[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 25.860980] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.187760] random: sshd: uninitialized urandom read (32 bytes read) [ 28.661585] random: sshd: uninitialized urandom read (32 bytes read) [ 29.265710] random: sshd: uninitialized urandom read (32 bytes read) [ 33.050701] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. [ 38.661393] random: sshd: uninitialized urandom read (32 bytes read) [ 38.796548] kasan: CONFIG_KASAN_INLINE enabled [ 38.801307] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 38.808733] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 38.814967] CPU: 0 PID: 5561 Comm: syz-executor391 Not tainted 4.19.0-rc3-next-20180912+ #72 [ 38.823534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.832909] RIP: 0010:mqueue_get_tree+0xba/0x2e0 [ 38.837662] Code: 4c 8d b3 98 00 00 00 4d 85 ed 0f 84 d1 00 00 00 e8 6b 44 3f fe 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 38.856558] RSP: 0018:ffff8801bad37928 EFLAGS: 00010207 [ 38.861918] RAX: dffffc0000000000 RBX: ffff8801cd0b8d40 RCX: ffffffff8160aca1 [ 38.869183] RDX: 00001001848898e2 RSI: ffffffff833deb15 RDI: 0000800c2444c714 [ 38.876448] RBP: ffff8801bad37948 R08: fffffbfff13555fd R09: fffffbfff13555fc [ 38.883713] R10: fffffbfff13555fc R11: ffffffff89aaafe3 R12: ffff8801d7aa96c0 [ 38.890978] R13: 0000800c2444c70c R14: ffff8801cd0b8dd8 R15: ffff8801cd0b8dd8 [ 38.898247] FS: 00000000024e0940(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000 [ 38.906467] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.912351] CR2: 00000000004784c0 CR3: 00000001d90b0000 CR4: 00000000001406f0 [ 38.919629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.926892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.934152] Call Trace: [ 38.936744] vfs_get_tree+0x1cb/0x5c0 [ 38.940550] mq_create_mount+0xe3/0x190 [ 38.944527] mq_init_ns+0x15a/0x210 [ 38.948152] copy_ipcs+0x3d2/0x580 [ 38.951689] ? ipcns_get+0xe0/0xe0 [ 38.955231] ? do_mount+0x1db0/0x1db0 [ 38.959032] ? kmem_cache_alloc+0x33a/0x730 [ 38.963354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.968898] ? perf_event_namespaces+0x136/0x400 [ 38.973657] create_new_namespaces+0x376/0x900 [ 38.978242] ? sys_ni_syscall+0x20/0x20 [ 38.982228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.987764] ? ns_capable_common+0x13f/0x170 [ 38.992170] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 38.997102] ksys_unshare+0x79c/0x10b0 [ 39.000993] ? walk_process_tree+0x440/0x440 [ 39.005406] ? lock_downgrade+0x900/0x900 [ 39.009561] ? kasan_check_read+0x11/0x20 [ 39.013710] ? do_raw_spin_unlock+0xa7/0x2f0 [ 39.018114] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 39.022701] ? kasan_check_write+0x14/0x20 [ 39.026934] ? do_raw_read_unlock+0x3f/0x60 [ 39.031252] ? do_syscall_64+0x9a/0x820 [ 39.035227] ? do_syscall_64+0x9a/0x820 [ 39.039204] ? lockdep_hardirqs_on+0x421/0x5c0 [ 39.043790] ? trace_hardirqs_on+0xbd/0x310 [ 39.048112] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.053477] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 39.058928] ? __ia32_sys_prlimit64+0x8c0/0x8c0 [ 39.063602] __x64_sys_unshare+0x31/0x40 [ 39.067665] do_syscall_64+0x1b9/0x820 [ 39.071553] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 39.076919] ? syscall_return_slowpath+0x5e0/0x5e0 [ 39.081849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.086700] ? trace_hardirqs_on_caller+0x310/0x310 [ 39.091714] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 39.096729] ? prepare_exit_to_usermode+0x291/0x3b0 [ 39.101749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.106593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.111778] RIP: 0033:0x44f467 [ 39.114970] Code: 00 00 00 b8 63 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 9a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d 9a fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 39.133872] RSP: 002b:00007ffdef52bb28 EFLAGS: 00000217 ORIG_RAX: 0000000000000110 [ 39.141587] RAX: ffffffffffffffda RBX: 00007ffdef52bca0 RCX: 000000000044f467 [ 39.148850] RDX: 0000000000000000 RSI: 00007ffdef52bb40 RDI: 0000000008000000 [ 39.156113] RBP: 585858582e72656c R08: 0000000000000000 R09: 0000000000000018 [ 39.163384] R10: 0000000000000000 R11: 0000000000000217 R12: 6c616b7a79732f2e [ 39.170650] R13: 0000000000409420 R14: 0000000000000000 R15: 0000000000000000 [ 39.177921] Modules linked in: [ 39.181218] ---[ end trace 76fcc59fc2f2bb7a ]--- [ 39.185991] RIP: 0010:mqueue_get_tree+0xba/0x2e0 [ 39.190772] Code: 4c 8d b3 98 00 00 00 4d 85 ed 0f 84 d1 00 00 00 e8 6b 44 3f fe 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 39.209703] RSP: 0018:ffff8801bad37928 EFLAGS: 00010207 [ 39.215065] RAX: dffffc0000000000 RBX: ffff8801cd0b8d40 RCX: ffffffff8160aca1 [ 39.222380] RDX: 00001001848898e2 RSI: ffffffff833deb15 RDI: 0000800c2444c714 [ 39.229710] RBP: ffff8801bad37948 R08: fffffbfff13555fd R09: fffffbfff13555fc [ 39.237008] R10: fffffbfff13555fc R11: ffffffff89aaafe3 R12: ffff8801d7aa96c0 [ 39.244286] R13: 0000800c2444c70c R14: ffff8801cd0b8dd8 R15: ffff8801cd0b8dd8 [ 39.251586] FS: 00000000024e0940(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000 [ 39.259833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.265711] CR2: 00000000004784c0 CR3: 00000001d90b0000 CR4: 00000000001406f0 [ 39.273000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.280294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.287597] Kernel panic - not syncing: Fatal exception [ 39.293850] Kernel Offset: disabled [ 39.297474] Rebooting in 86400 seconds..