[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.547878] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.908518] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [ 22.261939] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [ 23.117655] random: sshd: uninitialized urandom read (32 bytes read, 114 bits of entropy available) [ 23.267724] random: sshd: uninitialized urandom read (32 bytes read, 118 bits of entropy available) Warning: Permanently added '10.128.0.11' (ECDSA) to the list of known hosts. [ 28.712033] random: sshd: uninitialized urandom read (32 bytes read, 124 bits of entropy available) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.971664] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 28.979911] IP: [] l2tp_session_create+0x93e/0x10f0 [ 28.986602] PGD 80000001cb416067 PUD 1c90a3067 PMD 0 [ 28.992161] Oops: 0002 [#1] PREEMPT SMP KASAN [ 28.997136] Dumping ftrace buffer: [ 29.000659] (ftrace buffer empty) [ 29.004354] Modules linked in: [ 29.007663] CPU: 1 PID: 3798 Comm: syzkaller260497 Not tainted 4.4.116-g17c7c49 #18 executing program executing program executing program executing program executing program executing program executing program [ 29.015432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.024755] task: ffff8801c4f2b000 task.stack: ffff8801d01d8000 [ 29.030780] RIP: 0010:[] [] l2tp_session_create+0x93e/0x10f0 [ 29.039881] RSP: 0018:ffff8801d01dfad0 EFLAGS: 00010246 [ 29.045309] RAX: 0000000000000000 RBX: ffff8801c5cff680 RCX: ffffffff83458bf6 [ 29.052558] RDX: 1ffff10038b9ff00 RSI: 0000000000000002 RDI: ffff8801c5cff800 [ 29.059805] RBP: ffff8801d01dfb40 R08: 000000000000000a R09: 000000000000ffff executing program executing program executing program executing program [ 29.067046] R10: ffffffff85700640 R11: ffffffff84418180 R12: ffff8801c6b70d28 [ 29.074289] R13: ffff8801d01dfc58 R14: ffff8801c5cff760 R15: ffff8801c6b70c80 [ 29.081553] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f7714b40 [ 29.089750] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 29.095601] CR2: 0000000000000080 CR3: 00000001d9744000 CR4: 0000000000160670 [ 29.102843] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.110083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.117320] Stack: executing program executing program executing program [ 29.119436] ffffffff8113bd9a ffff8801c5cff6a0 ffff8801c6b70dd8 ffff8801d01dfb00 [ 29.127403] ffff8801c6b70c90 0000000000000000 ffff8801c6b70d30 ffff8801c6b70dd0 [ 29.135386] ffffffff00000000 0000000000000000 ffff8801c4ab0880 0000000000000000 [ 29.143369] Call Trace: [ 29.145929] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 29.152221] [] pppol2tp_connect+0x10fc/0x1930 [ 29.158337] [] ? pppol2tp_recv+0x330/0x330 [ 29.164198] [] ? kasan_kmalloc+0xad/0xe0 executing program executing program executing program executing program executing program executing program [ 29.169888] [] ? __fget+0x20b/0x3b0 [ 29.175142] [] ? __might_fault+0xe4/0x1d0 [ 29.180913] [] ? check_stack_object+0x68/0x140 [ 29.187120] [] ? security_socket_connect+0x89/0xb0 [ 29.193671] [] SYSC_connect+0x1b6/0x310 [ 29.199268] [] ? SYSC_bind+0x280/0x280 [ 29.204784] [] ? get_unused_fd_flags+0xd0/0xd0 [ 29.210986] [] ? _raw_spin_unlock+0x2c/0x50 [ 29.216925] [] ? __alloc_fd+0x1e3/0x500 [ 29.222522] [] ? compat_SyS_get_robust_list+0x300/0x300 [ 29.229507] [] ? SyS_socket+0x121/0x1b0 [ 29.235102] [] ? move_addr_to_kernel+0x50/0x50 [ 29.241310] [] SyS_connect+0x24/0x30 [ 29.246650] [] ? SyS_accept+0x30/0x30 [ 29.252069] [] do_fast_syscall_32+0x314/0x890 [ 29.258187] [] sysenter_flags_fixed+0xd/0x17 executing program executing program executing program executing program executing program executing program executing program executing program [ 29.264214] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4f 07 00 00 48 8b 83 80 01 00 00 ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b8 e8 4b 4b [ 29.290870] RIP [] l2tp_session_create+0x93e/0x10f0 [ 29.297628] RSP [ 29.301239] CR2: 0000000000000080 [ 29.306232] ---[ end trace 06b82ad8d0314d3e ]--- [ 29.310990] Kernel panic - not syncing: Fatal exception [ 29.316744] Dumping ftrace buffer: [ 29.320254] (ftrace buffer empty) [ 29.323932] Kernel Offset: disabled [ 29.327525] Rebooting in 86400 seconds..