[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.494238] random: sshd: uninitialized urandom read (32 bytes read, 31 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.785392] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [ 19.998105] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [ 20.996757] random: sshd: uninitialized urandom read (32 bytes read, 119 bits of entropy available) [ 21.151692] random: sshd: uninitialized urandom read (32 bytes read, 121 bits of entropy available) Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. [ 26.616888] random: sshd: uninitialized urandom read (32 bytes read, 127 bits of entropy available) 2018/04/06 03:27:01 parsed 1 programs 2018/04/06 03:27:01 executed programs: 0 [ 27.024789] IPVS: Creating netns size=2552 id=1 RESULT: signal 0, coverage 0 errno 9 [ 27.207961] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 27.327929] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 27.458543] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 27.558739] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 27.697893] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 27.714530] random: nonblocking pool is initialized RESULT: signal 0, coverage 0 errno 9 [ 27.828343] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 27.948896] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 28.087883] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 28.208695] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 28.318823] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 28.437880] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 28.558742] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 28.688143] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 28.808500] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 28.958312] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 29.088716] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 29.197931] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 29.308819] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 29.437926] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 29.548395] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 29.667923] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 29.798532] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 29.918790] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 30.068521] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 30.188078] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 30.307927] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 30.418980] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 30.537896] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 30.667996] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 30.798590] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 30.948669] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 31.088644] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 31.198835] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 31.338765] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 31.468169] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 31.598451] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 31.718981] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 31.837836] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 31.967967] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 2018/04/06 03:27:06 executed programs: 40 [ 32.088881] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 32.217943] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 RESULT: signal 0, coverage 0 errno 9 [ 32.509163] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 32.628632] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 32.748728] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 32.888710] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 33.018739] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 RESULT: signal 0, coverage 0 errno 9 [ 33.317845] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 33.438898] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 33.578398] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 33.708730] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 33.827875] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 33.968790] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 34.098345] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 34.218847] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 34.358697] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 34.468957] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 34.577972] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 34.708448] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 34.827840] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 34.940243] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 35.057746] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 35.177902] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 RESULT: signal 0, coverage 0 errno 9 [ 35.477884] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 35.597998] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 35.728068] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 35.858786] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 35.977892] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 RESULT: signal 0, coverage 0 errno 9 [ 36.268641] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 36.398844] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 36.527940] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 36.657892] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 36.767720] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 36.907829] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 37.027868] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 2018/04/06 03:27:11 executed programs: 79 [ 37.157903] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 37.268811] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 37.387807] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 37.508884] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 37.618855] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 37.748015] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 37.877852] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 37.978800] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 38.100906] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 38.227913] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 38.338816] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 38.438744] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 38.577925] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 38.697888] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 38.828590] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 38.937933] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 RESULT: signal 0, coverage 0 errno 9 [ 39.238853] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 39.367856] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 39.498654] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 39.637878] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 39.778618] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 [ 39.897986] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 RESULT: signal 0, coverage 0 errno 9 RESULT: signal 0, coverage 0 errno 9 [ 40.167855] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 [ 40.308737] kasan: CONFIG_KASAN_INLINE enabled [ 40.313167] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 40.326025] Dumping ftrace buffer: [ 40.329532] (ftrace buffer empty) [ 40.333211] Modules linked in: [ 40.336508] CPU: 0 PID: 4103 Comm: syz-executor0 Not tainted 4.4.125-g38f41ec #21 [ 40.344110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.353431] task: ffff8801d9299800 task.stack: ffff8801d88d8000 [ 40.359454] RIP: 0010:[] [] pppol2tp_connect+0x7e0/0x1930 [ 40.368295] RSP: 0018:ffff8801d88dfb50 EFLAGS: 00010202 [ 40.373713] RAX: dffffc0000000000 RBX: ffff8800ba9f4000 RCX: ffffffff83468ae8 [ 40.380951] RDX: 000000000000003b RSI: ffffffff839fef20 RDI: 00000000000001d8 [ 40.388190] RBP: ffff8801d88dfd00 R08: 0000000000000001 R09: 0000000000000000 [ 40.395427] R10: 0000000000000000 R11: 1ffff1003b11bf36 R12: ffff8800bac7dd80 [ 40.402665] R13: 0000000000000000 R14: 0000000000001007 R15: 1ffff1003b11bf73 [ 40.409907] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f7717b40 [ 40.418100] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 40.423951] CR2: 00000000f76f6db0 CR3: 00000001d1284000 CR4: 0000000000160670 [ 40.431194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.438433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.445670] Stack: [ 40.447787] ffffffff83468a89 00000003d92ba3f0 ffff880100000003 ffff8800ba9f4198 [ 40.455752] ffff8800ba9f4900 ffff8800bac7e150 ffff8800bac7dd92 ffff8800bac7ddb0 [ 40.463719] ffff8800ba9f4780 0000000041b58ab3 ffffffff84011a60 ffffffff83468320 [ 40.471682] Call Trace: [ 40.474240] [] ? pppol2tp_connect+0x769/0x1930 [ 40.480440] [] ? pppol2tp_recv+0x330/0x330 [ 40.486294] [] ? __might_fault+0xe4/0x1d0 [ 40.492059] [] ? check_stack_object+0x68/0x140 [ 40.498262] [] ? security_socket_connect+0x89/0xb0 [ 40.504812] [] SYSC_connect+0x1b6/0x310 [ 40.510402] [] ? SYSC_bind+0x280/0x280 [ 40.515909] [] ? get_unused_fd_flags+0xd0/0xd0 [ 40.522110] [] ? _raw_spin_unlock+0x2c/0x50 [ 40.528050] [] ? __alloc_fd+0x1e3/0x500 [ 40.533644] [] ? compat_SyS_get_robust_list+0x300/0x300 [ 40.540623] [] ? SyS_socket+0x121/0x1b0 [ 40.546213] [] ? move_addr_to_kernel+0x50/0x50 [ 40.552411] [] SyS_connect+0x24/0x30 [ 40.557741] [] ? SyS_accept+0x30/0x30 [ 40.563163] [] do_fast_syscall_32+0x321/0x8a0 [ 40.569282] [] sysenter_flags_fixed+0xd/0x17 [ 40.575306] Code: fd 80 3d 69 3d 37 01 00 0f 84 ca 08 00 00 e8 98 8b ef fd 49 8d bd d8 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 60 0d 00 00 4d 8b b5 d8 01 00 00 e8 aa d8 e1 [ 40.601889] RIP [] pppol2tp_connect+0x7e0/0x1930 [ 40.608380] RSP [ 40.612164] ---[ end trace 0ad6b29bc3397505 ]--- [ 40.616920] Kernel panic - not syncing: Fatal exception [ 40.622639] Dumping ftrace buffer: [ 40.626146] (ftrace buffer empty) [ 40.629824] Kernel Offset: disabled [ 40.633422] Rebooting in 86400 seconds..