[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.816121] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.487908] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 21.961386] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 22.903692] random: sshd: uninitialized urandom read (32 bytes read, 117 bits of entropy available) [ 23.073394] random: sshd: uninitialized urandom read (32 bytes read, 121 bits of entropy available) [ 27.228206] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported Cannot find device "bridge0" Cannot find device "bridge0" Cannot find device "bridge0" Cannot find device "bridge0" Cannot find device "vcan0" Cannot find device "vcan0" Cannot find device "vcan0" Cannot find device "vcan0" RTNETLINK answers: Operation not supported Cannot find device "gre0" Cannot find device "gre0" Cannot find device "gre0" Cannot find device "gre0" Cannot find device "gretap0" Cannot find device "gretap0" Cannot find device "gretap0" Cannot find device "gretap0" Cannot find device "ip_vti0" Cannot find device "ip_vti0" Cannot find device "ip_vti0" Cannot find device "ip_vti0" Cannot find device "ip6_vti0" Cannot find device "ip6_vti0" Cannot find device "ip6_vti0" Cannot find device "ip6_vti0" Cannot find device "ip6tnl0" Cannot find device "ip6tnl0" Cannot find device "ip6tnl0" Cannot find device "ip6tnl0" Cannot find device "ip6gre0" Cannot find device "ip6gre0" Cannot find device "ip6gre0" Cannot find device "ip6gre0" Cannot find device "ip6gretap0" Cannot find device "ip6gretap0" Cannot find device "ip6gretap0" Cannot find device "ip6gretap0" Cannot find device "erspan0" Cannot find device "erspan0" Cannot find device "erspan0" Cannot find device "erspan0" executing program executing program executing program executing program executing program executing program executing program [ 29.396772] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program executing program [ 29.457013] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.475541] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program [ 29.528573] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.545755] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.563837] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 29.581679] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.599069] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.616557] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program [ 29.634706] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 29.682487] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.700986] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 29.736127] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.754794] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 29.791138] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.826369] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program executing program [ 29.845690] l2tp_core: tunl 2: sockfd_lookup(fd=7) returned -9 [ 29.871450] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 29.902400] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.920374] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program [ 29.956192] l2tp_core: tunl 2: sockfd_lookup(fd=7) returned -9 [ 29.980950] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 29.999165] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.017290] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.035083] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.053635] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.071432] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.089967] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.113359] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.131732] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program executing program executing program executing program executing program [ 30.155970] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.174256] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.191799] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.251219] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.281829] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.317737] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.360555] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.378965] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.413856] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.431877] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program [ 30.469234] l2tp_core: tunl 2: sockfd_lookup(fd=7) returned -9 [ 30.493129] l2tp_core: tunl 2: sockfd_lookup(fd=7) returned -9 [ 30.510779] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.528748] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.547313] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.565423] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.583164] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.601510] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.620166] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.637290] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.655318] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.672952] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program [ 30.690719] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program executing program executing program [ 30.746536] l2tp_core: tunl 2: sockfd_lookup(fd=7) returned -9 [ 30.782600] l2tp_core: tunl 2: sockfd_lookup(fd=7) returned -9 executing program executing program executing program executing program executing program executing program executing program executing program [ 30.869538] l2tp_core: tunl 2: sockfd_lookup(fd=7) returned -9 [ 30.887787] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.906262] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.924427] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.943212] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.961619] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program executing program executing program [ 30.980006] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 30.997183] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 31.015410] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 executing program [ 31.033126] l2tp_core: tunl 2: sockfd_lookup(fd=6) returned -9 [ 31.050893] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 31.059106] IP: [] l2tp_session_create+0x93e/0x10f0 [ 31.065777] PGD 80000001d0d36067 PUD 1ce95f067 PMD 0 [ 31.071287] Oops: 0002 [#1] PREEMPT SMP KASAN [ 31.076225] Dumping ftrace buffer: [ 31.079735] (ftrace buffer empty) [ 31.083413] Modules linked in: [ 31.086690] CPU: 0 PID: 3940 Comm: syzkaller318826 Not tainted 4.4.113-ge70c132 #34 [ 31.094449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.103775] task: ffff8801d560df00 task.stack: ffff8801ceb00000 [ 31.109798] RIP: 0010:[] [] l2tp_session_create+0x93e/0x10f0 [ 31.118896] RSP: 0018:ffff8801ceb07b48 EFLAGS: 00010246 [ 31.124311] RAX: 0000000000000000 RBX: ffff8801ceb3b900 RCX: ffffffff83455d76 [ 31.131548] RDX: 1ffff10039d67750 RSI: 0000000000000002 RDI: ffff8801ceb3ba80 [ 31.138786] RBP: ffff8801ceb07bb8 R08: 000000000000000a R09: 0000000000000000 [ 31.146024] R10: ffffffff85700640 R11: ffffffff84418100 R12: ffff8801ceb3aaa8 [ 31.153264] R13: ffff8801ceb07cd0 R14: ffff8801ceb3b9e0 R15: ffff8801ceb3aa00 [ 31.160505] FS: 00007fea0819a700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 31.168700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.174552] CR2: 0000000000000080 CR3: 00000001cef72000 CR4: 0000000000160670 [ 31.181802] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.189039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.196285] Stack: [ 31.198408] ffffffff8113bd8a ffff8801ceb3b920 ffff8801ceb3ab58 ffff8801ceb07b78 [ 31.206370] ffff8801ceb3aa10 0000000000000000 ffff8801ceb3aab0 ffff8801ceb3ab50 [ 31.214331] ce90513d00000000 0000000000000000 ffff8801ceb19980 0000000000000000 [ 31.222288] Call Trace: [ 31.224845] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 31.231131] [] pppol2tp_connect+0x10fc/0x1930 [ 31.237242] [] ? pppol2tp_recv+0x330/0x330 [ 31.243105] [] ? __might_fault+0xe4/0x1d0 [ 31.248871] [] ? check_stack_object+0x68/0x140 [ 31.255073] [] ? security_socket_connect+0x89/0xb0 [ 31.261622] [] SYSC_connect+0x1b6/0x310 [ 31.267218] [] ? SYSC_bind+0x280/0x280 [ 31.272726] [] ? kvm_guest_cpu_init+0x200/0x230 [ 31.279012] [] ? retint_user+0x18/0x3c [ 31.284515] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 31.291322] [] SyS_connect+0x24/0x30 [ 31.296656] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 31.303200] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4f 07 00 00 48 8b 83 80 01 00 00 ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b8 e8 1b 4b [ 31.329726] RIP [] l2tp_session_create+0x93e/0x10f0 [ 31.336478] RSP [ 31.340068] CR2: 0000000000000080 [ 31.344104] ---[ end trace 70143cd946b5fade ]--- [ 31.348867] Kernel panic - not syncing: Fatal exception [ 31.354605] Dumping ftrace buffer: [ 31.358111] (ftrace buffer empty) [ 31.361789] Kernel Offset: disabled [ 31.365382] Rebooting in 86400 seconds..