[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 13.137727] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.325882] random: sshd: uninitialized urandom read (32 bytes read) [ 19.633193] random: sshd: uninitialized urandom read (32 bytes read) [ 20.176675] random: sshd: uninitialized urandom read (32 bytes read) [ 20.521672] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.45' (ECDSA) to the list of known hosts. [ 26.044217] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/22 18:33:13 parsed 1 programs [ 27.720817] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/22 18:33:16 executed programs: 0 [ 28.980231] IPVS: Creating netns size=2536 id=1 [ 29.098294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.109704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.150899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.161943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.203848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.215302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.227145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.241532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.733400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 29.760151] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 29.766468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.773309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.977887] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 29.986223] IP: [] l2tp_session_create+0xc60/0x16f0 [ 29.992905] PGD 1d7b29067 [ 29.995625] PUD 1d7650067 PMD 0 [ 29.999105] [ 30.000732] Oops: 0002 [#1] PREEMPT SMP KASAN [ 30.005199] Dumping ftrace buffer: [ 30.008711] (ftrace buffer empty) [ 30.012396] Modules linked in: [ 30.015695] CPU: 0 PID: 4130 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #31 [ 30.023305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.032635] task: ffff8801d6c7b000 task.stack: ffff8801d76b8000 [ 30.038665] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 30.047771] RSP: 0018:ffff8801d76bfab0 EFLAGS: 00010246 [ 30.053191] RAX: 0000000000000000 RBX: ffff8801c36c6500 RCX: 1ffff1003ad8f71d [ 30.060431] RDX: 1ffff1003b44f520 RSI: ffff8801d6c7b8c8 RDI: ffff8801da27a900 [ 30.067684] RBP: ffff8801d76bfb50 R08: ffff8801d6c7b8e8 R09: 0000000000000000 [ 30.074926] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801da27a7d8 [ 30.082165] R13: 0000000000000000 R14: ffff8801da27a780 R15: ffff8801d76bfc68 [ 30.089409] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f775cb40 [ 30.097615] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 30.103465] CR2: 0000000000000080 CR3: 00000001d7255000 CR4: 00000000001606f0 [ 30.110709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.117953] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.125193] Stack: [ 30.127316] 0000000000000201 ffffffff836ca141 ffff8801d76bfad0 ffffffff81237f0d [ 30.135304] ffff8801da27a780 ffff8801c36c6658 ffff8801da27a7d8 ffff8801c36c6650 [ 30.143284] ffff8801c36c65b0 ffff8801da27a7a0 0000000000000000 0000000000000000 [ 30.151305] Call Trace: [ 30.153867] [] ? l2tp_session_get+0x1d1/0x790 [ 30.159985] [] ? trace_hardirqs_on+0xd/0x10 [ 30.165927] [] pppol2tp_connect+0x10d7/0x18f0 [ 30.172113] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 30.178325] [] ? lock_acquire+0x173/0x3e0 [ 30.184099] [] ? security_socket_connect+0x8f/0xc0 [ 30.190653] [] SYSC_connect+0x1b8/0x300 [ 30.196248] [] ? SYSC_bind+0x280/0x280 [ 30.201760] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 30.208745] [] ? move_addr_to_kernel+0x50/0x50 [ 30.214952] [] ? preempt_schedule+0x25/0x30 [ 30.221002] [] SyS_connect+0x24/0x30 [ 30.226341] [] ? SyS_accept+0x30/0x30 [ 30.231765] [] do_fast_syscall_32+0x2f7/0x870 [ 30.238002] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.244642] [] entry_SYSENTER_compat+0x90/0xa2 [ 30.250843] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 30.277719] RIP [] l2tp_session_create+0xc60/0x16f0 [ 30.284522] RSP [ 30.288124] CR2: 0000000000000080 [ 30.292718] ---[ end trace 2e462885ea071677 ]--- [ 30.297478] Kernel panic - not syncing: Fatal exception [ 30.303154] Dumping ftrace buffer: [ 30.306667] (ftrace buffer empty) [ 30.310352] Kernel Offset: disabled [ 30.313949] Rebooting in 86400 seconds..