[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 23.691780] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.113512] random: sshd: uninitialized urandom read (32 bytes read) [ 26.556469] random: sshd: uninitialized urandom read (32 bytes read) [ 27.090831] random: sshd: uninitialized urandom read (32 bytes read) [ 28.586175] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. [ 34.146875] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program [ 34.248884] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor993' sets config #0 [ 34.263760] usb usb1: usbfs: process 4654 (syz-executor993) did not claim interface 0 before use [ 34.278769] kasan: CONFIG_KASAN_INLINE enabled [ 34.283514] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 34.290992] general protection fault: 0000 [#1] SMP KASAN [ 34.296564] CPU: 0 PID: 4655 Comm: syz-executor993 Not tainted 4.19.0-rc1+ #118 [ 34.304000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.313365] RIP: 0010:usb_find_alt_setting+0x38/0x310 [ 34.318552] Code: 89 fb 48 83 ec 10 48 89 7d c8 89 55 d4 89 75 d0 e8 bd 0e 0b fd 48 8d 7b 04 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 02 00 00 [ 34.337494] RSP: 0018:ffff8801b9a87610 EFLAGS: 00010247 [ 34.342848] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8476da79 [ 34.350126] RDX: 0000000000000000 RSI: ffffffff8471b1c3 RDI: 0000000000000004 [ 34.357431] RBP: ffff8801b9a87648 R08: ffff8801b961a780 R09: ffffed0037350edf [ 34.364690] R10: ffffed0037350ee1 R11: ffff8801b9a8770f R12: 0000000000000000 [ 34.371957] R13: ffff8801ce4423c0 R14: ffff8801ba044c80 R15: 0000000000000000 [ 34.379236] FS: 0000000000000000(0000) GS:ffff8801db000000(0063) knlGS:0000000009f96840 [ 34.387467] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 34.393484] CR2: 00000000080c2300 CR3: 00000001b9fdf000 CR4: 00000000001406f0 [ 34.400755] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.408036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.415301] Call Trace: [ 34.417881] check_ctrlrecip+0x1e6/0x320 [ 34.421945] ? _copy_from_user+0xdf/0x150 [ 34.426098] proc_control+0x151/0xef0 [ 34.429905] ? __lock_acquire+0x7fc/0x5020 [ 34.434139] ? graph_lock+0x170/0x170 [ 34.437940] ? proc_bulk+0xaa0/0xaa0 [ 34.441670] usbdev_do_ioctl+0x1eb4/0x3b30 [ 34.445890] ? processcompl_compat+0x680/0x680 [ 34.450458] ? lock_downgrade+0x8f0/0x8f0 [ 34.454596] ? kasan_check_read+0x11/0x20 [ 34.458747] ? rcu_is_watching+0x8c/0x150 [ 34.462887] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 34.467540] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 34.472199] ? is_bpf_text_address+0xd7/0x170 [ 34.476684] ? kernel_text_address+0x79/0xf0 [ 34.481087] ? __kernel_text_address+0xd/0x40 [ 34.485571] ? unwind_get_return_address+0x61/0xa0 [ 34.490493] ? __save_stack_trace+0x8d/0xf0 [ 34.494835] ? save_stack+0xa9/0xd0 [ 34.498455] ? save_stack+0x43/0xd0 [ 34.502070] ? __kasan_slab_free+0x11a/0x170 [ 34.506463] ? kasan_slab_free+0xe/0x10 [ 34.510421] ? kmem_cache_free+0x86/0x280 [ 34.514558] ? putname+0xf2/0x130 [ 34.518004] ? do_sys_open+0x569/0x720 [ 34.521881] ? __ia32_compat_sys_open+0x79/0xb0 [ 34.526556] ? do_fast_syscall_32+0x34d/0xfb2 [ 34.531059] ? entry_SYSENTER_compat+0x70/0x7f [ 34.535629] ? trace_hardirqs_off+0xb8/0x2b0 [ 34.540029] ? kasan_check_read+0x11/0x20 [ 34.544198] ? do_raw_spin_unlock+0xa7/0x2f0 [ 34.548594] ? trace_hardirqs_on+0x2c0/0x2c0 [ 34.552998] ? kasan_check_write+0x14/0x20 [ 34.557217] ? trace_hardirqs_off+0xb8/0x2b0 [ 34.561636] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 34.566740] ? trace_hardirqs_on+0x2c0/0x2c0 [ 34.571136] ? kmem_cache_free+0xa0/0x280 [ 34.575271] ? kasan_check_read+0x11/0x20 [ 34.579406] ? rcu_is_watching+0x8c/0x150 [ 34.583750] ? trace_hardirqs_on+0xbd/0x2c0 [ 34.588087] ? rcu_pm_notify+0xc0/0xc0 [ 34.591969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.597523] ? __fget_light+0x2f7/0x440 [ 34.601492] ? fget_raw+0x20/0x20 [ 34.604939] ? putname+0xf2/0x130 [ 34.608403] ? rcu_read_lock_sched_held+0x108/0x120 [ 34.613404] ? kmem_cache_free+0x246/0x280 [ 34.617631] ? do_fast_syscall_32+0x150/0xfb2 [ 34.622113] ? lockdep_hardirqs_on+0x421/0x5c0 [ 34.626689] usbdev_compat_ioctl+0x24/0x30 [ 34.630938] ? usbdev_do_ioctl+0x3b30/0x3b30 [ 34.635353] __ia32_compat_sys_ioctl+0x221/0x640 [ 34.640099] do_fast_syscall_32+0x34d/0xfb2 [ 34.644406] ? do_int80_syscall_32+0x890/0x890 [ 34.648992] ? entry_SYSENTER_compat+0x68/0x7f [ 34.653564] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 34.658577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.663411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.668281] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 34.673293] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 34.678297] ? prepare_exit_to_usermode+0x291/0x3b0 [ 34.683301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.688141] entry_SYSENTER_compat+0x70/0x7f [ 34.692537] RIP: 0023:0xf7fc0ca9 [ 34.695915] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 34.714843] RSP: 002b:00000000ffad9f9c EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 34.722544] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0185500 [ 34.729826] RDX: 0000000020000280 RSI: 00000000ffada0e4 RDI: 00000000ffada0ec [ 34.737085] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 34.744344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 34.751604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 34.758868] Modules linked in: [ 34.762059] Dumping ftrace buffer: [ 34.765579] (ftrace buffer empty) [ 34.769360] ---[ end trace 7482ae92a0113271 ]--- [ 34.774178] RIP: 0010:usb_find_alt_setting+0x38/0x310 [ 34.779414] Code: 89 fb 48 83 ec 10 48 89 7d c8 89 55 d4 89 75 d0 e8 bd 0e 0b fd 48 8d 7b 04 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 02 00 00 [ 34.798357] RSP: 0018:ffff8801b9a87610 EFLAGS: 00010247 [ 34.803754] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8476da79 [ 34.811056] RDX: 0000000000000000 RSI: ffffffff8471b1c3 RDI: 0000000000000004 [ 34.818387] RBP: ffff8801b9a87648 R08: ffff8801b961a780 R09: ffffed0037350edf [ 34.825719] R10: ffffed0037350ee1 R11: ffff8801b9a8770f R12: 0000000000000000 [ 34.833020] R13: ffff8801ce4423c0 R14: ffff8801ba044c80 R15: 0000000000000000 [ 34.840353] FS: 0000000000000000(0000) GS:ffff8801db000000(0063) knlGS:0000000009f96840 [ 34.848637] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 34.854538] CR2: 00000000080c2300 CR3: 00000001b9fdf000 CR4: 00000000001406f0 [ 34.862325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.869625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.876924] Kernel panic - not syncing: Fatal exception [ 34.882753] Dumping ftrace buffer: [ 34.886287] (ftrace buffer empty) [ 34.889982] Kernel Offset: disabled [ 34.893592] Rebooting in 86400 seconds..