[....] Starting OpenBSD Secure Shell server: sshd[ 21.092696] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. [ 21.319002] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [ 21.526491] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.474525] random: sshd: uninitialized urandom read (32 bytes read, 109 bits of entropy available) [ 52.127486] random: sshd: uninitialized urandom read (32 bytes read, 127 bits of entropy available) [ 52.255747] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 57.742658] kasan: CONFIG_KASAN_INLINE enabled [ 57.747172] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 57.760215] Dumping ftrace buffer: [ 57.763724] (ftrace buffer empty) [ 57.767406] Modules linked in: [ 57.770688] CPU: 1 PID: 3830 Comm: syzkaller313648 Not tainted 4.4.119-g024f962 #26 [ 57.778451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 57.787773] task: ffff8800bae94800 task.stack: ffff8801d96a0000 [ 57.793798] RIP: 0010:[] [] __free_pages+0x21/0x90 [ 57.802031] RSP: 0018:ffff8801d96a7b00 EFLAGS: 00010a07 [ 57.807447] RAX: dffffc0000000000 RBX: dead4ead00000000 RCX: ffffffff825b856b [ 57.814686] RDX: 1bd5a9d5a0000003 RSI: 0000000000000000 RDI: dead4ead0000001c [ 57.821927] RBP: ffff8801d96a7b10 R08: ffffed00165bab18 R09: ffff8800b2dd58a0 [ 57.829164] R10: 0000000000000005 R11: ffffed00165bab18 R12: 0000000000000004 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 57.836403] R13: 0000000000000020 R14: ffff8800ac954200 R15: dffffc0000000000 [ 57.843643] FS: 00007f4a13d46700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 57.851838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.857687] CR2: 00007f4a13d24e78 CR3: 00000001cc4e2000 CR4: 0000000000160670 [ 57.864929] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.872168] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.879427] Stack: [ 57.881545] 0000000000000000 ffff8800ac954358 ffff8801d96a7b70 ffffffff825b8591 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 57.889514] ffff8800ac954370 ffffed001592a86b ffffed001592a86e ffff8800ac954368 [ 57.897479] dead4ead00000000 ffff8800ac954340 0000000000000000 0000000000000000 [ 57.905445] Call Trace: [ 57.908006] [] sg_remove_scat.isra.17+0x1c1/0x2d0 [ 57.914467] [] sg_finish_rem_req+0x2b5/0x340 [ 57.920491] [] sg_read+0xa1b/0x1490 [ 57.925738] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 57.932375] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 57.939358] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 57.945906] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 57.952540] [] __vfs_read+0x103/0x440 [ 57.957961] [] ? vfs_iter_write+0x2d0/0x2d0 [ 57.963899] [] ? fsnotify+0x5ad/0xee0 [ 57.969317] [] ? fsnotify+0xee0/0xee0 [ 57.974738] [] ? avc_policy_seqno+0x9/0x20 [ 57.980592] [] ? selinux_file_permission+0x348/0x460 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 57.987313] [] ? security_file_permission+0x89/0x1e0 [ 57.994033] [] ? rw_verify_area+0x100/0x2f0 [ 57.999973] [] vfs_read+0x123/0x3a0 [ 58.005216] [] SyS_read+0xd9/0x1b0 [ 58.010388] [] ? do_sendfile+0xd30/0xd30 [ 58.016065] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 58.022528] [] entry_SYSCALL_64_fastpath+0x1c/0x98 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 58.029073] Code: c6 a0 0c 00 e9 78 fd ff ff 90 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 48 89 fb 48 83 c7 1c 48 89 fa 48 83 ec 08 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 49 [ 58.055659] RIP [] __free_pages+0x21/0x90 [ 58.061547] RSP [ 58.065324] ---[ end trace 56826bdfd65d5a8a ]--- [ 58.070187] Kernel panic - not syncing: Fatal exception [ 58.075838] Dumping ftrace buffer: [ 58.079349] (ftrace buffer empty) [ 58.083032] Kernel Offset: disabled [ 58.086629] Rebooting in 86400 seconds..