[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.919610] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.669758] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 27.212713] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 27.966216] random: sshd: uninitialized urandom read (32 bytes read, 72 bits of entropy available) [ 28.134196] random: sshd: uninitialized urandom read (32 bytes read, 74 bits of entropy available) Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. [ 33.750130] random: sshd: uninitialized urandom read (32 bytes read, 81 bits of entropy available) 2018/08/22 11:39:05 parsed 1 programs [ 35.275529] random: cc1: uninitialized urandom read (8 bytes read, 83 bits of entropy available) 2018/08/22 11:39:08 executed programs: 0 [ 36.571155] IPVS: Creating netns size=2552 id=1 [ 36.817612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.833419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.914379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 36.930104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.012855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.030191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.045790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.062756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.809587] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 37.848847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/08/22 11:39:13 executed programs: 204 2018/08/22 11:39:18 executed programs: 503 [ 50.074852] l2tp_core: tunl 4: sockfd_lookup(fd=5) returned -9 2018/08/22 11:39:23 executed programs: 803 2018/08/22 11:39:28 executed programs: 1096 [ 57.149904] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 57.158171] IP: [] l2tp_session_create+0x948/0x1030 [ 57.164877] PGD 1d2164067 PUD 1d64bb067 PMD 0 [ 57.169823] Oops: 0002 [#1] PREEMPT SMP KASAN [ 57.174792] Dumping ftrace buffer: [ 57.178370] (ftrace buffer empty) [ 57.182066] Modules linked in: [ 57.185369] CPU: 0 PID: 8580 Comm: syz-executor0 Not tainted 4.4.151-ge917467 #20 [ 57.192972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.202359] task: ffff8801c7fee000 task.stack: ffff8801c7870000 [ 57.208409] RIP: 0010:[] [] l2tp_session_create+0x948/0x1030 [ 57.217540] RSP: 0018:ffff8801c7877ad0 EFLAGS: 00010246 [ 57.223017] RAX: 0000000000000000 RBX: ffff8800b3a31680 RCX: 0000000000000006 [ 57.230283] RDX: 1ffff10016746300 RSI: ffffffff835a4543 RDI: ffff8800b3a31800 [ 57.237566] RBP: ffff8801c7877b40 R08: ffff8801c7fee900 R09: 0000000000000000 [ 57.244822] R10: 0000000000000000 R11: ffffffff8463a140 R12: ffff8800b3a30828 [ 57.252078] R13: ffff8801c7877c58 R14: ffff8800b3a30780 R15: ffffffff835a3170 [ 57.259330] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f77a9b40 [ 57.267544] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 57.273409] CR2: 0000000000000080 CR3: 00000001d40be000 CR4: 00000000001606f0 [ 57.280667] Stack: [ 57.282814] ffffffff81140a6a ffff8800b3a316a0 ffff8800b3a308d8 ffff8800b3a30790 [ 57.290880] ffffffff838cba90 ffff8800b3a30830 ffff8800b3a308d0 ffff8800b3a31760 [ 57.298893] ffffffff00000000 ffff8801c96fb300 0000000000000000 ffff8801c96fb330 [ 57.306895] Call Trace: [ 57.309464] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 57.315775] [] ? _raw_read_unlock_bh+0x30/0x40 [ 57.321992] [] pppol2tp_connect+0x10f0/0x1910 [ 57.328117] [] ? pppol2tp_recv+0x320/0x320 [ 57.333982] [] ? security_socket_connect+0x8f/0xc0 [ 57.340542] [] SYSC_connect+0x1b8/0x300 [ 57.346179] [] ? SYSC_bind+0x280/0x280 [ 57.351716] [] ? get_unused_fd_flags+0xd0/0xd0 [ 57.357929] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 57.364920] [] ? SyS_socket+0x121/0x1b0 [ 57.370528] [] ? move_addr_to_kernel+0x50/0x50 [ 57.376746] [] SyS_connect+0x24/0x30 [ 57.382109] [] ? SyS_accept+0x30/0x30 [ 57.387541] [] do_fast_syscall_32+0x324/0x8b0 [ 57.393668] [] sysenter_flags_fixed+0xd/0x1a [ 57.399704] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 36 06 00 00 48 8b 83 80 01 00 00 ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b0 e8 f1 13 [ 57.426904] RIP [] l2tp_session_create+0x948/0x1030 [ 57.433688] RSP [ 57.437297] CR2: 0000000000000080 [ 57.441124] ---[ end trace 2384117e180e1154 ]--- [ 57.445880] Kernel panic - not syncing: Fatal exception [ 57.451530] Dumping ftrace buffer: [ 57.455053] (ftrace buffer empty) [ 57.458745] Kernel Offset: disabled [ 57.462351] Rebooting in 86400 seconds..