[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 14.330639] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.049172] random: sshd: uninitialized urandom read (32 bytes read) [ 19.382415] random: sshd: uninitialized urandom read (32 bytes read) [ 19.863505] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.21' (ECDSA) to the list of known hosts. [ 25.833833] urandom_read: 1 callbacks suppressed [ 25.833836] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/23 19:46:41 parsed 1 programs [ 27.411427] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/23 19:46:43 executed programs: 0 [ 28.971756] IPVS: Creating netns size=2536 id=1 [ 29.096289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.107582] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.151170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.162581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.205892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.217479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.229309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.249899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.751117] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 29.776310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 29.782531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.789285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.010218] hrtimer: interrupt took 28014 ns [ 30.197489] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 30.231730] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 30.422390] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 31.122926] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 31.232613] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 31.425800] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 31.548893] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 31.570187] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 31.934937] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 32.015471] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 32.023733] IP: [] l2tp_session_create+0xc60/0x16f0 [ 32.030445] PGD 1c5f92067 [ 32.033093] PUD 1cbb9e067 PMD 0 [ 32.036605] [ 32.038238] Oops: 0002 [#1] PREEMPT SMP KASAN [ 32.042716] Dumping ftrace buffer: [ 32.046234] (ftrace buffer empty) [ 32.049926] Modules linked in: [ 32.053230] CPU: 0 PID: 4971 Comm: syz-executor0 Not tainted 4.9.123-g7fa8c15 #32 [ 32.060830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.070169] task: ffff8801ca189800 task.stack: ffff8801c2990000 [ 32.076208] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 32.085336] RSP: 0018:ffff8801c2997ab0 EFLAGS: 00010246 [ 32.090763] RAX: 0000000000000000 RBX: ffff8801c97cac80 RCX: 1ffff1003943141d [ 32.098013] RDX: 1ffff10038db47a0 RSI: ffff8801ca18a0c8 RDI: ffff8801c6da3d00 [ 32.105265] RBP: ffff8801c2997b50 R08: ffff8801ca18a0e8 R09: 0000000000000000 [ 32.112521] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801c6da3bd8 [ 32.119778] R13: 0000000000000000 R14: ffff8801c6da3b80 R15: ffff8801c2997c68 [ 32.127032] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f77d2b40 [ 32.135241] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 32.141102] CR2: 0000000000000080 CR3: 00000001c5f95000 CR4: 00000000001606f0 [ 32.148352] Stack: [ 32.150485] 0000000000000201 ffffffff836ca241 ffff8801c2997ad0 ffffffff81237f0d [ 32.158514] ffff8801c6da3b80 ffff8801c97cadd8 ffff8801c6da3bd8 ffff8801c97cadd0 [ 32.166565] ffff8801c97cad30 ffff8801c6da3ba0 0000000000000000 0000000000000000 [ 32.174607] Call Trace: [ 32.177201] [] ? l2tp_session_get+0x1d1/0x790 [ 32.183335] [] ? trace_hardirqs_on+0xd/0x10 [ 32.189294] [] pppol2tp_connect+0x10d7/0x18f0 [ 32.195420] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 32.201636] [] ? security_socket_connect+0x8f/0xc0 [ 32.208198] [] SYSC_connect+0x1b8/0x300 [ 32.213806] [] ? SYSC_bind+0x280/0x280 [ 32.219330] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 32.226328] [] SyS_connect+0x24/0x30 [ 32.231673] [] ? SyS_accept+0x30/0x30 [ 32.237106] [] do_fast_syscall_32+0x2f7/0x870 [ 32.243232] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 32.249884] [] entry_SYSENTER_compat+0x90/0xa2 [ 32.256096] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 32.283568] RIP [] l2tp_session_create+0xc60/0x16f0 [ 32.290359] RSP [ 32.293962] CR2: 0000000000000080 [ 32.298022] ---[ end trace 18cf1248859e5cc6 ]--- [ 32.302863] Kernel panic - not syncing: Fatal exception [ 32.308520] Dumping ftrace buffer: [ 32.312046] (ftrace buffer empty) [ 32.315729] Kernel Offset: disabled [ 32.319327] Rebooting in 86400 seconds..