[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.493330] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.156231] random: sshd: uninitialized urandom read (32 bytes read) [ 22.469759] random: sshd: uninitialized urandom read (32 bytes read) [ 23.259920] random: sshd: uninitialized urandom read (32 bytes read) [ 23.416588] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. [ 28.902487] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 28.992359] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 29.000369] PGD 1cfe3b067 P4D 1cfe3b067 PUD 1ceb74067 PMD 0 [ 29.006166] Oops: 0010 [#1] SMP KASAN [ 29.009957] CPU: 1 PID: 4542 Comm: syz-executor692 Not tainted 4.17.0+ #101 [ 29.017030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.026384] RIP: 0010: (null) [ 29.030243] Code: Bad RIP value. [ 29.033607] RSP: 0018:ffff8801c9a174c0 EFLAGS: 00010246 [ 29.038947] RAX: 0000000000000000 RBX: ffff8801ad2fe800 RCX: 1ffffffff10eac7d [ 29.046203] RDX: ffff8801c9a179e0 RSI: ffff8801a8314200 RDI: ffff8801ad49c780 [ 29.053450] RBP: ffff8801c9a17630 R08: 0000000000000001 R09: 0000000000000000 [ 29.060698] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10039342e9d [ 29.067972] R13: ffff8801c9a179e0 R14: ffff8801ad2fe812 R15: ffff8801ad2fec58 [ 29.075223] FS: 0000000002630880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 29.083436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.089293] CR2: ffffffffffffffd6 CR3: 00000001ad4b6000 CR4: 00000000001406e0 [ 29.096543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.103792] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.111039] Call Trace: [ 29.113612] ? smc_poll+0x211/0xdd0 [ 29.117222] ? __pagevec_lru_add+0x30/0x30 [ 29.121448] ? __smc_connect+0xa90/0xa90 [ 29.125492] ? save_stack+0xa9/0xd0 [ 29.129102] ? find_held_lock+0x36/0x1c0 [ 29.133149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.138670] ? __fget_light+0x2ef/0x430 [ 29.142638] sock_poll+0x1d1/0x710 [ 29.146159] ? __smc_connect+0xa90/0xa90 [ 29.150293] ? sock_get_poll_head+0x460/0x460 [ 29.154770] ? __might_sleep+0x95/0x190 [ 29.158727] ? sock_get_poll_head+0x460/0x460 [ 29.163203] vfs_poll+0x77/0x2a0 [ 29.166549] do_sys_poll+0x6fd/0x1100 [ 29.170332] ? lock_downgrade+0x8e0/0x8e0 [ 29.174474] ? compat_core_sys_select+0xaf0/0xaf0 [ 29.179300] ? do_huge_pmd_anonymous_page+0x455/0x1b50 [ 29.184555] ? __x64_sys_socket+0x73/0xb0 [ 29.188692] ? find_held_lock+0x36/0x1c0 [ 29.192752] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.197744] ? graph_lock+0x170/0x170 [ 29.201523] ? graph_lock+0x170/0x170 [ 29.205314] ? graph_lock+0x170/0x170 [ 29.209105] ? pud_val+0x80/0xf0 [ 29.212459] ? pmd_val+0xf0/0xf0 [ 29.215816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.221342] ? find_held_lock+0x36/0x1c0 [ 29.225393] ? lock_downgrade+0x8e0/0x8e0 [ 29.229517] ? __set_task_blocked+0x20f/0x310 [ 29.233989] ? kasan_check_read+0x11/0x20 [ 29.238113] ? do_raw_spin_unlock+0x9e/0x2e0 [ 29.242524] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 29.247093] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.251596] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.256615] ? trace_hardirqs_on+0xd/0x10 [ 29.260752] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.265248] ? __set_current_blocked+0xe4/0x120 [ 29.269912] ? sigprocmask+0xf4/0x300 [ 29.273703] ? sigsuspend+0x270/0x270 [ 29.277486] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 29.283004] ? _copy_from_user+0xdf/0x150 [ 29.287133] __x64_sys_ppoll+0x2fa/0x5f0 [ 29.291183] ? __ia32_sys_poll+0x510/0x510 [ 29.296022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.301540] ? __do_page_fault+0x441/0xe40 [ 29.305756] ? mm_fault_error+0x380/0x380 [ 29.309896] ? __ia32_sys_fallocate+0xf0/0xf0 [ 29.314387] ? do_syscall_64+0x92/0x800 [ 29.318426] do_syscall_64+0x1b1/0x800 [ 29.322311] ? syscall_return_slowpath+0x5c0/0x5c0 [ 29.327219] ? syscall_return_slowpath+0x30f/0x5c0 [ 29.332131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.337648] ? retint_user+0x18/0x18 [ 29.341339] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.346157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 29.351322] RIP: 0033:0x43fcf9 [ 29.354485] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 45 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 29.373598] RSP: 002b:00007ffec146ac58 EFLAGS: 00000213 ORIG_RAX: 000000000000010f [ 29.381301] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fcf9 [ 29.388548] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 00000000200000c0 [ 29.395793] RBP: 00000000006ca018 R08: 0000000000000008 R09: 00000000004002c8 [ 29.403049] R10: 0000000020000180 R11: 0000000000000213 R12: 0000000000401620 [ 29.410295] R13: 00000000004016b0 R14: 0000000000000000 R15: 0000000000000000 [ 29.417559] Modules linked in: [ 29.420745] Dumping ftrace buffer: [ 29.424270] (ftrace buffer empty) [ 29.427961] CR2: 0000000000000000 [ 29.431694] ---[ end trace 48cb202474045dc9 ]--- [ 29.436469] RIP: 0010: (null) [ 29.440361] Code: Bad RIP value. [ 29.443742] RSP: 0018:ffff8801c9a174c0 EFLAGS: 00010246 [ 29.449195] RAX: 0000000000000000 RBX: ffff8801ad2fe800 RCX: 1ffffffff10eac7d [ 29.456482] RDX: ffff8801c9a179e0 RSI: ffff8801a8314200 RDI: ffff8801ad49c780 [ 29.463754] RBP: ffff8801c9a17630 R08: 0000000000000001 R09: 0000000000000000 [ 29.471054] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10039342e9d [ 29.478327] R13: ffff8801c9a179e0 R14: ffff8801ad2fe812 R15: ffff8801ad2fec58 [ 29.486640] FS: 0000000002630880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 29.494876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.500752] CR2: ffffffffffffffd6 CR3: 00000001ad4b6000 CR4: 00000000001406e0 [ 29.508026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.515305] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.522582] Kernel panic - not syncing: Fatal exception [ 29.528286] Dumping ftrace buffer: [ 29.531804] (ftrace buffer empty) [ 29.535504] Kernel Offset: disabled [ 29.539121] Rebooting in 86400 seconds..