[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 20.850017] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.842390] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 26.299182] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 27.365686] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. 2018/03/15 13:54:32 parsed 1 programs 2018/03/15 13:54:32 executed programs: 0 [ 33.281359] IPVS: Creating netns size=2552 id=1 [ 33.307583] IPVS: Creating netns size=2552 id=2 [ 33.333386] IPVS: Creating netns size=2552 id=3 [ 33.385420] IPVS: Creating netns size=2552 id=4 [ 33.463807] IPVS: Creating netns size=2552 id=5 [ 33.531461] IPVS: Creating netns size=2552 id=6 [ 33.559644] IPVS: Creating netns size=2552 id=7 [ 33.598205] IPVS: Creating netns size=2552 id=8 [ 37.173772] l2tp_core: tunl 3: fd 3 wrong protocol, got 1, expected 17 2018/03/15 13:54:37 executed programs: 626 [ 38.323959] l2tp_core: tunl 3: fd 4 wrong protocol, got 1, expected 17 [ 42.345559] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 42.353810] IP: [] l2tp_session_create+0x93e/0x10f0 [ 42.360507] PGD 80000000b6335067 PUD b6336067 PMD 0 [ 42.365955] Oops: 0002 [#1] PREEMPT SMP KASAN [ 42.370879] Dumping ftrace buffer: [ 42.374386] (ftrace buffer empty) [ 42.378068] Modules linked in: [ 42.381346] CPU: 1 PID: 7384 Comm: syz-executor3 Not tainted 4.4.120-gd63fdf6 #29 [ 42.388934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.398259] task: ffff8800b9806000 task.stack: ffff8801c78d8000 [ 42.404282] RIP: 0010:[] [] l2tp_session_create+0x93e/0x10f0 [ 42.413382] RSP: 0018:ffff8801c78dfad0 EFLAGS: 00010246 [ 42.418799] RAX: 0000000000000000 RBX: ffff8801cef3f400 RCX: ffffffff83458dd6 [ 42.426038] RDX: 1ffff10039de7eb0 RSI: 0000000000000002 RDI: ffff8801cef3f580 [ 42.433276] RBP: ffff8801c78dfb40 R08: ffff8800addbb990 R09: 0000000000000000 [ 42.440517] R10: ffffffff85700600 R11: ffffffff84418340 R12: ffff8800addbb9a8 [ 42.447754] R13: ffff8801c78dfc58 R14: ffff8801cef3f4e0 R15: ffff8800addbb900 [ 42.454993] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f77e2b40 [ 42.463191] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 42.469041] CR2: 0000000000000080 CR3: 00000000b1570000 CR4: 0000000000160670 [ 42.476282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.483520] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.490756] Stack: [ 42.492871] ffffffff8113bd95 ffff8801cef3f420 ffff8800addbba58 ffff8801c78dfb00 [ 42.500835] ffff8800addbb910 0000000000000000 ffff8800addbb9b0 ffff8800addbba50 [ 42.508805] e5d79e3300000000 0000000000000000 ffff8801d416e600 0000000000000000 [ 42.516768] Call Trace: [ 42.519333] [] ? __local_bh_enable_ip+0xc5/0xd0 [ 42.525620] [] pppol2tp_connect+0x10fc/0x1930 [ 42.531734] [] ? pppol2tp_recv+0x330/0x330 [ 42.537588] [] ? __might_fault+0xe4/0x1d0 [ 42.543358] [] ? check_stack_object+0x68/0x140 [ 42.549562] [] ? security_socket_connect+0x89/0xb0 [ 42.556118] [] SYSC_connect+0x1b6/0x310 [ 42.561714] [] ? SYSC_bind+0x280/0x280 [ 42.567220] [] ? get_unused_fd_flags+0xd0/0xd0 [ 42.573421] [] ? _raw_spin_unlock+0x2c/0x50 [ 42.579362] [] ? __alloc_fd+0x1e3/0x500 [ 42.584957] [] ? compat_SyS_get_robust_list+0x300/0x300 [ 42.591940] [] ? SyS_socket+0x121/0x1b0 [ 42.597532] [] ? move_addr_to_kernel+0x50/0x50 [ 42.603732] [] SyS_connect+0x24/0x30 [ 42.609062] [] ? SyS_accept+0x30/0x30 [ 42.614571] [] do_fast_syscall_32+0x321/0x8a0 [ 42.620685] [] sysenter_flags_fixed+0xd/0x17 [ 42.626714] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4f 07 00 00 48 8b 83 80 01 00 00 ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b8 e8 cb 38 [ 42.653309] RIP [] l2tp_session_create+0x93e/0x10f0 [ 42.660057] RSP [ 42.663652] CR2: 0000000000000080 [ 42.760339] ---[ end trace d96571ac92ac5c91 ]--- [ 42.765642] Kernel panic - not syncing: Fatal exception [ 42.771471] Dumping ftrace buffer: [ 42.774980] (ftrace buffer empty) [ 42.778656] Kernel Offset: disabled [ 42.782250] Rebooting in 86400 seconds..