[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 23.088568] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 23.421307] random: sshd: uninitialized urandom read (32 bytes read) [ 23.718807] random: sshd: uninitialized urandom read (32 bytes read) [ 24.244147] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.756407] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. [ 30.231266] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 30.329388] kasan: CONFIG_KASAN_INLINE enabled [ 30.334021] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 30.341364] general protection fault: 0000 [#1] SMP KASAN [ 30.346899] CPU: 0 PID: 4447 Comm: syz-executor869 Not tainted 4.18.0-rc8-next-20180810+ #36 [ 30.355450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.364792] RIP: 0010:__lock_acquire+0x245/0x5020 [ 30.369632] Code: 28 00 00 00 0f 85 03 34 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 c6 35 00 00 49 81 7d 00 a0 f2 d2 88 0f 84 42 ff [ 30.388520] RSP: 0018:ffff8801ac5d6fb0 EFLAGS: 00010006 [ 30.393887] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 30.401135] RDX: 0000000000000039 RSI: 0000000000000000 RDI: ffffffff87f1b3a0 [ 30.408387] RBP: ffff8801ac5d7338 R08: 0000000000000001 R09: 0000000000000000 [ 30.415635] R10: ffffed0035821089 R11: 0000000000000001 R12: 0000000000000000 [ 30.422883] R13: 00000000000001c8 R14: ffff8801af22e700 R15: 0000000000000000 [ 30.430146] FS: 0000000001abe880(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 30.438375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.444235] CR2: 0000000020000200 CR3: 00000001d9ac7000 CR4: 00000000001426f0 [ 30.451504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.458791] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.466065] Call Trace: [ 30.468637] ? kick_process+0x110/0x110 [ 30.472592] ? vmx_vcpu_put+0x34/0x50 [ 30.476383] ? native_set_debugreg+0x31/0x40 [ 30.480776] ? kvm_arch_vcpu_put+0x2ef/0x420 [ 30.485169] ? trace_hardirqs_on+0x10/0x10 [ 30.489384] ? __lock_acquire+0x7fc/0x5020 [ 30.493620] ? kvm_arch_vcpu_put+0x420/0x420 [ 30.498016] ? lock_downgrade+0x8f0/0x8f0 [ 30.502144] ? trace_hardirqs_on+0x10/0x10 [ 30.506383] ? graph_lock+0x170/0x170 [ 30.510163] ? lock_downgrade+0x8f0/0x8f0 [ 30.514291] ? trace_hardirqs_off+0xd/0x10 [ 30.518509] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 30.523607] ? kasan_check_read+0x11/0x20 [ 30.527748] ? do_raw_spin_unlock+0xa7/0x2f0 [ 30.532154] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 30.536733] ? calc_wheel_index+0x260/0x260 [ 30.541116] ? print_usage_bug+0xc0/0xc0 [ 30.545174] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 30.550258] ? add_timer+0x5f1/0x1410 [ 30.554062] lock_acquire+0x1e4/0x540 [ 30.557846] ? kvm_ioapic_scan_entry+0x7f/0x3c0 [ 30.562503] ? lock_release+0xa30/0xa30 [ 30.566468] ? vmx_flush_tlb_gva+0x380/0x380 [ 30.570861] _raw_spin_lock+0x2a/0x40 [ 30.574643] ? kvm_ioapic_scan_entry+0x7f/0x3c0 [ 30.579293] kvm_ioapic_scan_entry+0x7f/0x3c0 [ 30.583794] vcpu_enter_guest+0x494b/0x6360 [ 30.588115] ? kasan_check_write+0x14/0x20 [ 30.592330] ? __mutex_lock+0x6d0/0x1700 [ 30.596375] ? kvm_set_msr_common+0x2680/0x2680 [ 30.601026] ? vmx_set_virtual_apic_mode+0x7d0/0x7d0 [ 30.606114] ? vmx_vcpu_load+0xad2/0xfe0 [ 30.610187] ? find_held_lock+0x36/0x1c0 [ 30.614228] ? handle_dr+0x8c0/0x8c0 [ 30.617923] ? graph_lock+0x170/0x170 [ 30.621706] ? lock_downgrade+0x8f0/0x8f0 [ 30.625854] ? kvm_arch_vcpu_postcreate+0xdf/0x290 [ 30.630766] ? __lock_is_held+0xb5/0x140 [ 30.634913] ? lock_acquire+0x1e4/0x540 [ 30.638900] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 30.643894] ? lock_release+0xa30/0xa30 [ 30.647844] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 30.653101] ? kvm_arch_dev_ioctl+0x610/0x610 [ 30.657578] ? preempt_notifier_dec+0x20/0x20 [ 30.662059] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 30.666915] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 30.671929] kvm_vcpu_ioctl+0x7b8/0x1300 [ 30.675975] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 30.681705] ? is_bpf_text_address+0xd7/0x170 [ 30.686195] ? kernel_text_address+0x79/0xf0 [ 30.690586] ? __kernel_text_address+0xd/0x40 [ 30.695066] ? unwind_get_return_address+0x61/0xa0 [ 30.699978] ? __save_stack_trace+0x8d/0xf0 [ 30.704287] ? save_stack+0xa9/0xd0 [ 30.708010] ? save_stack+0x43/0xd0 [ 30.711633] ? __kasan_slab_free+0x11a/0x170 [ 30.716037] ? kasan_slab_free+0xe/0x10 [ 30.720017] ? putname+0xf2/0x130 [ 30.723449] ? do_sys_open+0x569/0x720 [ 30.727314] ? __x64_sys_openat+0x9d/0x100 [ 30.731536] ? do_syscall_64+0x1b9/0x820 [ 30.735607] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 30.740956] ? kasan_check_read+0x11/0x20 [ 30.745086] ? do_raw_spin_unlock+0xa7/0x2f0 [ 30.749476] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 30.754043] ? initcall_blacklisted+0x9a/0x1e0 [ 30.758609] ? do_raw_spin_lock+0xc1/0x200 [ 30.762824] ? trace_hardirqs_off+0xd/0x10 [ 30.767095] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 30.772203] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 30.777896] do_vfs_ioctl+0x1de/0x1720 [ 30.781788] ? rcu_is_watching+0x8c/0x150 [ 30.785917] ? ioctl_preallocate+0x300/0x300 [ 30.790310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.795867] ? __fget_light+0x2f7/0x440 [ 30.799820] ? fget_raw+0x20/0x20 [ 30.803253] ? putname+0xf2/0x130 [ 30.806714] ? rcu_read_lock_sched_held+0x108/0x120 [ 30.811711] ? kmem_cache_free+0x25c/0x2d0 [ 30.815932] ? putname+0xf7/0x130 [ 30.819382] ? security_file_ioctl+0x94/0xc0 [ 30.823788] ksys_ioctl+0xa9/0xd0 [ 30.827223] __x64_sys_ioctl+0x73/0xb0 [ 30.831103] do_syscall_64+0x1b9/0x820 [ 30.834971] ? syscall_return_slowpath+0x5e0/0x5e0 [ 30.839886] ? syscall_return_slowpath+0x31d/0x5e0 [ 30.844818] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 30.850164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.854986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 30.860170] RIP: 0033:0x440169 [ 30.863347] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 30.882229] RSP: 002b:00007ffed93f2ab8 EFLAGS: 00000203 ORIG_RAX: 0000000000000010 [ 30.889917] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440169 [ 30.897167] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 30.904416] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 30.911699] R10: 00000000004002c8 R11: 0000000000000203 R12: 00000000004019f0 [ 30.918957] R13: 0000000000401a80 R14: 0000000000000000 R15: 0000000000000000 [ 30.926205] Modules linked in: [ 30.929393] Dumping ftrace buffer: [ 30.932908] (ftrace buffer empty) [ 30.936609] ---[ end trace 609645f9c6a93bb3 ]--- [ 30.941346] RIP: 0010:__lock_acquire+0x245/0x5020 [ 30.946168] Code: 28 00 00 00 0f 85 03 34 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 c6 35 00 00 49 81 7d 00 a0 f2 d2 88 0f 84 42 ff [ 30.965048] RSP: 0018:ffff8801ac5d6fb0 EFLAGS: 00010006 [ 30.970390] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 30.977638] RDX: 0000000000000039 RSI: 0000000000000000 RDI: ffffffff87f1b3a0 [ 30.984886] RBP: ffff8801ac5d7338 R08: 0000000000000001 R09: 0000000000000000 [ 30.992135] R10: ffffed0035821089 R11: 0000000000000001 R12: 0000000000000000 [ 30.999389] R13: 00000000000001c8 R14: ffff8801af22e700 R15: 0000000000000000 [ 31.006654] FS: 0000000001abe880(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 31.014861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.020719] CR2: 0000000020000200 CR3: 00000001d9ac7000 CR4: 00000000001426f0 [ 31.027980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.035232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.042497] Kernel panic - not syncing: Fatal exception [ 31.048264] Dumping ftrace buffer: [ 31.051793] (ftrace buffer empty) [ 31.055495] Kernel Offset: disabled [ 31.059102] Rebooting in 86400 seconds..