[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.942256] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.284293] random: sshd: uninitialized urandom read (32 bytes read) [ 21.687102] random: sshd: uninitialized urandom read (32 bytes read) [ 22.201638] random: sshd: uninitialized urandom read (32 bytes read) [ 22.337535] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. [ 28.067904] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/23 19:36:25 parsed 1 programs [ 29.284858] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/23 19:36:27 executed programs: 0 [ 30.759249] IPVS: Creating netns size=2536 id=1 [ 30.887853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.899791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.945246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 30.956620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 31.001516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 31.012935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 31.025269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.045329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.562085] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 31.586868] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 31.593250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.599956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.822285] hrtimer: interrupt took 31565 ns [ 31.858344] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 31.866586] IP: [] l2tp_session_create+0xc60/0x16f0 [ 31.873386] PGD 1d732c067 [ 31.876039] PUD 1be339067 PMD 0 [ 31.879511] [ 31.881132] Oops: 0002 [#1] PREEMPT SMP KASAN [ 31.885598] Dumping ftrace buffer: [ 31.889128] (ftrace buffer empty) [ 31.892813] Modules linked in: [ 31.896104] CPU: 0 PID: 4172 Comm: syz-executor0 Not tainted 4.9.123-g7fa8c15 #28 [ 31.903697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.913043] task: ffff8801d76d4800 task.stack: ffff8801d5788000 [ 31.919114] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 31.928227] RSP: 0018:ffff8801d578fac0 EFLAGS: 00010246 [ 31.933702] RAX: 0000000000000000 RBX: ffff8801da2df680 RCX: 1ffff1003aedaa1d [ 31.940959] RDX: 1ffff1003b45fba0 RSI: ffff8801d76d50c8 RDI: ffff8801da2fdd00 [ 31.948338] RBP: ffff8801d578fb60 R08: ffff8801d76d50e8 R09: 0000000000000000 [ 31.955601] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801da2fdbd8 [ 31.962858] R13: 0000000000000000 R14: ffff8801da2fdb80 R15: ffff8801d578fc78 [ 31.970173] FS: 00007fda0f7f6700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 31.978481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.984339] CR2: 0000000000000080 CR3: 00000001d82a7000 CR4: 00000000001606f0 [ 31.991592] Stack: [ 31.993716] 0000000000000201 ffffffff836ca241 ffff8801d578fae0 ffffffff81237f0d [ 32.001760] ffff8801da2fdb80 ffff8801da2df7d8 ffff8801da2fdbd8 ffff8801da2df7d0 [ 32.009756] ffff8801da2df730 ffff8801da2fdba0 0000000000000000 0000000000000000 [ 32.017753] Call Trace: [ 32.020331] [] ? l2tp_session_get+0x1d1/0x790 [ 32.026523] [] ? trace_hardirqs_on+0xd/0x10 [ 32.032578] [] pppol2tp_connect+0x10d7/0x18f0 [ 32.038703] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 32.044987] [] ? security_socket_connect+0x8f/0xc0 [ 32.051684] [] SYSC_connect+0x1b8/0x300 [ 32.057291] [] ? retint_kernel+0x2d/0x2d [ 32.062987] [] ? SYSC_bind+0x280/0x280 [ 32.068504] [] ? do_futex+0x17c0/0x17c0 [ 32.074125] [] ? retint_kernel+0x2d/0x2d [ 32.079815] [] ? perf_bp_event+0x180/0x180 [ 32.085696] [] SyS_connect+0x24/0x30 [ 32.091075] [] ? SyS_accept+0x30/0x30 [ 32.096527] [] do_syscall_64+0x1a6/0x490 [ 32.102231] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 32.109131] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 32.136667] RIP [] l2tp_session_create+0xc60/0x16f0 [ 32.143437] RSP [ 32.147142] CR2: 0000000000000080 [ 32.150941] ---[ end trace 90db4af453ed6504 ]--- [ 32.156342] Kernel panic - not syncing: Fatal exception [ 32.161956] Dumping ftrace buffer: [ 32.165468] (ftrace buffer empty) [ 32.169163] Kernel Offset: disabled [ 32.172865] Rebooting in 86400 seconds..