[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.880526] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.496495] random: sshd: uninitialized urandom read (32 bytes read) [ 23.995442] random: sshd: uninitialized urandom read (32 bytes read) [ 24.832972] random: sshd: uninitialized urandom read (32 bytes read) [ 24.999970] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. [ 30.566259] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 30.657240] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 30.665262] PGD 1ad279067 P4D 1ad279067 PUD 1ad278067 PMD 0 [ 30.671057] Oops: 0010 [#1] SMP KASAN [ 30.674844] CPU: 1 PID: 4572 Comm: syz-executor900 Not tainted 4.17.0+ #84 [ 30.681832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.691164] RIP: 0010: (null) [ 30.695035] Code: Bad RIP value. [ 30.698388] RSP: 0018:ffff8801c7267590 EFLAGS: 00010246 [ 30.703727] RAX: 0000000000000000 RBX: ffff8801ad305800 RCX: 1ffffffff10ea9fd [ 30.710973] RDX: ffff8801c7267ab0 RSI: ffff8801a7ec8040 RDI: ffff8801b2823840 [ 30.718219] RBP: ffff8801c7267700 R08: 0000000000000001 R09: 0000000000000000 [ 30.725474] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10038e4ceb7 [ 30.732722] R13: ffff8801c7267ab0 R14: ffff8801ad305812 R15: ffff8801ad305c58 [ 30.739978] FS: 0000000001609880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 30.748178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.754039] CR2: ffffffffffffffd6 CR3: 00000001acdaa000 CR4: 00000000001406e0 [ 30.761290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.768537] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.775783] Call Trace: [ 30.778351] ? smc_poll+0x211/0xdd0 [ 30.781970] ? __mem_cgroup_threshold+0x720/0x720 [ 30.786803] ? __smc_connect+0xa90/0xa90 [ 30.790845] ? kvm_clock_read+0x25/0x30 [ 30.794800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 30.800328] ? ktime_get_ts64+0x39d/0x510 [ 30.804452] ? do_gettimeofday+0x170/0x170 [ 30.808664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.814182] ? __fget_light+0x2ef/0x430 [ 30.818134] sock_poll+0x1d1/0x710 [ 30.821650] ? __smc_connect+0xa90/0xa90 [ 30.825706] ? sock_get_poll_head+0x460/0x460 [ 30.830179] ? sock_get_poll_head+0x460/0x460 [ 30.834654] vfs_poll+0x77/0x2a0 [ 30.837999] do_sys_poll+0x6fd/0x1100 [ 30.841790] ? compat_core_sys_select+0xae0/0xae0 [ 30.846614] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.851610] ? graph_lock+0x170/0x170 [ 30.855388] ? graph_lock+0x170/0x170 [ 30.859176] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.864701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.870217] ? __handle_mm_fault+0x93a/0x4390 [ 30.874699] ? find_held_lock+0x36/0x1c0 [ 30.878747] ? poll_initwait+0x180/0x180 [ 30.882792] ? pvclock_read_flags+0x160/0x160 [ 30.887268] ? ktime_get_ts64+0x405/0x510 [ 30.891416] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 30.896418] ? timespec64_add_safe+0x1f4/0x2d0 [ 30.900977] ? nsec_to_clock_t+0x30/0x30 [ 30.905027] ? do_gettimeofday+0x170/0x170 [ 30.909251] ? poll_select_set_timeout+0x14f/0x220 [ 30.914158] ? do_restart_poll+0x2d0/0x2d0 [ 30.918377] __x64_sys_poll+0x189/0x510 [ 30.922328] ? __ia32_sys_pselect6+0x270/0x270 [ 30.926890] ? do_syscall_64+0x92/0x800 [ 30.930851] do_syscall_64+0x1b1/0x800 [ 30.934719] ? syscall_return_slowpath+0x5c0/0x5c0 [ 30.939626] ? syscall_return_slowpath+0x30f/0x5c0 [ 30.944534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.950051] ? retint_user+0x18/0x18 [ 30.953742] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.958565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 30.963734] RIP: 0033:0x43fd29 [ 30.966898] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 30.986036] RSP: 002b:00007ffe98ae49d8 EFLAGS: 00000213 ORIG_RAX: 0000000000000007 [ 30.993729] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd29 [ 31.000973] RDX: 00000000000000ec RSI: 0000000000000004 RDI: 0000000020000080 [ 31.008230] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.015477] R10: 00000000004002c8 R11: 0000000000000213 R12: 0000000000401650 [ 31.022728] R13: 00000000004016e0 R14: 0000000000000000 R15: 0000000000000000 [ 31.029980] Modules linked in: [ 31.033166] Dumping ftrace buffer: [ 31.036688] (ftrace buffer empty) [ 31.040379] CR2: 0000000000000000 [ 31.043905] ---[ end trace 0b3f2eea693d89be ]--- [ 31.048664] RIP: 0010: (null) [ 31.052545] Code: Bad RIP value. [ 31.055920] RSP: 0018:ffff8801c7267590 EFLAGS: 00010246 [ 31.061279] RAX: 0000000000000000 RBX: ffff8801ad305800 RCX: 1ffffffff10ea9fd [ 31.068551] RDX: ffff8801c7267ab0 RSI: ffff8801a7ec8040 RDI: ffff8801b2823840 [ 31.075823] RBP: ffff8801c7267700 R08: 0000000000000001 R09: 0000000000000000 [ 31.083092] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10038e4ceb7 [ 31.090362] R13: ffff8801c7267ab0 R14: ffff8801ad305812 R15: ffff8801ad305c58 [ 31.097646] FS: 0000000001609880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 31.105871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.111745] CR2: ffffffffffffffd6 CR3: 00000001acdaa000 CR4: 00000000001406e0 [ 31.119021] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.126290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.133557] Kernel panic - not syncing: Fatal exception [ 31.139425] Dumping ftrace buffer: [ 31.142947] (ftrace buffer empty) [ 31.146633] Kernel Offset: disabled [ 31.150236] Rebooting in 86400 seconds..