[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 13.033207] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.056409] random: sshd: uninitialized urandom read (32 bytes read) [ 17.377541] random: sshd: uninitialized urandom read (32 bytes read) [ 17.901230] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.50' (ECDSA) to the list of known hosts. [ 23.615288] urandom_read: 1 callbacks suppressed [ 23.615292] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/22 06:24:31 parsed 1 programs [ 24.955895] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/22 06:24:33 executed programs: 0 [ 26.270868] IPVS: Creating netns size=2536 id=1 [ 26.388898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 26.400829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 26.442279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 26.453623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 26.495532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 26.506789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 26.518978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.532484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.034406] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 27.060322] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 27.066456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.073910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.278403] hrtimer: interrupt took 17927 ns [ 27.844937] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 28.273846] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 28.348288] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 28.530786] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 28.599608] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 28.649769] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 28.693960] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 28.702223] IP: [] l2tp_session_create+0xc60/0x16f0 [ 28.708915] PGD 1cc078067 [ 28.711729] PUD 1cb87d067 PMD 0 [ 28.715204] [ 28.716830] Oops: 0002 [#1] PREEMPT SMP KASAN [ 28.721312] Dumping ftrace buffer: [ 28.724823] (ftrace buffer empty) [ 28.728508] Modules linked in: [ 28.731798] CPU: 1 PID: 4873 Comm: syz-executor0 Not tainted 4.9.122-g54068d6 #26 [ 28.739395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.748729] task: ffff8801cb876000 task.stack: ffff8801cb050000 [ 28.754758] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 28.763893] RSP: 0018:ffff8801cb057ac0 EFLAGS: 00010246 [ 28.769326] RAX: 0000000000000000 RBX: ffff8801cdf46280 RCX: 1ffff1003970ed1d [ 28.776571] RDX: 1ffff10039605b50 RSI: ffff8801cb8768c8 RDI: ffff8801cb02da80 [ 28.783815] RBP: ffff8801cb057b60 R08: ffff8801cb8768e8 R09: 0000000000000000 [ 28.791061] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801cb02d958 [ 28.798308] R13: 0000000000000000 R14: ffff8801cb02d900 R15: ffff8801cb057c78 [ 28.805556] FS: 00007f480a11b700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 28.813754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.819611] CR2: 0000000000000080 CR3: 00000001ce316000 CR4: 00000000001606f0 [ 28.826875] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.834124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.841367] Stack: [ 28.843496] 0000000000000201 ffffffff836c9151 ffff8801cb057ae0 ffffffff81237ecd [ 28.851539] ffff8801cb02d900 ffff8801cdf463d8 ffff8801cb02d958 ffff8801cdf463d0 [ 28.859526] ffff8801cdf46330 ffff8801cb02d920 0000000000000000 0000000000000000 [ 28.867553] Call Trace: [ 28.870118] [] ? l2tp_session_get+0x1d1/0x790 [ 28.876239] [] ? trace_hardirqs_on+0xd/0x10 [ 28.882186] [] pppol2tp_connect+0x10d7/0x18f0 [ 28.888304] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 28.894512] [] ? security_socket_connect+0x8f/0xc0 [ 28.901067] [] SYSC_connect+0x1b8/0x300 [ 28.906668] [] ? SYSC_bind+0x280/0x280 [ 28.912182] [] ? get_unused_fd_flags+0xd0/0xd0 [ 28.918398] [] ? do_futex+0x17c0/0x17c0 [ 28.924003] [] ? SyS_socket+0x121/0x1b0 [ 28.929617] [] ? move_addr_to_kernel+0x50/0x50 [ 28.935829] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 28.942645] [] SyS_connect+0x24/0x30 [ 28.947983] [] ? SyS_accept+0x30/0x30 [ 28.953409] [] do_syscall_64+0x1a6/0x490 [ 28.959101] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 28.965997] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 28.992843] RIP [] l2tp_session_create+0xc60/0x16f0 [ 28.999605] RSP [ 29.003214] CR2: 0000000000000080 [ 29.007635] ---[ end trace b446de509dfbf4c2 ]--- [ 29.012398] Kernel panic - not syncing: Fatal exception [ 29.018064] Dumping ftrace buffer: [ 29.021603] (ftrace buffer empty) [ 29.025292] Kernel Offset: disabled [ 29.028893] Rebooting in 86400 seconds..