[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.645808] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 14.264578] random: sshd: uninitialized urandom read (32 bytes read) [ 14.615021] random: sshd: uninitialized urandom read (32 bytes read) [ 15.101809] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.12' (ECDSA) to the list of known hosts. [ 20.717753] urandom_read: 1 callbacks suppressed [ 20.717756] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 13:58:13 parsed 1 programs [ 21.954720] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 13:58:15 executed programs: 0 [ 23.218267] IPVS: Creating netns size=2536 id=1 [ 23.250491] IPVS: Creating netns size=2536 id=2 [ 23.288418] IPVS: Creating netns size=2536 id=3 [ 23.331836] IPVS: Creating netns size=2536 id=4 [ 23.375847] IPVS: Creating netns size=2536 id=5 [ 23.424749] IPVS: Creating netns size=2536 id=6 [ 23.474324] IPVS: Creating netns size=2536 id=7 [ 23.514762] IPVS: Creating netns size=2536 id=8 [ 23.655739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 23.717704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 23.803366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 23.848559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 23.971270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 23.985931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 24.005234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 24.026584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 24.045433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 24.054769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 24.064395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 24.113344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 24.147589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 24.179621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 24.246818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 24.287212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 24.301356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 24.312572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 24.322667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 24.331226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 24.370148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 24.395315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 24.411235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 24.426972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 24.439545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 24.449600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 24.466660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 24.475257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.497057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 24.504627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 24.515362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 24.532314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.541618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.552793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 24.566288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 24.574072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 24.581588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 24.605186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.614392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.623670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 24.638128] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 24.647829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 24.661104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.668601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.677553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.686991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.695640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 24.703506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 24.719125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.729097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.754649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 24.795049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 24.804711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 24.814123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 24.825936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 24.838243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 24.849661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.859167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.869326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 24.878731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 24.887342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 24.905836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.918848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.930559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 24.939942] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 24.949265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.957097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.964957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 24.975193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 24.993863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 25.004933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.018493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.031303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 25.040074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.047544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.072887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 25.087700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.100153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.118393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 25.157933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 25.213132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 25.230885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.239127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.255474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 25.272847] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 25.302990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.312535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.328613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 25.377977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 25.388605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.397188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.414066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 25.431406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.440775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.971435] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 28.034230] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 28.086474] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 28.144802] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 28.156432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.165231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.174878] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 28.185527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 28.195872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.205055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.279360] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 28.285608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.292888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.301865] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 28.342388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 28.348512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.356966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.426523] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 28.503264] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 28.509384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.519106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.575193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 28.599064] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 28.609466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.618037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.734300] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 28.741841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.748480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.766151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 28.905787] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 28.915016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.922193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/08/28 13:58:21 executed programs: 8 [ 29.917290] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 29.925571] IP: [] l2tp_session_create+0xc60/0x16f0 [ 29.932312] PGD 1c9016067 [ 29.934978] PUD 1d872b067 PMD 0 [ 29.938498] [ 29.940125] Oops: 0002 [#1] PREEMPT SMP KASAN [ 29.944591] Dumping ftrace buffer: [ 29.948105] (ftrace buffer empty) [ 29.951788] Modules linked in: [ 29.955077] CPU: 1 PID: 6897 Comm: syz-executor0 Not tainted 4.9.124-g09eb2ba #31 [ 29.962669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.972020] task: ffff8801cbaa8000 task.stack: ffff8801b93a0000 [ 29.978080] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 29.987197] RSP: 0018:ffff8801b93a7ac0 EFLAGS: 00010246 [ 29.992620] RAX: 0000000000000000 RBX: ffff8801c7f4c000 RCX: 1ffff1003975511d [ 29.999867] RDX: 1ffff1003a8f8c80 RSI: ffff8801cbaa88c8 RDI: ffff8801d47c6400 [ 30.007117] RBP: ffff8801b93a7b60 R08: ffff8801cbaa88e8 R09: 0000000000000000 [ 30.014365] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d47c62d8 [ 30.021620] R13: 0000000000000000 R14: ffff8801d47c6280 R15: 0000000000000000 [ 30.028868] FS: 00007feabe132700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 30.037070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.042929] CR2: 0000000000000080 CR3: 00000001d7b40000 CR4: 00000000001606f0 [ 30.050175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.057421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.064662] Stack: [ 30.066792] ffffffff836c8e27 ffffffff836c9ec1 ffff8801d7cc1948 0000000000000000 [ 30.074798] ffff8801d47c6280 ffff8801c7f4c158 ffff8801d47c62d8 ffff8801c7f4c150 [ 30.082800] ffff8801c7f4c0b0 ffff8801d47c62a0 ffff8801d7cc1100 0000000000000000 [ 30.090797] Call Trace: [ 30.093367] [] ? l2tp_session_create+0xed7/0x16f0 [ 30.099848] [] ? l2tp_session_get+0x1d1/0x790 [ 30.105998] [] pppol2tp_connect+0x10d7/0x18f0 [ 30.112118] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 30.118326] [] ? security_socket_connect+0x8f/0xc0 [ 30.124882] [] SYSC_connect+0x1b8/0x300 [ 30.130481] [] ? SYSC_bind+0x280/0x280 [ 30.135994] [] ? get_unused_fd_flags+0xd0/0xd0 [ 30.142205] [] ? do_futex+0x17c0/0x17c0 [ 30.147821] [] ? SyS_socket+0x121/0x1b0 [ 30.153422] [] ? move_addr_to_kernel+0x50/0x50 [ 30.159644] [] SyS_connect+0x24/0x30 [ 30.164984] [] ? SyS_accept+0x30/0x30 [ 30.170410] [] do_syscall_64+0x1a6/0x490 [ 30.176097] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 30.183007] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 30.209998] RIP [] l2tp_session_create+0xc60/0x16f0 [ 30.216773] RSP [ 30.220374] CR2: 0000000000000080 [ 30.226883] ---[ end trace 4fce9c6b52866600 ]--- [ 30.231804] Kernel panic - not syncing: Fatal exception [ 30.237502] Dumping ftrace buffer: [ 30.241022] (ftrace buffer empty) [ 30.244704] Kernel Offset: disabled [ 30.248316] Rebooting in 86400 seconds..