[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.602088] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.421811] random: sshd: uninitialized urandom read (32 bytes read) [ 19.834648] random: sshd: uninitialized urandom read (32 bytes read) [ 20.308432] random: sshd: uninitialized urandom read (32 bytes read) [ 20.436175] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. [ 26.133745] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/23 03:26:35 parsed 1 programs [ 27.534853] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/23 03:26:38 executed programs: 0 [ 28.828593] IPVS: Creating netns size=2536 id=1 [ 28.944573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 28.956610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 28.997761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 29.008924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 29.050576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 29.061912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 29.073721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.095321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.139815] ip (3804) used greatest stack depth: 24264 bytes left [ 29.564628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 29.588109] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 29.594587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.602207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.794655] hrtimer: interrupt took 24566 ns [ 29.814725] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 29.822960] IP: [] l2tp_session_create+0xc60/0x16f0 [ 29.829647] PGD 1c81d2067 [ 29.832298] PUD 1c88cf067 PMD 0 [ 29.835777] [ 29.837404] Oops: 0002 [#1] PREEMPT SMP KASAN [ 29.841875] Dumping ftrace buffer: [ 29.845401] (ftrace buffer empty) [ 29.849100] Modules linked in: [ 29.852401] CPU: 0 PID: 4080 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #31 [ 29.860000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.869340] task: ffff8801d7f88000 task.stack: ffff8801d75e0000 [ 29.875383] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 29.884502] RSP: 0018:ffff8801d75e7ab0 EFLAGS: 00010246 [ 29.889924] RAX: 0000000000000000 RBX: ffff8801d8728000 RCX: 1ffff1003aff111d [ 29.897168] RDX: 1ffff1003b0e50d0 RSI: ffff8801d7f888c8 RDI: ffff8801d8728680 [ 29.904481] RBP: ffff8801d75e7b50 R08: ffff8801d7f888e8 R09: 0000000000000000 [ 29.911746] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d8728558 [ 29.919001] R13: 0000000000000000 R14: ffff8801d8728500 R15: ffff8801d75e7c68 [ 29.926257] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f7795b40 [ 29.934465] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 29.940324] CR2: 0000000000000080 CR3: 00000001c8a2c000 CR4: 00000000001606f0 [ 29.947748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.955003] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.962254] Stack: [ 29.964391] 0000000000000201 ffffffff836ca141 ffff8801d75e7ad0 ffffffff81237f0d [ 29.972408] ffff8801d8728500 ffff8801d8728158 ffff8801d8728558 ffff8801d8728150 [ 29.980409] ffff8801d87280b0 ffff8801d8728520 0000000000000000 0000000000000000 [ 29.988414] Call Trace: [ 29.990984] [] ? l2tp_session_get+0x1d1/0x790 [ 29.997122] [] ? trace_hardirqs_on+0xd/0x10 [ 30.003087] [] pppol2tp_connect+0x10d7/0x18f0 [ 30.009224] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 30.015446] [] ? security_socket_connect+0x8f/0xc0 [ 30.022013] [] SYSC_connect+0x1b8/0x300 [ 30.027619] [] ? SYSC_bind+0x280/0x280 [ 30.033140] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 30.040134] [] ? move_addr_to_kernel+0x50/0x50 [ 30.046347] [] SyS_connect+0x24/0x30 [ 30.051695] [] ? SyS_accept+0x30/0x30 [ 30.057133] [] do_fast_syscall_32+0x2f7/0x870 [ 30.063263] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.069908] [] entry_SYSENTER_compat+0x90/0xa2 [ 30.076117] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 30.103433] RIP [] l2tp_session_create+0xc60/0x16f0 [ 30.110208] RSP [ 30.113809] CR2: 0000000000000080 [ 30.118123] ---[ end trace aa3a992906c3d69e ]--- [ 30.122904] Kernel panic - not syncing: Fatal exception [ 30.128792] Dumping ftrace buffer: [ 30.132311] (ftrace buffer empty) [ 30.136052] Kernel Offset: disabled [ 30.139664] Rebooting in 86400 seconds..