[....] Starting OpenBSD Secure Shell server: sshd[ 18.194814] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 19.241352] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.539763] sshd (4475) used greatest stack depth: 16424 bytes left [ 19.557490] random: sshd: uninitialized urandom read (32 bytes read) [ 20.349947] random: sshd: uninitialized urandom read (32 bytes read) [ 20.510348] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. [ 25.960858] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 26.051571] FAULT_INJECTION: forcing a failure. [ 26.051571] name failslab, interval 1, probability 0, space 0, times 1 [ 26.062910] CPU: 0 PID: 4491 Comm: syz-executor505 Not tainted 4.17.0+ #84 [ 26.069919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.079271] Call Trace: [ 26.081861] dump_stack+0x1b9/0x294 [ 26.085485] ? dump_stack_print_info.cold.2+0x52/0x52 [ 26.090665] ? print_usage_bug+0xc0/0xc0 [ 26.094719] ? print_usage_bug+0xc0/0xc0 [ 26.098770] should_fail.cold.4+0xa/0x1a [ 26.102826] ? print_usage_bug+0xc0/0xc0 [ 26.106872] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 26.111968] ? print_usage_bug+0xc0/0xc0 [ 26.116015] ? __lockdep_init_map+0x105/0x590 [ 26.120504] ? graph_lock+0x170/0x170 [ 26.124301] ? find_held_lock+0x36/0x1c0 [ 26.128356] ? __lock_is_held+0xb5/0x140 [ 26.132418] ? check_same_owner+0x320/0x320 [ 26.136722] ? check_noncircular+0x20/0x20 [ 26.140942] ? rcu_note_context_switch+0x710/0x710 [ 26.145867] __should_failslab+0x124/0x180 [ 26.150090] should_failslab+0x9/0x14 [ 26.153874] kmem_cache_alloc+0x2af/0x760 [ 26.158008] ? __lock_acquire+0x7f5/0x5140 [ 26.162236] __d_alloc+0xc0/0xd30 [ 26.165674] ? shrink_dcache_for_umount+0x290/0x290 [ 26.170683] ? debug_check_no_locks_freed+0x310/0x310 [ 26.175857] ? graph_lock+0x170/0x170 [ 26.179638] ? lock_downgrade+0x8e0/0x8e0 [ 26.183768] ? print_usage_bug+0xc0/0xc0 [ 26.187815] d_alloc+0x8e/0x370 [ 26.191081] ? __d_alloc+0xd30/0xd30 [ 26.194781] d_alloc_parallel+0x152/0x1e70 [ 26.199007] ? rcu_report_qs_rnp+0x790/0x790 [ 26.203407] ? __d_lookup_rcu+0xa80/0xa80 [ 26.207537] ? print_usage_bug+0xc0/0xc0 [ 26.211580] ? __d_lookup+0x5b4/0x9c0 [ 26.215365] ? d_alloc_parallel+0x1e70/0x1e70 [ 26.219845] ? mark_held_locks+0xc9/0x160 [ 26.223980] ? __raw_spin_lock_init+0x1c/0x100 [ 26.228547] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.233546] ? __lockdep_init_map+0x105/0x590 [ 26.238033] ? __lockdep_init_map+0x105/0x590 [ 26.242515] ? lockdep_init_map+0x9/0x10 [ 26.246558] ? __init_waitqueue_head+0x96/0x140 [ 26.251208] ? init_wait_entry+0x1b0/0x1b0 [ 26.255430] proc_fill_cache+0x3e5/0x660 [ 26.259474] ? show_softirqs+0x280/0x280 [ 26.263527] ? proc_task_lookup+0x3b0/0x3b0 [ 26.267838] ? __check_object_size+0x95/0x5d9 [ 26.272351] ? filldir64+0x2f5/0x3e0 [ 26.276067] proc_ns_dir_readdir+0x3f5/0x560 [ 26.280468] iterate_dir+0x4b0/0x5d0 [ 26.284166] ksys_getdents64+0x21c/0x430 [ 26.288222] ? __ia32_sys_getdents+0x4c0/0x4c0 [ 26.292786] ? iterate_dir+0x5d0/0x5d0 [ 26.296659] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 26.301487] __x64_sys_getdents64+0x73/0xb0 [ 26.305792] do_syscall_64+0x1b1/0x800 [ 26.309660] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 26.314484] ? syscall_return_slowpath+0x5c0/0x5c0 [ 26.319408] ? syscall_return_slowpath+0x30f/0x5c0 [ 26.324327] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 26.329674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.334508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 26.339961] RIP: 0033:0x440449 [ 26.343159] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 26.362352] RSP: 002b:00007fff292cc9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 26.370049] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440449 [ 26.377316] RDX: 00000000000000a6 RSI: 0000000020000100 RDI: 0000000000000003 [ 26.384569] RBP: 00000000006cb018 R08: 0000000000000001 R09: 65732f636f720031 [ 26.391819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 26.399505] R13: ffffffffffffffff R14: 0000000000000000 R15: 0000000000000000 [ 26.409228] BUG: unable to handle kernel paging request at fffffffffffffff4 [ 26.416333] PGD 8c6d067 P4D 8c6d067 PUD 8c6f067 PMD 0 [ 26.421603] Oops: 0000 [#1] SMP KASAN [ 26.425390] CPU: 0 PID: 4491 Comm: syz-executor505 Not tainted 4.17.0+ #84 [ 26.432382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.441726] RIP: 0010:dput.part.26+0x117/0x780 [ 26.446283] Code: ff 09 b3 ff 45 84 ff 0f 84 e2 03 00 00 e8 21 09 b3 ff 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 04 05 00 00 <44> 8b 3b 48 8d 83 80 00 00 00 31 ff 48 89 85 70 ff ff ff 41 83 e7 [ 26.465407] RSP: 0018:ffff8801b6f979f8 EFLAGS: 00010246 [ 26.470756] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: ffffffff81c64bd2 [ 26.478015] RDX: 0000000000000000 RSI: ffffffff81c647df RDI: 0000000000000001 [ 26.485274] RBP: ffff8801b6f97a90 R08: ffff8801b04205c0 R09: ffffed003b5c46d6 [ 26.492546] R10: ffffed003b5c46d6 R11: ffff8801dae236b3 R12: 1ffff10036df2f41 [ 26.499804] R13: dffffc0000000000 R14: ffffed0036df2f45 R15: 0000000000000001 [ 26.507061] FS: 0000000001150880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 26.515270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.521132] CR2: fffffffffffffff4 CR3: 00000001d06ad000 CR4: 00000000001406f0 [ 26.528385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.535641] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.542905] Call Trace: [ 26.545503] ? lockdep_init_map+0x9/0x10 [ 26.549550] ? shrink_dcache_sb+0x340/0x340 [ 26.553859] ? init_wait_entry+0x1b0/0x1b0 [ 26.558077] dput+0x15/0x20 [ 26.560989] proc_fill_cache+0x230/0x660 [ 26.565040] ? proc_task_lookup+0x3b0/0x3b0 [ 26.569358] ? __check_object_size+0x95/0x5d9 [ 26.573845] ? filldir64+0x2f5/0x3e0 [ 26.577573] proc_ns_dir_readdir+0x3f5/0x560 [ 26.582001] iterate_dir+0x4b0/0x5d0 [ 26.585734] ksys_getdents64+0x21c/0x430 [ 26.589800] ? __ia32_sys_getdents+0x4c0/0x4c0 [ 26.594367] ? iterate_dir+0x5d0/0x5d0 [ 26.598253] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 26.603084] __x64_sys_getdents64+0x73/0xb0 [ 26.607388] do_syscall_64+0x1b1/0x800 [ 26.611256] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 26.616184] ? syscall_return_slowpath+0x5c0/0x5c0 [ 26.621124] ? syscall_return_slowpath+0x30f/0x5c0 [ 26.626052] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 26.631410] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.636250] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 26.641419] RIP: 0033:0x440449 [ 26.644584] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 26.663710] RSP: 002b:00007fff292cc9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 26.671417] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440449 [ 26.678672] RDX: 00000000000000a6 RSI: 0000000020000100 RDI: 0000000000000003 [ 26.685926] RBP: 00000000006cb018 R08: 0000000000000001 R09: 65732f636f720031 [ 26.693175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 26.700428] R13: ffffffffffffffff R14: 0000000000000000 R15: 0000000000000000 [ 26.707699] Modules linked in: [ 26.710882] Dumping ftrace buffer: [ 26.714413] (ftrace buffer empty) [ 26.718124] CR2: fffffffffffffff4 [ 26.721561] ---[ end trace 81153e86b0cb1bde ]--- [ 26.726308] RIP: 0010:dput.part.26+0x117/0x780 [ 26.730898] Code: ff 09 b3 ff 45 84 ff 0f 84 e2 03 00 00 e8 21 09 b3 ff 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 04 05 00 00 <44> 8b 3b 48 8d 83 80 00 00 00 31 ff 48 89 85 70 ff ff ff 41 83 e7 [ 26.750084] RSP: 0018:ffff8801b6f979f8 EFLAGS: 00010246 [ 26.755869] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: ffffffff81c64bd2 [ 26.763122] RDX: 0000000000000000 RSI: ffffffff81c647df RDI: 0000000000000001 [ 26.770373] RBP: ffff8801b6f97a90 R08: ffff8801b04205c0 R09: ffffed003b5c46d6 [ 26.777622] R10: ffffed003b5c46d6 R11: ffff8801dae236b3 R12: 1ffff10036df2f41 [ 26.784898] R13: dffffc0000000000 R14: ffffed0036df2f45 R15: 0000000000000001 [ 26.792160] FS: 0000000001150880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 26.800379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.806246] CR2: fffffffffffffff4 CR3: 00000001d06ad000 CR4: 00000000001406f0 [ 26.813499] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.820753] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.828004] Kernel panic - not syncing: Fatal exception [ 26.833874] Dumping ftrace buffer: [ 26.837391] (ftrace buffer empty) [ 26.841077] Kernel Offset: disabled [ 26.844682] Rebooting in 86400 seconds..