[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.195927] random: sshd: uninitialized urandom read (32 bytes read) [ 36.528948] kauditd_printk_skb: 11 callbacks suppressed [ 36.528956] audit: type=1400 audit(1575054574.847:35): avc: denied { map } for pid=6999 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 36.584914] random: sshd: uninitialized urandom read (32 bytes read) [ 37.138004] random: sshd: uninitialized urandom read (32 bytes read) [ 50.666988] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. [ 56.212588] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 56.343410] audit: type=1400 audit(1575054594.667:36): avc: denied { map } for pid=7011 comm="syz-executor736" path="/root/syz-executor736934292" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 56.348457] BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [ 56.377863] IP: vb2_vmalloc_put+0xe/0x70 [ 56.381901] PGD 0 P4D 0 [ 56.384566] Oops: 0002 [#1] PREEMPT SMP KASAN [ 56.389035] Modules linked in: [ 56.392226] CPU: 1 PID: 7011 Comm: syz-executor736 Not tainted 4.14.156-syzkaller #0 [ 56.400100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.409448] task: ffff888077a9e2c0 task.stack: ffff88809acb8000 [ 56.415489] RIP: 0010:vb2_vmalloc_put+0xe/0x70 [ 56.420061] RSP: 0018:ffff88809acbfab8 EFLAGS: 00010297 [ 56.425421] RAX: ffff888077a9e2c0 RBX: ffff8880932a6a00 RCX: ffffffff84367bc0 [ 56.432669] RDX: 0000000000000000 RSI: ffff888077a9eb68 RDI: 0000000000000000 [ 56.439916] RBP: ffff88809acbfac0 R08: 000000008c6a54e2 R09: ffff888077a9eb88 [ 56.447160] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 56.454535] R13: 0000000000000000 R14: ffff8880932a6a14 R15: 0000000000000000 [ 56.461804] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 56.470030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.475905] CR2: 0000000000000020 CR3: 000000000786a000 CR4: 00000000001406e0 [ 56.483156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.490410] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.497706] Call Trace: [ 56.500277] __vb2_buf_mem_free+0x103/0x1e0 [ 56.504576] ? vb2_vmalloc_dmabuf_ops_attach+0x3f0/0x3f0 [ 56.510014] __vb2_queue_free+0x634/0x7d0 [ 56.514168] vb2_core_queue_release+0x64/0x80 [ 56.518642] _vb2_fop_release+0x1cf/0x2a0 [ 56.522768] vb2_fop_release+0x75/0xc0 [ 56.526640] vivid_fop_release+0x180/0x3f0 [ 56.530862] ? vivid_remove+0x3d0/0x3d0 [ 56.534822] ? dev_debug_store+0xe0/0xe0 [ 56.538873] v4l2_release+0xf9/0x190 [ 56.542570] __fput+0x275/0x7a0 [ 56.545834] ____fput+0x16/0x20 [ 56.549093] task_work_run+0x114/0x190 [ 56.552966] do_exit+0x7df/0x2ce0 [ 56.556402] ? do_vfs_ioctl+0xef/0x1060 [ 56.560363] ? ioctl_preallocate+0x1c0/0x1c0 [ 56.564755] ? putname+0x71/0x120 [ 56.568205] ? mm_update_next_owner+0x5d0/0x5d0 [ 56.572869] ? do_sys_open+0x221/0x430 [ 56.576747] do_group_exit+0x111/0x330 [ 56.580628] SyS_exit_group+0x1d/0x20 [ 56.584404] ? do_group_exit+0x330/0x330 [ 56.588536] do_syscall_64+0x1e8/0x640 [ 56.592411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.597376] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.602562] RIP: 0033:0x442c78 [ 56.605731] RSP: 002b:00007ffee635b8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.613929] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000442c78 [ 56.621180] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 56.628427] RBP: 00000000004c2648 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 56.635673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.642934] R13: 00000000006d4180 R14: 0000000000000000 R15: 0000000000000000 [ 56.650227] Code: ff e8 17 3b 51 fd e9 db fe ff ff e8 2d 3b 51 fd e9 fc fe ff ff 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 54 49 89 fc e8 b2 ab 26 fd 41 ff 4c 24 20 0f 88 53 b9 f5 01 74 09 e8 9f ab 26 fd 41 5c [ 56.669297] RIP: vb2_vmalloc_put+0xe/0x70 RSP: ffff88809acbfab8 [ 56.675328] CR2: 0000000000000020 [ 56.678774] ---[ end trace 3c4a03ab0fdda7fe ]--- [ 56.683509] Kernel panic - not syncing: Fatal exception [ 56.690315] Kernel Offset: disabled [ 56.693938] Rebooting in 86400 seconds..