[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.725477] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.032841] random: sshd: uninitialized urandom read (32 bytes read) [ 21.341372] random: sshd: uninitialized urandom read (32 bytes read) [ 22.191374] random: sshd: uninitialized urandom read (32 bytes read) [ 22.354201] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. [ 27.863242] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 27.964647] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 27.972643] PGD 1ad8b4067 P4D 1ad8b4067 PUD 1ad633067 PMD 0 [ 27.978443] Oops: 0010 [#1] SMP KASAN [ 27.982223] CPU: 1 PID: 4537 Comm: syz-executor723 Not tainted 4.18.0-rc2+ #121 [ 27.989731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.999060] RIP: 0010: (null) [ 28.002917] Code: Bad RIP value. [ 28.006274] RSP: 0018:ffff8801accbf568 EFLAGS: 00010246 [ 28.011612] RAX: 0000000000000000 RBX: ffff8801d4ffd100 RCX: ffffffff85ec9112 [ 28.018861] RDX: ffff8801accbf7c0 RSI: ffff8801d4ffd100 RDI: ffff8801ad1d1ac0 [ 28.026108] RBP: ffff8801accbf610 R08: ffff8801ae71a380 R09: ffffed003b5e46d6 [ 28.033358] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: ffff8801accbf7c0 [ 28.040607] R13: ffff8801ad1d1ac0 R14: ffffffff8818a920 R15: ffff8801ad11f340 [ 28.047856] FS: 00000000017d9880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 28.056056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.061928] CR2: ffffffffffffffd6 CR3: 00000001ad984000 CR4: 00000000001406e0 [ 28.069281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.076530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.083788] Call Trace: [ 28.086357] ? sock_poll+0x2e1/0x490 [ 28.090051] ? kernel_sendpage_locked+0x120/0x120 [ 28.094875] ? __lock_is_held+0xb5/0x140 [ 28.098917] ? kernel_sendpage_locked+0x120/0x120 [ 28.103739] ep_item_poll.isra.14+0x15c/0x400 [ 28.108211] ? ep_eventpoll_poll+0x200/0x200 [ 28.112601] ep_insert+0x6c1/0x1c20 [ 28.116210] ? ep_send_events_proc+0xf00/0xf00 [ 28.120782] ? lock_release+0xa30/0xa30 [ 28.124737] ? check_same_owner+0x340/0x340 [ 28.129053] ? clear_tfile_check_list+0x3a0/0x3a0 [ 28.133883] ? rcu_note_context_switch+0x730/0x730 [ 28.138797] ? kasan_check_write+0x14/0x20 [ 28.143011] ? __mutex_lock+0x7e8/0x1820 [ 28.147059] ? __x64_sys_epoll_ctl+0x7ea/0x10a0 [ 28.151714] ? __thp_get_unmapped_area+0x180/0x180 [ 28.156621] ? mutex_trylock+0x2b0/0x2b0 [ 28.160663] ? lockdep_init_map+0x9/0x10 [ 28.164703] ? debug_mutex_init+0x2d/0x60 [ 28.168834] ? pud_val+0x88/0x100 [ 28.172267] ? pmd_val+0x100/0x100 [ 28.175786] ? graph_lock+0x170/0x170 [ 28.179569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.185087] ? __handle_mm_fault+0x94b/0x4460 [ 28.189560] ? find_held_lock+0x36/0x1c0 [ 28.193599] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.199113] ? __fget_light+0x2f7/0x440 [ 28.203068] ? fget_raw+0x20/0x20 [ 28.206517] ? find_held_lock+0x36/0x1c0 [ 28.210564] __x64_sys_epoll_ctl+0xf00/0x10a0 [ 28.215044] ? __ia32_sys_epoll_create+0x70/0x70 [ 28.219790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.225310] ? mm_fault_error+0x380/0x380 [ 28.229451] ? move_addr_to_kernel+0x70/0x70 [ 28.233841] ? __ia32_sys_fallocate+0xf0/0xf0 [ 28.238316] ? do_syscall_64+0x9a/0x820 [ 28.242268] do_syscall_64+0x1b9/0x820 [ 28.246152] ? syscall_return_slowpath+0x5e0/0x5e0 [ 28.251058] ? syscall_return_slowpath+0x31d/0x5e0 [ 28.255981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.261506] ? retint_user+0x18/0x18 [ 28.265200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.270032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 28.275205] RIP: 0033:0x43fce9 [ 28.278367] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 28.297481] RSP: 002b:00007ffceab51588 EFLAGS: 00000217 ORIG_RAX: 00000000000000e9 [ 28.305170] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fce9 [ 28.312415] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 28.319665] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 28.326915] R10: 0000000020000080 R11: 0000000000000217 R12: 0000000000401610 [ 28.334625] R13: 00000000004016a0 R14: 0000000000000000 R15: 0000000000000000 [ 28.341876] Modules linked in: [ 28.345047] Dumping ftrace buffer: [ 28.348562] (ftrace buffer empty) [ 28.352248] CR2: 0000000000000000 [ 28.355761] ---[ end trace 4eb8cff744bb8718 ]--- [ 28.360524] RIP: 0010: (null) [ 28.364403] Code: Bad RIP value. [ 28.367782] RSP: 0018:ffff8801accbf568 EFLAGS: 00010246 [ 28.373147] RAX: 0000000000000000 RBX: ffff8801d4ffd100 RCX: ffffffff85ec9112 [ 28.380424] RDX: ffff8801accbf7c0 RSI: ffff8801d4ffd100 RDI: ffff8801ad1d1ac0 [ 28.387709] RBP: ffff8801accbf610 R08: ffff8801ae71a380 R09: ffffed003b5e46d6 [ 28.394981] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: ffff8801accbf7c0 [ 28.402255] R13: ffff8801ad1d1ac0 R14: ffffffff8818a920 R15: ffff8801ad11f340 [ 28.409526] FS: 00000000017d9880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 28.417753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.423642] CR2: ffffffffffffffd6 CR3: 00000001ad984000 CR4: 00000000001406e0 [ 28.430916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.438189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.445462] Kernel panic - not syncing: Fatal exception [ 28.451311] Dumping ftrace buffer: [ 28.454832] (ftrace buffer empty) [ 28.458519] Kernel Offset: disabled [ 28.462126] Rebooting in 86400 seconds..