[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 13.750590] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.435173] random: sshd: uninitialized urandom read (32 bytes read) [ 17.695117] random: sshd: uninitialized urandom read (32 bytes read) [ 18.191637] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. [ 23.926619] urandom_read: 1 callbacks suppressed [ 23.926623] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/22 22:57:16 parsed 1 programs [ 24.938238] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/22 22:57:17 executed programs: 0 [ 26.050787] IPVS: Creating netns size=2536 id=1 [ 26.174835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 26.186383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 26.230240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 26.241505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 26.285751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 26.297155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 26.309091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.330192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.861913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 26.889610] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 26.895999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.903673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.112952] hrtimer: interrupt took 11139 ns [ 27.444648] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 27.452882] IP: [] l2tp_session_create+0xc60/0x16f0 [ 27.459574] PGD 1d3e2f067 [ 27.462337] PUD 1d3c22067 PMD 0 [ 27.465826] [ 27.467454] Oops: 0002 [#1] PREEMPT SMP KASAN [ 27.471930] Dumping ftrace buffer: [ 27.475447] (ftrace buffer empty) [ 27.479141] Modules linked in: [ 27.482434] CPU: 1 PID: 4390 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #79 [ 27.490029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.499365] task: ffff8801d5703000 task.stack: ffff8801d3820000 [ 27.505571] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 27.514694] RSP: 0018:ffff8801d3827ac0 EFLAGS: 00010246 [ 27.520125] RAX: 0000000000000000 RBX: ffff8801d42fb680 RCX: 1ffff1003aae071d [ 27.527376] RDX: 1ffff1003a85f6b0 RSI: ffff8801d57038c8 RDI: ffff8801d42fb580 [ 27.534628] RBP: ffff8801d3827b60 R08: ffff8801d57038e8 R09: 0000000000000000 [ 27.541883] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d42fb458 [ 27.549136] R13: 0000000000000000 R14: ffff8801d42fb400 R15: ffff8801d3827c78 [ 27.556391] FS: 00007fb9b6da3700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 27.564599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.570467] CR2: 0000000000000080 CR3: 00000001d7ed6000 CR4: 00000000001606f0 [ 27.577721] Stack: [ 27.579855] 0000000000000201 ffffffff836ca141 ffff8801d3827ae0 ffffffff81237f0d [ 27.587879] ffff8801d42fb400 ffff8801d42fb7d8 ffff8801d42fb458 ffff8801d42fb7d0 [ 27.595894] ffff8801d42fb730 ffff8801d42fb420 0000000000000000 0000000000000000 [ 27.603911] Call Trace: [ 27.606488] [] ? l2tp_session_get+0x1d1/0x790 [ 27.612618] [] ? trace_hardirqs_on+0xd/0x10 [ 27.618578] [] pppol2tp_connect+0x10d7/0x18f0 [ 27.624708] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 27.630928] [] ? security_socket_connect+0x8f/0xc0 [ 27.637493] [] SYSC_connect+0x1b8/0x300 [ 27.643312] [] ? SYSC_bind+0x280/0x280 [ 27.648836] [] ? do_futex+0x17c0/0x17c0 [ 27.654452] [] ? move_addr_to_kernel+0x50/0x50 [ 27.660683] [] SyS_connect+0x24/0x30 [ 27.666031] [] ? SyS_accept+0x30/0x30 [ 27.671472] [] do_syscall_64+0x1a6/0x490 [ 27.677170] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 27.684077] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 27.711315] RIP [] l2tp_session_create+0xc60/0x16f0 [ 27.718095] RSP [ 27.721710] CR2: 0000000000000080 [ 27.726311] ---[ end trace 4c1011cbb9c4a036 ]--- [ 27.731087] Kernel panic - not syncing: Fatal exception [ 27.736721] Dumping ftrace buffer: [ 27.740291] (ftrace buffer empty) [ 27.744028] Kernel Offset: disabled [ 27.747640] Rebooting in 86400 seconds..