[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.393138] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.427840] random: sshd: uninitialized urandom read (32 bytes read) [ 21.702192] random: sshd: uninitialized urandom read (32 bytes read) [ 22.523992] random: sshd: uninitialized urandom read (32 bytes read) [ 22.694537] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. [ 28.257073] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 28.351977] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 28.360019] PGD 1b2931067 P4D 1b2931067 PUD 1d0ae1067 PMD 0 [ 28.365845] Oops: 0010 [#1] SMP KASAN [ 28.369647] CPU: 0 PID: 4493 Comm: syz-executor249 Not tainted 4.17.0+ #92 [ 28.376652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.385998] RIP: 0010: (null) [ 28.389872] Code: Bad RIP value. [ 28.393251] RSP: 0018:ffff8801b3bd7590 EFLAGS: 00010246 [ 28.398595] RAX: 0000000000000000 RBX: ffff8801b2994800 RCX: 1ffffffff10ea8e5 [ 28.405934] RDX: ffff8801b3bd7ab0 RSI: ffff8801ace8c980 RDI: ffff8801b378d800 [ 28.413188] RBP: ffff8801b3bd7700 R08: 0000000000000001 R09: 0000000000000000 [ 28.420444] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003677aeb7 [ 28.427698] R13: ffff8801b3bd7ab0 R14: ffff8801b2994812 R15: ffff8801b2994c58 [ 28.434963] FS: 00000000018d6880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 28.443183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.449049] CR2: ffffffffffffffd6 CR3: 00000001b2a10000 CR4: 00000000001406f0 [ 28.456303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.463553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.470818] Call Trace: [ 28.473390] ? smc_poll+0x211/0xdd0 [ 28.477004] ? __mem_cgroup_threshold+0x720/0x720 [ 28.481838] ? __smc_connect+0xa90/0xa90 [ 28.485885] ? kvm_clock_read+0x25/0x30 [ 28.489845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 28.495364] ? ktime_get_ts64+0x39d/0x510 [ 28.499514] ? do_gettimeofday+0x170/0x170 [ 28.503735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.509259] ? __fget_light+0x2ef/0x430 [ 28.513311] sock_poll+0x1d1/0x710 [ 28.516858] ? __smc_connect+0xa90/0xa90 [ 28.520920] ? sock_get_poll_head+0x460/0x460 [ 28.525430] ? sock_get_poll_head+0x460/0x460 [ 28.529950] vfs_poll+0x77/0x2a0 [ 28.533320] do_sys_poll+0x6fd/0x1100 [ 28.537119] ? compat_core_sys_select+0xae0/0xae0 [ 28.541953] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.546992] ? graph_lock+0x170/0x170 [ 28.550803] ? graph_lock+0x170/0x170 [ 28.554612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.560143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.565703] ? __handle_mm_fault+0x93a/0x4390 [ 28.570284] ? find_held_lock+0x36/0x1c0 [ 28.574334] ? poll_initwait+0x180/0x180 [ 28.578387] ? pvclock_read_flags+0x160/0x160 [ 28.582873] ? ktime_get_ts64+0x405/0x510 [ 28.587009] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 28.592048] ? timespec64_add_safe+0x1f4/0x2d0 [ 28.596638] ? nsec_to_clock_t+0x30/0x30 [ 28.600687] ? do_gettimeofday+0x170/0x170 [ 28.604922] ? poll_select_set_timeout+0x14f/0x220 [ 28.609834] ? do_restart_poll+0x2d0/0x2d0 [ 28.614059] __x64_sys_poll+0x189/0x510 [ 28.618023] ? __ia32_sys_pselect6+0x270/0x270 [ 28.622594] ? do_syscall_64+0x92/0x800 [ 28.626567] do_syscall_64+0x1b1/0x800 [ 28.630468] ? syscall_return_slowpath+0x5c0/0x5c0 [ 28.635414] ? syscall_return_slowpath+0x30f/0x5c0 [ 28.640364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 28.645900] ? retint_user+0x18/0x18 [ 28.649616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.654456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 28.659627] RIP: 0033:0x43fcc9 [ 28.662796] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 28.681928] RSP: 002b:00007ffc32252d08 EFLAGS: 00000213 ORIG_RAX: 0000000000000007 [ 28.689623] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fcc9 [ 28.696879] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000020000040 [ 28.704142] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 28.711410] R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004015f0 [ 28.718661] R13: 0000000000401680 R14: 0000000000000000 R15: 0000000000000000 [ 28.725913] Modules linked in: [ 28.729109] Dumping ftrace buffer: [ 28.732627] (ftrace buffer empty) [ 28.736323] CR2: 0000000000000000 [ 28.739847] ---[ end trace c755e9b5f9cf1fa4 ]--- [ 28.744615] RIP: 0010: (null) [ 28.748500] Code: Bad RIP value. [ 28.751887] RSP: 0018:ffff8801b3bd7590 EFLAGS: 00010246 [ 28.757259] RAX: 0000000000000000 RBX: ffff8801b2994800 RCX: 1ffffffff10ea8e5 [ 28.764635] RDX: ffff8801b3bd7ab0 RSI: ffff8801ace8c980 RDI: ffff8801b378d800 [ 28.771915] RBP: ffff8801b3bd7700 R08: 0000000000000001 R09: 0000000000000000 [ 28.779208] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003677aeb7 [ 28.786491] R13: ffff8801b3bd7ab0 R14: ffff8801b2994812 R15: ffff8801b2994c58 [ 28.793803] FS: 00000000018d6880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 28.802058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.807963] CR2: ffffffffffffffd6 CR3: 00000001b2a10000 CR4: 00000000001406f0 [ 28.815343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.822624] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.829906] Kernel panic - not syncing: Fatal exception [ 28.836071] Dumping ftrace buffer: [ 28.839606] (ftrace buffer empty) [ 28.843470] Kernel Offset: disabled [ 28.847082] Rebooting in 86400 seconds..