[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 17.876925] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.499823] random: sshd: uninitialized urandom read (32 bytes read) [ 20.696909] random: sshd: uninitialized urandom read (32 bytes read) [ 21.388446] random: sshd: uninitialized urandom read (32 bytes read) [ 38.887603] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. [ 44.310579] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 44.402686] WARNING: CPU: 0 PID: 4465 at include/net/sock.h:644 smc_unhash_sk+0x345/0x4a0 [ 44.411071] Kernel panic - not syncing: panic_on_warn set ... [ 44.411071] [ 44.418418] CPU: 0 PID: 4465 Comm: syz-executor235 Not tainted 4.17.0-rc2+ #29 [ 44.425756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.435090] Call Trace: [ 44.437661] dump_stack+0x1b9/0x294 [ 44.441268] ? dump_stack_print_info.cold.2+0x52/0x52 [ 44.446440] ? smc_unhash_sk+0x2e0/0x4a0 [ 44.450481] panic+0x22f/0x4de [ 44.453653] ? add_taint.cold.5+0x16/0x16 [ 44.457791] ? __warn.cold.8+0x148/0x1b3 [ 44.461831] ? __warn.cold.8+0x117/0x1b3 [ 44.465870] ? smc_unhash_sk+0x345/0x4a0 [ 44.469909] __warn.cold.8+0x163/0x1b3 [ 44.473774] ? smc_unhash_sk+0x345/0x4a0 [ 44.477827] report_bug+0x252/0x2d0 [ 44.481453] do_error_trap+0x1de/0x490 [ 44.485408] ? graph_lock+0x170/0x170 [ 44.489195] ? math_error+0x420/0x420 [ 44.492978] ? lock_acquire+0x1dc/0x520 [ 44.496936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.501755] do_invalid_op+0x1b/0x20 [ 44.505451] invalid_op+0x14/0x20 [ 44.508881] RIP: 0010:smc_unhash_sk+0x345/0x4a0 [ 44.513534] RSP: 0018:ffff8801b4d7f488 EFLAGS: 00010293 [ 44.518877] RAX: ffff8801ba66c4c0 RBX: ffff8801b52ca7c0 RCX: ffffffff873fc8ae [ 44.526123] RDX: 0000000000000000 RSI: ffffffff873fc965 RDI: 0000000000000005 [ 44.533373] RBP: ffff8801b4d7f570 R08: ffff8801ba66c4c0 R09: ffffed0036a59508 [ 44.540623] R10: ffffed0036a59508 R11: ffff8801b52ca843 R12: 1ffff100369afe95 [ 44.547874] R13: ffff8801b4d7f548 R14: ffffffff8970e060 R15: ffff8801b52ca840 [ 44.555139] ? smc_unhash_sk+0x28e/0x4a0 [ 44.559195] ? smc_unhash_sk+0x345/0x4a0 [ 44.563237] ? smc_unhash_sk+0x345/0x4a0 [ 44.567277] ? smc_hash_sk+0x2f0/0x2f0 [ 44.571148] ? release_sock+0x1e2/0x2b0 [ 44.575105] ? __local_bh_enable_ip+0x161/0x230 [ 44.579751] ? __release_sock+0x3a0/0x3a0 [ 44.583885] ? smc_release+0x269/0x610 [ 44.587751] ? trace_hardirqs_on+0xd/0x10 [ 44.591886] ? __local_bh_enable_ip+0x161/0x230 [ 44.596535] smc_release+0x36e/0x610 [ 44.600232] sock_release+0x96/0x1b0 [ 44.603924] ? sock_alloc_file+0x4e0/0x4e0 [ 44.608138] sock_close+0x16/0x20 [ 44.611580] __fput+0x34d/0x890 [ 44.614839] ? fput+0x1a0/0x1a0 [ 44.618099] ? _raw_spin_unlock_irq+0x27/0x70 [ 44.622576] ____fput+0x15/0x20 [ 44.625835] task_work_run+0x1e4/0x290 [ 44.629703] ? task_work_cancel+0x240/0x240 [ 44.634010] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.639528] ? switch_task_namespaces+0xa2/0xd0 [ 44.644194] do_exit+0x1aee/0x2730 [ 44.647718] ? mm_update_next_owner+0x980/0x980 [ 44.652369] ? kasan_check_read+0x11/0x20 [ 44.656501] ? do_raw_spin_unlock+0x9e/0x2e0 [ 44.660890] ? __local_bh_enable_ip+0x161/0x230 [ 44.665537] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 44.670543] ? release_sock+0x1e2/0x2b0 [ 44.674499] ? trace_hardirqs_on+0xd/0x10 [ 44.678652] ? __local_bh_enable_ip+0x161/0x230 [ 44.683301] ? _raw_spin_unlock_bh+0x30/0x40 [ 44.687692] ? kasan_check_read+0x11/0x20 [ 44.691820] ? rcu_is_watching+0x85/0x140 [ 44.695948] ? rcu_pm_notify+0xc0/0xc0 [ 44.699816] ? ___sys_sendmsg+0x31a/0x940 [ 44.703950] ? kfree+0x1e9/0x260 [ 44.707323] ? ___sys_sendmsg+0x31f/0x940 [ 44.711454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.716971] ? __handle_mm_fault+0x93a/0x4310 [ 44.721446] ? copy_msghdr_from_user+0x560/0x560 [ 44.726184] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 44.730916] ? graph_lock+0x170/0x170 [ 44.734695] ? find_held_lock+0x36/0x1c0 [ 44.738737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.744259] ? __fget_light+0x2ef/0x430 [ 44.748213] ? fget_raw+0x20/0x20 [ 44.751644] ? find_held_lock+0x36/0x1c0 [ 44.755691] ? lock_downgrade+0x8e0/0x8e0 [ 44.759816] ? handle_mm_fault+0x8c0/0xc70 [ 44.764037] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.769558] ? sockfd_lookup_light+0xc5/0x160 [ 44.774033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.779550] ? __sys_sendmsg+0x1aa/0x270 [ 44.784110] ? __ia32_sys_shutdown+0x80/0x80 [ 44.789114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.794635] ? __do_page_fault+0x441/0xe40 [ 44.798858] do_group_exit+0x16f/0x430 [ 44.802726] ? __ia32_sys_exit+0x50/0x50 [ 44.806772] ? do_syscall_64+0x92/0x800 [ 44.810727] __x64_sys_exit_group+0x3e/0x50 [ 44.815028] do_syscall_64+0x1b1/0x800 [ 44.818906] ? syscall_return_slowpath+0x5c0/0x5c0 [ 44.823815] ? syscall_return_slowpath+0x30f/0x5c0 [ 44.828733] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 44.834079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.838902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.844068] RIP: 0033:0x43ed58 [ 44.847236] RSP: 002b:00007ffd9898fdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 44.854926] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ed58 [ 44.862175] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 44.869424] RBP: 00000000004be700 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 44.876677] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000000001 [ 44.883935] R13: 00000000006cc160 R14: 0000000000000000 R15: 0000000000000000 [ 44.891821] Dumping ftrace buffer: [ 44.895448] (ftrace buffer empty) [ 44.899140] Kernel Offset: disabled [ 44.902751] Rebooting in 86400 seconds..