[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 5.090492] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 15.781311] random: sshd: uninitialized urandom read (32 bytes read) [ 15.960497] random: sshd: uninitialized urandom read (32 bytes read) [ 16.219046] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. [ 21.699871] urandom_read: 1 callbacks suppressed [ 21.699873] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/08 18:11:12 parsed 1 programs [ 22.728025] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/08 18:11:13 executed programs: 0 [ 23.436382] IPVS: ftp: loaded support on port[0] = 21 [ 23.466775] ip (4054) used greatest stack depth: 10408 bytes left [ 23.477650] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.483968] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.490448] device bridge_slave_0 entered promiscuous mode [ 23.498095] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.504420] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.510847] device bridge_slave_1 entered promiscuous mode [ 23.518425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 23.527086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 23.539523] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 23.548866] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 23.565979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 23.572730] team0: Port device team_slave_0 added [ 23.579484] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 23.586240] team0: Port device team_slave_1 added [ 23.593326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 23.602507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 23.611747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.619713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.646488] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.652811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.659327] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.665635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.672641] ip (4121) used greatest stack depth: 10344 bytes left [ 23.745133] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 23.751249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.764040] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 23.776674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.783526] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 23.795257] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 23.801323] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.853260] FAULT_INJECTION: forcing a failure. [ 23.853260] name failslab, interval 1, probability 0, space 0, times 1 [ 23.864513] CPU: 0 PID: 4288 Comm: syz-executor0 Not tainted 4.18.0-rc8+ #32 [ 23.871670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.881040] Call Trace: [ 23.883604] dump_stack+0xae/0xf0 [ 23.887067] should_fail+0x144/0x230 [ 23.890756] ? __should_failslab+0x67/0x90 [ 23.894960] __should_failslab+0x7e/0x90 [ 23.898988] should_failslab+0x9/0x20 [ 23.902762] __kmalloc+0x61/0x250 [ 23.906184] tls_push_record+0x48/0x470 [ 23.910125] tls_sw_sendmsg+0x53c/0x6e0 [ 23.914066] inet_sendmsg+0xf5/0x170 [ 23.917747] __sys_sendto+0x176/0x1f0 [ 23.921517] ? __vfs_write+0x49/0x1e0 [ 23.925289] ? fsnotify+0x1be/0x620 [ 23.928885] ? prepare_exit_to_usermode+0x68/0x170 [ 23.933781] __x64_sys_sendto+0x28/0x30 [ 23.937720] do_syscall_64+0x61/0x90 [ 23.941406] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 23.946606] RIP: 0033:0x456c99 [ 23.949781] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 23.968794] RSP: 002b:00007fffde8bfa58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 23.976474] RAX: ffffffffffffffda RBX: 0000000001d83914 RCX: 0000000000456c99 [ 23.983715] RDX: 00000000fffffdef RSI: 00000000200005c0 RDI: 0000000000000003 [ 23.990953] RBP: 00000000009300a0 R08: 0000000020000000 R09: 000000000000001c [ 23.998190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 24.005429] R13: 00000000004d3880 R14: 00000000004c850f R15: 0000000000000005 [ 24.012849] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008 [ 24.020944] PGD 8000000204a9c067 P4D 8000000204a9c067 PUD 2118f6067 PMD 0 [ 24.027939] Oops: 0000 [#1] SMP PTI [ 24.031532] CPU: 1 PID: 4288 Comm: syz-executor0 Not tainted 4.18.0-rc8+ #32 [ 24.038688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.048013] RIP: 0010:tls_push_sg+0xfa/0x220 [ 24.052388] Code: ee 49 29 df 48 8b 7d c0 4c 89 e6 44 89 f2 4c 89 f9 44 8b 45 d0 e8 e6 10 f6 ff 49 89 c5 49 63 dd 49 39 df 75 cb e8 f6 ac c1 fe <49> 8b 44 24 08 a8 01 4c 8b 75 c0 0f 85 80 00 00 00 c6 45 d7 00 f0 [ 24.071379] RSP: 0018:ffff880212373c10 EFLAGS: 00010293 [ 24.076751] RAX: ffffffff825500ff RBX: 0000000000000000 RCX: ffff8801ffc68dc0 [ 24.084133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff880200d2d300 [ 24.091383] RBP: ffff880212373c60 R08: 0000000000020000 R09: ffff880215370800 [ 24.098637] R10: ffff880202abe800 R11: ffffffff825a3b40 R12: 0000000000000000 [ 24.105881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 24.113218] FS: 0000000001d83940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 24.121456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.127313] CR2: 0000000000000008 CR3: 0000000204bba000 CR4: 00000000001406e0 [ 24.134560] Call Trace: [ 24.137176] tls_push_record+0x390/0x470 [ 24.141211] ? _cond_resched+0x17/0x60 [ 24.145070] ? lock_sock_nested+0xd4/0xf0 [ 24.149191] ? tcp_check_oom+0x130/0x130 [ 24.153223] tls_sw_push_pending_record+0x22/0x30 [ 24.158035] tls_sk_proto_close+0x117/0x310 [ 24.162325] inet_release+0x7e/0x90 [ 24.165925] inet6_release+0x35/0x50 [ 24.169610] sock_close+0x48/0xd0 [ 24.173031] ? sock_mmap+0x40/0x40 [ 24.176538] __fput+0x110/0x280 [ 24.179791] ____fput+0x15/0x20 [ 24.183045] task_work_run+0xb4/0xe0 [ 24.186730] prepare_exit_to_usermode+0x144/0x170 [ 24.191582] syscall_return_slowpath+0x3f/0x270 [ 24.196226] ? fput+0xa4/0xc0 [ 24.199299] ? filp_close+0x67/0xa0 [ 24.202897] ? __close_fd+0xae/0xc0 [ 24.206493] do_syscall_64+0x6d/0x90 [ 24.210182] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 24.215462] RIP: 0033:0x410830 [ 24.218638] Code: 01 f0 ff ff 0f 83 60 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 5d 57 63 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 24.237629] RSP: 002b:00007fffde8bfc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 24.245317] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000410830 [ 24.252559] RDX: 0000001b2f320000 RSI: 0000000000730a38 RDI: 0000000000000003 [ 24.259798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 24.267042] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000704dc8 [ 24.274283] R13: 00007fffde8bfc90 R14: 0000000000000003 R15: 0000000000000000 [ 24.281583] Modules linked in: [ 24.284752] Dumping ftrace buffer: [ 24.288263] (ftrace buffer empty) [ 24.291945] CR2: 0000000000000008 [ 24.295501] ---[ end trace 4235accddac17931 ]--- [ 24.300250] RIP: 0010:tls_push_sg+0xfa/0x220 [ 24.304642] Code: ee 49 29 df 48 8b 7d c0 4c 89 e6 44 89 f2 4c 89 f9 44 8b 45 d0 e8 e6 10 f6 ff 49 89 c5 49 63 dd 49 39 df 75 cb e8 f6 ac c1 fe <49> 8b 44 24 08 a8 01 4c 8b 75 c0 0f 85 80 00 00 00 c6 45 d7 00 f0 [ 24.323654] RSP: 0018:ffff880212373c10 EFLAGS: 00010293 [ 24.329097] RAX: ffffffff825500ff RBX: 0000000000000000 RCX: ffff8801ffc68dc0 [ 24.336364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff880200d2d300 [ 24.343616] RBP: ffff880212373c60 R08: 0000000000020000 R09: ffff880215370800 [ 24.350880] R10: ffff880202abe800 R11: ffffffff825a3b40 R12: 0000000000000000 [ 24.358134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 24.365398] FS: 0000000001d83940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 24.373613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.379491] CR2: 0000000000000008 CR3: 0000000204bba000 CR4: 00000000001406e0 [ 24.386740] Kernel panic - not syncing: Fatal exception [ 24.392328] Dumping ftrace buffer: [ 24.395839] (ftrace buffer empty) [ 24.399523] Kernel Offset: disabled [ 24.403121] Rebooting in 86400 seconds..