[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.171266] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.669589] random: sshd: uninitialized urandom read (32 bytes read) [ 22.212327] random: sshd: uninitialized urandom read (32 bytes read) [ 22.990736] random: sshd: uninitialized urandom read (32 bytes read) [ 23.149382] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.23' (ECDSA) to the list of known hosts. [ 28.651713] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 28.742572] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 28.750579] PGD 1cfd22067 P4D 1cfd22067 PUD 1cfc2f067 PMD 0 [ 28.756370] Oops: 0010 [#1] SMP KASAN [ 28.760160] CPU: 1 PID: 4550 Comm: syz-executor083 Not tainted 4.18.0-rc2+ #121 [ 28.767584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.776919] RIP: 0010: (null) [ 28.780793] Code: Bad RIP value. [ 28.784150] RSP: 0018:ffff8801b2567568 EFLAGS: 00010246 [ 28.789503] RAX: 0000000000000000 RBX: ffff8801a7f49940 RCX: ffffffff85ec9112 [ 28.796759] RDX: ffff8801b25677c0 RSI: ffff8801a7f49940 RDI: ffff8801d8e8d0c0 [ 28.804025] RBP: ffff8801b2567610 R08: ffff8801d8fe8780 R09: ffffed003b5e46d6 [ 28.811277] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: ffff8801b25677c0 [ 28.818624] R13: ffff8801d8e8d0c0 R14: ffffffff8818a920 R15: ffff8801aba03640 [ 28.825877] FS: 00000000021e0880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 28.834093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.839965] CR2: ffffffffffffffd6 CR3: 00000001cfd0e000 CR4: 00000000001406e0 [ 28.847393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.854645] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.861894] Call Trace: [ 28.864469] ? sock_poll+0x2e1/0x490 [ 28.868169] ? kernel_sendpage_locked+0x120/0x120 [ 28.872993] ? __lock_is_held+0xb5/0x140 [ 28.877043] ? kernel_sendpage_locked+0x120/0x120 [ 28.881875] ep_item_poll.isra.14+0x15c/0x400 [ 28.886352] ? ep_eventpoll_poll+0x200/0x200 [ 28.890749] ep_insert+0x6c1/0x1c20 [ 28.894360] ? ep_send_events_proc+0xf00/0xf00 [ 28.898919] ? lock_release+0xa30/0xa30 [ 28.902873] ? check_same_owner+0x340/0x340 [ 28.907182] ? clear_tfile_check_list+0x3a0/0x3a0 [ 28.912181] ? rcu_note_context_switch+0x730/0x730 [ 28.917100] ? kasan_check_write+0x14/0x20 [ 28.921321] ? __mutex_lock+0x7e8/0x1820 [ 28.925365] ? __x64_sys_epoll_ctl+0x7ea/0x10a0 [ 28.930021] ? __thp_get_unmapped_area+0x180/0x180 [ 28.934964] ? mutex_trylock+0x2b0/0x2b0 [ 28.939012] ? lockdep_init_map+0x9/0x10 [ 28.943069] ? debug_mutex_init+0x2d/0x60 [ 28.947204] ? pud_val+0x88/0x100 [ 28.950635] ? pmd_val+0x100/0x100 [ 28.954175] ? graph_lock+0x170/0x170 [ 28.957966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.963491] ? __handle_mm_fault+0x94b/0x4460 [ 28.967977] ? find_held_lock+0x36/0x1c0 [ 28.972031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.977563] ? __fget_light+0x2f7/0x440 [ 28.981529] ? fget_raw+0x20/0x20 [ 28.984964] ? find_held_lock+0x36/0x1c0 [ 28.989012] __x64_sys_epoll_ctl+0xf00/0x10a0 [ 28.993499] ? __ia32_sys_epoll_create+0x70/0x70 [ 28.998235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.003769] ? mm_fault_error+0x380/0x380 [ 29.007919] ? move_addr_to_kernel+0x70/0x70 [ 29.012313] ? __ia32_sys_fallocate+0xf0/0xf0 [ 29.016889] ? do_syscall_64+0x9a/0x820 [ 29.020843] do_syscall_64+0x1b9/0x820 [ 29.024720] ? syscall_slow_exit_work+0x500/0x500 [ 29.029543] ? syscall_return_slowpath+0x5e0/0x5e0 [ 29.034456] ? syscall_return_slowpath+0x31d/0x5e0 [ 29.039377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.044897] ? retint_user+0x18/0x18 [ 29.048601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.053430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 29.058606] RIP: 0033:0x43fce9 [ 29.061771] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 29.080983] RSP: 002b:00007ffdb610d6f8 EFLAGS: 00000217 ORIG_RAX: 00000000000000e9 [ 29.088679] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fce9 [ 29.095931] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 29.103180] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 29.110437] R10: 0000000020000180 R11: 0000000000000217 R12: 0000000000401610 [ 29.117687] R13: 00000000004016a0 R14: 0000000000000000 R15: 0000000000000000 [ 29.124951] Modules linked in: [ 29.128136] Dumping ftrace buffer: [ 29.131651] (ftrace buffer empty) [ 29.135352] CR2: 0000000000000000 [ 29.138865] ---[ end trace 3750e6af47c1cf0f ]--- [ 29.143647] RIP: 0010: (null) [ 29.147538] Code: Bad RIP value. [ 29.150953] RSP: 0018:ffff8801b2567568 EFLAGS: 00010246 [ 29.156332] RAX: 0000000000000000 RBX: ffff8801a7f49940 RCX: ffffffff85ec9112 [ 29.163696] RDX: ffff8801b25677c0 RSI: ffff8801a7f49940 RDI: ffff8801d8e8d0c0 [ 29.170979] RBP: ffff8801b2567610 R08: ffff8801d8fe8780 R09: ffffed003b5e46d6 [ 29.178264] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: ffff8801b25677c0 [ 29.185549] R13: ffff8801d8e8d0c0 R14: ffffffff8818a920 R15: ffff8801aba03640 [ 29.192837] FS: 00000000021e0880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 29.201089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.207065] CR2: ffffffffffffffd6 CR3: 00000001cfd0e000 CR4: 00000000001406e0 [ 29.214348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.221627] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.228906] Kernel panic - not syncing: Fatal exception [ 29.234773] Dumping ftrace buffer: [ 29.238310] (ftrace buffer empty) [ 29.242005] Kernel Offset: disabled [ 29.245616] Rebooting in 86400 seconds..