[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.324902] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.154505] random: sshd: uninitialized urandom read (32 bytes read) [ 23.708779] random: sshd: uninitialized urandom read (32 bytes read) [ 24.534221] random: sshd: uninitialized urandom read (32 bytes read) [ 24.695525] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. [ 30.149166] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 30.239983] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 30.247991] PGD 1d0354067 P4D 1d0354067 PUD 1d9a32067 PMD 0 [ 30.253782] Oops: 0010 [#1] SMP KASAN [ 30.257580] CPU: 0 PID: 4532 Comm: syz-executor024 Not tainted 4.17.0+ #96 [ 30.264568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.273902] RIP: 0010: (null) [ 30.277767] Code: Bad RIP value. [ 30.281126] RSP: 0018:ffff8801d97bf590 EFLAGS: 00010246 [ 30.286483] RAX: 0000000000000000 RBX: ffff8801da9a6800 RCX: 1ffffffff10ea9fd [ 30.293734] RDX: ffff8801d97bfab0 RSI: ffff8801bfa95a00 RDI: ffff8801d94bba80 [ 30.300987] RBP: ffff8801d97bf700 R08: 0000000000000001 R09: 0000000000000000 [ 30.308234] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b2f7eb7 [ 30.315482] R13: ffff8801d97bfab0 R14: ffff8801da9a6812 R15: ffff8801da9a6c58 [ 30.322733] FS: 0000000000b94880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 30.330938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.336799] CR2: ffffffffffffffd6 CR3: 00000001d9b4b000 CR4: 00000000001406f0 [ 30.344058] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.351307] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.358555] Call Trace: [ 30.361132] ? smc_poll+0x211/0xdd0 [ 30.364742] ? __mem_cgroup_threshold+0x720/0x720 [ 30.369565] ? __smc_connect+0xa90/0xa90 [ 30.373614] ? kvm_clock_read+0x25/0x30 [ 30.377587] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 30.383108] ? ktime_get_ts64+0x39d/0x510 [ 30.387243] ? do_gettimeofday+0x170/0x170 [ 30.391464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.397013] ? __fget_light+0x2ef/0x430 [ 30.400968] sock_poll+0x1d1/0x710 [ 30.404491] ? __smc_connect+0xa90/0xa90 [ 30.408534] ? sock_get_poll_head+0x460/0x460 [ 30.413016] ? sock_get_poll_head+0x460/0x460 [ 30.417491] vfs_poll+0x77/0x2a0 [ 30.420842] do_sys_poll+0x6fd/0x1100 [ 30.424629] ? compat_core_sys_select+0xae0/0xae0 [ 30.429472] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.434482] ? graph_lock+0x170/0x170 [ 30.438265] ? graph_lock+0x170/0x170 [ 30.442048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.447565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.453090] ? __handle_mm_fault+0x93a/0x4390 [ 30.457568] ? find_held_lock+0x36/0x1c0 [ 30.461624] ? poll_initwait+0x180/0x180 [ 30.465669] ? pvclock_read_flags+0x160/0x160 [ 30.470147] ? ktime_get_ts64+0x405/0x510 [ 30.474279] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 30.479287] ? timespec64_add_safe+0x1f4/0x2d0 [ 30.483852] ? nsec_to_clock_t+0x30/0x30 [ 30.487901] ? do_gettimeofday+0x170/0x170 [ 30.492135] ? poll_select_set_timeout+0x14f/0x220 [ 30.497047] ? do_restart_poll+0x2d0/0x2d0 [ 30.501274] __x64_sys_poll+0x189/0x510 [ 30.505227] ? __ia32_sys_pselect6+0x270/0x270 [ 30.509799] ? do_syscall_64+0x92/0x800 [ 30.513765] do_syscall_64+0x1b1/0x800 [ 30.517645] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 30.522472] ? syscall_return_slowpath+0x5c0/0x5c0 [ 30.527392] ? syscall_return_slowpath+0x30f/0x5c0 [ 30.532305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.537835] ? retint_user+0x18/0x18 [ 30.541617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.546454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 30.551646] RIP: 0033:0x43fcc9 [ 30.554913] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 30.574222] RSP: 002b:00007fff372ee898 EFLAGS: 00000213 ORIG_RAX: 0000000000000007 [ 30.581921] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fcc9 [ 30.589174] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000020000040 [ 30.596435] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 30.603699] R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004015f0 [ 30.610947] R13: 0000000000401680 R14: 0000000000000000 R15: 0000000000000000 [ 30.618200] Modules linked in: [ 30.621376] Dumping ftrace buffer: [ 30.624892] (ftrace buffer empty) [ 30.628581] CR2: 0000000000000000 [ 30.632121] ---[ end trace f8e16a2eb935033b ]--- [ 30.636908] RIP: 0010: (null) [ 30.640806] Code: Bad RIP value. [ 30.644194] RSP: 0018:ffff8801d97bf590 EFLAGS: 00010246 [ 30.649564] RAX: 0000000000000000 RBX: ffff8801da9a6800 RCX: 1ffffffff10ea9fd [ 30.656844] RDX: ffff8801d97bfab0 RSI: ffff8801bfa95a00 RDI: ffff8801d94bba80 [ 30.664125] RBP: ffff8801d97bf700 R08: 0000000000000001 R09: 0000000000000000 [ 30.671414] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b2f7eb7 [ 30.678707] R13: ffff8801d97bfab0 R14: ffff8801da9a6812 R15: ffff8801da9a6c58 [ 30.685990] FS: 0000000000b94880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 30.694234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.700126] CR2: ffffffffffffffd6 CR3: 00000001d9b4b000 CR4: 00000000001406f0 [ 30.707407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.714707] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.721990] Kernel panic - not syncing: Fatal exception [ 30.727803] Dumping ftrace buffer: [ 30.731327] (ftrace buffer empty) [ 30.735102] Kernel Offset: disabled [ 30.738710] Rebooting in 86400 seconds..