[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   13.330048] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   18.294961] random: sshd: uninitialized urandom read (32 bytes read)
[   18.786235] random: sshd: uninitialized urandom read (32 bytes read)
[   19.274246] random: sshd: uninitialized urandom read (32 bytes read)
[   66.654865] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.15.195' (ECDSA) to the list of known hosts.
[   72.134775] random: sshd: uninitialized urandom read (32 bytes read)
2018/08/08 16:34:20 parsed 1 programs
[   73.667940] random: cc1: uninitialized urandom read (8 bytes read)
2018/08/08 16:34:23 executed programs: 0
[   75.320440] IPVS: Creating netns size=2536 id=1
[   75.439352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   75.450628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   75.492966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   75.504353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   75.545887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.556908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.568458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.589545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.079709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   76.105227] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   76.111309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.118337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.285150] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.296920] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.315251] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.325267] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.342051] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.352136] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.370604] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.381031] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.398187] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.409218] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.425735] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.437659] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.454399] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.464559] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.480473] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.490925] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   76.506848] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.517311] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.535430] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.547432] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.564615] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.575196] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.593295] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.602976] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.620053] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.630530] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.651055] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.661911] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.678198] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.688955] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.705757] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.714911] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.731834] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.741398] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.755022] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.765269] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   76.779318] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.789885] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.805174] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.815471] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.831281] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.841717] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.859568] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.869952] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.886570] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.897315] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.915150] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.927245] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.942882] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.953693] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.968810] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   76.979300] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   76.993914] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.004262] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.018058] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.027960] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   77.044611] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.054320] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.070806] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.082649] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.098090] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.109562] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.125259] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.135155] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.151093] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.160595] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.175682] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.185180] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.201442] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.210747] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.227786] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.238961] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   77.253527] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.264687] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.279467] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.289113] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.305816] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.315559] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.329236] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.338788] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   77.354131] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.362935] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.377687] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.387751] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.403004] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.413620] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.429908] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.439381] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.455798] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.465867] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   77.483976] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.495529] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.512098] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.522848] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   77.537845] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.548181] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.564427] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.573665] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.589833] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.600918] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.618695] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.633235] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   77.649787] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.661052] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   77.679298] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.689642] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.704456] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.713971] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.730197] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.740423] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.757364] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.768020] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.781937] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.791707] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.806884] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.816868] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.831642] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.843170] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.859772] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.870688] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.886839] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.896697] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   77.912502] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.921982] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.937553] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.947117] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.963926] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.973293] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   77.988974] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   77.998743] l2tp_core: tunl 3: sockfd_lookup(fd=17) returned -9
[   78.015029] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.025052] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.042779] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.052900] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.070160] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.079661] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.097661] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.107148] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.124425] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.133458] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.154664] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.164505] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.181136] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.191519] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.208121] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.217405] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.233034] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.242448] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.260676] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.270223] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.287102] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.296814] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.313247] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.322629] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.337801] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.348186] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.363784] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.373529] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.388751] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.398049] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.415189] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.428504] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.445647] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.455926] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.473011] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.482647] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.498674] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.510395] l2tp_core: tunl 3: sockfd_lookup(fd=16) returned -9
[   78.526121] l2tp_core: tunl 3: sockfd_lookup(fd=9) returned -9
[   78.572559] ==================================================================
[   78.579935] BUG: KASAN: use-after-free in l2tp_session_queue_purge+0xf4/0x100
[   78.587182] Read of size 4 at addr ffff8801cee14280 by task syz-executor0/4546
[   78.594512] 
[   78.596120] CPU: 0 PID: 4546 Comm: syz-executor0 Not tainted 4.9.118-g47b77b8 #24
[   78.603716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   78.613046]  ffff8801ceccfca0 ffffffff81eb4b89 ffffea00073b8500 ffff8801cee14280
[   78.621040]  0000000000000000 ffff8801cee14280 ffffffff83015be0 ffff8801ceccfcd8
[   78.629028]  ffffffff81567f29 ffff8801cee14280 0000000000000004 0000000000000000
[   78.637024] Call Trace:
[   78.639587]  [<ffffffff81eb4b89>] dump_stack+0xc1/0x128
[   78.644927]  [<ffffffff83015be0>] ? sock_release+0x1c0/0x1c0
[   78.650703]  [<ffffffff81567f29>] print_address_description+0x6c/0x234
[   78.657346]  [<ffffffff83015be0>] ? sock_release+0x1c0/0x1c0
[   78.663122]  [<ffffffff81568333>] kasan_report.cold.6+0x242/0x2fe
[   78.669328]  [<ffffffff836be6d4>] ? l2tp_session_queue_purge+0xf4/0x100
[   78.676062]  [<ffffffff8153be94>] __asan_report_load4_noabort+0x14/0x20
[   78.682795]  [<ffffffff836be6d4>] l2tp_session_queue_purge+0xf4/0x100
[   78.689351]  [<ffffffff83015be0>] ? sock_release+0x1c0/0x1c0
[   78.695125]  [<ffffffff836ca35b>] pppol2tp_release+0x1fb/0x2e0
[   78.701072]  [<ffffffff83015ab6>] sock_release+0x96/0x1c0
[   78.706583]  [<ffffffff83015bf6>] sock_close+0x16/0x20
[   78.711862]  [<ffffffff81578633>] __fput+0x263/0x700
[   78.716943]  [<ffffffff81578b55>] ____fput+0x15/0x20
[   78.722022]  [<ffffffff8119838c>] task_work_run+0x10c/0x180
[   78.727709]  [<ffffffff8100559c>] exit_to_usermode_loop+0xfc/0x120
[   78.734001]  [<ffffffff81007073>] do_fast_syscall_32+0x5c3/0x870
[   78.740119]  [<ffffffff81003036>] ? trace_hardirqs_off_thunk+0x1a/0x1c
[   78.746761]  [<ffffffff839fe190>] entry_SYSENTER_compat+0x90/0xa2
[   78.752961] 
[   78.754560] Allocated by task 4549:
[   78.758162]  save_stack_trace+0x16/0x20
[   78.762108]  save_stack+0x43/0xd0
[   78.765535]  kasan_kmalloc+0xc7/0xe0
[   78.769223]  __kmalloc+0x11d/0x300
[   78.772738]  l2tp_session_create+0x38/0x16f0
[   78.777125]  pppol2tp_connect+0x10d7/0x18f0
[   78.781422]  SYSC_connect+0x1b8/0x300
[   78.785197]  SyS_connect+0x24/0x30
[   78.788712]  do_fast_syscall_32+0x2f7/0x870
[   78.793011]  entry_SYSENTER_compat+0x90/0xa2
[   78.797389] 
[   78.798991] Freed by task 4547:
[   78.802246]  save_stack_trace+0x16/0x20
[   78.806194]  save_stack+0x43/0xd0
[   78.809621]  kasan_slab_free+0x72/0xc0
[   78.813498]  kfree+0xfb/0x310
[   78.816580]  l2tp_session_free+0x166/0x200
[   78.820795]  l2tp_tunnel_closeall+0x284/0x350
[   78.825274]  l2tp_udp_encap_destroy+0x87/0xe0
[   78.829745]  udp_destroy_sock+0x118/0x1a0
[   78.833869]  sk_common_release+0x6d/0x300
[   78.837988]  udp_lib_close+0x15/0x20
[   78.841676]  inet_release+0xff/0x1d0
[   78.845375]  sock_release+0x96/0x1c0
[   78.849060]  sock_close+0x16/0x20
[   78.852489]  __fput+0x263/0x700
[   78.855742]  ____fput+0x15/0x20
[   78.858995]  task_work_run+0x10c/0x180
[   78.862875]  exit_to_usermode_loop+0xfc/0x120
[   78.867348]  do_fast_syscall_32+0x5c3/0x870
[   78.871644]  entry_SYSENTER_compat+0x90/0xa2
[   78.876022] 
[   78.877626] The buggy address belongs to the object at ffff8801cee14280
[   78.877626]  which belongs to the cache kmalloc-512 of size 512
[   78.890255] The buggy address is located 0 bytes inside of
[   78.890255]  512-byte region [ffff8801cee14280, ffff8801cee14480)
[   78.901926] The buggy address belongs to the page:
[   78.906831] page:ffffea00073b8500 count:1 mapcount:0 mapping:          (null) index:0x0 compound_mapcount: 0
[   78.917009] flags: 0x8000000000004080(slab|head)
[   78.921752] page dumped because: kasan: bad access detected
[   78.927431] 
[   78.929032] Memory state around the buggy address:
[   78.933935]  ffff8801cee14180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   78.941287]  ffff8801cee14200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   78.948626] >ffff8801cee14280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   78.955954]                    ^
[   78.959292]  ffff8801cee14300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   78.966624]  ffff8801cee14380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   78.973955] ==================================================================
[   78.981283] Disabling lock debugging due to kernel taint
[   78.987214] Kernel panic - not syncing: panic_on_warn set ...
[   78.987214] 
[   78.994576] CPU: 0 PID: 4546 Comm: syz-executor0 Tainted: G    B           4.9.118-g47b77b8 #24
[   79.003387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   79.012742]  ffff8801ceccfc00 ffffffff81eb4b89 ffffffff843c8907 00000000ffffffff
[   79.020735]  0000000000000000 0000000000000000 ffffffff83015be0 ffff8801ceccfcc0
[   79.028735]  ffffffff81421c25 0000000041b58ab3 ffffffff843bbfe8 ffffffff81421a66
[   79.036718] Call Trace:
[   79.039286]  [<ffffffff81eb4b89>] dump_stack+0xc1/0x128
[   79.044659]  [<ffffffff83015be0>] ? sock_release+0x1c0/0x1c0
[   79.050432]  [<ffffffff81421c25>] panic+0x1bf/0x3bc
[   79.055423]  [<ffffffff81421a66>] ? add_taint.cold.6+0x16/0x16
[   79.061371]  [<ffffffff81003066>] ? ___preempt_schedule+0x16/0x18
[   79.067586]  [<ffffffff81567e46>] kasan_end_report+0x47/0x4f
[   79.073368]  [<ffffffff81568167>] kasan_report.cold.6+0x76/0x2fe
[   79.079489]  [<ffffffff836be6d4>] ? l2tp_session_queue_purge+0xf4/0x100
[   79.086216]  [<ffffffff8153be94>] __asan_report_load4_noabort+0x14/0x20
[   79.092943]  [<ffffffff836be6d4>] l2tp_session_queue_purge+0xf4/0x100
[   79.099496]  [<ffffffff83015be0>] ? sock_release+0x1c0/0x1c0
[   79.105270]  [<ffffffff836ca35b>] pppol2tp_release+0x1fb/0x2e0
[   79.111215]  [<ffffffff83015ab6>] sock_release+0x96/0x1c0
[   79.116725]  [<ffffffff83015bf6>] sock_close+0x16/0x20
[   79.121977]  [<ffffffff81578633>] __fput+0x263/0x700
[   79.127054]  [<ffffffff81578b55>] ____fput+0x15/0x20
[   79.132131]  [<ffffffff8119838c>] task_work_run+0x10c/0x180
[   79.137817]  [<ffffffff8100559c>] exit_to_usermode_loop+0xfc/0x120
[   79.144110]  [<ffffffff81007073>] do_fast_syscall_32+0x5c3/0x870
[   79.150234]  [<ffffffff81003036>] ? trace_hardirqs_off_thunk+0x1a/0x1c
[   79.156876]  [<ffffffff839fe190>] entry_SYSENTER_compat+0x90/0xa2
[   79.163405] Dumping ftrace buffer:
[   79.166924]    (ftrace buffer empty)
[   79.170606] Kernel Offset: disabled
[   79.174204] Rebooting in 86400 seconds..