[....] Starting OpenBSD Secure Shell server: sshd[ 18.081272] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c[ 18.193630] random: sshd: uninitialized urandom read (32 bytes read) . [ 18.528128] random: sshd: uninitialized urandom read (32 bytes read) [ 19.221700] sshd (4470) used greatest stack depth: 16456 bytes left [ 19.241600] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.886067] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. [ 39.279668] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 39.365278] kasan: CONFIG_KASAN_INLINE enabled [ 39.369958] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 39.377349] general protection fault: 0000 [#1] SMP KASAN [ 39.382869] Dumping ftrace buffer: [ 39.386380] (ftrace buffer empty) [ 39.390064] Modules linked in: [ 39.393241] CPU: 0 PID: 4487 Comm: syz-executor011 Not tainted 4.17.0-rc4+ #54 [ 39.400574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.409913] RIP: 0010:smc_ioctl+0x6db/0x9f0 [ 39.414207] RSP: 0018:ffff8801adaf7770 EFLAGS: 00010202 [ 39.419549] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 39.426795] RDX: 0000000000000004 RSI: 1ffff10035b5ef0d RDI: 0000000000000020 [ 39.434054] RBP: ffff8801adaf79d0 R08: ffffed0035b5ef0e R09: ffffed0035b5ef0d [ 39.441302] R10: ffffed0035b5ef0d R11: ffff8801adaf786f R12: 1ffff10035b5eef1 [ 39.448548] R13: 0000000020000000 R14: ffff8801adaf7868 R15: ffff8801adaf7828 [ 39.455799] FS: 0000000001032880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 39.463999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.469854] CR2: 00007ffd1cf8e038 CR3: 00000001ad1fe000 CR4: 00000000001406f0 [ 39.477101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.484346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.491590] Call Trace: [ 39.494159] ? smc_shutdown+0x5c0/0x5c0 [ 39.498112] ? debug_check_no_locks_freed+0x310/0x310 [ 39.503278] ? save_stack+0xa9/0xd0 [ 39.506880] ? save_stack+0x43/0xd0 [ 39.510479] ? kasan_slab_alloc+0x12/0x20 [ 39.514601] ? kmem_cache_alloc+0x12e/0x760 [ 39.518896] ? get_empty_filp+0x125/0x520 [ 39.523018] ? alloc_file+0x24/0x3e0 [ 39.526709] ? sock_alloc_file+0x1f3/0x4e0 [ 39.530914] ? __sys_socket+0x16f/0x250 [ 39.534859] ? __x64_sys_socket+0x73/0xb0 [ 39.538982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.544319] ? find_held_lock+0x36/0x1c0 [ 39.548356] ? debug_mutex_init+0x1c/0x60 [ 39.552479] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 39.557471] ? lockdep_init_map+0x9/0x10 [ 39.561509] sock_do_ioctl+0xe4/0x3e0 [ 39.565286] ? compat_ifr_data_ioctl+0x170/0x170 [ 39.570017] ? find_held_lock+0x36/0x1c0 [ 39.574055] ? lock_downgrade+0x8e0/0x8e0 [ 39.578188] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 39.583352] sock_ioctl+0x30d/0x680 [ 39.586954] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 39.592116] ? dlci_ioctl_set+0x40/0x40 [ 39.596065] ? __fd_install+0x2de/0x880 [ 39.600014] ? get_unused_fd_flags+0x190/0x190 [ 39.604572] ? dlci_ioctl_set+0x40/0x40 [ 39.608527] do_vfs_ioctl+0x1cf/0x16a0 [ 39.612395] ? ioctl_preallocate+0x2e0/0x2e0 [ 39.616777] ? fget_raw+0x20/0x20 [ 39.620204] ? get_unused_fd_flags+0x121/0x190 [ 39.624759] ? __alloc_fd+0x700/0x700 [ 39.628533] ? fd_install+0x4d/0x60 [ 39.632132] ? __sys_socket+0x19f/0x250 [ 39.636085] ? security_file_ioctl+0x94/0xc0 [ 39.640474] ksys_ioctl+0xa9/0xd0 [ 39.643903] __x64_sys_ioctl+0x73/0xb0 [ 39.647769] do_syscall_64+0x1b1/0x800 [ 39.651629] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 39.656446] ? syscall_return_slowpath+0x5c0/0x5c0 [ 39.661354] ? syscall_return_slowpath+0x30f/0x5c0 [ 39.666260] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 39.671598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.676418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.681584] RIP: 0033:0x43fca9 [ 39.684750] RSP: 002b:00007ffd1ceb0548 EFLAGS: 00000213 ORIG_RAX: 0000000000000010 [ 39.692434] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fca9 [ 39.699680] RDX: 0000000020000000 RSI: 000000000000894b RDI: 0000000000000003 [ 39.706925] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 39.714168] R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004015d0 [ 39.721413] R13: 0000000000401660 R14: 0000000000000000 R15: 0000000000000000 [ 39.728658] Code: f8 48 c1 e8 03 80 3c 10 00 0f 85 ed 01 00 00 48 8b 9b 90 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 20 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b7 01 00 00 8b 43 20 49 8d [ 39.747786] RIP: smc_ioctl+0x6db/0x9f0 RSP: ffff8801adaf7770 [ 39.753649] ---[ end trace d5b6702ca0657d1a ]--- [ 39.758393] Kernel panic - not syncing: Fatal exception [ 39.764085] Dumping ftrace buffer: [ 39.767600] (ftrace buffer empty) [ 39.771287] Kernel Offset: disabled [ 39.774887] Rebooting in 86400 seconds..