[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.943047] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 13.956110] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 14.215330] random: sshd: uninitialized urandom read (32 bytes read) [ 14.792757] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts. [ 20.512598] urandom_read: 1 callbacks suppressed [ 20.512600] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 23:56:03 parsed 1 programs [ 22.023945] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 23:56:05 executed programs: 0 [ 23.150913] IPVS: Creating netns size=2536 id=1 [ 23.273158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 23.285528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 23.328754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 23.339959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 23.384419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 23.396020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 23.407624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.421921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.930191] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 23.955889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 23.961973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.969450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.192598] hrtimer: interrupt took 38175 ns [ 24.227506] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.425977] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.612410] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.700235] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.830736] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.958540] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.003154] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.214929] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.347453] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.420758] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.435238] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.732971] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.768193] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.818093] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 26.038157] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 26.315044] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 26.329686] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 26.337906] IP: [] l2tp_session_create+0xc60/0x16f0 [ 26.344608] PGD 1c8d44067 [ 26.347250] PUD 1c83b5067 PMD 0 [ 26.350729] [ 26.352353] Oops: 0002 [#1] PREEMPT SMP KASAN [ 26.356824] Dumping ftrace buffer: [ 26.360337] (ftrace buffer empty) [ 26.364029] Modules linked in: [ 26.367330] CPU: 1 PID: 4987 Comm: syz-executor0 Not tainted 4.9.124-g09eb2ba #35 [ 26.374945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.384275] task: ffff8801c5409800 task.stack: ffff8801c25f8000 [ 26.390307] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 26.399468] RSP: 0018:ffff8801c25ffab0 EFLAGS: 00010246 [ 26.404897] RAX: 0000000000000000 RBX: ffff8801d54c8a00 RCX: 1ffff10038a8141d [ 26.412160] RDX: 1ffff1003aa990d0 RSI: ffff8801c540a0c8 RDI: ffff8801d54c8680 [ 26.419410] RBP: ffff8801c25ffb50 R08: ffff8801c540a0e8 R09: 0000000000000000 [ 26.426677] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d54c8558 [ 26.433925] R13: 0000000000000000 R14: ffff8801d54c8500 R15: ffff8801c25ffc68 [ 26.441173] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f775fb40 [ 26.449372] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 26.455229] CR2: 0000000000000080 CR3: 00000001d02cb000 CR4: 00000000001606f0 [ 26.462478] Stack: [ 26.464614] 0000000000000201 ffffffff836c9ec1 ffff8801c25ffad0 ffffffff812383ad [ 26.472632] ffff8801d54c8500 ffff8801d54c8b58 ffff8801d54c8558 ffff8801d54c8b50 [ 26.480656] ffff8801d54c8ab0 ffff8801d54c8520 0000000000000000 0000000000000000 [ 26.488651] Call Trace: [ 26.491235] [] ? l2tp_session_get+0x1d1/0x790 [ 26.497360] [] ? trace_hardirqs_on+0xd/0x10 [ 26.503307] [] pppol2tp_connect+0x10d7/0x18f0 [ 26.509443] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 26.515656] [] ? security_socket_connect+0x8f/0xc0 [ 26.522236] [] SYSC_connect+0x1b8/0x300 [ 26.527836] [] ? SYSC_bind+0x280/0x280 [ 26.533355] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 26.540348] [] SyS_connect+0x24/0x30 [ 26.545689] [] ? SyS_accept+0x30/0x30 [ 26.551115] [] do_fast_syscall_32+0x2f7/0x870 [ 26.557235] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.563876] [] entry_SYSENTER_compat+0x90/0xa2 [ 26.570076] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 26.597437] RIP [] l2tp_session_create+0xc60/0x16f0 [ 26.604200] RSP [ 26.607810] CR2: 0000000000000080 [ 26.611431] ---[ end trace 906516487cb5db88 ]--- [ 26.616207] Kernel panic - not syncing: Fatal exception [ 26.621889] Dumping ftrace buffer: [ 26.625428] (ftrace buffer empty) [ 26.629136] Kernel Offset: disabled [ 26.632740] Rebooting in 86400 seconds..