[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.850706] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.161866] random: sshd: uninitialized urandom read (32 bytes read) [ 28.627007] random: sshd: uninitialized urandom read (32 bytes read) [ 29.034178] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.54' (ECDSA) to the list of known hosts. [ 34.709006] urandom_read: 1 callbacks suppressed [ 34.709009] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/22 11:56:05 parsed 1 programs [ 36.383381] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/22 11:56:08 executed programs: 0 [ 37.610272] IPVS: Creating netns size=2536 id=1 [ 37.735671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.747283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 37.791893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 37.803531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 37.848189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.859871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.871500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.892191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.395308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 38.420654] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 38.426740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.434068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.646755] hrtimer: interrupt took 10659 ns [ 38.666298] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 38.880245] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 39.921462] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 40.171112] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 40.179341] IP: [] l2tp_session_create+0xc60/0x16f0 [ 40.186015] PGD 1cd4ff067 [ 40.188660] PUD 1bbd8f067 PMD 0 [ 40.192135] [ 40.193752] Oops: 0002 [#1] PREEMPT SMP KASAN [ 40.198218] Dumping ftrace buffer: [ 40.201741] (ftrace buffer empty) [ 40.205423] Modules linked in: [ 40.208708] CPU: 0 PID: 5076 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #31 [ 40.216301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.225628] task: ffff8801baf99800 task.stack: ffff8801b8df0000 [ 40.231654] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 40.240806] RSP: 0018:ffff8801b8df7ab0 EFLAGS: 00010246 [ 40.246228] RAX: 0000000000000000 RBX: ffff8801b9138780 RCX: 1ffff100375f341d [ 40.253474] RDX: 1ffff100371bac30 RSI: ffff8801baf9a0c8 RDI: ffff8801b8dd6180 [ 40.260723] RBP: ffff8801b8df7b50 R08: ffff8801baf9a0e8 R09: 0000000000000000 [ 40.267969] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801b8dd6058 [ 40.275211] R13: 0000000000000000 R14: ffff8801b8dd6000 R15: ffff8801b8df7c68 [ 40.282738] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f76fdb40 [ 40.290953] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 40.296806] CR2: 0000000000000080 CR3: 00000001c431a000 CR4: 00000000001606f0 [ 40.304055] Stack: [ 40.306192] 0000000000000201 ffffffff836ca141 ffff8801b8df7ad0 ffffffff81237f0d [ 40.314176] ffff8801b8dd6000 ffff8801b91388d8 ffff8801b8dd6058 ffff8801b91388d0 [ 40.322172] ffff8801b9138830 ffff8801b8dd6020 0000000000000000 0000000000000000 [ 40.330169] Call Trace: [ 40.332733] [] ? l2tp_session_get+0x1d1/0x790 [ 40.338869] [] ? trace_hardirqs_on+0xd/0x10 [ 40.344825] [] pppol2tp_connect+0x10d7/0x18f0 [ 40.350946] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 40.357155] [] ? security_socket_connect+0x8f/0xc0 [ 40.363710] [] SYSC_connect+0x1b8/0x300 [ 40.369311] [] ? SYSC_bind+0x280/0x280 [ 40.374821] [] ? get_unused_fd_flags+0xd0/0xd0 [ 40.381028] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 40.388017] [] ? SyS_socket+0x121/0x1b0 [ 40.393616] [] ? move_addr_to_kernel+0x50/0x50 [ 40.399819] [] SyS_connect+0x24/0x30 [ 40.405158] [] ? SyS_accept+0x30/0x30 [ 40.410596] [] do_fast_syscall_32+0x2f7/0x870 [ 40.416721] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.423385] [] entry_SYSENTER_compat+0x90/0xa2 [ 40.429590] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 40.456500] RIP [] l2tp_session_create+0xc60/0x16f0 [ 40.463262] RSP [ 40.466856] CR2: 0000000000000080 [ 40.471716] ---[ end trace 61ba754fddb507ec ]--- [ 40.476478] Kernel panic - not syncing: Fatal exception [ 40.482123] Dumping ftrace buffer: [ 40.485643] (ftrace buffer empty) [ 40.489327] Kernel Offset: disabled [ 40.492929] Rebooting in 86400 seconds..