[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.463686] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 13.430590] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 13.717126] random: sshd: uninitialized urandom read (32 bytes read) [ 14.539839] random: sshd: uninitialized urandom read (32 bytes read) [ 14.682053] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. [ 20.222427] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/23 04:33:08 parsed 1 programs [ 21.697888] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/23 04:33:10 executed programs: 0 [ 22.917907] IPVS: Creating netns size=2536 id=1 [ 23.041695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 23.053735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 23.096241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 23.107339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 23.150270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 23.161737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 23.173217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.194137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.695385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 23.720568] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 23.726662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.734095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.922365] hrtimer: interrupt took 34130 ns [ 23.927534] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.056379] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.071661] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.116910] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.151847] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.166882] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.193720] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.228968] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.336624] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.404398] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.420504] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.478899] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.497178] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.606438] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.625200] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.684983] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.734753] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.774081] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.825228] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.841230] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 24.918330] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.437088] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.486964] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.514620] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.552489] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.588138] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.602771] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.618488] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.672934] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.721457] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.735684] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.869931] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 25.884370] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 26.072665] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 26.161694] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 26.276729] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 26.285054] IP: [] l2tp_session_create+0xc60/0x16f0 [ 26.291745] PGD 1cbbd4067 [ 26.294389] PUD 1cb4c1067 PMD 0 [ 26.297873] [ 26.299493] Oops: 0002 [#1] PREEMPT SMP KASAN [ 26.303973] Dumping ftrace buffer: [ 26.307502] (ftrace buffer empty) [ 26.311195] Modules linked in: [ 26.314487] CPU: 1 PID: 4965 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #31 [ 26.322081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.331411] task: ffff8801cad04800 task.stack: ffff8801c2578000 [ 26.337442] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 26.346565] RSP: 0018:ffff8801c257fab0 EFLAGS: 00010246 [ 26.352003] RAX: 0000000000000000 RBX: ffff8801c4700c80 RCX: 1ffff100395a0a1d [ 26.359256] RDX: 1ffff1003827ea60 RSI: ffff8801cad050c8 RDI: ffff8801c13f5300 [ 26.366505] RBP: ffff8801c257fb50 R08: ffff8801cad050e8 R09: 0000000000000000 [ 26.373769] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801c13f51d8 [ 26.381017] R13: 0000000000000000 R14: ffff8801c13f5180 R15: ffff8801c257fc68 [ 26.388264] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f7771b40 [ 26.396461] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 26.402317] CR2: 0000000000000080 CR3: 00000001c7168000 CR4: 00000000001606f0 [ 26.409561] Stack: [ 26.411684] 0000000000000201 ffffffff836ca141 ffff8801c257fad0 ffffffff81237f0d [ 26.419695] ffff8801c13f5180 ffff8801c4700dd8 ffff8801c13f51d8 ffff8801c4700dd0 [ 26.427682] ffff8801c4700d30 ffff8801c13f51a0 0000000000000000 0000000000000000 [ 26.435669] Call Trace: [ 26.438235] [] ? l2tp_session_get+0x1d1/0x790 [ 26.444359] [] ? trace_hardirqs_on+0xd/0x10 [ 26.450307] [] pppol2tp_connect+0x10d7/0x18f0 [ 26.456429] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 26.462636] [] ? security_socket_connect+0x8f/0xc0 [ 26.469192] [] SYSC_connect+0x1b8/0x300 [ 26.474791] [] ? SYSC_bind+0x280/0x280 [ 26.480309] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 26.487296] [] SyS_connect+0x24/0x30 [ 26.492640] [] ? SyS_accept+0x30/0x30 [ 26.498077] [] do_fast_syscall_32+0x2f7/0x870 [ 26.504224] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.510865] [] entry_SYSENTER_compat+0x90/0xa2 [ 26.517065] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 26.544001] RIP [] l2tp_session_create+0xc60/0x16f0 [ 26.550762] RSP [ 26.554361] CR2: 0000000000000080 [ 26.558658] ---[ end trace 54a4c9bbc48dfece ]--- [ 26.563444] Kernel panic - not syncing: Fatal exception [ 26.569078] Dumping ftrace buffer: [ 26.572597] (ftrace buffer empty) [ 26.576297] Kernel Offset: disabled [ 26.579899] Rebooting in 86400 seconds..