[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.169654] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.512521] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 25.902529] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 26.633966] random: sshd: uninitialized urandom read (32 bytes read, 70 bits of entropy available) [ 43.407496] random: sshd: uninitialized urandom read (32 bytes read, 80 bits of entropy available) Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. [ 49.036360] random: sshd: uninitialized urandom read (32 bytes read, 85 bits of entropy available) 2018/08/22 19:38:30 parsed 1 programs [ 50.605381] random: cc1: uninitialized urandom read (8 bytes read, 87 bits of entropy available) 2018/08/22 19:38:32 executed programs: 0 [ 51.798642] IPVS: Creating netns size=2552 id=1 [ 52.047698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.062874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.147047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.161942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.244879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.260371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.276894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.294617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.027432] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.068367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.272196] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 54.280433] IP: [] l2tp_session_create+0x948/0x1030 [ 54.287128] PGD 1d6a1c067 PUD 1d6a18067 PMD 0 [ 54.292070] Oops: 0002 [#1] PREEMPT SMP KASAN [ 54.297037] Dumping ftrace buffer: [ 54.300548] (ftrace buffer empty) [ 54.304357] Modules linked in: [ 54.307652] CPU: 1 PID: 4348 Comm: syz-executor0 Not tainted 4.4.151-ge917467 #20 [ 54.315246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.324574] task: ffff8801d6dc9800 task.stack: ffff8801d65c8000 [ 54.330625] RIP: 0010:[] [] l2tp_session_create+0x948/0x1030 [ 54.339741] RSP: 0018:ffff8801d65cfad0 EFLAGS: 00010246 [ 54.345163] RAX: 0000000000000000 RBX: ffff8801d6898000 RCX: 0000000000000006 [ 54.352410] RDX: 1ffff1003ad13030 RSI: ffffffff835a4543 RDI: ffff8801d6898180 [ 54.359662] RBP: ffff8801d65cfb40 R08: ffff8801d6dca100 R09: 0000000000000000 [ 54.366915] R10: 0000000000000000 R11: ffffffff8463a140 R12: ffff8801d6898328 [ 54.374160] R13: ffff8801d65cfc58 R14: ffff8801d6898280 R15: ffffffff835a3170 [ 54.381408] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f77f9b40 [ 54.389607] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 54.395463] CR2: 0000000000000080 CR3: 00000001d69b0000 CR4: 00000000001606f0 [ 54.402710] Stack: [ 54.404834] ffffffff81140a6a ffff8801d6898020 ffff8801d68983d8 ffff8801d6898290 [ 54.412919] ffffffff838cba90 ffff8801d6898330 ffff8801d68983d0 ffff8801d68980e0 [ 54.420986] ffffffff00000000 ffff8801d6ff9100 0000000000000000 ffff8801d6ff9130 [ 54.429038] Call Trace: [ 54.431613] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 54.437922] [] ? _raw_read_unlock_bh+0x30/0x40 [ 54.444134] [] pppol2tp_connect+0x10f0/0x1910 [ 54.450253] [] ? pppol2tp_recv+0x320/0x320 [ 54.456124] [] ? security_socket_connect+0x8f/0xc0 [ 54.462683] [] SYSC_connect+0x1b8/0x300 [ 54.468281] [] ? SYSC_bind+0x280/0x280 [ 54.473795] [] ? get_unused_fd_flags+0xd0/0xd0 [ 54.480003] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 54.486992] [] ? __fget+0x16f/0x3b0 [ 54.492245] [] ? __fget+0x47/0x3b0 [ 54.497417] [] SyS_connect+0x24/0x30 [ 54.502758] [] ? SyS_accept+0x30/0x30 [ 54.508184] [] do_fast_syscall_32+0x324/0x8b0 [ 54.514305] [] sysenter_flags_fixed+0xd/0x1a [ 54.520334] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 36 06 00 00 48 8b 83 80 01 00 00 ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b0 e8 f1 13 [ 54.547353] RIP [] l2tp_session_create+0x948/0x1030 [ 54.554122] RSP [ 54.557722] CR2: 0000000000000080 [ 54.561785] ---[ end trace cc4dd694f87e8e85 ]--- [ 54.567127] Kernel panic - not syncing: Fatal exception [ 54.572832] Dumping ftrace buffer: [ 54.576354] (ftrace buffer empty) [ 54.580041] Kernel Offset: disabled [ 54.583666] Rebooting in 86400 seconds..