[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.541750] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.046822] random: sshd: uninitialized urandom read (32 bytes read) [ 21.330060] random: sshd: uninitialized urandom read (32 bytes read) [ 22.186749] random: sshd: uninitialized urandom read (32 bytes read) [ 22.351864] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. [ 27.839924] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 27.931327] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 27.939317] PGD 1d8e13067 P4D 1d8e13067 PUD 1d94d1067 PMD 0 [ 27.945103] Oops: 0010 [#1] SMP KASAN [ 27.948882] CPU: 0 PID: 4546 Comm: syz-executor162 Not tainted 4.18.0-rc2+ #121 [ 27.956301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.965634] RIP: 0010: (null) [ 27.969493] Code: Bad RIP value. [ 27.972843] RSP: 0018:ffff8801bb19f568 EFLAGS: 00010246 [ 27.978183] RAX: 0000000000000000 RBX: ffff8801a8955680 RCX: ffffffff85ec9112 [ 27.985431] RDX: ffff8801bb19f7c0 RSI: ffff8801a8955680 RDI: ffff8801d8804000 [ 27.992676] RBP: ffff8801bb19f610 R08: ffff8801d8958740 R09: ffffed003b5c46d6 [ 27.999934] R10: ffffed003b5c46d6 R11: ffff8801dae236b3 R12: ffff8801bb19f7c0 [ 28.007180] R13: ffff8801d8804000 R14: ffffffff8818a920 R15: ffff8801d905c9c0 [ 28.014436] FS: 0000000002207880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 28.022637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.028495] CR2: ffffffffffffffd6 CR3: 00000001d8d4b000 CR4: 00000000001406f0 [ 28.035745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.042990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.050237] Call Trace: [ 28.052803] ? sock_poll+0x2e1/0x490 [ 28.056494] ? kernel_sendpage_locked+0x120/0x120 [ 28.061313] ? __lock_is_held+0xb5/0x140 [ 28.065362] ? kernel_sendpage_locked+0x120/0x120 [ 28.070185] ep_item_poll.isra.14+0x15c/0x400 [ 28.074657] ? ep_eventpoll_poll+0x200/0x200 [ 28.079045] ep_insert+0x6c1/0x1c20 [ 28.082653] ? ep_send_events_proc+0xf00/0xf00 [ 28.087213] ? lock_release+0xa30/0xa30 [ 28.091165] ? check_same_owner+0x340/0x340 [ 28.095466] ? clear_tfile_check_list+0x3a0/0x3a0 [ 28.100286] ? rcu_note_context_switch+0x730/0x730 [ 28.105193] ? kasan_check_write+0x14/0x20 [ 28.109405] ? __mutex_lock+0x7e8/0x1820 [ 28.113444] ? __x64_sys_epoll_ctl+0x7ea/0x10a0 [ 28.118092] ? __thp_get_unmapped_area+0x180/0x180 [ 28.122995] ? mutex_trylock+0x2b0/0x2b0 [ 28.127044] ? lockdep_init_map+0x9/0x10 [ 28.131082] ? debug_mutex_init+0x2d/0x60 [ 28.135204] ? pud_val+0x88/0x100 [ 28.138634] ? pmd_val+0x100/0x100 [ 28.142151] ? graph_lock+0x170/0x170 [ 28.145933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.151446] ? __handle_mm_fault+0x94b/0x4460 [ 28.155922] ? find_held_lock+0x36/0x1c0 [ 28.159966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.165482] ? __fget_light+0x2f7/0x440 [ 28.169432] ? fget_raw+0x20/0x20 [ 28.172861] ? find_held_lock+0x36/0x1c0 [ 28.176907] __x64_sys_epoll_ctl+0xf00/0x10a0 [ 28.181384] ? __ia32_sys_epoll_create+0x70/0x70 [ 28.186117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.191633] ? mm_fault_error+0x380/0x380 [ 28.195759] ? move_addr_to_kernel+0x70/0x70 [ 28.200145] ? __ia32_sys_fallocate+0xf0/0xf0 [ 28.204621] ? do_syscall_64+0x9a/0x820 [ 28.208574] do_syscall_64+0x1b9/0x820 [ 28.212440] ? syscall_return_slowpath+0x5e0/0x5e0 [ 28.217346] ? syscall_return_slowpath+0x31d/0x5e0 [ 28.222252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.227767] ? retint_user+0x18/0x18 [ 28.231459] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.236280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 28.241447] RIP: 0033:0x43fce9 [ 28.244611] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 28.263725] RSP: 002b:00007ffc1acf3868 EFLAGS: 00000217 ORIG_RAX: 00000000000000e9 [ 28.271409] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fce9 [ 28.278653] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 28.285898] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 28.293143] R10: 0000000020000000 R11: 0000000000000217 R12: 0000000000401610 [ 28.300388] R13: 00000000004016a0 R14: 0000000000000000 R15: 0000000000000000 [ 28.307637] Modules linked in: [ 28.310808] Dumping ftrace buffer: [ 28.314322] (ftrace buffer empty) [ 28.318014] CR2: 0000000000000000 [ 28.321529] ---[ end trace 0640b3f5712fa79c ]--- [ 28.326301] RIP: 0010: (null) [ 28.330207] Code: Bad RIP value. [ 28.333668] RSP: 0018:ffff8801bb19f568 EFLAGS: 00010246 [ 28.339083] RAX: 0000000000000000 RBX: ffff8801a8955680 RCX: ffffffff85ec9112 [ 28.347039] RDX: ffff8801bb19f7c0 RSI: ffff8801a8955680 RDI: ffff8801d8804000 [ 28.354314] RBP: ffff8801bb19f610 R08: ffff8801d8958740 R09: ffffed003b5c46d6 [ 28.361577] R10: ffffed003b5c46d6 R11: ffff8801dae236b3 R12: ffff8801bb19f7c0 [ 28.368844] R13: ffff8801d8804000 R14: ffffffff8818a920 R15: ffff8801d905c9c0 [ 28.376112] FS: 0000000002207880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 28.384332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.390208] CR2: ffffffffffffffd6 CR3: 00000001d8d4b000 CR4: 00000000001406f0 [ 28.397474] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.404746] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.412018] Kernel panic - not syncing: Fatal exception [ 28.417847] Dumping ftrace buffer: [ 28.421368] (ftrace buffer empty) [ 28.425051] Kernel Offset: disabled [ 28.428651] Rebooting in 86400 seconds..