[....] Starting OpenBSD Secure Shell server: sshd[ 19.762894] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.095692] random: sshd: uninitialized urandom read (32 bytes read) [ 24.466188] sshd (4535) used greatest stack depth: 16840 bytes left [ 24.487162] random: sshd: uninitialized urandom read (32 bytes read) [ 25.351120] random: sshd: uninitialized urandom read (32 bytes read) [ 30.640131] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.53' (ECDSA) to the list of known hosts. [ 36.143875] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 36.413050] kasan: CONFIG_KASAN_INLINE enabled [ 36.417761] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 36.425129] general protection fault: 0000 [#1] SMP KASAN [ 36.430679] CPU: 1 PID: 4557 Comm: syz-executor104 Not tainted 4.18.0-rc3+ #130 [ 36.438127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.447577] RIP: 0010:__lock_acquire+0x245/0x5020 [ 36.452390] Code: 28 00 00 00 0f 85 03 34 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 c6 35 00 00 49 81 7d 00 60 66 e7 89 0f 84 42 ff [ 36.471491] RSP: 0018:ffff8801ab887340 EFLAGS: 00010002 [ 36.476877] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 36.484156] RDX: 0000000000000049 RSI: 0000000000000000 RDI: ffffffff88f1b060 [ 36.491592] RBP: ffff8801ab8876d0 R08: 0000000000000001 R09: 0000000000000000 [ 36.498848] R10: ffffed003b5e46d6 R11: 0000000000000001 R12: 0000000000000000 [ 36.506116] R13: 0000000000000248 R14: ffff8801ab8ba300 R15: 0000000000000000 [ 36.513379] FS: 00007f3c39b16700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 36.521948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.527809] CR2: 00007fffaa101d90 CR3: 00000001ac062000 CR4: 00000000001406e0 [ 36.535061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.542326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.549578] Call Trace: [ 36.552848] ? print_usage_bug+0xc0/0xc0 [ 36.556896] ? trace_hardirqs_on+0x10/0x10 [ 36.561148] ? __lock_acquire+0x7fc/0x5020 [ 36.565380] ? lock_downgrade+0x8f0/0x8f0 [ 36.569532] ? trace_hardirqs_on+0x10/0x10 [ 36.573774] ? is_bpf_text_address+0xd7/0x170 [ 36.578400] ? kernel_text_address+0x79/0xf0 [ 36.582882] ? __kernel_text_address+0xd/0x40 [ 36.587365] ? unwind_get_return_address+0x61/0xa0 [ 36.592277] ? perf_trace_lock+0xde/0x920 [ 36.596412] ? zap_class+0x740/0x740 [ 36.600134] ? save_stack+0xa9/0xd0 [ 36.603770] lock_acquire+0x1e4/0x540 [ 36.607561] ? smap_list_hash_remove+0xa3/0x470 [ 36.612217] ? lock_release+0xa30/0xa30 [ 36.616168] ? graph_lock+0x170/0x170 [ 36.620661] ? print_usage_bug+0xc0/0xc0 [ 36.624703] ? find_held_lock+0x36/0x1c0 [ 36.628747] _raw_spin_lock_bh+0x31/0x40 [ 36.632885] ? smap_list_hash_remove+0xa3/0x470 [ 36.637534] smap_list_hash_remove+0xa3/0x470 [ 36.642011] ? psock_map_pop.isra.26+0x3b0/0x3b0 [ 36.646748] ? __lock_is_held+0xb5/0x140 [ 36.650789] sock_hash_ctx_update_elem.isra.27+0x1140/0x1690 [ 36.656573] ? sock_map_free+0x530/0x530 [ 36.660620] ? rcu_is_watching+0x8c/0x150 [ 36.664771] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 36.669263] ? __fget+0x414/0x670 [ 36.672718] ? expand_files.part.8+0x9c0/0x9c0 [ 36.677305] ? find_held_lock+0x36/0x1c0 [ 36.681372] sock_hash_update_elem+0x157/0x2f0 [ 36.685968] ? bpf_sock_hash_update+0x90/0x90 [ 36.690553] ? kasan_check_read+0x11/0x20 [ 36.694699] ? rcu_is_watching+0x8c/0x150 [ 36.698845] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 36.703261] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 36.708794] ? bpf_sock_hash_update+0x90/0x90 [ 36.713274] map_update_elem+0x5c4/0xc90 [ 36.717329] __x64_sys_bpf+0x32d/0x510 [ 36.721219] ? bpf_prog_get+0x20/0x20 [ 36.725019] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.729501] ? do_syscall_64+0x9a/0x820 [ 36.733456] do_syscall_64+0x1b9/0x820 [ 36.737330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 36.742252] ? syscall_return_slowpath+0x31d/0x5e0 [ 36.747165] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 36.752506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.757334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 36.762519] RIP: 0033:0x4457c9 [ 36.765689] Code: e8 3c b6 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 36.784794] RSP: 002b:00007f3c39b15db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.792492] RAX: ffffffffffffffda RBX: 00000000006dac3c RCX: 00000000004457c9 [ 36.799747] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 36.807002] RBP: 00000000006dac38 R08: 0000000000000000 R09: 0000000000000000 [ 36.814256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.821519] R13: 00007ffe4cd08d2f R14: 00007f3c39b169c0 R15: 0000000000000007 [ 36.828788] Modules linked in: [ 36.831973] Dumping ftrace buffer: [ 36.835486] (ftrace buffer empty) [ 36.839179] ---[ end trace e86c69ab6ef99831 ]--- [ 36.843919] RIP: 0010:__lock_acquire+0x245/0x5020 [ 36.848737] Code: 28 00 00 00 0f 85 03 34 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 c6 35 00 00 49 81 7d 00 60 66 e7 89 0f 84 42 ff [ 36.867892] RSP: 0018:ffff8801ab887340 EFLAGS: 00010002 [ 36.873232] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 36.880477] RDX: 0000000000000049 RSI: 0000000000000000 RDI: ffffffff88f1b060 [ 36.887746] RBP: ffff8801ab8876d0 R08: 0000000000000001 R09: 0000000000000000 [ 36.895443] R10: ffffed003b5e46d6 R11: 0000000000000001 R12: 0000000000000000 [ 36.902701] R13: 0000000000000248 R14: ffff8801ab8ba300 R15: 0000000000000000 [ 36.909970] FS: 00007f3c39b16700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 36.918183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.924041] CR2: 00007fffaa101d90 CR3: 00000001ac062000 CR4: 00000000001406e0 [ 36.932513] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.939774] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.947036] Kernel panic - not syncing: Fatal exception in interrupt [ 36.953900] Dumping ftrace buffer: [ 36.957423] (ftrace buffer empty) [ 36.961122] Kernel Offset: disabled [ 36.964742] Rebooting in 86400 seconds..