[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 13.127189] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.926932] random: sshd: uninitialized urandom read (32 bytes read) [ 27.658283] random: sshd: uninitialized urandom read (32 bytes read) [ 28.093448] random: sshd: uninitialized urandom read (32 bytes read) [ 99.685483] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. [ 105.463936] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/22 22:07:47 parsed 1 programs [ 106.845254] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/22 22:07:49 executed programs: 0 [ 108.115813] IPVS: Creating netns size=2536 id=1 [ 108.241129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.252816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.295049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 108.306257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 108.348953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 108.360257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 108.372008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.385371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.867700] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 108.893103] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 108.899210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.906464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.105177] hrtimer: interrupt took 17855 ns [ 109.272321] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 109.280676] IP: [] l2tp_session_create+0xc60/0x16f0 [ 109.287358] PGD 1d4a0d067 [ 109.289999] PUD 1d3fc4067 PMD 0 [ 109.293488] [ 109.295112] Oops: 0002 [#1] PREEMPT SMP KASAN [ 109.299581] Dumping ftrace buffer: [ 109.303099] (ftrace buffer empty) [ 109.306790] Modules linked in: [ 109.310082] CPU: 1 PID: 4338 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #31 [ 109.317682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.327019] task: ffff8801d3d74800 task.stack: ffff8801d6d10000 [ 109.333047] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 109.342164] RSP: 0018:ffff8801d6d17ab0 EFLAGS: 00010246 [ 109.347591] RAX: 0000000000000000 RBX: ffff8801d3d8ef00 RCX: 1ffff1003a7aea1d [ 109.354836] RDX: 1ffff1003a7b1f50 RSI: ffff8801d3d750c8 RDI: ffff8801d3d8fa80 [ 109.362077] RBP: ffff8801d6d17b50 R08: ffff8801d3d750e8 R09: 0000000000000000 [ 109.369327] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d3d8f958 [ 109.376574] R13: 0000000000000000 R14: ffff8801d3d8f900 R15: ffff8801d6d17c68 [ 109.383819] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f7750b40 [ 109.392018] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 109.397885] CR2: 0000000000000080 CR3: 00000001d3d7b000 CR4: 00000000001606f0 [ 109.405205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.412464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.419725] Stack: [ 109.421851] 0000000000000201 ffffffff836ca141 ffff8801d6d17ad0 ffffffff81237f0d [ 109.429857] ffff8801d3d8f900 ffff8801d3d8f058 ffff8801d3d8f958 ffff8801d3d8f050 [ 109.437848] ffff8801d3d8efb0 ffff8801d3d8f920 0000000000000000 0000000000000000 [ 109.446012] Call Trace: [ 109.448578] [] ? l2tp_session_get+0x1d1/0x790 [ 109.454700] [] ? trace_hardirqs_on+0xd/0x10 [ 109.460646] [] pppol2tp_connect+0x10d7/0x18f0 [ 109.466775] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 109.472994] [] ? security_socket_connect+0x8f/0xc0 [ 109.479553] [] SYSC_connect+0x1b8/0x300 [ 109.485157] [] ? SYSC_bind+0x280/0x280 [ 109.490726] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 109.497728] [] SyS_connect+0x24/0x30 [ 109.503076] [] ? SyS_accept+0x30/0x30 [ 109.508504] [] do_fast_syscall_32+0x2f7/0x870 [ 109.514693] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 109.521346] [] entry_SYSENTER_compat+0x90/0xa2 [ 109.527554] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 109.554688] RIP [] l2tp_session_create+0xc60/0x16f0 [ 109.561456] RSP [ 109.565062] CR2: 0000000000000080 [ 109.569921] ---[ end trace d8665ff27a5dbdda ]--- [ 109.574891] Kernel panic - not syncing: Fatal exception [ 109.580586] Dumping ftrace buffer: [ 109.584107] (ftrace buffer empty) [ 109.587803] Kernel Offset: disabled [ 109.591408] Rebooting in 86400 seconds..