[ 22.287673] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.306104] random: sshd: uninitialized urandom read (32 bytes read, 41 bits of entropy available) [ 26.625908] random: sshd: uninitialized urandom read (32 bytes read, 41 bits of entropy available) [ 27.628168] random: sshd: uninitialized urandom read (32 bytes read, 122 bits of entropy available) [ 30.109250] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 37.085082] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 37.093318] IP: [] l2tp_session_create+0x93e/0x10f0 [ 37.100001] PGD 80000000b14d2067 PUD b14d3067 PMD 0 [ 37.105429] Oops: 0002 [#1] PREEMPT SMP KASAN [ 37.110361] Dumping ftrace buffer: [ 37.113872] (ftrace buffer empty) [ 37.117553] Modules linked in: [ 37.120844] CPU: 1 PID: 3986 Comm: syzkaller446543 Not tainted 4.4.113-g202e079 #1 [ 37.128518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.137843] task: ffff8800ba58c740 task.stack: ffff8801ca300000 [ 37.143868] RIP: 0010:[] [] l2tp_session_create+0x93e/0x10f0 [ 37.152969] RSP: 0018:ffff8801ca307b48 EFLAGS: 00010246 [ 37.158388] RAX: 0000000000000000 RBX: ffff8800b3df6500 RCX: ffffffff83455d76 [ 37.165631] RDX: 1ffff100167becd0 RSI: 0000000000000002 RDI: ffff8800b3df6680 [ 37.172880] RBP: ffff8801ca307bb8 R08: ffff8801cf716a90 R09: 0000000000000000 [ 37.180129] R10: ffffffff85700640 R11: ffffffff84418100 R12: ffff8801cf716aa8 [ 37.187369] R13: ffff8801ca307cd0 R14: ffff8800b3df65e0 R15: ffff8801cf716a00 [ 37.194614] FS: 00007fa323158700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 37.202810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.208662] CR2: 0000000000000080 CR3: 00000000bbb2e000 CR4: 0000000000160670 [ 37.215905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.223147] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.230393] Stack: [ 37.232511] ffffffff8113bd8a ffff8800b3df6520 ffff8801cf716b58 ffff8801ca307b78 [ 37.240486] ffff8801cf716a10 0000000000000000 ffff8801cf716ab0 ffff8801cf716b50 [ 37.248453] ffffffff00000000 0000000000000000 ffff8801d4a79100 0000000000000000 [ 37.256434] Call Trace: [ 37.258999] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 37.265477] [] pppol2tp_connect+0x10fc/0x1930 [ 37.271592] [] ? pppol2tp_recv+0x330/0x330 [ 37.277452] [] ? __might_fault+0xe4/0x1d0 [ 37.283224] [] ? check_stack_object+0x68/0x140 [ 37.289429] [] ? security_socket_connect+0x89/0xb0 [ 37.296008] [] SYSC_connect+0x1b6/0x310 [ 37.301607] [] ? SYSC_bind+0x280/0x280 [ 37.307119] [] ? kvm_guest_cpu_init+0x200/0x230 [ 37.313411] [] ? retint_user+0x18/0x3c [ 37.318930] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 37.325744] [] SyS_connect+0x24/0x30 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 37.331084] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 37.337629] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4f 07 00 00 48 8b 83 80 01 00 00 ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b8 e8 1b 4b [ 37.364182] RIP [] l2tp_session_create+0x93e/0x10f0 [ 37.370946] RSP [ 37.374539] CR2: 0000000000000080 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 37.661520] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 37.669748] IP: [] l2tp_session_create+0x93e/0x10f0 [ 37.676420] PGD 80000000b1683067 PUD b167a067 PMD 0 [ 37.681842] Oops: 0002 [#2] PREEMPT SMP KASAN [ 37.686773] Dumping ftrace buffer: [ 37.690284] (ftrace buffer empty) [ 37.693963] Modules linked in: [ 37.697245] CPU: 1 PID: 3976 Comm: syzkaller446543 Tainted: G D 4.4.113-g202e079 #1 executing program executing program executing program executing program executing program executing program [ 37.706133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.715457] task: ffff8800b9cb17c0 task.stack: ffff8800b9d08000 [ 37.721483] RIP: 0010:[] [] l2tp_session_create+0x93e/0x10f0 [ 37.729183] ---[ end trace 66cf83442745f94f ]--- [ 37.729188] Kernel panic - not syncing: Fatal exception [ 37.740639] RSP: 0018:ffff8800b9d0fb48 EFLAGS: 00010246 [ 37.746056] RAX: 0000000000000000 RBX: ffff8801d176e000 RCX: ffffffff83455d76 [ 37.753296] RDX: 1ffff1003a2edc30 RSI: 0000000000000002 RDI: ffff8801d176e180 [ 37.760539] RBP: ffff8800b9d0fbb8 R08: 000000000000000a R09: 000000000000ffff [ 37.767779] R10: ffffffff85700640 R11: ffffffff84418100 R12: ffff8801d25480a8 [ 37.775022] R13: ffff8800b9d0fcd0 R14: ffff8801d176e0e0 R15: ffff8801d2548000 [ 37.782261] FS: 00007fa323179700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 37.790455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.796311] CR2: 0000000000000080 CR3: 00000000b1c24000 CR4: 0000000000160670 [ 37.803555] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.815591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.822841] Stack: [ 37.824985] ffffffff8113bd8a ffff8801d176e020 ffff8801d2548158 ffff8800b9d0fb78 [ 37.832954] ffff8801d2548010 0000000000000000 ffff8801d25480b0 ffff8801d2548150 [ 37.840915] ffffffff00000000 0000000000000000 ffff8801d75ebb80 0000000000000000 [ 37.848879] Call Trace: [ 37.851444] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 37.857736] [] pppol2tp_connect+0x10fc/0x1930 [ 37.863846] [] ? pppol2tp_recv+0x330/0x330 [ 37.869699] [] ? __fget+0x20b/0x3b0 [ 37.874965] [] ? __might_fault+0xe4/0x1d0 [ 37.880737] [] ? check_stack_object+0x68/0x140 [ 37.886952] [] ? security_socket_connect+0x89/0xb0 [ 37.893500] [] SYSC_connect+0x1b6/0x310 [ 37.899091] [] ? SYSC_bind+0x280/0x280 [ 37.904601] [] ? __do_page_fault+0x290/0xa00 [ 37.910629] [] ? kvm_guest_cpu_init+0x200/0x230 [ 37.916925] [] ? up_read+0x1a/0x40 [ 37.922084] [] ? __do_page_fault+0x149/0xa00 [ 37.928112] [] ? __fget_light+0x199/0x1e0 [ 37.933878] [] SyS_connect+0x24/0x30 [ 37.939213] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 37.945759] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4f 07 00 00 48 8b 83 80 01 00 00 ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b8 e8 1b 4b [ 37.972260] RIP [] l2tp_session_create+0x93e/0x10f0 [ 37.979013] RSP [ 37.982606] CR2: 0000000000000080 [ 37.986526] Dumping ftrace buffer: [ 37.990115] (ftrace buffer empty) [ 37.993795] Kernel Offset: disabled [ 37.997393] Rebooting in 86400 seconds..