[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.213540] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.398504] random: sshd: uninitialized urandom read (32 bytes read) [ 23.705654] random: sshd: uninitialized urandom read (32 bytes read) [ 24.550346] random: sshd: uninitialized urandom read (32 bytes read) [ 24.735124] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. [ 30.242331] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 30.346100] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 30.365524] kasan: CONFIG_KASAN_INLINE enabled [ 30.370251] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 30.377718] general protection fault: 0000 [#1] SMP KASAN [ 30.383264] CPU: 1 PID: 4548 Comm: syz-executor796 Not tainted 4.18.0-rc3+ #2 [ 30.390525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.399890] RIP: 0010:do_tcp_getsockopt.isra.43+0x2f9d/0x3c10 [ 30.405764] Code: 3c 03 0f 8e 46 08 00 00 89 9d 10 fd ff ff e8 1a d9 15 fb 49 8d be 80 00 00 00 be ff ff 37 00 48 89 f8 48 c1 e6 2a 48 c1 e8 03 <0f> b6 04 30 84 c0 74 08 3c 03 0f 8e cd 06 00 00 48 8b 85 50 fc ff [ 30.424905] RSP: 0018:ffff8801d8e57860 EFLAGS: 00010202 [ 30.430262] RAX: 0000000000000010 RBX: 0000000000000000 RCX: ffffffff8666321d [ 30.437530] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000080 [ 30.444789] RBP: ffff8801d8e57c60 R08: ffff8801d895a100 R09: ffffed003b11c0df [ 30.452075] R10: ffffed003b11c0df R11: ffff8801d88e06ff R12: 0000000000001000 [ 30.459340] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801d8e579b0 [ 30.466607] FS: 00000000010dd880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 30.474821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.480693] CR2: 0000000020005000 CR3: 00000001d91ef000 CR4: 00000000001406e0 [ 30.487954] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.495222] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.502485] Call Trace: [ 30.505079] ? tcp_ioctl+0x730/0x730 [ 30.508792] ? tcp_disconnect+0x9d7/0x1490 [ 30.513033] ? graph_lock+0x170/0x170 [ 30.516828] ? graph_lock+0x170/0x170 [ 30.520616] ? tcp_disconnect+0xd6d/0x1490 [ 30.524930] ? release_sock+0x1ec/0x2c0 [ 30.528895] ? find_held_lock+0x36/0x1c0 [ 30.532957] ? lock_downgrade+0x8f0/0x8f0 [ 30.537092] ? lock_downgrade+0x8f0/0x8f0 [ 30.541227] ? kasan_check_read+0x11/0x20 [ 30.545383] ? do_raw_spin_unlock+0xa7/0x2f0 [ 30.549786] ? __local_bh_enable_ip+0x161/0x230 [ 30.554460] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.559466] ? release_sock+0x1ec/0x2c0 [ 30.563432] ? trace_hardirqs_on+0xd/0x10 [ 30.567749] ? __local_bh_enable_ip+0x161/0x230 [ 30.572408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.577936] ? __fget_light+0x2f7/0x440 [ 30.581907] ? fget_raw+0x20/0x20 [ 30.585362] ? inet_stream_connect+0x7b/0xa0 [ 30.590195] tcp_getsockopt+0xc1/0xe0 [ 30.594010] ? tcp_getsockopt+0xc1/0xe0 [ 30.597985] sock_common_getsockopt+0x9a/0xe0 [ 30.602482] __sys_getsockopt+0x1ad/0x390 [ 30.606620] ? kernel_setsockopt+0x1d0/0x1d0 [ 30.611026] __x64_sys_getsockopt+0xbe/0x150 [ 30.615433] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.620435] do_syscall_64+0x1b9/0x820 [ 30.624316] ? syscall_return_slowpath+0x5e0/0x5e0 [ 30.629235] ? syscall_return_slowpath+0x31d/0x5e0 [ 30.634173] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 30.639538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.644373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 30.649557] RIP: 0033:0x440279 [ 30.652723] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 30.671847] RSP: 002b:00007fffa1ed2248 EFLAGS: 00000217 ORIG_RAX: 0000000000000037 [ 30.679547] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440279 [ 30.686803] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 30.694075] RBP: 00000000006cb018 R08: 0000000020000040 R09: 0000000000000080 [ 30.701344] R10: 0000000020000000 R11: 0000000000000217 R12: 0000000000401b00 [ 30.708619] R13: 0000000000401b90 R14: 0000000000000000 R15: 0000000000000000 [ 30.715873] Modules linked in: [ 30.719058] Dumping ftrace buffer: [ 30.722575] (ftrace buffer empty) [ 30.726325] ---[ end trace f4f7ee77f342678f ]--- [ 30.731121] RIP: 0010:do_tcp_getsockopt.isra.43+0x2f9d/0x3c10 [ 30.737022] Code: 3c 03 0f 8e 46 08 00 00 89 9d 10 fd ff ff e8 1a d9 15 fb 49 8d be 80 00 00 00 be ff ff 37 00 48 89 f8 48 c1 e6 2a 48 c1 e8 03 <0f> b6 04 30 84 c0 74 08 3c 03 0f 8e cd 06 00 00 48 8b 85 50 fc ff [ 30.756274] RSP: 0018:ffff8801d8e57860 EFLAGS: 00010202 [ 30.761671] RAX: 0000000000000010 RBX: 0000000000000000 RCX: ffffffff8666321d [ 30.769049] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000080 [ 30.776354] RBP: ffff8801d8e57c60 R08: ffff8801d895a100 R09: ffffed003b11c0df [ 30.783655] R10: ffffed003b11c0df R11: ffff8801d88e06ff R12: 0000000000001000 [ 30.790958] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801d8e579b0 [ 30.798252] FS: 00000000010dd880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 30.806494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.812508] CR2: 0000000020005000 CR3: 00000001d91ef000 CR4: 00000000001406e0 [ 30.819901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.827194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.834490] Kernel panic - not syncing: Fatal exception [ 30.840375] Dumping ftrace buffer: [ 30.843908] (ftrace buffer empty) [ 30.847629] Kernel Offset: disabled [ 30.851283] Rebooting in 86400 seconds..