ 30.574766] do_syscall_64+0x1b9/0x820 [ 30.578728] ? finish_task_switch+0x1d3/0x890 [ 30.583209] ? syscall_return_slowpath+0x5e0/0x5e0 [ 30.588138] ? syscall_return_slowpath+0x31d/0x5e0 [ 30.593059] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 30.598438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.603285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 30.608563] RIP: 0033:0x445689 [ 30.611733] Code: e8 3c b6 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 30.630875] RSP: 002b:00007fe810896db8 EFLAGS: 00000297 ORIG_RAX: 0000000000000141 [ 30.638568] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 0000000000445689 [ 30.646157] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 30.653678] RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000 [ 30.660935] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 30.668464] R13: 00007ffff14be8df R14: 00007fe8108979c0 R15: 0000000000000005 [ 30.675729] Modules linked in: [ 30.678908] Dumping ftrace buffer: [ 30.682430] (ftrace buffer empty) [ 30.686131] ---[ end trace 3c112832d3ac0cc0 ]--- [ 30.691619] RIP: 0010:__lock_acquire+0x245/0x5020 [ 30.696446] Code: 28 00 00 00 0f 85 03 34 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 c6 35 00 00 49 81 7d 00 60 86 e7 89 0f 84 42 ff [ 30.715578] RSP: 0018:ffff8801b6e77340 EFLAGS: 00010002 [ 30.720936] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 30.728187] RDX: 0000000000000049 RSI: 0000000000000000 RDI: ffffffff88f1b060 [ 30.735443] RBP: ffff8801b6e776d0 R08: 0000000000000001 R09: 0000000000000000 [ 30.742693] R10: ffffed003b5c46d6 R11: 0000000000000001 R12: 0000000000000000 [ 30.749944] R13: 0000000000000248 R14: ffff8801affea2c0 R15: 0000000000000000 [ 30.757199] FS: 00007fe810897700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 30.765417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.771300] CR2: 00007ffe0bdfbfd8 CR3: 00000001afc66000 CR4: 00000000001406f0 [ 30.778573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.785852] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.793107] Kernel panic - not syncing: Fatal exception in interrupt [ 30.800274] Dumping ftrace buffer: [ 30.803811] (ftrace buffer empty) [ 30.807937] Kernel Offset: disabled [ 30.811571] Rebooting in 86400 seconds..