[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 25.898953] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.491943] random: sshd: uninitialized urandom read (32 bytes read) [ 30.837318] random: sshd: uninitialized urandom read (32 bytes read) [ 31.419261] random: sshd: uninitialized urandom read (32 bytes read) [ 31.638301] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. [ 37.186496] random: sshd: uninitialized urandom read (32 bytes read) [ 37.319225] IPVS: ftp: loaded support on port[0] = 21 [ 37.319232] IPVS: ftp: loaded support on port[0] = 21 [ 37.330846] kasan: CONFIG_KASAN_INLINE enabled [ 37.332661] IPVS: ftp: loaded support on port[0] = 21 [ 37.335681] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 37.335700] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 37.335713] CPU: 1 PID: 5592 Comm: syz-executor237 Not tainted 4.19.0-rc3-next-20180912+ #72 [ 37.335720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.335743] RIP: 0010:mqueue_get_tree+0xba/0x2e0 [ 37.335757] Code: 4c 8d b3 98 00 00 00 4d 85 ed 0f 84 d1 00 00 00 e8 6b 44 3f fe 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 37.335765] RSP: 0018:ffff8801cc477928 EFLAGS: 00010202 [ 37.335777] RAX: dffffc0000000000 RBX: ffff8801cc99dac0 RCX: ffffffff8160aca1 [ 37.335785] RDX: 0000000000000001 RSI: ffffffff833deb15 RDI: 0000000000000009 [ 37.335793] RBP: ffff8801cc477948 R08: fffffbfff13555fd R09: fffffbfff13555fc [ 37.335801] R10: fffffbfff13555fc R11: ffffffff89aaafe3 R12: ffff8801d7abd340 [ 37.335809] R13: 0000000000000001 R14: ffff8801cc99db58 R15: ffff8801cc99db58 [ 37.335822] FS: 0000000001625940(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 37.335831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.335839] CR2: 000000000046d990 CR3: 00000001c4872000 CR4: 00000000001406e0 [ 37.335849] Call Trace: [ 37.335869] vfs_get_tree+0x1cb/0x5c0 [ 37.335892] mq_create_mount+0xe3/0x190 [ 37.344860] IPVS: ftp: loaded support on port[0] = 21 [ 37.348458] mq_init_ns+0x15a/0x210 [ 37.361550] kobject: 'lo' (0000000029b89a7a): kobject_add_internal: parent: 'net', set: 'devices' [ 37.363252] copy_ipcs+0x3d2/0x580 [ 37.377341] kobject: 'lo' (0000000029b89a7a): kobject_uevent_env [ 37.396233] ? ipcns_get+0xe0/0xe0 [ 37.396251] ? do_mount+0x1db0/0x1db0 [ 37.396268] ? kmem_cache_alloc+0x33a/0x730 [ 37.401670] kobject: 'lo' (0000000029b89a7a): fill_kobj_path: path = '/devices/virtual/net/lo' [ 37.408900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 37.408914] ? perf_event_namespaces+0x136/0x400 [ 37.408947] create_new_namespaces+0x376/0x900 [ 37.417121] kobject: 'queues' (00000000b0e6672b): kobject_add_internal: parent: 'lo', set: '' [ 37.423471] ? sys_ni_syscall+0x20/0x20 [ 37.430784] kobject: 'queues' (00000000b0e6672b): kobject_uevent_env [ 37.437997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 37.438013] ? ns_capable_common+0x13f/0x170 [ 37.438030] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 37.446270] kobject: 'queues' (00000000b0e6672b): kobject_uevent_env: filter function caused the event to drop! [ 37.452143] ksys_unshare+0x79c/0x10b0 [ 37.459432] kobject: 'rx-0' (00000000ff0aa779): kobject_add_internal: parent: 'queues', set: 'queues' [ 37.461971] ? walk_process_tree+0x440/0x440 [ 37.465838] kobject: 'rx-0' (00000000ff0aa779): kobject_uevent_env [ 37.469723] ? lock_downgrade+0x900/0x900 [ 37.474933] kobject: 'rx-0' (00000000ff0aa779): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 37.478512] ? kasan_check_read+0x11/0x20 [ 37.487615] kobject: 'tx-0' (000000003045efd6): kobject_add_internal: parent: 'queues', set: 'queues' [ 37.491037] ? do_raw_spin_unlock+0xa7/0x2f0 [ 37.497403] kobject: 'tx-0' (000000003045efd6): kobject_uevent_env [ 37.500713] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 37.504539] kobject: 'tx-0' (000000003045efd6): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 37.508810] ? kasan_check_write+0x14/0x20 [ 37.518655] kobject: 'lo' (00000000eaa8fae5): kobject_add_internal: parent: 'net', set: 'devices' [ 37.523094] ? do_raw_read_unlock+0x3f/0x60 [ 37.528795] kobject: 'lo' (00000000eaa8fae5): kobject_uevent_env [ 37.532420] ? do_syscall_64+0x9a/0x820 [ 37.541646] kobject: 'lo' (00000000eaa8fae5): fill_kobj_path: path = '/devices/virtual/net/lo' [ 37.545551] ? do_syscall_64+0x9a/0x820 [ 37.545569] ? lockdep_hardirqs_on+0x421/0x5c0 [ 37.545590] ? trace_hardirqs_on+0xbd/0x310 [ 37.552679] kobject: 'queues' (00000000644650c0): kobject_add_internal: parent: 'lo', set: '' [ 37.558101] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.558119] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 37.558149] ? __ia32_sys_prlimit64+0x8c0/0x8c0 [ 37.562558] kobject: 'queues' (00000000644650c0): kobject_uevent_env [ 37.567455] __x64_sys_unshare+0x31/0x40 [ 37.567476] do_syscall_64+0x1b9/0x820 [ 37.577702] kobject: 'queues' (00000000644650c0): kobject_uevent_env: filter function caused the event to drop! [ 37.581569] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 37.590944] kobject: 'rx-0' (00000000000978af): kobject_add_internal: parent: 'queues', set: 'queues' [ 37.595306] ? syscall_return_slowpath+0x5e0/0x5e0 [ 37.595326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.601704] kobject: 'rx-0' (00000000000978af): kobject_uevent_env [ 37.605782] ? trace_hardirqs_on_caller+0x310/0x310 [ 37.605803] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 37.615801] kobject: 'rx-0' (00000000000978af): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 37.619903] ? prepare_exit_to_usermode+0x291/0x3b0 [ 37.629351] kobject: 'tx-0' (00000000e2d795a6): kobject_add_internal: parent: 'queues', set: 'queues' [ 37.633649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.633675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.640171] kobject: 'tx-0' (00000000e2d795a6): kobject_uevent_env [ 37.644551] RIP: 0033:0x445857 [ 37.644568] Code: 00 00 00 b8 63 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ed df fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd df fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 37.644581] RSP: 002b:00007ffd12bd6e88 EFLAGS: 00000217 [ 37.654585] kobject: 'tx-0' (00000000e2d795a6): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 37.659290] ORIG_RAX: 0000000000000110 [ 37.669392] kobject: 'lo' (0000000082fe493c): kobject_add_internal: parent: 'net', set: 'devices' [ 37.672614] RAX: ffffffffffffffda RBX: 00007ffd12bd6ea0 RCX: 0000000000445857 [ 37.679744] kobject: 'lo' (0000000082fe493c): kobject_uevent_env [ 37.682723] RDX: 0000000000000000 RSI: 00007ffd12bd6e90 RDI: 0000000008000000 [ 37.691524] kobject: 'lo' (0000000082fe493c): fill_kobj_path: path = '/devices/virtual/net/lo' [ 37.695439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000001625940 [ 37.695447] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000403cb0 [ 37.695454] R13: 0000000000403d40 R14: 0000000000000000 R15: 0000000000000000 [ 37.695468] Modules linked in: [ 37.700128] kobject: 'queues' (0000000079e0f718): kobject_add_internal: parent: 'lo', set: '' [ 37.704448] ---[ end trace 1d256cdd44dfeb5c ]--- [ 37.954369] RIP: 0010:mqueue_get_tree+0xba/0x2e0 [ 37.959160] Code: 4c 8d b3 98 00 00 00 4d 85 ed 0f 84 d1 00 00 00 e8 6b 44 3f fe 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 37.978087] RSP: 0018:ffff8801cc477928 EFLAGS: 00010202 [ 37.983472] RAX: dffffc0000000000 RBX: ffff8801cc99dac0 RCX: ffffffff8160aca1 [ 37.990772] RDX: 0000000000000001 RSI: ffffffff833deb15 RDI: 0000000000000009 [ 37.998066] RBP: ffff8801cc477948 R08: fffffbfff13555fd R09: fffffbfff13555fc [ 38.005361] R10: fffffbfff13555fc R11: ffffffff89aaafe3 R12: ffff8801d7abd340 [ 38.012638] R13: 0000000000000001 R14: ffff8801cc99db58 R15: ffff8801cc99db58 [ 38.019950] FS: 0000000001625940(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 38.028212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.034132] CR2: 000000000046d990 CR3: 00000001c4872000 CR4: 00000000001406e0 [ 38.041424] Kernel panic - not syncing: Fatal exception [ 38.047746] Kernel Offset: disabled [ 38.051368] Rebooting in 86400 seconds..