[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 24.510435] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 27.963079] random: sshd: uninitialized urandom read (32 bytes read) [ 28.209281] random: sshd: uninitialized urandom read (32 bytes read) [ 28.843725] random: sshd: uninitialized urandom read (32 bytes read) [ 29.066189] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.238' (ECDSA) to the list of known hosts. [ 34.628910] random: sshd: uninitialized urandom read (32 bytes read) [ 34.766055] IPVS: ftp: loaded support on port[0] = 21 [ 34.767306] IPVS: ftp: loaded support on port[0] = 21 [ 34.774052] kasan: CONFIG_KASAN_INLINE enabled [ 34.781520] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 34.788972] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 34.795217] CPU: 1 PID: 5567 Comm: syz-executor600 Not tainted 4.19.0-rc3-next-20180912+ #72 [ 34.803793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.813179] RIP: 0010:mqueue_get_tree+0xba/0x2e0 [ 34.817954] Code: 4c 8d b3 98 00 00 00 4d 85 ed 0f 84 d1 00 00 00 e8 6b 44 3f fe 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 34.836876] RSP: 0018:ffff8801d9127928 EFLAGS: 00010203 [ 34.842259] RAX: dffffc0000000000 RBX: ffff8801cbed9840 RCX: ffffffff8160aca1 [ 34.849539] RDX: 0000000000018016 RSI: ffffffff833deb15 RDI: 00000000000c00b6 [ 34.856825] RBP: ffff8801d9127948 R08: fffffbfff13555fd R09: fffffbfff13555fc [ 34.864110] R10: fffffbfff13555fc R11: ffffffff89aaafe3 R12: ffff8801d7b0bd00 [ 34.871391] R13: 00000000000c00ae R14: ffff8801cbed98d8 R15: ffff8801cbed98d8 [ 34.878690] FS: 0000000000e26880(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 34.886928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.892825] CR2: 000000000046d640 CR3: 00000001cbcc8000 CR4: 00000000001406e0 [ 34.900105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.907388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.914669] Call Trace: [ 34.917283] vfs_get_tree+0x1cb/0x5c0 [ 34.921099] mq_create_mount+0xe3/0x190 [ 34.925087] mq_init_ns+0x15a/0x210 [ 34.928716] copy_ipcs+0x3d2/0x580 [ 34.932257] ? ipcns_get+0xe0/0xe0 [ 34.935803] ? do_mount+0x1db0/0x1db0 [ 34.939605] ? kmem_cache_alloc+0x33a/0x730 [ 34.943937] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.949487] ? perf_event_namespaces+0x136/0x400 [ 34.954256] create_new_namespaces+0x376/0x900 [ 34.958849] ? sys_ni_syscall+0x20/0x20 [ 34.962834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.968388] ? ns_capable_common+0x13f/0x170 [ 34.972810] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 34.977753] ksys_unshare+0x79c/0x10b0 [ 34.981649] ? walk_process_tree+0x440/0x440 [ 34.986067] ? lock_downgrade+0x900/0x900 [ 34.990222] ? kasan_check_read+0x11/0x20 [ 34.994380] ? do_raw_spin_unlock+0xa7/0x2f0 [ 34.998794] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 35.003397] ? kasan_check_write+0x14/0x20 [ 35.007640] ? do_raw_read_unlock+0x3f/0x60 [ 35.011979] ? do_syscall_64+0x9a/0x820 [ 35.015961] ? do_syscall_64+0x9a/0x820 [ 35.019951] ? lockdep_hardirqs_on+0x421/0x5c0 [ 35.024546] ? trace_hardirqs_on+0xbd/0x310 [ 35.028879] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 35.034254] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 35.039727] ? __ia32_sys_prlimit64+0x8c0/0x8c0 [ 35.044425] __x64_sys_unshare+0x31/0x40 [ 35.048503] do_syscall_64+0x1b9/0x820 [ 35.052403] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 35.057786] ? syscall_return_slowpath+0x5e0/0x5e0 [ 35.062731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.067595] ? trace_hardirqs_on_caller+0x310/0x310 [ 35.072630] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 35.077667] ? prepare_exit_to_usermode+0x291/0x3b0 [ 35.082704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.087565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 35.092766] RIP: 0033:0x445377 [ 35.095976] Code: 00 00 00 b8 63 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 35.114889] RSP: 002b:00007fff40156718 EFLAGS: 00000217 ORIG_RAX: 0000000000000110 [ 35.122614] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000445377 [ 35.129898] RDX: 0000000000000000 RSI: 00007fff40156720 RDI: 0000000008000000 [ 35.137183] RBP: 00000000006ce018 R08: 0000000000000000 R09: 0000000000e26880 [ 35.144462] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004030a0 [ 35.151747] R13: 0000000000403130 R14: 0000000000000000 R15: 0000000000000000 [ 35.159036] Modules linked in: [ 35.162381] ---[ end trace 85b47500902369a7 ]--- [ 35.167162] RIP: 0010:mqueue_get_tree+0xba/0x2e0 [ 35.172005] Code: 4c 8d b3 98 00 00 00 4d 85 ed 0f 84 d1 00 00 00 e8 6b 44 3f fe 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 35.190984] RSP: 0018:ffff8801d9127928 EFLAGS: 00010203 [ 35.196371] RAX: dffffc0000000000 RBX: ffff8801cbed9840 RCX: ffffffff8160aca1 [ 35.203691] RDX: 0000000000018016 RSI: ffffffff833deb15 RDI: 00000000000c00b6 [ 35.211015] RBP: ffff8801d9127948 R08: fffffbfff13555fd R09: fffffbfff13555fc [ 35.218591] R10: fffffbfff13555fc R11: ffffffff89aaafe3 R12: ffff8801d7b0bd00 [ 35.225878] R13: 00000000000c00ae R14: ffff8801cbed98d8 R15: ffff8801cbed98d8 [ 35.233488] FS: 0000000000e26880(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 35.241765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.247666] CR2: 000000000046d640 CR3: 00000001cbcc8000 CR4: 00000000001406e0 [ 35.255003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.262325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.269644] Kernel panic - not syncing: Fatal exception [ 35.276003] Kernel Offset: disabled [ 35.279640] Rebooting in 86400 seconds..