[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.827072] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.895622] random: sshd: uninitialized urandom read (32 bytes read) [ 26.356727] random: sshd: uninitialized urandom read (32 bytes read) [ 27.228165] random: sshd: uninitialized urandom read (32 bytes read) [ 27.415063] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. [ 33.038512] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 33.150432] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 33.158454] PGD 1d8d72067 P4D 1d8d72067 PUD 1d93f7067 PMD 0 [ 33.164270] Oops: 0010 [#1] SMP KASAN [ 33.168071] CPU: 1 PID: 4562 Comm: syz-executor213 Not tainted 4.18.0-rc2+ #121 [ 33.175511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.184960] RIP: 0010: (null) [ 33.188827] Code: Bad RIP value. [ 33.192191] RSP: 0018:ffff8801abe9f568 EFLAGS: 00010246 [ 33.197539] RAX: 0000000000000000 RBX: ffff8801a7b3c940 RCX: ffffffff85ec9112 [ 33.204806] RDX: ffff8801abe9f7c0 RSI: ffff8801a7b3c940 RDI: ffff8801adb2d0c0 [ 33.212063] RBP: ffff8801abe9f610 R08: ffff8801d880c1c0 R09: ffffed003b5e46d6 [ 33.219322] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: ffff8801abe9f7c0 [ 33.226582] R13: ffff8801adb2d0c0 R14: ffffffff8818a920 R15: ffff8801d8e0ab00 [ 33.233848] FS: 0000000000b96880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 33.242854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.248732] CR2: ffffffffffffffd6 CR3: 00000001d8d75000 CR4: 00000000001406e0 [ 33.256176] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.263461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.270731] Call Trace: [ 33.273345] ? sock_poll+0x2e1/0x490 [ 33.277074] ? kernel_sendpage_locked+0x120/0x120 [ 33.281947] ? __lock_is_held+0xb5/0x140 [ 33.286019] ? kernel_sendpage_locked+0x120/0x120 [ 33.290854] ep_item_poll.isra.14+0x15c/0x400 [ 33.295342] ? ep_eventpoll_poll+0x200/0x200 [ 33.299741] ep_insert+0x6c1/0x1c20 [ 33.303369] ? ep_send_events_proc+0xf00/0xf00 [ 33.307946] ? lock_release+0xa30/0xa30 [ 33.311905] ? check_same_owner+0x340/0x340 [ 33.316299] ? clear_tfile_check_list+0x3a0/0x3a0 [ 33.321133] ? rcu_note_context_switch+0x730/0x730 [ 33.326062] ? kasan_check_write+0x14/0x20 [ 33.330280] ? __mutex_lock+0x7e8/0x1820 [ 33.334420] ? __x64_sys_epoll_ctl+0x7ea/0x10a0 [ 33.339089] ? __thp_get_unmapped_area+0x180/0x180 [ 33.344030] ? mutex_trylock+0x2b0/0x2b0 [ 33.348115] ? lockdep_init_map+0x9/0x10 [ 33.352179] ? debug_mutex_init+0x2d/0x60 [ 33.356331] ? pud_val+0x88/0x100 [ 33.359771] ? pmd_val+0x100/0x100 [ 33.363314] ? graph_lock+0x170/0x170 [ 33.367120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.372656] ? __handle_mm_fault+0x94b/0x4460 [ 33.377148] ? find_held_lock+0x36/0x1c0 [ 33.381199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.386755] ? __fget_light+0x2f7/0x440 [ 33.390720] ? fget_raw+0x20/0x20 [ 33.394165] ? find_held_lock+0x36/0x1c0 [ 33.398231] __x64_sys_epoll_ctl+0xf00/0x10a0 [ 33.402723] ? __ia32_sys_epoll_create+0x70/0x70 [ 33.407478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.413040] ? mm_fault_error+0x380/0x380 [ 33.417212] ? move_addr_to_kernel+0x70/0x70 [ 33.421621] ? __ia32_sys_fallocate+0xf0/0xf0 [ 33.426131] ? do_syscall_64+0x9a/0x820 [ 33.430117] do_syscall_64+0x1b9/0x820 [ 33.433995] ? syscall_return_slowpath+0x5e0/0x5e0 [ 33.438920] ? syscall_return_slowpath+0x31d/0x5e0 [ 33.443962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 33.449510] ? retint_user+0x18/0x18 [ 33.453218] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 33.458052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.463227] RIP: 0033:0x43fce9 [ 33.466411] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 33.485559] RSP: 002b:00007ffdf67ca318 EFLAGS: 00000217 ORIG_RAX: 00000000000000e9 [ 33.493297] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fce9 [ 33.500607] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 33.507883] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 33.515155] R10: 0000000020000180 R11: 0000000000000217 R12: 0000000000401610 [ 33.522419] R13: 00000000004016a0 R14: 0000000000000000 R15: 0000000000000000 [ 33.529679] Modules linked in: [ 33.532861] Dumping ftrace buffer: [ 33.536401] (ftrace buffer empty) [ 33.540096] CR2: 0000000000000000 [ 33.543638] ---[ end trace 60ccf944aa06e109 ]--- [ 33.548545] RIP: 0010: (null) [ 33.552474] Code: Bad RIP value. [ 33.555908] RSP: 0018:ffff8801abe9f568 EFLAGS: 00010246 [ 33.561314] RAX: 0000000000000000 RBX: ffff8801a7b3c940 RCX: ffffffff85ec9112 [ 33.568625] RDX: ffff8801abe9f7c0 RSI: ffff8801a7b3c940 RDI: ffff8801adb2d0c0 [ 33.575953] RBP: ffff8801abe9f610 R08: ffff8801d880c1c0 R09: ffffed003b5e46d6 [ 33.583263] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: ffff8801abe9f7c0 [ 33.590573] R13: ffff8801adb2d0c0 R14: ffffffff8818a920 R15: ffff8801d8e0ab00 [ 33.597886] FS: 0000000000b96880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 33.606162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.612075] CR2: ffffffffffffffd6 CR3: 00000001d8d75000 CR4: 00000000001406e0 [ 33.619407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.626727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.634125] Kernel panic - not syncing: Fatal exception [ 33.640250] Dumping ftrace buffer: [ 33.643780] (ftrace buffer empty) [ 33.647471] Kernel Offset: disabled [ 33.651091] Rebooting in 86400 seconds..