[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 13.180697] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.625453] random: sshd: uninitialized urandom read (32 bytes read) [ 20.061947] random: sshd: uninitialized urandom read (32 bytes read) [ 20.583397] random: sshd: uninitialized urandom read (32 bytes read) [ 32.546068] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.25' (ECDSA) to the list of known hosts. [ 38.057978] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/22 12:15:05 parsed 1 programs [ 39.259554] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/22 12:15:07 executed programs: 0 [ 40.625589] IPVS: Creating netns size=2536 id=1 [ 40.767796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.780960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.826315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 40.838451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 40.883794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.895626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.907398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.929319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.472374] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.498315] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.505008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.511868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.725262] hrtimer: interrupt took 17531 ns [ 41.797155] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 42.070588] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 42.079022] IP: [] l2tp_session_create+0xc60/0x16f0 [ 42.085734] PGD 1d49c1067 [ 42.088390] PUD 1da3d7067 PMD 0 [ 42.091903] [ 42.093702] Oops: 0002 [#1] PREEMPT SMP KASAN [ 42.098365] Dumping ftrace buffer: [ 42.101996] (ftrace buffer empty) [ 42.105703] Modules linked in: [ 42.109021] CPU: 0 PID: 4275 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #79 [ 42.116627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.125970] task: ffff8801d484c800 task.stack: ffff8801d4bb8000 [ 42.132017] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 42.141218] RSP: 0018:ffff8801d4bbfac0 EFLAGS: 00010246 [ 42.146695] RAX: 0000000000000000 RBX: ffff8801d44f5400 RCX: 1ffff1003a909a1d [ 42.153970] RDX: 1ffff1003a933880 RSI: ffff8801d484d0c8 RDI: ffff8801d499c400 [ 42.161231] RBP: ffff8801d4bbfb60 R08: ffff8801d484d0e8 R09: 0000000000000000 [ 42.168704] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d499c2d8 [ 42.176425] R13: 0000000000000000 R14: ffff8801d499c280 R15: ffff8801d4bbfc78 [ 42.183691] FS: 00007f95513ca700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 42.191912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.197786] CR2: 0000000000000080 CR3: 00000001da0b7000 CR4: 00000000001606f0 [ 42.205054] Stack: [ 42.207297] 0000000000000201 ffffffff836ca141 ffff8801d4bbfae0 ffffffff81237f0d [ 42.215587] ffff8801d499c280 ffff8801d44f5558 ffff8801d499c2d8 ffff8801d44f5550 [ 42.224245] ffff8801d44f54b0 ffff8801d499c2a0 0000000000000000 0000000000000000 [ 42.232696] Call Trace: [ 42.235365] [] ? l2tp_session_get+0x1d1/0x790 [ 42.241667] [] ? trace_hardirqs_on+0xd/0x10 [ 42.247639] [] pppol2tp_connect+0x10d7/0x18f0 [ 42.254645] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 42.260956] [] ? security_socket_connect+0x8f/0xc0 [ 42.267740] [] SYSC_connect+0x1b8/0x300 [ 42.273364] [] ? SYSC_bind+0x280/0x280 [ 42.279088] [] ? get_unused_fd_flags+0xd0/0xd0 [ 42.285317] [] ? do_futex+0x17c0/0x17c0 [ 42.291248] [] ? SyS_socket+0x121/0x1b0 [ 42.296869] [] ? move_addr_to_kernel+0x50/0x50 [ 42.303718] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 42.310557] [] SyS_connect+0x24/0x30 [ 42.316038] [] ? SyS_accept+0x30/0x30 [ 42.321778] [] do_syscall_64+0x1a6/0x490 [ 42.327631] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 42.334955] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 42.363226] RIP [] l2tp_session_create+0xc60/0x16f0 [ 42.370024] RSP [ 42.373640] CR2: 0000000000000080 [ 42.378292] ---[ end trace d2492245c40d3f50 ]--- [ 42.383261] Kernel panic - not syncing: Fatal exception [ 42.388995] Dumping ftrace buffer: [ 42.392540] (ftrace buffer empty) [ 42.396240] Kernel Offset: disabled [ 42.399857] Rebooting in 86400 seconds..