[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 17.519517] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.893538] random: sshd: uninitialized urandom read (32 bytes read) [ 22.154710] random: sshd: uninitialized urandom read (32 bytes read) [ 22.615057] random: sshd: uninitialized urandom read (32 bytes read) [ 29.018823] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. [ 34.467312] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 34.556331] netlink: 'syz-executor456': attribute type 9 has an invalid length. [ 34.565407] WARNING: CPU: 1 PID: 4392 at net/wireless/core.c:550 wiphy_register+0x12c1/0x2510 [ 34.574175] Kernel panic - not syncing: panic_on_warn set ... [ 34.574175] [ 34.581702] CPU: 1 PID: 4392 Comm: syz-executor456 Not tainted 4.18.0-rc8+ #87 [ 34.589089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.598453] Call Trace: [ 34.601028] dump_stack+0x1c9/0x2b4 [ 34.604656] ? dump_stack_print_info.cold.2+0x52/0x52 [ 34.609850] panic+0x238/0x4e7 [ 34.613035] ? add_taint.cold.5+0x16/0x16 [ 34.617279] ? __warn.cold.8+0x148/0x1ba [ 34.621340] ? __warn.cold.8+0x117/0x1ba [ 34.625379] ? wiphy_register+0x12c1/0x2510 [ 34.629692] __warn.cold.8+0x163/0x1ba [ 34.633563] ? wiphy_register+0x12c1/0x2510 [ 34.637875] report_bug+0x252/0x2d0 [ 34.641599] do_error_trap+0x1fc/0x4d0 [ 34.645567] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.650657] ? math_error+0x3e0/0x3e0 [ 34.654538] ? depot_save_stack+0x291/0x470 [ 34.658926] ? save_stack+0xa9/0xd0 [ 34.662637] ? save_stack+0x43/0xd0 [ 34.666343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.671221] do_invalid_op+0x1b/0x20 [ 34.675237] invalid_op+0x14/0x20 [ 34.678675] RIP: 0010:wiphy_register+0x12c1/0x2510 [ 34.683580] Code: 74 08 3c 01 0f 8e c5 10 00 00 66 45 89 67 30 e9 18 f9 ff ff e8 40 00 4c fb 0f 0b bb ea ff ff ff e9 f5 f3 ff ff e8 2f 00 4c fb <0f> 0b bb ea ff ff ff e9 e4 f3 ff ff e8 1e 00 4c fb 0f 0b bb ea ff [ 34.702718] RSP: 0018:ffff8801ad4dee10 EFLAGS: 00010293 [ 34.708191] RAX: ffff8801ad650240 RBX: 0000000000000000 RCX: ffffffff86301238 [ 34.715580] RDX: 0000000000000000 RSI: ffffffff86301821 RDI: 0000000000000005 [ 34.722969] RBP: ffff8801ad4defb0 R08: ffff8801ad650240 R09: ffffed003699e114 [ 34.730696] R10: ffffed003699e114 R11: ffff8801b4cf08a5 R12: ffff8801b4cf327c [ 34.737960] R13: ffffffff87838ae0 R14: dffffc0000000000 R15: ffff8801b4cf08a0 [ 34.745226] ? wiphy_register+0xcd8/0x2510 [ 34.749545] ? wiphy_register+0x12c1/0x2510 [ 34.753965] ? wiphy_unregister+0x12c0/0x12c0 [ 34.758545] ? rcu_read_lock_sched_held+0x108/0x120 [ 34.763567] ? __kmalloc+0x5f9/0x760 [ 34.767262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.772790] ? ieee80211_cs_list_valid+0x7c/0x440 [ 34.777635] ? ieee80211_register_hw+0xc13/0x35e0 [ 34.782565] ieee80211_register_hw+0x13d5/0x35e0 [ 34.787425] ? rcu_report_qs_rnp+0x781/0x7a0 [ 34.791819] ? ieee80211_free_ack_frame+0x60/0x60 [ 34.796668] mac80211_hwsim_new_radio+0x1db8/0x33b0 [ 34.801669] ? __rhashtable_insert_fast.constprop.53+0xf90/0xf90 [ 34.807831] ? lock_downgrade+0x8f0/0x8f0 [ 34.812010] ? mark_held_locks+0xc9/0x160 [ 34.816163] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 34.820753] ? vprintk_default+0x28/0x30 [ 34.824794] ? vprintk_func+0x81/0xe7 [ 34.828586] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 34.833324] ? graph_lock+0x170/0x170 [ 34.837104] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 34.842272] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 34.847269] ? validate_nla+0x2d9/0x7b0 [ 34.851233] hwsim_new_radio_nl+0x7c0/0xa80 [ 34.855550] ? nla_parse+0x32b/0x4b0 [ 34.859258] ? mac80211_hwsim_new_radio+0x33b0/0x33b0 [ 34.864427] ? __netlink_ns_capable+0x100/0x130 [ 34.869083] genl_family_rcv_msg+0x8a3/0x1140 [ 34.873584] ? genl_unregister_family+0x8b0/0x8b0 [ 34.878418] ? lock_downgrade+0x8f0/0x8f0 [ 34.882556] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 34.887553] ? kasan_check_read+0x11/0x20 [ 34.891679] ? lock_acquire+0x1e4/0x540 [ 34.895633] ? genl_rcv+0x19/0x40 [ 34.899077] genl_rcv_msg+0xc6/0x168 [ 34.902783] netlink_rcv_skb+0x172/0x440 [ 34.906826] ? genl_family_rcv_msg+0x1140/0x1140 [ 34.911566] ? netlink_ack+0xbe0/0xbe0 [ 34.915431] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 34.919824] genl_rcv+0x28/0x40 [ 34.923083] netlink_unicast+0x5a0/0x760 [ 34.927133] ? netlink_attachskb+0x9a0/0x9a0 [ 34.931527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.937071] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 34.942106] netlink_sendmsg+0xa18/0xfd0 [ 34.946164] ? move_addr_to_kernel.part.20+0xc6/0x100 [ 34.951347] ? netlink_unicast+0x760/0x760 [ 34.955566] ? compat_mc_getsockopt+0xb20/0xb20 [ 34.960226] ? security_socket_sendmsg+0x94/0xc0 [ 34.964962] ? netlink_unicast+0x760/0x760 [ 34.969213] sock_sendmsg+0xd5/0x120 [ 34.972918] ___sys_sendmsg+0x7fd/0x930 [ 34.976884] ? copy_msghdr_from_user+0x580/0x580 [ 34.981628] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 34.986453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.991979] ? __fget_light+0x2f7/0x440 [ 34.995942] ? fget_raw+0x20/0x20 [ 34.999403] ? find_held_lock+0x36/0x1c0 [ 35.003448] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 35.008968] ? sockfd_lookup_light+0xc5/0x160 [ 35.013447] __sys_sendmsg+0x11d/0x290 [ 35.017317] ? __ia32_sys_shutdown+0x80/0x80 [ 35.021713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 35.027241] ? mm_fault_error+0x380/0x380 [ 35.031374] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 35.036144] do_fast_syscall_32+0x34d/0xfb2 [ 35.040469] ? do_int80_syscall_32+0x890/0x890 [ 35.045049] ? do_syscall_64+0x497/0x820 [ 35.049120] ? syscall_return_slowpath+0x5e0/0x5e0 [ 35.054051] ? syscall_return_slowpath+0x31d/0x5e0 [ 35.058972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 35.064493] ? retint_user+0x18/0x18 [ 35.068199] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.073035] entry_SYSENTER_compat+0x70/0x7f [ 35.077448] RIP: 0023:0xf7f50cb9 [ 35.080791] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 35.100060] RSP: 002b:00000000ffe565dc EFLAGS: 00000213 ORIG_RAX: 0000000000000172 [ 35.107755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 35.115010] RDX: 0000000000000000 RSI: 00000000080ea078 RDI: 00000000ffe56630 [ 35.122276] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 35.129526] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 35.136773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.144657] Dumping ftrace buffer: [ 35.148277] (ftrace buffer empty) [ 35.151972] Kernel Offset: disabled [ 35.155582] Rebooting in 86400 seconds..