[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.898089] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 20.156570] random: sshd: uninitialized urandom read (32 bytes read) [ 20.567380] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.397858] random: sshd: uninitialized urandom read (32 bytes read) [ 21.553061] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. [ 27.057424] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 27.148524] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 27.156540] PGD 1abe68067 P4D 1abe68067 PUD 1d8c5b067 PMD 0 [ 27.162341] Oops: 0010 [#1] SMP KASAN [ 27.166124] CPU: 0 PID: 4566 Comm: syz-executor646 Not tainted 4.18.0-rc2+ #24 [ 27.173467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.182798] RIP: 0010: (null) [ 27.186655] Code: Bad RIP value. [ 27.190021] RSP: 0018:ffff8801ab4f7708 EFLAGS: 00010246 [ 27.195366] RAX: 0000000000000000 RBX: ffff8801a771b4c0 RCX: ffffffff85ec9112 [ 27.202628] RDX: ffff8801ab4f7a60 RSI: ffff8801a771b4c0 RDI: ffff8801ab91e0c0 [ 27.209878] RBP: ffff8801ab4f77b0 R08: ffff8801d93aa480 R09: ffffed003b2f0688 [ 27.217144] R10: ffffed003b2f0688 R11: ffff8801d9783443 R12: ffff8801ab4f7a60 [ 27.224396] R13: ffff8801ab91e0c0 R14: ffffffff8818a920 R15: ffff8801d8cfa880 [ 27.231659] FS: 0000000000000000(0000) GS:ffff8801dae00000(0063) knlGS:00000000087ad840 [ 27.239876] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 27.245751] CR2: ffffffffffffffd6 CR3: 00000001d93f5000 CR4: 00000000001406f0 [ 27.253027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.260290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.267536] Call Trace: [ 27.270111] ? sock_poll+0x2e1/0x490 [ 27.273841] ? kernel_sendpage_locked+0x120/0x120 [ 27.278696] ? kernel_sendpage_locked+0x120/0x120 [ 27.283525] do_sys_poll+0x74d/0x1180 [ 27.287315] ? compat_core_sys_select+0xb10/0xb10 [ 27.292142] ? __thp_get_unmapped_area+0x180/0x180 [ 27.297055] ? graph_lock+0x170/0x170 [ 27.300837] ? graph_lock+0x170/0x170 [ 27.304632] ? pud_val+0x88/0x100 [ 27.308071] ? pmd_val+0x100/0x100 [ 27.311607] ? find_held_lock+0x36/0x1c0 [ 27.315655] ? poll_initwait+0x180/0x180 [ 27.319703] ? pvclock_read_flags+0x160/0x160 [ 27.324185] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 27.329186] ? timespec64_add_safe+0x204/0x2f0 [ 27.333751] ? nsec_to_clock_t+0x30/0x30 [ 27.337792] ? do_gettimeofday+0x180/0x180 [ 27.342024] ? handle_mm_fault+0x55d/0xc80 [ 27.346245] ? poll_select_set_timeout+0x156/0x240 [ 27.351166] ? do_restart_poll+0x2e0/0x2e0 [ 27.355405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 27.360929] __ia32_sys_poll+0x196/0x520 [ 27.364970] ? __x64_sys_poll+0x530/0x530 [ 27.369112] ? do_fast_syscall_32+0x150/0xfb2 [ 27.373587] do_fast_syscall_32+0x34d/0xfb2 [ 27.377888] ? do_int80_syscall_32+0x890/0x890 [ 27.382468] ? do_syscall_64+0x497/0x820 [ 27.386517] ? syscall_return_slowpath+0x5e0/0x5e0 [ 27.391427] ? syscall_return_slowpath+0x31d/0x5e0 [ 27.396341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 27.401859] ? retint_user+0x18/0x18 [ 27.405567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 27.410391] entry_SYSENTER_compat+0x70/0x7f [ 27.414789] RIP: 0023:0xf7fcdcb9 [ 27.418128] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 27.437271] RSP: 002b:00000000ffea614c EFLAGS: 00000213 ORIG_RAX: 00000000000000a8 [ 27.444965] RAX: ffffffffffffffda RBX: 0000000020003900 RCX: 0000000000000003 [ 27.452221] RDX: 0000000000000006 RSI: 0000000000000032 RDI: 00000000ffffffff [ 27.459472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 27.466722] R10: 0000000000000000 R11: 0000000000000207 R12: 0000000000000000 [ 27.473968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 27.481222] Modules linked in: [ 27.484407] Dumping ftrace buffer: [ 27.487921] (ftrace buffer empty) [ 27.491619] CR2: 0000000000000000 [ 27.495136] ---[ end trace 194cf5d8677547f0 ]--- [ 27.499901] RIP: 0010: (null) [ 27.503794] Code: Bad RIP value. [ 27.507184] RSP: 0018:ffff8801ab4f7708 EFLAGS: 00010246 [ 27.512564] RAX: 0000000000000000 RBX: ffff8801a771b4c0 RCX: ffffffff85ec9112 [ 27.519850] RDX: ffff8801ab4f7a60 RSI: ffff8801a771b4c0 RDI: ffff8801ab91e0c0 [ 27.527121] RBP: ffff8801ab4f77b0 R08: ffff8801d93aa480 R09: ffffed003b2f0688 [ 27.534404] R10: ffffed003b2f0688 R11: ffff8801d9783443 R12: ffff8801ab4f7a60 [ 27.541688] R13: ffff8801ab91e0c0 R14: ffffffff8818a920 R15: ffff8801d8cfa880 [ 27.548967] FS: 0000000000000000(0000) GS:ffff8801dae00000(0063) knlGS:00000000087ad840 [ 27.557200] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 27.563095] CR2: ffffffffffffffd6 CR3: 00000001d93f5000 CR4: 00000000001406f0 [ 27.570373] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.577646] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.584928] Kernel panic - not syncing: Fatal exception [ 27.590824] Dumping ftrace buffer: [ 27.594473] (ftrace buffer empty) [ 27.598174] Kernel Offset: disabled [ 27.601778] Rebooting in 86400 seconds..