[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.677275] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.518809] random: sshd: uninitialized urandom read (32 bytes read) [ 22.803472] random: sshd: uninitialized urandom read (32 bytes read) [ 23.605744] random: sshd: uninitialized urandom read (32 bytes read) [ 23.774725] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. [ 29.210398] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 29.500483] kasan: CONFIG_KASAN_INLINE enabled [ 29.505106] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.512485] general protection fault: 0000 [#1] SMP KASAN [ 29.518026] CPU: 0 PID: 4533 Comm: syz-executor866 Not tainted 4.18.0-rc3+ #136 [ 29.525450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.534798] RIP: 0010:perf_trace_lock_acquire+0xc8/0x9a0 [ 29.540224] Code: 20 f2 f2 f2 f2 c7 40 24 00 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 48 8d 46 18 48 89 85 70 fe ff ff 48 c1 e8 03 <80> 3c 10 00 0f 85 8a 05 00 00 49 8b 79 18 48 85 ff 0f 84 72 04 00 [ 29.559352] RSP: 0018:ffff8801ac93f508 EFLAGS: 00010002 [ 29.564695] RAX: 000000000000004c RBX: 1ffff10035927eab RCX: 0000000000000000 [ 29.571945] RDX: dffffc0000000000 RSI: 0000000000000248 RDI: ffffffff88f7b740 [ 29.579206] RBP: ffff8801ac93f6e0 R08: 0000000000000000 R09: 0000000000000248 [ 29.586457] R10: ffffffff815dfe10 R11: dffffc0000000000 R12: ffff8801ac93f6b8 [ 29.594598] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff88f7b740 [ 29.601856] FS: 00007f7948c10700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 29.610069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.615946] CR2: 00007ffcd09ceff8 CR3: 00000001d9541000 CR4: 00000000001406f0 [ 29.623200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.630450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.637696] Call Trace: [ 29.640270] ? trace_hardirqs_on+0x10/0x10 [ 29.644487] ? perf_trace_lock+0x920/0x920 [ 29.648718] ? is_bpf_text_address+0xd7/0x170 [ 29.653206] ? kernel_text_address+0x79/0xf0 [ 29.658134] ? __kernel_text_address+0xd/0x40 [ 29.662615] ? unwind_get_return_address+0x61/0xa0 [ 29.667528] ? __save_stack_trace+0x8d/0xf0 [ 29.671835] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 29.676662] ? save_stack+0xa9/0xd0 [ 29.680273] ? save_stack+0x43/0xd0 [ 29.683886] lock_acquire+0x3a2/0x540 [ 29.687673] ? smap_list_hash_remove+0xa3/0x470 [ 29.692325] ? lock_release+0xa30/0xa30 [ 29.696283] ? print_usage_bug+0xc0/0xc0 [ 29.700326] ? find_held_lock+0x36/0x1c0 [ 29.704548] _raw_spin_lock_bh+0x31/0x40 [ 29.708593] ? smap_list_hash_remove+0xa3/0x470 [ 29.713249] smap_list_hash_remove+0xa3/0x470 [ 29.717729] ? psock_map_pop.isra.26+0x3b0/0x3b0 [ 29.722469] ? __lock_is_held+0xb5/0x140 [ 29.726517] sock_hash_ctx_update_elem.isra.27+0x1140/0x1690 [ 29.732310] ? sock_map_free+0x530/0x530 [ 29.736352] ? rcu_is_watching+0x8c/0x150 [ 29.740479] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 29.744871] ? __fget+0x414/0x670 [ 29.748304] ? expand_files.part.8+0x9c0/0x9c0 [ 29.752872] ? find_held_lock+0x36/0x1c0 [ 29.756933] sock_hash_update_elem+0x157/0x2f0 [ 29.761499] ? bpf_sock_hash_update+0x90/0x90 [ 29.765988] ? kasan_check_read+0x11/0x20 [ 29.770117] ? rcu_is_watching+0x8c/0x150 [ 29.774244] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 29.778635] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 29.784162] ? bpf_sock_hash_update+0x90/0x90 [ 29.788638] map_update_elem+0x5c4/0xc90 [ 29.792782] __x64_sys_bpf+0x32d/0x510 [ 29.796737] ? bpf_prog_get+0x20/0x20 [ 29.800524] ? do_syscall_64+0x9a/0x820 [ 29.804482] do_syscall_64+0x1b9/0x820 [ 29.808352] ? finish_task_switch+0x1d3/0x890 [ 29.812837] ? syscall_return_slowpath+0x5e0/0x5e0 [ 29.817751] ? syscall_return_slowpath+0x31d/0x5e0 [ 29.822664] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 29.828017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.832845] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 29.838017] RIP: 0033:0x445b49 [ 29.841271] Code: e8 3c b6 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 29.860402] RSP: 002b:00007f7948c0fdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 29.868096] RAX: ffffffffffffffda RBX: 00000000006dac5c RCX: 0000000000445b49 [ 29.875345] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 29.882593] RBP: 00000000006dac58 R08: 0000000000000000 R09: 0000000000000000 [ 29.889848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.897196] R13: 00007ffc975ee20f R14: 00007f7948c109c0 R15: 000000000000000b [ 29.904448] Modules linked in: [ 29.907625] Dumping ftrace buffer: [ 29.911141] (ftrace buffer empty) [ 29.914837] ---[ end trace f25b865684325d46 ]--- [ 29.919582] RIP: 0010:perf_trace_lock_acquire+0xc8/0x9a0 [ 29.925020] Code: 20 f2 f2 f2 f2 c7 40 24 00 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 48 8d 46 18 48 89 85 70 fe ff ff 48 c1 e8 03 <80> 3c 10 00 0f 85 8a 05 00 00 49 8b 79 18 48 85 ff 0f 84 72 04 00 [ 29.944273] RSP: 0018:ffff8801ac93f508 EFLAGS: 00010002 [ 29.949615] RAX: 000000000000004c RBX: 1ffff10035927eab RCX: 0000000000000000 [ 29.956865] RDX: dffffc0000000000 RSI: 0000000000000248 RDI: ffffffff88f7b740 [ 29.964117] RBP: ffff8801ac93f6e0 R08: 0000000000000000 R09: 0000000000000248 [ 29.971364] R10: ffffffff815dfe10 R11: dffffc0000000000 R12: ffff8801ac93f6b8 [ 29.978614] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff88f7b740 [ 29.985967] FS: 00007f7948c10700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 29.994182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.000043] CR2: 00007ffcd09ceff8 CR3: 00000001d9541000 CR4: 00000000001406f0 [ 30.007296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.014547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.021801] Kernel panic - not syncing: Fatal exception in interrupt [ 30.028722] Dumping ftrace buffer: [ 30.032247] (ftrace buffer empty) [ 30.035932] Kernel Offset: disabled [ 30.039534] Rebooting in 86400 seconds..