[....] Starting OpenBSD Secure Shell server: sshd[ 21.006897] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.794953] random: sshd: uninitialized urandom read (32 bytes read) [ 25.066573] sshd (4452) used greatest stack depth: 16776 bytes left [ 25.083291] random: sshd: uninitialized urandom read (32 bytes read) [ 25.766233] random: sshd: uninitialized urandom read (32 bytes read) [ 54.223990] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.16' (ECDSA) to the list of known hosts. [ 59.671193] random: sshd: uninitialized urandom read (32 bytes read) 2018/04/29 03:09:54 parsed 1 programs 2018/04/29 03:09:54 executed programs: 0 [ 60.136813] IPVS: ftp: loaded support on port[0] = 21 [ 65.094052] kasan: CONFIG_KASAN_INLINE enabled [ 65.098857] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 65.106296] general protection fault: 0000 [#1] SMP KASAN [ 65.111824] Dumping ftrace buffer: [ 65.115343] (ftrace buffer empty) [ 65.119036] Modules linked in: [ 65.122209] CPU: 0 PID: 5238 Comm: syz-executor0 Not tainted 4.17.0-rc2+ #47 [ 65.129371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.138714] RIP: 0010:__radix_tree_delete+0x74/0x230 [ 65.143790] RSP: 0018:ffff8801b743f168 EFLAGS: 00010246 [ 65.149131] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 1ffff10036e87e4a [ 65.156393] RDX: 0000000000000000 RSI: ffffffff8768eeed RDI: ffff8801aad8f5a8 [ 65.163642] RBP: ffff8801b743f208 R08: ffff8801adc3a1c0 R09: ffffed00355b1e99 [ 65.170895] R10: ffff8801b743f318 R11: ffff8801aad8f4cf R12: 0000000000000000 [ 65.178145] R13: ffff8801aad8f5a8 R14: 0000000000000001 R15: ffff8801b743f290 [ 65.185405] FS: 0000000000000000(0000) GS:ffff8801dae00000(0063) knlGS:00000000f7f8cb40 [ 65.193611] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 65.199470] CR2: 00007f3e13e9d000 CR3: 00000001b3e5f000 CR4: 00000000001426f0 [ 65.206721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.213968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.221218] Call Trace: [ 65.223791] ? find_held_lock+0x36/0x1c0 [ 65.227832] ? radix_tree_tag_clear+0x490/0x490 [ 65.232481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 65.238012] radix_tree_delete_item+0x148/0x2d0 [ 65.242665] ? radix_tree_lookup+0x30/0x30 [ 65.246889] ? retint_kernel+0x10/0x10 [ 65.250767] idr_remove+0x46/0x60 [ 65.254199] kvm_vm_ioctl_hv_eventfd+0x1df/0x24b [ 65.258936] kvm_arch_vm_ioctl+0x155e/0x2690 [ 65.263322] ? print_usage_bug+0xc0/0xc0 [ 65.267362] ? kvm_vm_ioctl_irq_line+0x160/0x160 [ 65.272094] ? lock_downgrade+0x8e0/0x8e0 [ 65.276218] ? lock_downgrade+0x8e0/0x8e0 [ 65.280348] ? kasan_check_read+0x11/0x20 [ 65.284473] ? graph_lock+0x170/0x170 [ 65.288252] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 65.292814] ? trace_hardirqs_on+0xd/0x10 [ 65.296945] ? graph_lock+0x170/0x170 [ 65.300738] ? __lock_is_held+0xb5/0x140 [ 65.304792] ? print_usage_bug+0xc0/0xc0 [ 65.308831] ? debug_check_no_locks_freed+0x310/0x310 [ 65.314000] ? __lock_is_held+0xb5/0x140 [ 65.318046] ? __account_cfs_rq_runtime+0x600/0x600 [ 65.323045] ? __lock_acquire+0x7f5/0x5140 [ 65.327257] ? update_load_avg+0x2570/0x2570 [ 65.331657] ? __enqueue_entity+0x10d/0x1f0 [ 65.335972] ? debug_check_no_locks_freed+0x310/0x310 [ 65.341140] ? pick_next_task_fair+0x973/0x1660 [ 65.345794] kvm_vm_ioctl+0x246/0x1d90 [ 65.349669] ? find_held_lock+0x36/0x1c0 [ 65.353717] ? kvm_set_memory_region+0x50/0x50 [ 65.358287] ? lock_downgrade+0x8e0/0x8e0 [ 65.362417] ? finish_task_switch+0x182/0x810 [ 65.366901] ? kasan_check_read+0x11/0x20 [ 65.371038] ? do_raw_spin_unlock+0x9e/0x2e0 [ 65.375426] ? graph_lock+0x170/0x170 [ 65.379208] ? compat_start_thread+0x80/0x80 [ 65.383596] ? _raw_spin_unlock_irq+0x27/0x70 [ 65.388072] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 65.393078] ? trace_hardirqs_on+0xd/0x10 [ 65.397208] ? _raw_spin_unlock_irq+0x27/0x70 [ 65.401683] ? find_held_lock+0x36/0x1c0 [ 65.405741] ? lock_downgrade+0x8e0/0x8e0 [ 65.409876] ? kasan_check_read+0x11/0x20 [ 65.414005] ? rcu_is_watching+0x85/0x140 [ 65.418140] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 65.423311] ? __fget+0x40c/0x650 [ 65.426744] ? expand_files.part.8+0x9a0/0x9a0 [ 65.431305] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 65.436478] ? __do_compat_sys_rt_sigtimedwait+0x1f0/0x1f0 [ 65.442083] ? __fget_light+0x2ef/0x430 [ 65.446044] kvm_vm_compat_ioctl+0x13b/0x420 [ 65.450431] ? kvm_vm_ioctl+0x1d90/0x1d90 [ 65.454560] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 65.459475] ? exit_to_usermode_loop+0x87/0x310 [ 65.464136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 65.469653] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 65.474821] ? kvm_vm_ioctl+0x1d90/0x1d90 [ 65.478954] __ia32_compat_sys_ioctl+0x221/0x640 [ 65.483701] do_fast_syscall_32+0x345/0xf9b [ 65.488001] ? do_int80_syscall_32+0x880/0x880 [ 65.492576] ? _raw_spin_unlock_irq+0x27/0x70 [ 65.497053] ? finish_task_switch+0x1ca/0x810 [ 65.501638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 65.507163] ? syscall_return_slowpath+0x30f/0x5c0 [ 65.512073] ? sysret32_from_system_call+0x5/0x46 [ 65.516910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 65.521734] entry_SYSENTER_compat+0x70/0x7f [ 65.526121] RIP: 0023:0xf7f90cb9 [ 65.529460] RSP: 002b:00000000f7f8c0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 65.537148] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004018aebd [ 65.544394] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.551640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.558890] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 65.566138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.573390] Code: 3f 9a 88 48 c7 45 88 80 ee 68 87 c7 00 f1 f1 f1 f1 c7 40 04 00 f2 f2 f2 c7 40 08 f3 f3 f3 f3 e8 a3 51 10 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 0f 85 97 01 00 00 48 8d 55 d8 4c 8d 7a c0 49 8b 1e [ 65.592534] RIP: __radix_tree_delete+0x74/0x230 RSP: ffff8801b743f168 [ 65.599189] ---[ end trace 6309f78fa95a1bfd ]--- [ 65.603976] Kernel panic - not syncing: Fatal exception [ 65.609855] Dumping ftrace buffer: [ 65.613387] (ftrace buffer empty) [ 65.617072] Kernel Offset: disabled [ 65.620677] Rebooting in 86400 seconds..