[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 39.353641] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.657198] random: sshd: uninitialized urandom read (32 bytes read) [ 43.051481] random: sshd: uninitialized urandom read (32 bytes read) [ 43.922676] random: sshd: uninitialized urandom read (32 bytes read) [ 93.433838] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. [ 99.100252] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 101.340227] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 101.348312] PGD 80000001add96067 P4D 80000001add96067 PUD 1ab780067 PMD 0 [ 101.355421] Oops: 0000 [#1] SMP PTI [ 101.359094] CPU: 1 PID: 5005 Comm: syz-executor272 Not tainted 4.18.0-rc8+ #34 [ 101.366480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.375861] RIP: 0010:__queue_work+0x4c9/0x1ed0 [ 101.380572] Code: 84 6e ff ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 e8 7b ab 3b 00 49 81 e7 00 ff ff ff 49 81 fc 00 01 00 00 0f 83 62 02 00 00 <49> 8b 1f 4c 89 ff e8 2c fe 94 00 e9 20 01 00 00 8b 3a e8 50 07 95 [ 101.399920] RSP: 0018:ffff8801b2a3f278 EFLAGS: 00010087 [ 101.405300] RAX: ffffffff8129d845 RBX: 0000000000000004 RCX: ffff8801b4799d80 [ 101.412569] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea00003a1ee0 [ 101.419847] RBP: ffff8801b2a3f380 R08: 0000000000480020 R09: 0000000000000002 [ 101.427138] R10: 0000000000000000 R11: ffffffff8134f310 R12: 0000000000000000 [ 101.434427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.441697] FS: 0000000002472880(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 101.449923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.455824] CR2: 0000000000000000 CR3: 00000001a868c000 CR4: 00000000001406e0 [ 101.463119] Call Trace: [ 101.465758] queue_work_on+0x19d/0x1c0 [ 101.469722] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 101.475137] xfrm_policy_insert+0x3478/0x39e0 [ 101.479664] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 101.485162] xfrm_add_policy+0x5d4/0xa20 [ 101.489253] ? xfrm_dump_sa_done+0x150/0x150 [ 101.493704] xfrm_user_rcv_msg+0x60c/0x9b0 [ 101.497940] ? __alloc_skb+0x2ce/0x9b0 [ 101.501907] ? kmsan_set_origin_inline+0x6b/0x120 [ 101.506832] netlink_rcv_skb+0x36e/0x5f0 [ 101.510909] ? xfrm_netlink_rcv+0xf0/0xf0 [ 101.515083] xfrm_netlink_rcv+0xb2/0xf0 [ 101.519092] netlink_unicast+0x1492/0x1740 [ 101.523385] ? xfrm_user_net_exit+0x290/0x290 [ 101.527917] netlink_sendmsg+0x114c/0x1350 [ 101.532207] ___sys_sendmsg+0xe32/0x1250 [ 101.536298] ? netlink_getsockopt+0x11c0/0x11c0 [ 101.541025] ? __fget_light+0x53/0x700 [ 101.544986] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 101.550438] ? __fget_light+0x1f1/0x700 [ 101.554565] __x64_sys_sendmsg+0x32d/0x460 [ 101.558866] ? ___sys_sendmsg+0x1250/0x1250 [ 101.563222] do_syscall_64+0x15b/0x220 [ 101.567143] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 101.572353] RIP: 0033:0x4416b9 [ 101.575548] Code: e8 7c e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 101.595063] RSP: 002b:00007ffefdf4a5d8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 101.602835] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004416b9 [ 101.610124] RDX: 000000000000c800 RSI: 0000000020000500 RDI: 0000000000000003 [ 101.617407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.624707] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000000038 [ 101.632000] R13: 0000000000018b9c R14: 0000000000000000 R15: 0000000000000000 [ 101.639297] Modules linked in: [ 101.642506] Dumping ftrace buffer: [ 101.646061] (ftrace buffer empty) [ 101.649783] CR2: 0000000000000000 [ 101.653242] ---[ end trace b20b7c3a9a1b9557 ]--- [ 101.658038] RIP: 0010:__queue_work+0x4c9/0x1ed0 [ 101.662721] Code: 84 6e ff ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 e8 7b ab 3b 00 49 81 e7 00 ff ff ff 49 81 fc 00 01 00 00 0f 83 62 02 00 00 <49> 8b 1f 4c 89 ff e8 2c fe 94 00 e9 20 01 00 00 8b 3a e8 50 07 95 [ 101.682172] RSP: 0018:ffff8801b2a3f278 EFLAGS: 00010087 [ 101.687555] RAX: ffffffff8129d845 RBX: 0000000000000004 RCX: ffff8801b4799d80 [ 101.694854] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea00003a1ee0 [ 101.702156] RBP: ffff8801b2a3f380 R08: 0000000000480020 R09: 0000000000000002 [ 101.709437] R10: 0000000000000000 R11: ffffffff8134f310 R12: 0000000000000000 [ 101.716739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.724045] FS: 0000000002472880(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 101.732298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.738193] CR2: 0000000000000000 CR3: 00000001a868c000 CR4: 00000000001406e0 [ 101.745488] Kernel panic - not syncing: Fatal exception [ 101.751210] Dumping ftrace buffer: [ 101.754747] (ftrace buffer empty) [ 101.758447] Kernel Offset: disabled [ 101.762119] Rebooting in 86400 seconds..