[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.949140] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.217611] random: sshd: uninitialized urandom read (32 bytes read) [ 23.716579] random: sshd: uninitialized urandom read (32 bytes read) [ 24.463635] random: sshd: uninitialized urandom read (32 bytes read) [ 29.834902] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. [ 35.388607] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 35.490747] WARNING: CPU: 0 PID: 4535 at include/net/sock.h:644 smc_unhash_sk+0x345/0x4a0 [ 35.499160] Kernel panic - not syncing: panic_on_warn set ... [ 35.499160] [ 35.506504] CPU: 0 PID: 4535 Comm: syz-executor435 Not tainted 4.17.0+ #89 [ 35.513490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.522820] Call Trace: [ 35.525391] dump_stack+0x1b9/0x294 [ 35.528998] ? dump_stack_print_info.cold.2+0x52/0x52 [ 35.534179] ? smc_unhash_sk+0x2c0/0x4a0 [ 35.538220] panic+0x22f/0x4de [ 35.541391] ? add_taint.cold.5+0x16/0x16 [ 35.545531] ? __warn.cold.8+0x148/0x1b3 [ 35.549580] ? __warn.cold.8+0x117/0x1b3 [ 35.553622] ? smc_unhash_sk+0x345/0x4a0 [ 35.557660] __warn.cold.8+0x163/0x1b3 [ 35.561536] ? smc_unhash_sk+0x345/0x4a0 [ 35.565576] report_bug+0x252/0x2d0 [ 35.569187] do_error_trap+0x1fc/0x4d0 [ 35.573055] ? graph_lock+0x170/0x170 [ 35.576834] ? math_error+0x3f0/0x3f0 [ 35.580616] ? lock_acquire+0x1dc/0x520 [ 35.584571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.589392] do_invalid_op+0x1b/0x20 [ 35.593084] invalid_op+0x14/0x20 [ 35.596514] RIP: 0010:smc_unhash_sk+0x345/0x4a0 [ 35.601152] Code: 00 49 c7 44 24 08 00 00 00 00 41 c7 44 24 10 00 00 00 00 48 81 c4 c0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b c4 29 fa <0f> 0b e9 51 ff ff ff 4c 89 ff 48 89 85 28 ff ff ff e8 55 f5 66 fa [ 35.620311] RSP: 0018:ffff8801d90c7488 EFLAGS: 00010293 [ 35.625651] RAX: ffff8801ac16e580 RBX: ffff8801d91ce800 RCX: ffffffff875075ce [ 35.632899] RDX: 0000000000000000 RSI: ffffffff87507685 RDI: 0000000000000005 [ 35.640145] RBP: ffff8801d90c7570 R08: ffff8801ac16e580 R09: ffffed003b239d10 [ 35.647400] R10: ffffed003b239d10 R11: ffff8801d91ce883 R12: 1ffff1003b218e95 [ 35.654645] R13: ffff8801d90c7548 R14: ffffffff8992ae80 R15: ffff8801d91ce880 [ 35.661901] ? smc_unhash_sk+0x28e/0x4a0 [ 35.665948] ? smc_unhash_sk+0x345/0x4a0 [ 35.669989] ? smc_unhash_sk+0x345/0x4a0 [ 35.674028] ? smc_rx_data_available+0x100/0x100 [ 35.678774] ? release_sock+0x1e2/0x2b0 [ 35.682728] ? __local_bh_enable_ip+0x161/0x230 [ 35.687376] ? __release_sock+0x3a0/0x3a0 [ 35.691503] ? smc_release+0x269/0x610 [ 35.695370] ? trace_hardirqs_on+0xd/0x10 [ 35.699496] ? __local_bh_enable_ip+0x161/0x230 [ 35.704143] smc_release+0x36e/0x610 [ 35.707847] sock_release+0x96/0x1b0 [ 35.711540] ? sock_alloc_file+0x4e0/0x4e0 [ 35.715753] sock_close+0x16/0x20 [ 35.719186] __fput+0x353/0x890 [ 35.722454] ? fput+0x1a0/0x1a0 [ 35.725715] ? _raw_spin_unlock_irq+0x27/0x70 [ 35.730192] ____fput+0x15/0x20 [ 35.733452] task_work_run+0x1e4/0x290 [ 35.737318] ? task_work_cancel+0x240/0x240 [ 35.741619] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 35.747136] ? switch_task_namespaces+0xa2/0xd0 [ 35.751783] do_exit+0x1aee/0x2730 [ 35.755302] ? mm_update_next_owner+0x980/0x980 [ 35.759950] ? kasan_check_write+0x14/0x20 [ 35.764161] ? do_raw_spin_lock+0xc1/0x200 [ 35.768374] ? trace_hardirqs_off+0xd/0x10 [ 35.772586] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 35.777669] ? debug_check_no_obj_freed+0x2ff/0x584 [ 35.782662] ? __local_bh_enable_ip+0x161/0x230 [ 35.787321] ? kasan_check_read+0x11/0x20 [ 35.791450] ? rcu_is_watching+0x85/0x140 [ 35.795573] ? rcu_pm_notify+0xc0/0xc0 [ 35.799441] ? ___sys_sendmsg+0x31a/0x940 [ 35.803568] ? kfree+0x1e9/0x260 [ 35.806915] ? ___sys_sendmsg+0x31f/0x940 [ 35.811042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 35.816559] ? copy_msghdr_from_user+0x560/0x560 [ 35.821291] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 35.826027] ? graph_lock+0x170/0x170 [ 35.829811] ? find_held_lock+0x36/0x1c0 [ 35.833851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 35.839366] ? __fget_light+0x2ef/0x430 [ 35.843317] ? fget_raw+0x20/0x20 [ 35.846748] ? find_held_lock+0x36/0x1c0 [ 35.850806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 35.856321] ? sockfd_lookup_light+0xc5/0x160 [ 35.860796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 35.866307] ? __sys_sendmsg+0x1aa/0x270 [ 35.870362] ? __ia32_sys_shutdown+0x80/0x80 [ 35.874759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 35.880274] ? __do_page_fault+0x441/0xe40 [ 35.884488] do_group_exit+0x16f/0x430 [ 35.888354] ? __ia32_sys_exit+0x50/0x50 [ 35.892395] ? do_syscall_64+0x92/0x800 [ 35.896348] __x64_sys_exit_group+0x3e/0x50 [ 35.900646] do_syscall_64+0x1b1/0x800 [ 35.904523] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 35.909344] ? syscall_return_slowpath+0x5c0/0x5c0 [ 35.914254] ? syscall_return_slowpath+0x30f/0x5c0 [ 35.919164] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 35.924509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.929334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 35.934501] RIP: 0033:0x43ea48 [ 35.937664] Code: Bad RIP value. [ 35.941018] RSP: 002b:00007ffcedc0c6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 35.948705] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ea48 [ 35.955951] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 35.963196] RBP: 00000000004be3e0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 35.970442] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000000001 [ 35.977688] R13: 00000000006cc160 R14: 0000000000000000 R15: 0000000000000000 [ 35.985474] Dumping ftrace buffer: [ 35.989084] (ftrace buffer empty) [ 35.992773] Kernel Offset: disabled [ 35.996381] Rebooting in 86400 seconds..