[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.264621] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.219526] random: sshd: uninitialized urandom read (32 bytes read) [ 26.605471] random: sshd: uninitialized urandom read (32 bytes read) [ 27.175964] random: sshd: uninitialized urandom read (32 bytes read) [ 27.348076] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. [ 33.054388] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 33.147839] netlink: 'syz-executor937': attribute type 9 has an invalid length. [ 33.157057] WARNING: CPU: 0 PID: 4430 at net/wireless/core.c:550 wiphy_register+0x12c1/0x2510 [ 33.165732] Kernel panic - not syncing: panic_on_warn set ... [ 33.165732] [ 33.173098] CPU: 0 PID: 4430 Comm: syz-executor937 Not tainted 4.18.0-rc8+ #53 [ 33.180450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.189795] Call Trace: [ 33.192382] dump_stack+0x1c9/0x2b4 [ 33.196010] ? dump_stack_print_info.cold.2+0x52/0x52 [ 33.201218] panic+0x238/0x4e7 [ 33.204408] ? add_taint.cold.5+0x16/0x16 [ 33.208557] ? __warn.cold.8+0x148/0x1ba [ 33.212792] ? __warn.cold.8+0x117/0x1ba [ 33.216850] ? wiphy_register+0x12c1/0x2510 [ 33.221184] __warn.cold.8+0x163/0x1ba [ 33.225078] ? wiphy_register+0x12c1/0x2510 [ 33.229405] report_bug+0x252/0x2d0 [ 33.233044] do_error_trap+0x1fc/0x4d0 [ 33.236943] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.241954] ? math_error+0x3e0/0x3e0 [ 33.245751] ? depot_save_stack+0x291/0x470 [ 33.250087] ? save_stack+0xa9/0xd0 [ 33.253727] ? save_stack+0x43/0xd0 [ 33.257353] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 33.262198] do_invalid_op+0x1b/0x20 [ 33.265931] invalid_op+0x14/0x20 [ 33.269382] RIP: 0010:wiphy_register+0x12c1/0x2510 [ 33.274344] Code: 74 08 3c 01 0f 8e c5 10 00 00 66 45 89 67 30 e9 18 f9 ff ff e8 40 00 4c fb 0f 0b bb ea ff ff ff e9 f5 f3 ff ff e8 2f 00 4c fb <0f> 0b bb ea ff ff ff e9 e4 f3 ff ff e8 1e 00 4c fb 0f 0b bb ea ff [ 33.293518] RSP: 0018:ffff8801af11ee60 EFLAGS: 00010293 [ 33.298876] RAX: ffff8801b412c2c0 RBX: 0000000000000000 RCX: ffffffff86301238 [ 33.306177] RDX: 0000000000000000 RSI: ffffffff86301821 RDI: 0000000000000005 [ 33.313488] RBP: ffff8801af11f000 R08: ffff8801b412c2c0 R09: ffffed0035e3d11c [ 33.320754] R10: ffffed0035e3d11c R11: ffff8801af1e88e5 R12: ffff8801af1eb2bc [ 33.328022] R13: ffffffff87838ae0 R14: dffffc0000000000 R15: ffff8801af1e88e0 [ 33.335307] ? wiphy_register+0xcd8/0x2510 [ 33.339580] ? wiphy_register+0x12c1/0x2510 [ 33.343907] ? wiphy_unregister+0x12c0/0x12c0 [ 33.348505] ? rcu_read_lock_sched_held+0x108/0x120 [ 33.353519] ? __kmalloc+0x5f9/0x760 [ 33.357235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.362882] ? ieee80211_cs_list_valid+0x7c/0x440 [ 33.367724] ? ieee80211_register_hw+0xc13/0x35e0 [ 33.372565] ieee80211_register_hw+0x13d5/0x35e0 [ 33.377322] ? rcu_report_qs_rnp+0x781/0x7a0 [ 33.381728] ? ieee80211_free_ack_frame+0x60/0x60 [ 33.386573] mac80211_hwsim_new_radio+0x1db8/0x33b0 [ 33.391592] ? __rhashtable_insert_fast.constprop.53+0xf90/0xf90 [ 33.397740] ? lock_downgrade+0x8f0/0x8f0 [ 33.401887] ? mark_held_locks+0xc9/0x160 [ 33.406038] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 33.410633] ? vprintk_default+0x28/0x30 [ 33.414692] ? vprintk_func+0x81/0xe7 [ 33.418536] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 33.423291] ? graph_lock+0x170/0x170 [ 33.427097] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 33.432290] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 33.437305] ? validate_nla+0x2d9/0x7b0 [ 33.441278] hwsim_new_radio_nl+0x7c0/0xa80 [ 33.445595] ? nla_parse+0x32b/0x4b0 [ 33.449308] ? mac80211_hwsim_new_radio+0x33b0/0x33b0 [ 33.454498] ? __netlink_ns_capable+0x100/0x130 [ 33.459186] genl_family_rcv_msg+0x8a3/0x1140 [ 33.463683] ? genl_unregister_family+0x8b0/0x8b0 [ 33.468536] ? lock_downgrade+0x8f0/0x8f0 [ 33.472679] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 33.477695] ? kasan_check_read+0x11/0x20 [ 33.481841] ? lock_acquire+0x1e4/0x540 [ 33.485810] ? genl_rcv+0x19/0x40 [ 33.489271] genl_rcv_msg+0xc6/0x168 [ 33.492981] netlink_rcv_skb+0x172/0x440 [ 33.497057] ? genl_family_rcv_msg+0x1140/0x1140 [ 33.501823] ? netlink_ack+0xbe0/0xbe0 [ 33.505704] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 33.510127] genl_rcv+0x28/0x40 [ 33.513435] netlink_unicast+0x5a0/0x760 [ 33.517497] ? netlink_attachskb+0x9a0/0x9a0 [ 33.521901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.527438] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 33.532495] netlink_sendmsg+0xa18/0xfd0 [ 33.536557] ? netlink_unicast+0x760/0x760 [ 33.540790] ? move_addr_to_kernel.part.20+0x100/0x100 [ 33.546154] ? security_socket_sendmsg+0x94/0xc0 [ 33.550910] ? netlink_unicast+0x760/0x760 [ 33.555168] sock_sendmsg+0xd5/0x120 [ 33.558880] ___sys_sendmsg+0x7fd/0x930 [ 33.562854] ? copy_msghdr_from_user+0x580/0x580 [ 33.567610] ? graph_lock+0x170/0x170 [ 33.571414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.576947] ? __fget_light+0x2f7/0x440 [ 33.580918] ? fget_raw+0x20/0x20 [ 33.584376] ? lock_downgrade+0x8f0/0x8f0 [ 33.588565] ? handle_mm_fault+0x8c4/0xc80 [ 33.592803] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 33.598336] ? sockfd_lookup_light+0xc5/0x160 [ 33.602826] __sys_sendmsg+0x11d/0x290 [ 33.606710] ? __ia32_sys_shutdown+0x80/0x80 [ 33.611120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.616678] ? __do_page_fault+0x449/0xe50 [ 33.620919] __x64_sys_sendmsg+0x78/0xb0 [ 33.624977] do_syscall_64+0x1b9/0x820 [ 33.628861] ? syscall_return_slowpath+0x5e0/0x5e0 [ 33.633785] ? syscall_return_slowpath+0x31d/0x5e0 [ 33.638713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.644246] ? retint_user+0x18/0x18 [ 33.647959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 33.652843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.658037] RIP: 0033:0x4402c9 [ 33.661231] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 33.680404] RSP: 002b:00007fffd6e97c78 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 33.688107] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402c9 [ 33.695394] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 33.702661] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 33.709980] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000401b50 [ 33.717248] R13: 0000000000401be0 R14: 0000000000000000 R15: 0000000000000000 [ 33.725048] Dumping ftrace buffer: [ 33.728663] (ftrace buffer empty) [ 33.732369] Kernel Offset: disabled [ 33.735990] Rebooting in 86400 seconds..