[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.694330] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.336859] random: sshd: uninitialized urandom read (32 bytes read) [ 25.794821] random: sshd: uninitialized urandom read (32 bytes read) [ 26.610778] random: sshd: uninitialized urandom read (32 bytes read) [ 26.766469] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.6' (ECDSA) to the list of known hosts. [ 32.203872] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 32.302176] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 32.310213] PGD 1abd7e067 P4D 1abd7e067 PUD 1ab73d067 PMD 0 [ 32.316161] Oops: 0010 [#1] SMP KASAN [ 32.319962] CPU: 1 PID: 4568 Comm: syz-executor302 Not tainted 4.17.0+ #4 [ 32.326886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.336253] RIP: 0010: (null) [ 32.340148] Code: Bad RIP value. [ 32.343531] RSP: 0018:ffff8801d8df7470 EFLAGS: 00010246 [ 32.348897] RAX: 0000000000000000 RBX: ffff8801ce5e0800 RCX: 1ffffffff10eac7d [ 32.356168] RDX: ffff8801d8df7990 RSI: ffff8801d2c10040 RDI: ffff8801b0feb780 [ 32.363435] RBP: ffff8801d8df75e0 R08: 0000000000000001 R09: 0000000000000000 [ 32.370712] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b1bee93 [ 32.378003] R13: ffff8801d8df7990 R14: ffff8801ce5e0812 R15: ffff8801ce5e0c58 [ 32.385286] FS: 0000000000000000(0000) GS:ffff8801daf00000(0063) knlGS:000000000920d840 [ 32.393640] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 32.399519] CR2: ffffffffffffffd6 CR3: 00000001ab6f3000 CR4: 00000000001406e0 [ 32.406828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.414097] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.421375] Call Trace: [ 32.423973] ? smc_poll+0x211/0xdd0 [ 32.427617] ? __smc_connect+0xa90/0xa90 [ 32.432212] ? find_held_lock+0x36/0x1c0 [ 32.436276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 32.441818] ? __fget_light+0x2ef/0x430 [ 32.445816] sock_poll+0x1d1/0x710 [ 32.449386] ? __smc_connect+0xa90/0xa90 [ 32.453464] ? sock_get_poll_head+0x460/0x460 [ 32.457977] ? __might_sleep+0x95/0x190 [ 32.461989] ? sock_get_poll_head+0x460/0x460 [ 32.466511] vfs_poll+0x77/0x2a0 [ 32.469897] do_sys_poll+0x6fd/0x1100 [ 32.473733] ? compat_core_sys_select+0xaf0/0xaf0 [ 32.478611] ? debug_check_no_locks_freed+0x310/0x310 [ 32.483830] ? _raw_spin_unlock+0x22/0x30 [ 32.487995] ? do_huge_pmd_anonymous_page+0x455/0x1b50 [ 32.493301] ? __thp_get_unmapped_area+0x180/0x180 [ 32.498255] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.503287] ? graph_lock+0x170/0x170 [ 32.507129] ? graph_lock+0x170/0x170 [ 32.510951] ? graph_lock+0x170/0x170 [ 32.514780] ? lockdep_init_map+0x9/0x10 [ 32.518892] ? find_held_lock+0x36/0x1c0 [ 32.522991] ? lock_downgrade+0x8e0/0x8e0 [ 32.527159] ? __set_task_blocked+0x20f/0x310 [ 32.531684] ? kasan_check_read+0x11/0x20 [ 32.535868] ? do_raw_spin_unlock+0x9e/0x2e0 [ 32.540317] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 32.544963] ? _raw_spin_unlock_irq+0x27/0x70 [ 32.549485] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.554496] ? trace_hardirqs_on+0xd/0x10 [ 32.558635] ? _raw_spin_unlock_irq+0x27/0x70 [ 32.563122] ? __set_current_blocked+0xe4/0x120 [ 32.567804] ? sigprocmask+0xf4/0x300 [ 32.571623] ? sigsuspend+0x270/0x270 [ 32.575449] ? _copy_from_user+0xdf/0x150 [ 32.579604] __ia32_compat_sys_ppoll+0x2f3/0x5f0 [ 32.584368] ? __x32_compat_sys_pselect6+0x280/0x280 [ 32.589467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 32.595015] ? __do_page_fault+0x441/0xe40 [ 32.599270] ? do_fast_syscall_32+0x148/0xf9b [ 32.603778] do_fast_syscall_32+0x345/0xf9b [ 32.608114] ? do_int80_syscall_32+0x880/0x880 [ 32.612738] ? do_syscall_64+0x48f/0x800 [ 32.616840] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 32.621715] ? syscall_return_slowpath+0x5c0/0x5c0 [ 32.626676] ? syscall_return_slowpath+0x30f/0x5c0 [ 32.631642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 32.637212] ? retint_user+0x18/0x18 [ 32.640958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 32.645829] entry_SYSENTER_compat+0x70/0x7f [ 32.650242] RIP: 0023:0xf7feacb9 [ 32.653601] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 32.672745] RSP: 002b:00000000ffcd312c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 32.681151] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000000001 [ 32.690258] RDX: 0000000020000140 RSI: 0000000020000180 RDI: 0000000000000008 [ 32.697541] RBP: 00000000080baec8 R08: 0000000000000000 R09: 0000000000000000 [ 32.704835] R10: 0000000000000000 R11: 0000000000000207 R12: 0000000000000000 [ 32.712210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 32.719501] Modules linked in: [ 32.722722] Dumping ftrace buffer: [ 32.726278] (ftrace buffer empty) [ 32.729994] CR2: 0000000000000000 [ 32.733865] ---[ end trace a3378708abdb4d1b ]--- [ 32.738721] RIP: 0010: (null) [ 32.742647] Code: Bad RIP value. [ 32.746057] RSP: 0018:ffff8801d8df7470 EFLAGS: 00010246 [ 32.751476] RAX: 0000000000000000 RBX: ffff8801ce5e0800 RCX: 1ffffffff10eac7d [ 32.758808] RDX: ffff8801d8df7990 RSI: ffff8801d2c10040 RDI: ffff8801b0feb780 [ 32.766130] RBP: ffff8801d8df75e0 R08: 0000000000000001 R09: 0000000000000000 [ 32.773476] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b1bee93 [ 32.780801] R13: ffff8801d8df7990 R14: ffff8801ce5e0812 R15: ffff8801ce5e0c58 [ 32.788185] FS: 0000000000000000(0000) GS:ffff8801daf00000(0063) knlGS:000000000920d840 [ 32.796485] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 32.802410] CR2: ffffffffffffffd6 CR3: 00000001ab6f3000 CR4: 00000000001406e0 [ 32.809774] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.817097] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.824429] Kernel panic - not syncing: Fatal exception [ 32.830359] Dumping ftrace buffer: [ 32.833904] (ftrace buffer empty) [ 32.837612] Kernel Offset: disabled [ 32.841239] Rebooting in 86400 seconds..