[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.511689] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 21.688623] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.153892] random: sshd: uninitialized urandom read (32 bytes read) [ 22.961163] random: sshd: uninitialized urandom read (32 bytes read) [ 23.124083] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. [ 28.687212] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 28.810313] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 28.818326] PGD 1ac506067 P4D 1ac506067 PUD 1ac507067 PMD 0 [ 28.824150] Oops: 0010 [#1] SMP KASAN [ 28.827933] CPU: 1 PID: 4531 Comm: syz-executor354 Not tainted 4.17.0+ #84 [ 28.834924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.844268] RIP: 0010: (null) [ 28.848142] Code: Bad RIP value. [ 28.851503] RSP: 0018:ffff8801d9217590 EFLAGS: 00010246 [ 28.856845] RAX: 0000000000000000 RBX: ffff8801d9340800 RCX: 1ffffffff10ea9fd [ 28.864109] RDX: ffff8801d9217ab0 RSI: ffff8801a82c1000 RDI: ffff8801d9621a00 [ 28.871358] RBP: ffff8801d9217700 R08: 0000000000000001 R09: 0000000000000000 [ 28.878617] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b242eb7 [ 28.885874] R13: ffff8801d9217ab0 R14: ffff8801d9340812 R15: ffff8801d9340c58 [ 28.893141] FS: 00000000007a8880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 28.901359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.907232] CR2: ffffffffffffffd6 CR3: 00000001d90b5000 CR4: 00000000001406e0 [ 28.914498] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.921749] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.929001] Call Trace: [ 28.931579] ? smc_poll+0x211/0xdd0 [ 28.935200] ? __mem_cgroup_threshold+0x720/0x720 [ 28.940033] ? __smc_connect+0xa90/0xa90 [ 28.944101] ? kvm_clock_read+0x25/0x30 [ 28.948066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 28.953616] ? ktime_get_ts64+0x39d/0x510 [ 28.957748] ? do_gettimeofday+0x170/0x170 [ 28.961975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.967493] ? __fget_light+0x2ef/0x430 [ 28.971463] sock_poll+0x1d1/0x710 [ 28.974990] ? __smc_connect+0xa90/0xa90 [ 28.979042] ? sock_get_poll_head+0x460/0x460 [ 28.983530] ? sock_get_poll_head+0x460/0x460 [ 28.988022] vfs_poll+0x77/0x2a0 [ 28.991389] do_sys_poll+0x6fd/0x1100 [ 28.995185] ? compat_core_sys_select+0xae0/0xae0 [ 29.000024] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.005032] ? graph_lock+0x170/0x170 [ 29.008814] ? graph_lock+0x170/0x170 [ 29.012604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.018146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.023678] ? __handle_mm_fault+0x93a/0x4390 [ 29.028162] ? find_held_lock+0x36/0x1c0 [ 29.032221] ? poll_initwait+0x180/0x180 [ 29.036275] ? pvclock_read_flags+0x160/0x160 [ 29.040854] ? ktime_get_ts64+0x405/0x510 [ 29.044995] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 29.049997] ? timespec64_add_safe+0x1f4/0x2d0 [ 29.054561] ? nsec_to_clock_t+0x30/0x30 [ 29.058603] ? do_gettimeofday+0x170/0x170 [ 29.062833] ? poll_select_set_timeout+0x14f/0x220 [ 29.067746] ? do_restart_poll+0x2d0/0x2d0 [ 29.071965] __x64_sys_poll+0x189/0x510 [ 29.075918] ? __ia32_sys_pselect6+0x270/0x270 [ 29.080498] ? do_syscall_64+0x92/0x800 [ 29.084456] do_syscall_64+0x1b1/0x800 [ 29.088328] ? syscall_return_slowpath+0x5c0/0x5c0 [ 29.093248] ? syscall_return_slowpath+0x30f/0x5c0 [ 29.098168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.103688] ? retint_user+0x18/0x18 [ 29.107383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.112205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 29.117371] RIP: 0033:0x43fd79 [ 29.120537] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 29.139667] RSP: 002b:00007ffeae954618 EFLAGS: 00000213 ORIG_RAX: 0000000000000007 [ 29.147359] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd79 [ 29.154609] RDX: 0000000000000001 RSI: 0000000000000007 RDI: 0000000020000100 [ 29.161877] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 29.169127] R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004016a0 [ 29.176377] R13: 0000000000401730 R14: 0000000000000000 R15: 0000000000000000 [ 29.183629] Modules linked in: [ 29.186808] Dumping ftrace buffer: [ 29.190326] (ftrace buffer empty) [ 29.194021] CR2: 0000000000000000 [ 29.197569] ---[ end trace 2a680535f320809a ]--- [ 29.202346] RIP: 0010: (null) [ 29.206259] Code: Bad RIP value. [ 29.209653] RSP: 0018:ffff8801d9217590 EFLAGS: 00010246 [ 29.215040] RAX: 0000000000000000 RBX: ffff8801d9340800 RCX: 1ffffffff10ea9fd [ 29.222322] RDX: ffff8801d9217ab0 RSI: ffff8801a82c1000 RDI: ffff8801d9621a00 [ 29.229611] RBP: ffff8801d9217700 R08: 0000000000000001 R09: 0000000000000000 [ 29.236891] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b242eb7 [ 29.244174] R13: ffff8801d9217ab0 R14: ffff8801d9340812 R15: ffff8801d9340c58 [ 29.251458] FS: 00000000007a8880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 29.259697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.265597] CR2: ffffffffffffffd6 CR3: 00000001d90b5000 CR4: 00000000001406e0 [ 29.272877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.280162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.287445] Kernel panic - not syncing: Fatal exception [ 29.293461] Dumping ftrace buffer: [ 29.296992] (ftrace buffer empty) [ 29.300683] Kernel Offset: disabled [ 29.304291] Rebooting in 86400 seconds..