[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.770243] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.137168] random: sshd: uninitialized urandom read (32 bytes read) [ 22.671041] random: sshd: uninitialized urandom read (32 bytes read) [ 23.386933] random: sshd: uninitialized urandom read (32 bytes read) [ 23.544762] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. [ 29.084251] random: sshd: uninitialized urandom read (32 bytes read) 2018/04/30 20:50:25 parsed 1 programs 2018/04/30 20:50:25 executed programs: 0 [ 29.561177] IPVS: ftp: loaded support on port[0] = 21 [ 29.609425] WARNING: CPU: 1 PID: 4532 at include/net/sock.h:639 smc_unhash_sk+0x345/0x4a0 [ 29.617979] Kernel panic - not syncing: panic_on_warn set ... [ 29.617979] [ 29.625394] CPU: 1 PID: 4532 Comm: syz-executor0 Not tainted 4.17.0-rc3+ #50 [ 29.632566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.641927] Call Trace: [ 29.644510] dump_stack+0x1b9/0x294 [ 29.648133] ? dump_stack_print_info.cold.2+0x52/0x52 [ 29.653341] ? smc_unhash_sk+0x250/0x4a0 [ 29.657395] panic+0x22f/0x4de [ 29.660655] ? add_taint.cold.5+0x16/0x16 [ 29.664799] ? __warn.cold.8+0x148/0x1b3 [ 29.668888] ? __warn.cold.8+0x117/0x1b3 [ 29.673063] ? smc_unhash_sk+0x345/0x4a0 [ 29.677119] __warn.cold.8+0x163/0x1b3 [ 29.681352] ? smc_unhash_sk+0x345/0x4a0 [ 29.685403] report_bug+0x252/0x2d0 [ 29.689026] do_error_trap+0x1de/0x490 [ 29.692915] ? math_error+0x420/0x420 [ 29.696706] ? lock_acquire+0x1dc/0x520 [ 29.700670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.705508] do_invalid_op+0x1b/0x20 [ 29.709219] invalid_op+0x14/0x20 [ 29.712663] RIP: 0010:smc_unhash_sk+0x345/0x4a0 [ 29.717319] RSP: 0018:ffff8801aba86fe0 EFLAGS: 00010293 [ 29.722671] RAX: ffff8801aba3c340 RBX: ffff8801abb7b7c0 RCX: ffffffff873e793e [ 29.729924] RDX: 0000000000000000 RSI: ffffffff873e79f5 RDI: 0000000000000005 [ 29.737179] RBP: ffff8801aba870c8 R08: ffff8801aba3c340 R09: ffffed003576f708 [ 29.744449] R10: ffffed003576f708 R11: ffff8801abb7b843 R12: 1ffff10035750e00 [ 29.751717] R13: ffff8801aba870a0 R14: ffffffff8970b580 R15: ffff8801abb7b840 [ 29.759004] ? smc_unhash_sk+0x28e/0x4a0 [ 29.763082] ? smc_unhash_sk+0x345/0x4a0 [ 29.767142] ? smc_hash_sk+0x2f0/0x2f0 [ 29.771104] ? release_sock+0x1e2/0x2b0 [ 29.775084] ? __local_bh_enable_ip+0x161/0x230 [ 29.779768] ? __release_sock+0x3a0/0x3a0 [ 29.783906] ? smc_release+0x269/0x610 [ 29.787786] ? trace_hardirqs_on+0xd/0x10 [ 29.791925] ? __local_bh_enable_ip+0x161/0x230 [ 29.796584] smc_release+0x36e/0x610 [ 29.800290] sock_release+0x96/0x1b0 [ 29.803992] ? sock_alloc_file+0x4e0/0x4e0 [ 29.808249] sock_close+0x16/0x20 [ 29.811710] __fput+0x34d/0x890 [ 29.814995] ? fput+0x1a0/0x1a0 [ 29.818282] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.822773] ____fput+0x15/0x20 [ 29.826050] task_work_run+0x1e4/0x290 [ 29.829936] ? task_work_cancel+0x240/0x240 [ 29.834251] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 29.839779] ? switch_task_namespaces+0xa2/0xd0 [ 29.844440] do_exit+0x1aee/0x2730 [ 29.847970] ? mm_update_next_owner+0x980/0x980 [ 29.852633] ? print_usage_bug+0xc0/0xc0 [ 29.856682] ? lock_downgrade+0x8e0/0x8e0 [ 29.860837] ? lock_downgrade+0x8e0/0x8e0 [ 29.864973] ? kasan_check_read+0x11/0x20 [ 29.869116] ? do_raw_spin_unlock+0x9e/0x2e0 [ 29.873514] ? __lock_acquire+0x7f5/0x5140 [ 29.877739] ? refcount_inc_not_zero+0x2d0/0x2d0 [ 29.882495] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.886911] ? debug_check_no_locks_freed+0x310/0x310 [ 29.892115] ? smc_poll+0x294/0xcf0 [ 29.895752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.901292] ? __fget_light+0x2ef/0x430 [ 29.905266] ? fget_raw+0x20/0x20 [ 29.908717] ? __check_object_size+0x95/0x5d9 [ 29.913227] ? graph_lock+0x170/0x170 [ 29.917045] ? sock_poll+0x2be/0x390 [ 29.920762] ? sock_ioctl+0x680/0x680 [ 29.924564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.930097] ? memset+0x31/0x40 [ 29.933369] ? find_held_lock+0x36/0x1c0 [ 29.937449] ? lock_downgrade+0x8e0/0x8e0 [ 29.941608] do_group_exit+0x16f/0x430 [ 29.945486] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 29.950061] ? __ia32_sys_exit+0x50/0x50 [ 29.954126] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.958622] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.963636] get_signal+0x886/0x1960 [ 29.967347] ? ptrace_notify+0x130/0x130 [ 29.971591] ? lock_downgrade+0x8e0/0x8e0 [ 29.975732] ? lock_downgrade+0x8e0/0x8e0 [ 29.979872] ? kasan_check_read+0x11/0x20 [ 29.984040] ? release_sock+0x1e2/0x2b0 [ 29.988016] ? trace_hardirqs_on+0xd/0x10 [ 29.992177] ? __local_bh_enable_ip+0x161/0x230 [ 29.996843] do_signal+0x98/0x2040 [ 30.000383] ? __release_sock+0x3a0/0x3a0 [ 30.004531] ? setup_sigcontext+0x7d0/0x7d0 [ 30.008869] ? smc_connect+0xaf/0x260 [ 30.012656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.018199] ? __sys_connect+0x1d1/0x4c0 [ 30.022373] ? __ia32_sys_accept+0xb0/0xb0 [ 30.026594] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 30.032137] ? exit_to_usermode_loop+0x87/0x310 [ 30.036799] exit_to_usermode_loop+0x28a/0x310 [ 30.041374] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 30.046382] ? do_fast_syscall_32+0x148/0xf9b [ 30.050872] do_fast_syscall_32+0xcc3/0xf9b [ 30.055185] ? do_int80_syscall_32+0x880/0x880 [ 30.059763] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 30.064515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.070046] ? syscall_return_slowpath+0x30f/0x5c0 [ 30.074963] ? sysret32_from_system_call+0x5/0x46 [ 30.079793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.084645] entry_SYSENTER_compat+0x70/0x7f [ 30.089054] RIP: 0023:0xf7f43cb9 [ 30.092413] RSP: 002b:00000000ff98d45c EFLAGS: 00000286 ORIG_RAX: 00000000000000a8 [ 30.100118] RAX: 0000000000000001 RBX: 0000000020000100 RCX: 0000000000000001 [ 30.107377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.114649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 30.121919] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 30.129196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 30.137143] Dumping ftrace buffer: [ 30.140802] (ftrace buffer empty) [ 30.144494] Kernel Offset: disabled [ 30.148106] Rebooting in 86400 seconds..