[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.473421] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. [ 17.200487] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) [ 17.470595] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.287195] random: sshd: uninitialized urandom read (32 bytes read, 97 bits of entropy available) [ 24.560262] random: sshd: uninitialized urandom read (32 bytes read, 106 bits of entropy available) Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. [ 29.943829] random: sshd: uninitialized urandom read (32 bytes read, 115 bits of entropy available) executing program [ 30.033908] kasan: CONFIG_KASAN_INLINE enabled [ 30.038341] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 30.051138] Dumping ftrace buffer: [ 30.054752] (ftrace buffer empty) [ 30.058431] Modules linked in: [ 30.061711] CPU: 1 PID: 3322 Comm: syzkaller021093 Not tainted 4.4.107-g610c835 #12 [ 30.069473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.078799] task: ffff8800b53a2f80 task.stack: ffff8801d1f60000 [ 30.084820] RIP: 0010:[] [] sg_read+0xd1d/0x1490 [ 30.092872] RSP: 0018:ffff8801d1f67b00 EFLAGS: 00010246 [ 30.098287] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff825bb194 [ 30.105534] RDX: 0000000000000000 RSI: 0000000020001024 RDI: ffff8801d1772270 [ 30.112771] RBP: ffff8801d1f67c08 R08: 8551c99c2a45b4bd R09: 0000000000000001 [ 30.120006] R10: 0000000000000000 R11: 1ffff1003a3ecf26 R12: 0000000000000037 [ 30.127244] R13: 0000000000000000 R14: ffff8801d1ec6840 R15: ffff8801d1772240 [ 30.134483] FS: 0000000002217880(0063) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 30.142677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.148525] CR2: 000000000043e690 CR3: 00000001d1d3d000 CR4: 00000000001406e0 [ 30.155764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.163009] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.170244] Stack: [ 30.172359] 0000000000000000 000077ff80000000 ffff8801d1f67b60 ffff8801d1772258 [ 30.180305] 0000000000000008 ffff8801d1772268 000000000000005b 0000000000000008 [ 30.188259] ffff8800b7e83180 0000000000001000 1ffff1003a3ecf6c 0000000020001024 [ 30.196202] Call Trace: [ 30.198756] [] ? sg_proc_seq_show_debug+0xd30/0xd30 [ 30.205389] [] ? fsnotify+0xee0/0xee0 [ 30.211091] [] ? avc_policy_seqno+0x9/0x20 [ 30.216945] [] do_loop_readv_writev+0x141/0x1e0 [ 30.223231] [] ? security_file_permission+0x89/0x1e0 [ 30.229948] [] ? sg_proc_seq_show_debug+0xd30/0xd30 [ 30.236578] [] ? sg_proc_seq_show_debug+0xd30/0xd30 [ 30.243211] [] do_readv_writev+0x5dd/0x6e0 [ 30.249061] [] ? vfs_write+0x530/0x530 [ 30.254576] [] ? sg_ioctl+0x2c20/0x2c20 [ 30.260175] [] ? __vfs_write+0x10b/0x450 [ 30.265866] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 30.272776] [] ? quarantine_put+0xab/0x180 [ 30.278637] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.285449] [] ? rw_verify_area+0x100/0x2f0 [ 30.291390] [] vfs_readv+0x78/0xb0 [ 30.296548] [] SyS_readv+0xd9/0x240 [ 30.301790] [] ? rw_copy_check_uvector+0x2d0/0x2d0 [ 30.308337] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 30.314798] [] entry_SYSCALL_64_fastpath+0x16/0x76 [ 30.321343] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 97 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5f 28 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 6b 06 00 00 48 8b 1b 48 85 db 0f 84 3b 03 00 [ 30.347625] RIP [] sg_read+0xd1d/0x1490 [ 30.353337] RSP [ 30.357020] ---[ end trace eb340aac74ac183e ]--- [ 30.361754] Kernel panic - not syncing: Fatal exception [ 30.367486] Dumping ftrace buffer: [ 30.371008] (ftrace buffer empty) [ 30.374685] Kernel Offset: disabled [ 30.378283] Rebooting in 86400 seconds..