[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   15.936657] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   17.807370] random: sshd: uninitialized urandom read (32 bytes read)
[   18.228642] random: sshd: uninitialized urandom read (32 bytes read)
[   18.774739] random: sshd: uninitialized urandom read (32 bytes read)
[   40.033656] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts.
[   45.511148] random: sshd: uninitialized urandom read (32 bytes read)
2018/08/22 08:29:07 parsed 1 programs
[   47.292219] random: cc1: uninitialized urandom read (8 bytes read)
2018/08/22 08:29:10 executed programs: 0
[   48.857423] IPVS: Creating netns size=2536 id=1
[   48.982213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   48.993879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   49.036926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   49.048312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   49.091764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   49.103496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   49.115351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.128658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   49.630883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   49.656687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   49.663326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.670736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.870880] hrtimer: interrupt took 20390 ns
[   49.995295] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9
[   50.027139] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080
[   50.035375] IP: [<ffffffff836c8e30>] l2tp_session_create+0xc60/0x16f0
[   50.042057] PGD 1d44e3067 [   50.044706] PUD 1d8f17067 
PMD 0 [   50.048185] 
[   50.049806] Oops: 0002 [#1] PREEMPT SMP KASAN
[   50.054275] Dumping ftrace buffer:
[   50.057785]    (ftrace buffer empty)
[   50.061469] Modules linked in:
[   50.064784] CPU: 0 PID: 4281 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #31
[   50.072390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   50.081720] task: ffff8801d5540000 task.stack: ffff8801d4e50000
[   50.087754] RIP: 0010:[<ffffffff836c8e30>]  [<ffffffff836c8e30>] l2tp_session_create+0xc60/0x16f0
[   50.096872] RSP: 0018:ffff8801d4e57ab0  EFLAGS: 00010246
[   50.102294] RAX: 0000000000000000 RBX: ffff8801d4bc5680 RCX: 1ffff1003aaa811d
[   50.109540] RDX: 1ffff1003a91e880 RSI: ffff8801d55408c8 RDI: ffff8801d48f4400
[   50.116783] RBP: ffff8801d4e57b50 R08: ffff8801d55408e8 R09: 0000000000000000
[   50.124034] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d48f42d8
[   50.131281] R13: 0000000000000000 R14: ffff8801d48f4280 R15: ffff8801d4e57c68
[   50.138530] FS:  0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f76fcb40
[   50.146728] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   50.152582] CR2: 0000000000000080 CR3: 00000001d9218000 CR4: 00000000001606f0
[   50.159902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.167236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.174600] Stack:
[   50.176727]  0000000000000201 ffffffff836ca141 ffff8801d4e57ad0 ffffffff81237f0d
[   50.184803]  ffff8801d48f4280 ffff8801d4bc57d8 ffff8801d48f42d8 ffff8801d4bc57d0
[   50.192804]  ffff8801d4bc5730 ffff8801d48f42a0 0000000000000000 0000000000000000
[   50.200883] Call Trace:
[   50.203449]  [<ffffffff836ca141>] ? l2tp_session_get+0x1d1/0x790
[   50.209690]  [<ffffffff81237f0d>] ? trace_hardirqs_on+0xd/0x10
[   50.215645]  [<ffffffff836cdfe7>] pppol2tp_connect+0x10d7/0x18f0
[   50.221836]  [<ffffffff836ccf10>] ? pppol2tp_seq_show+0xc30/0xc30
[   50.228052]  [<ffffffff81cf90cf>] ? security_socket_connect+0x8f/0xc0
[   50.234606]  [<ffffffff8301e958>] SYSC_connect+0x1b8/0x300
[   50.240206]  [<ffffffff8301e7a0>] ? SYSC_bind+0x280/0x280
[   50.245719]  [<ffffffff812dc050>] ? compat_SyS_get_robust_list+0x310/0x310
[   50.252706]  [<ffffffff83020830>] ? move_addr_to_kernel+0x50/0x50
[   50.258912]  [<ffffffff83021224>] SyS_connect+0x24/0x30
[   50.264492]  [<ffffffff83021200>] ? SyS_accept+0x30/0x30
[   50.269922]  [<ffffffff81006da7>] do_fast_syscall_32+0x2f7/0x870
[   50.276095]  [<ffffffff81003036>] ? trace_hardirqs_off_thunk+0x1a/0x1c
[   50.282746]  [<ffffffff83a03390>] entry_SYSENTER_compat+0x90/0xa2
[   50.288954] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 <f0> ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 
[   50.315967] RIP  [<ffffffff836c8e30>] l2tp_session_create+0xc60/0x16f0
[   50.322896]  RSP <ffff8801d4e57ab0>
[   50.326505] CR2: 0000000000000080
[   50.331415] ---[ end trace 280e7b4297b4fae8 ]---
[   50.336156] Kernel panic - not syncing: Fatal exception
[   50.341821] Dumping ftrace buffer:
[   50.345337]    (ftrace buffer empty)
[   50.349022] Kernel Offset: disabled
[   50.352622] Rebooting in 86400 seconds..