[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.936657] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.807370] random: sshd: uninitialized urandom read (32 bytes read) [ 18.228642] random: sshd: uninitialized urandom read (32 bytes read) [ 18.774739] random: sshd: uninitialized urandom read (32 bytes read) [ 40.033656] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. [ 45.511148] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/22 08:29:07 parsed 1 programs [ 47.292219] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/22 08:29:10 executed programs: 0 [ 48.857423] IPVS: Creating netns size=2536 id=1 [ 48.982213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.993879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.036926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.048312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.091764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.103496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.115351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.128658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.630883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.656687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.663326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.670736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.870880] hrtimer: interrupt took 20390 ns [ 49.995295] l2tp_core: tunl 4: sockfd_lookup(fd=6) returned -9 [ 50.027139] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 50.035375] IP: [<ffffffff836c8e30>] l2tp_session_create+0xc60/0x16f0 [ 50.042057] PGD 1d44e3067 [ 50.044706] PUD 1d8f17067 PMD 0 [ 50.048185] [ 50.049806] Oops: 0002 [#1] PREEMPT SMP KASAN [ 50.054275] Dumping ftrace buffer: [ 50.057785] (ftrace buffer empty) [ 50.061469] Modules linked in: [ 50.064784] CPU: 0 PID: 4281 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #31 [ 50.072390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.081720] task: ffff8801d5540000 task.stack: ffff8801d4e50000 [ 50.087754] RIP: 0010:[<ffffffff836c8e30>] [<ffffffff836c8e30>] l2tp_session_create+0xc60/0x16f0 [ 50.096872] RSP: 0018:ffff8801d4e57ab0 EFLAGS: 00010246 [ 50.102294] RAX: 0000000000000000 RBX: ffff8801d4bc5680 RCX: 1ffff1003aaa811d [ 50.109540] RDX: 1ffff1003a91e880 RSI: ffff8801d55408c8 RDI: ffff8801d48f4400 [ 50.116783] RBP: ffff8801d4e57b50 R08: ffff8801d55408e8 R09: 0000000000000000 [ 50.124034] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d48f42d8 [ 50.131281] R13: 0000000000000000 R14: ffff8801d48f4280 R15: ffff8801d4e57c68 [ 50.138530] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f76fcb40 [ 50.146728] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 50.152582] CR2: 0000000000000080 CR3: 00000001d9218000 CR4: 00000000001606f0 [ 50.159902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.167236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.174600] Stack: [ 50.176727] 0000000000000201 ffffffff836ca141 ffff8801d4e57ad0 ffffffff81237f0d [ 50.184803] ffff8801d48f4280 ffff8801d4bc57d8 ffff8801d48f42d8 ffff8801d4bc57d0 [ 50.192804] ffff8801d4bc5730 ffff8801d48f42a0 0000000000000000 0000000000000000 [ 50.200883] Call Trace: [ 50.203449] [<ffffffff836ca141>] ? l2tp_session_get+0x1d1/0x790 [ 50.209690] [<ffffffff81237f0d>] ? trace_hardirqs_on+0xd/0x10 [ 50.215645] [<ffffffff836cdfe7>] pppol2tp_connect+0x10d7/0x18f0 [ 50.221836] [<ffffffff836ccf10>] ? pppol2tp_seq_show+0xc30/0xc30 [ 50.228052] [<ffffffff81cf90cf>] ? security_socket_connect+0x8f/0xc0 [ 50.234606] [<ffffffff8301e958>] SYSC_connect+0x1b8/0x300 [ 50.240206] [<ffffffff8301e7a0>] ? SYSC_bind+0x280/0x280 [ 50.245719] [<ffffffff812dc050>] ? compat_SyS_get_robust_list+0x310/0x310 [ 50.252706] [<ffffffff83020830>] ? move_addr_to_kernel+0x50/0x50 [ 50.258912] [<ffffffff83021224>] SyS_connect+0x24/0x30 [ 50.264492] [<ffffffff83021200>] ? SyS_accept+0x30/0x30 [ 50.269922] [<ffffffff81006da7>] do_fast_syscall_32+0x2f7/0x870 [ 50.276095] [<ffffffff81003036>] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.282746] [<ffffffff83a03390>] entry_SYSENTER_compat+0x90/0xa2 [ 50.288954] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 <f0> ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 50.315967] RIP [<ffffffff836c8e30>] l2tp_session_create+0xc60/0x16f0 [ 50.322896] RSP <ffff8801d4e57ab0> [ 50.326505] CR2: 0000000000000080 [ 50.331415] ---[ end trace 280e7b4297b4fae8 ]--- [ 50.336156] Kernel panic - not syncing: Fatal exception [ 50.341821] Dumping ftrace buffer: [ 50.345337] (ftrace buffer empty) [ 50.349022] Kernel Offset: disabled [ 50.352622] Rebooting in 86400 seconds..