[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.816315] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.300132] random: sshd: uninitialized urandom read (32 bytes read) [ 22.642560] random: sshd: uninitialized urandom read (32 bytes read) [ 23.499895] random: sshd: uninitialized urandom read (32 bytes read) [ 23.671446] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.51' (ECDSA) to the list of known hosts. [ 29.212253] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 29.305570] WARNING: CPU: 1 PID: 4526 at include/net/sock.h:644 smc_unhash_sk+0x357/0x4b0 [ 29.313948] Kernel panic - not syncing: panic_on_warn set ... [ 29.313948] [ 29.321297] CPU: 1 PID: 4526 Comm: syz-executor453 Not tainted 4.18.0-rc2+ #123 [ 29.328728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.338071] Call Trace: [ 29.340647] dump_stack+0x1c9/0x2b4 [ 29.344258] ? dump_stack_print_info.cold.2+0x52/0x52 [ 29.349433] panic+0x238/0x4e7 [ 29.352608] ? add_taint.cold.5+0x16/0x16 [ 29.356740] ? __warn.cold.8+0x148/0x1ba [ 29.360788] ? __warn.cold.8+0x117/0x1ba [ 29.364835] ? smc_unhash_sk+0x357/0x4b0 [ 29.368876] __warn.cold.8+0x163/0x1ba [ 29.372761] ? smc_unhash_sk+0x357/0x4b0 [ 29.376804] report_bug+0x252/0x2d0 [ 29.380414] do_error_trap+0x1fc/0x4d0 [ 29.384291] ? math_error+0x3e0/0x3e0 [ 29.388076] ? print_usage_bug+0xc0/0xc0 [ 29.392124] ? lock_acquire+0x1e4/0x540 [ 29.396088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.400911] do_invalid_op+0x1b/0x20 [ 29.404612] invalid_op+0x14/0x20 [ 29.408054] RIP: 0010:smc_unhash_sk+0x357/0x4b0 [ 29.412747] Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 88 00 00 00 48 81 c4 c0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a9 e7 1b fa <0f> 0b e9 47 ff ff ff 4c 89 ff 48 89 85 28 ff ff ff e8 23 bb 59 fa [ 29.431923] RSP: 0018:ffff8801ad0bf480 EFLAGS: 00010293 [ 29.437270] RAX: ffff8801a87524c0 RBX: ffff8801ad19b800 RCX: ffffffff87602406 [ 29.444531] RDX: 0000000000000000 RSI: ffffffff876024c7 RDI: 0000000000000005 [ 29.451780] RBP: ffff8801ad0bf568 R08: ffff8801a87524c0 R09: ffffed0035a33710 [ 29.459036] R10: ffffed0035a33710 R11: ffff8801ad19b883 R12: 1ffff10035a17e94 [ 29.466285] R13: ffff8801ad0bf540 R14: ffffffff89934e60 R15: ffff8801ad19b880 [ 29.473546] ? smc_unhash_sk+0x296/0x4b0 [ 29.477591] ? smc_unhash_sk+0x357/0x4b0 [ 29.481644] ? smc_rx_data_available+0x120/0x120 [ 29.486378] ? release_sock+0x1ec/0x2c0 [ 29.490333] ? __local_bh_enable_ip+0x161/0x230 [ 29.494980] ? __release_sock+0x3a0/0x3a0 [ 29.499107] ? smc_release+0x269/0x610 [ 29.502980] ? trace_hardirqs_on+0xd/0x10 [ 29.507109] ? __local_bh_enable_ip+0x161/0x230 [ 29.511758] smc_release+0x36e/0x610 [ 29.515453] __sock_release+0xd7/0x260 [ 29.519317] ? __sock_release+0x260/0x260 [ 29.523442] sock_close+0x19/0x20 [ 29.526875] __fput+0x355/0x8b0 [ 29.530310] ? fput+0x1a0/0x1a0 [ 29.533572] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.538055] ____fput+0x15/0x20 [ 29.541317] task_work_run+0x1ec/0x2a0 [ 29.545184] ? task_work_cancel+0x250/0x250 [ 29.549486] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 29.555006] ? switch_task_namespaces+0xa2/0xd0 [ 29.559663] do_exit+0x1b08/0x2750 [ 29.563188] ? mm_update_next_owner+0x9a0/0x9a0 [ 29.567849] ? find_held_lock+0x36/0x1c0 [ 29.571892] ? lock_downgrade+0x8f0/0x8f0 [ 29.576027] ? lock_downgrade+0x8f0/0x8f0 [ 29.580172] ? kasan_check_read+0x11/0x20 [ 29.584312] ? do_raw_spin_unlock+0xa7/0x2f0 [ 29.588715] ? __local_bh_enable_ip+0x161/0x230 [ 29.593369] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.598382] ? release_sock+0x1ec/0x2c0 [ 29.602339] ? trace_hardirqs_on+0xd/0x10 [ 29.606466] ? __local_bh_enable_ip+0x161/0x230 [ 29.611124] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.615521] ? release_sock+0x1ec/0x2c0 [ 29.619479] ? __release_sock+0x3a0/0x3a0 [ 29.623612] ? __local_bh_enable_ip+0x161/0x230 [ 29.628268] ? smc_sendmsg+0x2d5/0x370 [ 29.632137] ? smc_sendpage+0x1a0/0x1a0 [ 29.636096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.641614] ? sock_sendmsg+0x5a/0x120 [ 29.645482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.651021] ? __sys_sendto+0x475/0x670 [ 29.654991] ? __ia32_sys_getpeername+0xb0/0xb0 [ 29.659654] ? lock_downgrade+0x8f0/0x8f0 [ 29.663783] ? handle_mm_fault+0x8c4/0xc80 [ 29.667997] ? handle_mm_fault+0x55d/0xc80 [ 29.672226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.677747] do_group_exit+0x177/0x440 [ 29.681615] ? mm_fault_error+0x380/0x380 [ 29.685739] ? __ia32_sys_exit+0x50/0x50 [ 29.689781] ? do_syscall_64+0x9a/0x820 [ 29.693734] __x64_sys_exit_group+0x3e/0x50 [ 29.698042] do_syscall_64+0x1b9/0x820 [ 29.701910] ? syscall_return_slowpath+0x5e0/0x5e0 [ 29.706826] ? syscall_return_slowpath+0x31d/0x5e0 [ 29.711740] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 29.717096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.721921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 29.727092] RIP: 0033:0x43e918 [ 29.730263] Code: Bad RIP value. [ 29.733618] RSP: 002b:00007fffef6443b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.741311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043e918 [ 29.748557] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 29.755804] RBP: 00000000004be2c0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 29.763055] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.770309] R13: 00000000006cc160 R14: 0000000000000000 R15: 0000000000000000 [ 29.778168] Dumping ftrace buffer: [ 29.781784] (ftrace buffer empty) [ 29.785474] Kernel Offset: disabled [ 29.789081] Rebooting in 86400 seconds..