[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.702633] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.279705] random: sshd: uninitialized urandom read (32 bytes read) [ 22.643465] random: sshd: uninitialized urandom read (32 bytes read) [ 23.155777] random: sshd: uninitialized urandom read (32 bytes read) [ 23.298005] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. [ 28.882555] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/22 21:11:22 parsed 1 programs [ 29.981771] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/22 21:11:24 executed programs: 0 [ 31.505714] IPVS: Creating netns size=2536 id=1 [ 31.629282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 31.641109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 31.684958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 31.696407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 31.739941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 31.751385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 31.763231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.784256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.830164] ip (3924) used greatest stack depth: 23976 bytes left [ 32.290116] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.316324] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 32.322534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.329245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.605577] l2tp_core: tunl 4: sockfd_lookup(fd=5) returned -9 [ 32.672117] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 32.680334] IP: [] l2tp_session_create+0xc60/0x16f0 [ 32.687014] PGD 1d6c3d067 [ 32.689662] PUD 1d8f9c067 PMD 0 [ 32.693193] [ 32.694823] Oops: 0002 [#1] PREEMPT SMP KASAN [ 32.699296] Dumping ftrace buffer: [ 32.702822] (ftrace buffer empty) [ 32.706513] Modules linked in: [ 32.709799] CPU: 0 PID: 4283 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #79 [ 32.717402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.726738] task: ffff8801d5371800 task.stack: ffff8801b6450000 [ 32.732773] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 32.741890] RSP: 0018:ffff8801b6457ac0 EFLAGS: 00010246 [ 32.747320] RAX: 0000000000000000 RBX: ffff8801d6ef6780 RCX: 1ffff1003aa6e41d [ 32.754747] RDX: 1ffff1003addec80 RSI: ffff8801d53720c8 RDI: ffff8801d6ef6400 [ 32.761994] RBP: ffff8801b6457b60 R08: ffff8801d53720e8 R09: 0000000000000000 [ 32.769241] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d6ef62d8 [ 32.776491] R13: 0000000000000000 R14: ffff8801d6ef6280 R15: ffff8801b6457c78 [ 32.783741] FS: 00007f117d58a700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 32.791981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.797848] CR2: 0000000000000080 CR3: 00000001d76e8000 CR4: 00000000001606f0 [ 32.805097] Stack: [ 32.807226] 0000000000000201 ffffffff836ca141 ffff8801b6457ae0 ffffffff81237f0d [ 32.815233] ffff8801d6ef6280 ffff8801d6ef68d8 ffff8801d6ef62d8 ffff8801d6ef68d0 [ 32.823282] ffff8801d6ef6830 ffff8801d6ef62a0 0000000000000000 0000000000000000 [ 32.831410] Call Trace: [ 32.833982] [] ? l2tp_session_get+0x1d1/0x790 [ 32.840108] [] ? trace_hardirqs_on+0xd/0x10 [ 32.846099] [] pppol2tp_connect+0x10d7/0x18f0 [ 32.852227] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 32.858434] [] ? security_socket_connect+0x8f/0xc0 [ 32.864989] [] SYSC_connect+0x1b8/0x300 [ 32.870593] [] ? debug_check_no_locks_freed+0x210/0x210 [ 32.877582] [] ? SYSC_bind+0x280/0x280 [ 32.883094] [] ? get_unused_fd_flags+0xd0/0xd0 [ 32.889309] [] ? do_futex+0x17c0/0x17c0 [ 32.895013] [] ? SyS_dup2+0x41f/0x5e0 [ 32.900446] [] SyS_connect+0x24/0x30 [ 32.905786] [] ? SyS_accept+0x30/0x30 [ 32.911219] [] do_syscall_64+0x1a6/0x490 [ 32.916906] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 32.923814] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 32.950684] RIP [] l2tp_session_create+0xc60/0x16f0 [ 32.957449] RSP [ 32.961048] CR2: 0000000000000080 [ 32.965253] ---[ end trace b2393aa0cb63299e ]--- [ 32.970013] Kernel panic - not syncing: Fatal exception [ 32.975632] Dumping ftrace buffer: [ 32.979148] (ftrace buffer empty) [ 32.982838] Kernel Offset: disabled [ 32.986439] Rebooting in 86400 seconds..