[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 17.340094] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 27.375699] random: sshd: uninitialized urandom read (32 bytes read) [ 27.658848] random: sshd: uninitialized urandom read (32 bytes read) [ 28.103869] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. [ 33.635055] urandom_read: 1 callbacks suppressed [ 33.635061] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program [ 38.727074] ------------[ cut here ]------------ [ 38.731864] ODEBUG: free active (active state 0) object type: timer_list hint: rfcomm_dlc_timeout+0x0/0x70 [ 38.741803] WARNING: CPU: 0 PID: 4267 at lib/debugobjects.c:329 debug_print_object+0x16a/0x210 [ 38.750541] Kernel panic - not syncing: panic_on_warn set ... [ 38.750541] [ 38.757906] CPU: 0 PID: 4267 Comm: syz-executor929 Not tainted 4.18.0-rc7-next-20180803+ #31 [ 38.766468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.775810] Call Trace: [ 38.778395] dump_stack+0x1c9/0x2b4 [ 38.782019] ? dump_stack_print_info.cold.2+0x52/0x52 [ 38.787208] panic+0x238/0x4e7 [ 38.790394] ? add_taint.cold.5+0x16/0x16 [ 38.794536] ? __warn.cold.8+0x148/0x1ba [ 38.798582] ? __warn.cold.8+0x117/0x1ba [ 38.802639] ? debug_print_object+0x16a/0x210 [ 38.807118] __warn.cold.8+0x163/0x1ba [ 38.811019] ? debug_print_object+0x16a/0x210 [ 38.815507] report_bug+0x252/0x2d0 [ 38.819118] do_error_trap+0x1fc/0x4d0 [ 38.823018] ? math_error+0x3e0/0x3e0 [ 38.826805] ? __internal_add_timer+0x2e0/0x2e0 [ 38.831456] ? vprintk_default+0x28/0x30 [ 38.835500] ? vprintk_func+0x81/0x117 [ 38.839372] ? printk+0xa7/0xcf [ 38.842637] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.847472] do_invalid_op+0x1b/0x20 [ 38.851177] invalid_op+0x14/0x20 [ 38.854703] RIP: 0010:debug_print_object+0x16a/0x210 [ 38.859789] Code: 3a 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 92 00 00 00 48 8b 14 dd 60 a8 3a 87 4c 89 f6 48 c7 c7 00 9e 3a 87 e8 26 70 e2 fd <0f> 0b 83 05 09 33 26 05 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f [ 38.878780] RSP: 0018:ffff8801b686f648 EFLAGS: 00010086 [ 38.884222] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 38.891464] RDX: 0000000000000000 RSI: ffffffff816366f1 RDI: 0000000000000001 [ 38.898714] RBP: ffff8801b686f688 R08: ffff8801cb852380 R09: ffffed003b603ec2 [ 38.905964] R10: ffffed003b603ec2 R11: ffff8801db01f617 R12: 0000000000000001 [ 38.913206] R13: ffffffff87f9d1c0 R14: ffffffff873aa2a0 R15: ffffffff816988b0 [ 38.920459] ? __internal_add_timer+0x2e0/0x2e0 [ 38.925105] ? vprintk_func+0x81/0x117 [ 38.928969] ? debug_print_object+0x16a/0x210 [ 38.933452] debug_check_no_obj_freed+0x3b2/0x595 [ 38.938270] ? kasan_check_read+0x11/0x20 [ 38.942392] ? free_obj_work+0xbb0/0xbb0 [ 38.946431] ? trace_hardirqs_on+0xd/0x10 [ 38.950588] kfree+0xc7/0x260 [ 38.953681] rfcomm_dlc_free+0x1e/0x30 [ 38.957539] rfcomm_dev_ioctl+0x1dfe/0x2240 [ 38.961843] ? rfcomm_dev_state_change+0x150/0x150 [ 38.966780] ? lock_release+0xa30/0xa30 [ 38.970816] ? kasan_check_read+0x11/0x20 [ 38.974950] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 38.979594] ? kasan_check_write+0x14/0x20 [ 38.983828] ? lock_sock_nested+0x9f/0x120 [ 38.988033] ? trace_hardirqs_on+0xd/0x10 [ 38.992170] ? __local_bh_enable_ip+0x161/0x230 [ 38.996816] rfcomm_sock_ioctl+0x89/0xb0 [ 39.000852] sock_do_ioctl+0xe4/0x3e0 [ 39.004634] ? compat_ifr_data_ioctl+0x170/0x170 [ 39.009365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.014878] ? __handle_mm_fault+0x972/0x4470 [ 39.019349] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 39.024189] ? lock_acquire+0x1e4/0x540 [ 39.028160] ? __fd_install+0x2b2/0x880 [ 39.032110] ? lock_downgrade+0x8f0/0x8f0 [ 39.036272] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 39.041465] sock_ioctl+0x30d/0x680 [ 39.045063] ? dlci_ioctl_set+0x40/0x40 [ 39.049021] ? lock_downgrade+0x8f0/0x8f0 [ 39.053143] ? lock_release+0xa30/0xa30 [ 39.057103] ? lock_release+0xa30/0xa30 [ 39.061063] ? mem_cgroup_from_task+0xcb/0x1f0 [ 39.065619] ? dlci_ioctl_set+0x40/0x40 [ 39.069568] do_vfs_ioctl+0x1de/0x1720 [ 39.073429] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 39.078963] ? ioctl_preallocate+0x300/0x300 [ 39.083350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.088858] ? __fget_light+0x2f7/0x440 [ 39.092807] ? __handle_mm_fault+0x4470/0x4470 [ 39.097373] ? fget_raw+0x20/0x20 [ 39.100811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.106321] ? __do_page_fault+0x449/0xe50 [ 39.110538] ? mm_fault_error+0x380/0x380 [ 39.114670] ? security_file_ioctl+0x94/0xc0 [ 39.119052] ksys_ioctl+0xa9/0xd0 [ 39.122480] __x64_sys_ioctl+0x73/0xb0 [ 39.126345] do_syscall_64+0x1b9/0x820 [ 39.130205] ? syscall_return_slowpath+0x5e0/0x5e0 [ 39.135157] ? syscall_return_slowpath+0x31d/0x5e0 [ 39.140080] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 39.145077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.150605] ? prepare_exit_to_usermode+0x291/0x3b0 [ 39.155598] ? perf_trace_sys_enter+0xb10/0xb10 [ 39.160264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.165086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.170260] RIP: 0033:0x4406d9 [ 39.173430] Code: e8 2c af 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 39.192307] RSP: 002b:00007fff697e60e8 EFLAGS: 00000213 ORIG_RAX: 0000000000000010 [ 39.199996] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004406d9 [ 39.207258] RDX: 0000000020000000 RSI: 00000000400452c8 RDI: 0000000000000003 [ 39.214509] RBP: 0000000000000000 R08: 00000000004002c8 R09: 00000000004002c8 [ 39.221760] R10: 00000000013d1880 R11: 0000000000000213 R12: 0000000000009731 [ 39.229003] R13: 0000000000401c30 R14: 0000000000000000 R15: 0000000000000000 [ 39.236662] Dumping ftrace buffer: [ 39.240182] (ftrace buffer empty) [ 39.243878] Kernel Offset: disabled [ 39.247487] Rebooting in 86400 seconds..