[ 15.553155] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.120194] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 21.486365] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 22.334326] random: sshd: uninitialized urandom read (32 bytes read, 107 bits of entropy available) [ 22.506712] random: sshd: uninitialized urandom read (32 bytes read, 111 bits of entropy available) Warning: Permanently added '10.128.15.229' (ECDSA) to the list of known hosts. [ 27.837045] random: sshd: uninitialized urandom read (32 bytes read, 117 bits of entropy available) 2018/01/17 11:55:35 parsed 1 programs 2018/01/17 11:55:35 executed programs: 0 [ 28.132458] IPVS: Creating netns size=2552 id=1 [ 28.186032] IPVS: Creating netns size=2552 id=2 [ 28.223592] IPVS: Creating netns size=2552 id=3 [ 28.279674] IPVS: Creating netns size=2552 id=4 [ 28.362698] IPVS: Creating netns size=2552 id=5 [ 28.465738] IPVS: Creating netns size=2552 id=6 [ 28.582156] IPVS: Creating netns size=2552 id=7 [ 28.721214] IPVS: Creating netns size=2552 id=8 [ 30.178120] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 30.513467] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 31.383593] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 31.573251] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 31.595358] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 32.439978] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 2018/01/17 11:55:40 executed programs: 201 [ 33.746904] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 34.126936] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 35.022761] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 35.262444] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 35.687056] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 35.696265] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -88 [ 35.821361] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 36.399409] l2tp_core: tunl 3: sockfd_lookup(fd=0) returned -9 [ 37.559717] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 37.567988] IP: [] l2tp_session_create+0x93e/0x10f0 [ 37.574690] PGD 80000000b690e067 PUD b5f56067 PMD 0 [ 37.580159] Oops: 0002 [#1] PREEMPT SMP KASAN [ 37.585149] Dumping ftrace buffer: [ 37.588671] (ftrace buffer empty) [ 37.592369] Modules linked in: [ 37.595675] CPU: 0 PID: 7498 Comm: syz-executor1 Not tainted 4.4.112-g5f6325b #28 [ 37.603278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.612619] task: ffff8800b75517c0 task.stack: ffff8801d4740000 [ 37.618662] RIP: 0010:[] [] l2tp_session_create+0x93e/0x10f0 [ 37.627814] RSP: 0018:ffff8801d4747b48 EFLAGS: 00010246 [ 37.633251] RAX: 0000000000000000 RBX: ffff8801d5091680 RCX: ffffffff8345a696 [ 37.640510] RDX: 1ffff1003aa12300 RSI: 0000000000000002 RDI: ffff8801d5091800 [ 37.647774] RBP: ffff8801d4747bb8 R08: ffff8801d5091490 R09: 0000000000000000 [ 37.655035] R10: ffffffff856fe600 R11: ffffffff84417140 R12: ffff8801d50914a8 [ 37.662295] R13: ffff8801d4747cd0 R14: ffff8801d5091760 R15: ffff8801d5091400 [ 37.669562] FS: 00007fdbb6858700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 37.677778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.683657] CR2: 0000000000000080 CR3: 00000000b4e90000 CR4: 0000000000160670 [ 37.690924] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.698187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.705443] Stack: [ 37.707578] ffffffff8113bd0a ffff8801d50916a0 ffff8801d5091558 ffff8801d4747b78 [ 37.715604] ffff8801d5091410 0000000000000000 ffff8801d50914b0 ffff8801d5091550 [ 37.723652] 9a066c8500000000 0000000000000000 ffff8801d7732a80 0000000000000000 [ 37.731673] Call Trace: [ 37.734254] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 37.740566] [] pppol2tp_connect+0x10fc/0x1930 [ 37.746707] [] ? pppol2tp_recv+0x330/0x330 [ 37.752588] [] ? __might_fault+0xe4/0x1d0 [ 37.758380] [] ? check_stack_object+0x68/0x140 [ 37.764610] [] ? security_socket_connect+0x89/0xb0 [ 37.771187] [] SYSC_connect+0x1b6/0x310 [ 37.776814] [] ? SYSC_bind+0x280/0x280 [ 37.782347] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 37.789183] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 37.796105] [] ? kprobe_flush_task+0x377/0x480 [ 37.802334] [] ? int_ret_from_sys_call+0x52/0xa3 [ 37.808736] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 37.815571] [] SyS_connect+0x24/0x30 [ 37.820929] [] entry_SYSCALL_64_fastpath+0x16/0x92 [ 37.827494] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4f 07 00 00 48 8b 83 80 01 00 00 ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b8 e8 3b 4b [ 37.854766] RIP [] l2tp_session_create+0x93e/0x10f0 [ 37.861566] RSP [ 37.865183] CR2: 0000000000000080 [ 37.884144] ---[ end trace bcefddef13b484fd ]--- [ 37.889597] Kernel panic - not syncing: Fatal exception [ 37.895414] Dumping ftrace buffer: [ 37.898939] (ftrace buffer empty) [ 37.902619] Kernel Offset: disabled [ 37.906214] Rebooting in 86400 seconds..