[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.223835] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 19.376150] random: sshd: uninitialized urandom read (32 bytes read) [ 19.564690] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts. syzkaller login: [ 25.747156] urandom_read: 2 callbacks suppressed [ 25.747161] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 25.844478] netlink: 'syz-executor219': attribute type 9 has an invalid length. [ 25.853704] WARNING: CPU: 1 PID: 4398 at net/wireless/core.c:550 wiphy_register+0x12c1/0x2510 [ 25.862371] Kernel panic - not syncing: panic_on_warn set ... [ 25.862371] [ 25.869719] CPU: 1 PID: 4398 Comm: syz-executor219 Not tainted 4.18.0-rc8+ #184 [ 25.877157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.886549] Call Trace: [ 25.889137] dump_stack+0x1c9/0x2b4 [ 25.892753] ? dump_stack_print_info.cold.2+0x52/0x52 [ 25.897933] panic+0x238/0x4e7 [ 25.901119] ? add_taint.cold.5+0x16/0x16 [ 25.905252] ? __warn.cold.8+0x148/0x1ba [ 25.909298] ? __warn.cold.8+0x117/0x1ba [ 25.913345] ? wiphy_register+0x12c1/0x2510 [ 25.917650] __warn.cold.8+0x163/0x1ba [ 25.921551] ? wiphy_register+0x12c1/0x2510 [ 25.925858] report_bug+0x252/0x2d0 [ 25.929473] do_error_trap+0x1fc/0x4d0 [ 25.933346] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.938346] ? math_error+0x3e0/0x3e0 [ 25.942130] ? depot_save_stack+0x291/0x470 [ 25.946443] ? save_stack+0xa9/0xd0 [ 25.950060] ? save_stack+0x43/0xd0 [ 25.953676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.958505] do_invalid_op+0x1b/0x20 [ 25.962202] invalid_op+0x14/0x20 [ 25.965637] RIP: 0010:wiphy_register+0x12c1/0x2510 [ 25.970543] Code: 74 08 3c 01 0f 8e c5 10 00 00 66 45 89 67 30 e9 18 f9 ff ff e8 40 00 4c fb 0f 0b bb ea ff ff ff e9 f5 f3 ff ff e8 2f 00 4c fb <0f> 0b bb ea ff ff ff e9 e4 f3 ff ff e8 1e 00 4c fb 0f 0b bb ea ff [ 25.989723] RSP: 0018:ffff8801aecf6e60 EFLAGS: 00010293 [ 25.995080] RAX: ffff8801b03a4440 RBX: 0000000000000000 RCX: ffffffff86301238 [ 26.002351] RDX: 0000000000000000 RSI: ffffffff86301821 RDI: 0000000000000005 [ 26.009605] RBP: ffff8801aecf7000 R08: ffff8801b03a4440 R09: ffffed0036a2c11c [ 26.016858] R10: ffffed0036a2c11c R11: ffff8801b51608e5 R12: ffff8801b51632bc [ 26.024120] R13: ffffffff87838ae0 R14: dffffc0000000000 R15: ffff8801b51608e0 [ 26.031379] ? wiphy_register+0xcd8/0x2510 [ 26.035599] ? wiphy_register+0x12c1/0x2510 [ 26.039920] ? wiphy_unregister+0x12c0/0x12c0 [ 26.044407] ? rcu_read_lock_sched_held+0x108/0x120 [ 26.049443] ? __kmalloc+0x5f9/0x760 [ 26.053159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 26.058682] ? ieee80211_cs_list_valid+0x7c/0x440 [ 26.063509] ? ieee80211_register_hw+0xc13/0x35e0 [ 26.068347] ieee80211_register_hw+0x13d5/0x35e0 [ 26.073096] ? rcu_report_qs_rnp+0x781/0x7a0 [ 26.077491] ? ieee80211_free_ack_frame+0x60/0x60 [ 26.082322] mac80211_hwsim_new_radio+0x1db8/0x33b0 [ 26.087332] ? __rhashtable_insert_fast.constprop.53+0xf90/0xf90 [ 26.093467] ? lock_downgrade+0x8f0/0x8f0 [ 26.097605] ? mark_held_locks+0xc9/0x160 [ 26.101737] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 26.106334] ? vprintk_default+0x28/0x30 [ 26.110400] ? vprintk_func+0x81/0xe7 [ 26.114198] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 26.118944] ? graph_lock+0x170/0x170 [ 26.122733] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 26.127909] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 26.132913] ? validate_nla+0x2d9/0x7b0 [ 26.136872] hwsim_new_radio_nl+0x7c0/0xa80 [ 26.141191] ? nla_parse+0x32b/0x4b0 [ 26.144901] ? mac80211_hwsim_new_radio+0x33b0/0x33b0 [ 26.150325] ? __netlink_ns_capable+0x100/0x130 [ 26.155000] genl_family_rcv_msg+0x8a3/0x1140 [ 26.159496] ? genl_unregister_family+0x8b0/0x8b0 [ 26.164337] ? lock_downgrade+0x8f0/0x8f0 [ 26.168470] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 26.173489] ? kasan_check_read+0x11/0x20 [ 26.177635] ? lock_acquire+0x1e4/0x540 [ 26.181598] ? genl_rcv+0x19/0x40 [ 26.185062] genl_rcv_msg+0xc6/0x168 [ 26.188774] netlink_rcv_skb+0x172/0x440 [ 26.192820] ? genl_family_rcv_msg+0x1140/0x1140 [ 26.197562] ? netlink_ack+0xbe0/0xbe0 [ 26.201438] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 26.205839] genl_rcv+0x28/0x40 [ 26.209140] netlink_unicast+0x5a0/0x760 [ 26.213216] ? netlink_attachskb+0x9a0/0x9a0 [ 26.217611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 26.223147] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 26.228151] netlink_sendmsg+0xa18/0xfd0 [ 26.232198] ? netlink_unicast+0x760/0x760 [ 26.236438] ? move_addr_to_kernel.part.20+0x100/0x100 [ 26.241708] ? security_socket_sendmsg+0x94/0xc0 [ 26.246452] ? netlink_unicast+0x760/0x760 [ 26.250678] sock_sendmsg+0xd5/0x120 [ 26.254391] ___sys_sendmsg+0x7fd/0x930 [ 26.258364] ? copy_msghdr_from_user+0x580/0x580 [ 26.263114] ? graph_lock+0x170/0x170 [ 26.266906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 26.272433] ? __fget_light+0x2f7/0x440 [ 26.276394] ? fget_raw+0x20/0x20 [ 26.279845] ? lock_downgrade+0x8f0/0x8f0 [ 26.283979] ? handle_mm_fault+0x8c4/0xc80 [ 26.288230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 26.293753] ? sockfd_lookup_light+0xc5/0x160 [ 26.298233] __sys_sendmsg+0x11d/0x290 [ 26.302119] ? __ia32_sys_shutdown+0x80/0x80 [ 26.306521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 26.312053] ? __do_page_fault+0x449/0xe50 [ 26.316289] __x64_sys_sendmsg+0x78/0xb0 [ 26.320336] do_syscall_64+0x1b9/0x820 [ 26.324234] ? syscall_return_slowpath+0x5e0/0x5e0 [ 26.329149] ? syscall_return_slowpath+0x31d/0x5e0 [ 26.334075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 26.339614] ? retint_user+0x18/0x18 [ 26.343336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.348166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 26.353338] RIP: 0033:0x4402c9 [ 26.356512] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 26.375678] RSP: 002b:00007fff8f687c88 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 26.383377] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402c9 [ 26.390656] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 26.397913] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 26.405176] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000401b50 [ 26.412442] R13: 0000000000401be0 R14: 0000000000000000 R15: 0000000000000000 [ 26.420126] Dumping ftrace buffer: [ 26.423741] (ftrace buffer empty) [ 26.427437] Kernel Offset: disabled [ 26.431055] Rebooting in 86400 seconds..