[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 14.307963] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.639725] random: sshd: uninitialized urandom read (32 bytes read) [ 19.169779] random: sshd: uninitialized urandom read (32 bytes read) [ 20.291201] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. [ 25.738171] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/20 16:53:38 fuzzer started [ 27.675322] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/20 16:53:42 dialing manager at 10.128.0.26:36283 2018/07/20 16:53:43 syscalls: 1180 2018/07/20 16:53:43 code coverage: enabled 2018/07/20 16:53:43 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/07/20 16:53:43 setuid sandbox: enabled 2018/07/20 16:53:43 namespace sandbox: enabled 2018/07/20 16:53:43 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/07/20 16:53:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/20 16:53:43 net packed injection: enabled 2018/07/20 16:53:43 net device setup: enabled [ 31.904204] random: crng init done 16:54:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x81000200000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000071ef4b80000400000000000000000000000000000000000000000003800000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000b6060000000000000300000000000000d01700000000000000000000000000000000000000000000000000000000000079000000000000000000000002000020020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000fcff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d4fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064aa13cf7a61c902000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ab458a00e613682cab400000000000000000000000000000000008ba00537ee0e979e7ca6223fb6297c6e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e02fe28e2e1816b82c516633c667fc5600000000000000000000000000000000000000000000000000000000000000000000000000f6f967a231a4e54bd479246293c907e820890c03bcfa595fb1805c22c605ee1697567360353b5d613a8c55fa087a73bbcfd7a0d4fe3346d034ba7948cfbd6f12e7771aeb3c1887faa0ce39f8f49b24492e2951d1f332ed96e08cd4c02abaf3c2c8c0003f340a5a7fb5d65f56e46e0a85abf5ee8df346fb5475cd167ab724666bff0b1783fb4213c5555b5e87d3f665e9717e6690dbe3c242fc7d359060ed0af8e7f514e7d9481a"], 0x4e0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='vegas\x00', 0xffaf) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x858) 16:54:05 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) 16:54:05 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, &(0x7f0000000000)=0x21, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) socket$unix(0x1, 0x0, 0x0) getpeername(r2, &(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) 16:54:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) 16:54:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001200050a000000000000000000000000", @ANYBLOB="0000000000000000140012000c00010069706970000000000400040008000a0002000000222d1684fc1c18e942a73ff7dd2a6104fc59fbd71861f6bf3a01eaaf17866b181ea400bf0e37e8a67ab44e2add0540ff8a3859692d8815d532297f91d18f231ba4cc56a8f5e81d0ae0cde92252430eab1a64a7702c04dfbb69a576c70b8d810f765aa594cb9117c89ed7268059c1922f1386443c1f7651fe02aa4fe7b8ac89"], 0x2}, 0x1}, 0x0) 16:54:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x1, 0x0, 0x7ff}, [{0x0, 0x0, 0x0, 0x10001}]}, 0x78) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000006400000000000000000000007938dc47000000000000000000000000000000000000000000000000000000000000"], 0x58) 16:54:05 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000100)=0x7fffffff, 0x356) sendto$unix(r1, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 16:54:05 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77}, 0xb) [ 52.750842] IPVS: Creating netns size=2536 id=1 [ 52.828456] IPVS: Creating netns size=2536 id=2 [ 52.917987] IPVS: Creating netns size=2536 id=3 [ 52.962487] IPVS: Creating netns size=2536 id=4 [ 53.005547] IPVS: Creating netns size=2536 id=5 [ 53.063872] IPVS: Creating netns size=2536 id=6 [ 53.119283] IPVS: Creating netns size=2536 id=7 [ 53.191169] IPVS: Creating netns size=2536 id=8 [ 53.535670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.575485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.595777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.663941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.734078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.795917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.830736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.870534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.890543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.920120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.932224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.956131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.969675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.006160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.066544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.090221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.124435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.143371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.150655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.161855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.183783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.197550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.208081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.215066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.256571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.287033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.294604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.312952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.358029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.375768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.408719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.416923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.424882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.444572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.453614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.461059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.470083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.480883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.491797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.499699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.507395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.515456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.523206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.532348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.544733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.553215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.562503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.583113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.591468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.599646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.621944] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.638876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.645991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.660506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.670486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.680031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.688216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.695714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.703967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.711844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.724129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.731879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.749769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.757184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.765862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.781182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.805488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.818598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.826097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.879037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.904139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.926464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.934134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.945488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.989803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.998631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.010099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.020876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.047586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.055287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.063756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.078638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.086125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.098960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.109136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.116630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.125425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.138651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.149111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.156605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.205426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.216577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.225869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.251720] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.272191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.280123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.976158] ip (4802) used greatest stack depth: 23976 bytes left [ 57.369731] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.400034] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.457775] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.571212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.585053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.596369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.614345] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.623970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.632444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.651189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.668999] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.676349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.692538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.712498] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.821604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.846066] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.858741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.865460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.881673] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.898278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.904993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.935967] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.047965] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.054157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.061492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.077962] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.127302] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.133418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.140846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.268566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.274992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.286219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:54:11 executing program 3: r0 = socket$inet(0x2, 0x801, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x400000000003, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffedb) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/163) socket$inet(0x2, 0x80000, 0xf42) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect(r0, &(0x7f0000000000)=@un=@abs, 0x80) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x3, 0x3, 0x9, 0x1, 0x502b}}) 16:54:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$selinux_user(r1, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES64=r1], 0x23) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) splice(r3, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x7, 0x1) fsync(r3) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000005c0)=""/4096) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000040)={0x1}) 16:54:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x2) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 16:54:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4000, 0x0) ioctl(r0, 0x100000000, &(0x7f0000000000)='F') mremap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil) mlock2(&(0x7f00002d3000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') ioctl$KDENABIO(r1, 0x4b36) 16:54:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="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") sendfile(r0, r0, &(0x7f0000000100)=0x804, 0x1) close(r0) 16:54:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677219a66f75705f69", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) pwrite64(r0, &(0x7f00000000c0)="6e1871e9f4c3cc613a200205f4b743bb2e953d294e49705bd91776c8972fbf9a6b743083a7eccf43dc557b8d9f510ed74645e613c2ee65f20f9584759d7a886e2352e10082061342588b24181c3184684e3906c3e474af7013b6b07351a926d0b3180ec020d51f5be0372671ffc14e8baf7c74ca8b6f16bb6407d5e595ed824409ba57549c3c5a239d9e7f1f0df8266af225e2f9", 0x94, 0x0) 16:54:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCFLSH(r2, 0x540b, 0x5) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x81, 0x80) 16:54:12 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x80000001, 0x4) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x37, &(0x7f00000006c0), 0x38a, &(0x7f0000003040)=""/4096, 0x1000}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000080)={@empty, @loopback=0x7f000001}, 0xc) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000006c0)=0xfffffffffffffff9, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000000040)={'lo\x00', @ifru_names='lo\x00'}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x60800, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000040)="ff", 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r3, 0x4, 0xfba362d085a572de) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) write$P9_RSETATTR(r2, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000200)) ptrace$getregs(0xe, r3, 0xfffffffffffffffc, &(0x7f00000001c0)) epoll_create(0xb91) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) rt_sigreturn() sendto$inet(r0, &(0x7f00000000c0)="a2dfe1016521f4d2a4ff06d1125d390d468295cca58531fd782a46a5dcf62701a39ee1558c831abca97af5600c94c4085115847f88516ff121f8732c58c967c19350bf093fadd8cf12d16d46f3f8268f95df19c4d0c53473aae2dcb21c2b2ea4e8096d086f33ab5382acf7bff897a776cd54f6ca213d80aba4ee1b6fdc4f76cbe8f28951389184209d21c952126bccac672377e331bdd84ca9", 0x99, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000300)) 16:54:12 executing program 4: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./control\x00') r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000400)='./control/file0\x00') renameat2(r1, &(0x7f0000000000)='./control\x00', r2, &(0x7f0000000040)='./control\x00', 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x204, 0x70bd28, 0x25dfdbfe, {0x2}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x6e}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) 16:54:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$addseals(r0, 0x409, 0x7) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100225bd7000fddbdf250100000008000600010000804c0003350300030002000000080800000000000014000600fe8000000000000000000000000000bb08000500ac7b9f4124ef8b622b8000000000000000000000000000120800030000000000"], 0x68}, 0x1}, 0x40) write(r0, &(0x7f0000000000)="2400000024007fffffff9e0000007701000000ff0100000000000000f1ffffff0100ff10", 0x24) recvfrom$unix(r0, &(0x7f00000001c0)=""/33, 0x21, 0x40000001, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 16:54:12 executing program 7: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0) 16:54:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cd9ff4)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000084fffc)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cba000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) r2 = dup3(r1, r0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000000c0)) 16:54:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x80}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x100, @ipv4={[], [0xff, 0xff]}, 0xabd6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0xc, 0x29, 0x3b}], 0xc}}], 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bind(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x3, 0x3, 0x0, 0x1}}, 0x80) write$P9_RSTAT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="430000007d02ec00003c005c3100000000200000000002000000000000000000081000080000fffbffffe509000000000000030021403a06007b707070302d00000000"], 0x43) 16:54:12 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket(0x11, 0x2, 0x0) dup2(r2, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0xfffffffe8000201f}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x9, 0x800, 0x7}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300), &(0x7f0000000340), 0x8) 16:54:12 executing program 1: r0 = timerfd_create(0x5, 0x80800) fstat(r0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, &(0x7f0000000000), 0x7ffffffe) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) r4 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000140)={0x20071026, r4}, &(0x7f0000000180)={0x3, 0x7fffffff, 0x3, 0x4, 0x4, 0x7}) fchdir(r3) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x1000}) fdatasync(r5) 16:54:12 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0x100, 0x7f1d) sendto$inet6(r0, &(0x7f0000000140)="0303000007005b0000000000fff55b4202938207d9bb37c81e1bbbed5bcc7cb26111b8301ee616d5c01843000000000053c0f485472da7222a2bb401000000c3b5003500f55dc667b3009b000000faffffff00000000aeb46245004bad2a66c9c19bc6e3408804", 0x3a8, 0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x210800800, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x1d}}, 0x1c) 16:54:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000070000000000000000000000010015004e2000f16ae63d80d9171adceb00020013000200000027bd70000435000002000b00d40000000800000000000000006c9fd7a8333fa5cefb8e1cf53b679d8e19ace9cd596a75a6500dc06cb3754940807cd131436c15af72c1bea17a4441454561aa6e3142776668c6c979c1cb3476565657aced0786fb86ea60c84c3c46dba5289f717cb5eefe68f1bbe41191a90d6bac0eeed4"], 0x38}, 0x1}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x200000004, 0x1ffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0xfffffd6c) [ 59.850248] capability: warning: `syz-executor1' uses deprecated v2 capabilities in a way that may be insecure 16:54:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) 16:54:12 executing program 7: mkdir(&(0x7f00000011c0)='./file0\x00', 0x20) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001100)='/dev/rfkill\x00', 0x30001, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000001180)='cgroup,systemselinux\x00', 0x15, 0x1) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) connect$l2tp(r2, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80}, 0x4}}}, 0x32) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 16:54:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x1, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$TIOCCBRK(r1, 0x5428) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000005}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) 16:54:12 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000680)='bdev\x00', 0x20004, &(0x7f00000009c0)) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='bdev*%selinux/\x00', &(0x7f00000000c0)='cgroup.stat\x00', &(0x7f0000000100)='ppp1\x00', &(0x7f0000000140)='ramfs\x00', &(0x7f0000000180)='mslos\x00', &(0x7f0000000200)='cgroup.stat\x00', &(0x7f0000000240)='ramfs\x00'], &(0x7f0000000380)=[&(0x7f00000002c0)='\x00', &(0x7f0000000340)='security\x00']) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000480)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) 16:54:12 executing program 1: r0 = getpid() ptrace$pokeuser(0x6, r0, 0x5, 0x81) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f657865000008843d7909004bddd9f191be10eebf000ee9fffbc74ace7d000054fa07424adee916d2da75afe70b35a0fda071fb35331ce39b120bf9359c5a6568641006d7c020637405ab73e72926e3332653") flistxattr(r1, &(0x7f0000000200)=""/8, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14, 0x80800) 16:54:12 executing program 5: r0 = timerfd_create(0x0, 0x40000) fcntl$setstatus(r0, 0x4, 0x42c00) fcntl$setstatus(r0, 0x4, 0x40000) [ 60.009136] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 60.017370] IP: [] l2tp_session_create+0xc60/0x16f0 [ 60.024048] PGD 1b8cfa067 [ 60.026688] PUD 1cad1c067 PMD 0 [ 60.030171] [ 60.031794] Oops: 0002 [#1] PREEMPT SMP KASAN [ 60.036266] Dumping ftrace buffer: [ 60.039777] (ftrace buffer empty) [ 60.043461] Modules linked in: [ 60.046750] CPU: 0 PID: 6054 Comm: syz-executor7 Not tainted 4.9.113-g47bbcd6 #14 [ 60.054341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.063675] task: ffff8801c99a9800 task.stack: ffff8801b6390000 [ 60.069703] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 60.078812] RSP: 0018:ffff8801b6397ab0 EFLAGS: 00010246 [ 60.084232] RAX: 0000000000000000 RBX: ffff8801ce102280 RCX: 1ffff1003933541d [ 60.091475] RDX: 1ffff1003941e210 RSI: ffff8801c99aa0c8 RDI: ffff8801ca0f1080 [ 60.098719] RBP: ffff8801b6397b50 R08: ffff8801c99aa0e8 R09: 0000000000000000 [ 60.105960] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ca0f0f58 [ 60.113205] R13: 0000000000000000 R14: ffff8801ca0f0f00 R15: ffff8801b6397c68 [ 60.120450] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f574fb40 [ 60.128649] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 60.134505] CR2: 0000000000000080 CR3: 00000001c5672000 CR4: 00000000001606f0 [ 60.141751] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.148995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.156238] Stack: [ 60.158358] 0000000000000201 ffffffff836c2491 ffff8801b6397ad0 ffffffff81235c4d [ 60.166347] ffff8801ca0f0f00 ffff8801ce1023d8 ffff8801ca0f0f58 ffff8801ce1023d0 [ 60.174333] ffff8801ce102330 ffff8801ca0f0f20 0000000000000000 0000000000000000 [ 60.182321] Call Trace: [ 60.184884] [] ? l2tp_session_get+0x1d1/0x790 [ 60.191004] [] ? trace_hardirqs_on+0xd/0x10 [ 60.196950] [] pppol2tp_connect+0x10d7/0x18f0 [ 60.203069] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 60.209276] [] ? security_socket_connect+0x8f/0xc0 [ 60.215830] [] SYSC_connect+0x1b8/0x300 [ 60.221429] [] ? SYSC_bind+0x280/0x280 [ 60.226941] [] ? get_unused_fd_flags+0xd0/0xd0 [ 60.233153] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 60.240138] [] ? SyS_socket+0x121/0x1b0 [ 60.245739] [] ? move_addr_to_kernel+0x50/0x50 [ 60.251944] [] SyS_connect+0x24/0x30 [ 60.257280] [] ? SyS_accept+0x30/0x30 [ 60.262705] [] do_fast_syscall_32+0x2f7/0x870 [ 60.268820] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.275462] [] entry_SYSENTER_compat+0x90/0xa2 [ 60.281663] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 60.308413] RIP [] l2tp_session_create+0xc60/0x16f0 [ 60.315173] RSP [ 60.318769] CR2: 0000000000000080 [ 60.322209] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 60.330435] IP:[ 60.331376] ---[ end trace 23d6670611305bbf ]--- [ 60.331381] Kernel panic - not syncing: Fatal exception [ 60.342201] [] l2tp_session_free+0x11c/0x200 [ 60.348251] PGD 1b8cfa067 [ 60.350895] PUD 1cad1c067 PMD 0 [ 60.354380] [ 60.356004] Oops: 0002 [#2] PREEMPT SMP KASAN [ 60.360473] Dumping ftrace buffer: [ 60.363985] (ftrace buffer empty) [ 60.367670] Modules linked in: [ 60.370967] CPU: 1 PID: 6052 Comm: syz-executor7 Tainted: G D 4.9.113-g47bbcd6 #14 [ 60.379773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.389104] task: ffff8801a565b000 task.stack: ffff8801c5798000 [ 60.395132] RIP: 0010:[] [] l2tp_session_free+0x11c/0x200 [ 60.403983] RSP: 0018:ffff8801c579fb38 EFLAGS: 00010246 [ 60.409408] RAX: dffffc0000000000 RBX: ffff8801ce102280 RCX: 0000000000000000 [ 60.416655] RDX: 1ffff1003941e210 RSI: ffffffff836bcce1 RDI: ffff8801ca0f1080 [ 60.423903] RBP: ffff8801c579fb58 R08: ffff8801a565b8e8 R09: 0000000000000000 [ 60.431147] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ca0f0f00 [ 60.438395] R13: ffff8801ce102288 R14: 0000000000000000 R15: ffff8801ca0f0f58 [ 60.445642] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:000000000a111900 [ 60.453841] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 60.459707] CR2: 0000000000000080 CR3: 00000001c5672000 CR4: 00000000001606f0 [ 60.466958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.474206] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.481447] Stack: [ 60.483569] ffff8801ce102328 dffffc0000000000 ffff8801ce102280 0000000000000000 [ 60.491565] ffff8801c579fbb0 ffffffff836bd594 ffff8801ca0f0fd8 ffffed003941e1eb [ 60.499565] ffff8801ca0f0f58 ffff8801ca0f0f20 ffff8801ca0f0f00 ffff8801b75d1380 [ 60.507567] Call Trace: [ 60.510132] [] l2tp_tunnel_closeall+0x284/0x350 [ 60.516788] [] l2tp_tunnel_destruct+0x2f2/0x590 [ 60.523084] [] ? l2tp_tunnel_destruct+0x1aa/0x590 [ 60.529550] [] ? l2tp_tunnel_del_work+0x470/0x470 [ 60.536020] [] ? sock_release+0x1c0/0x1c0 [ 60.541794] [] __sk_destruct+0x55/0x590 [ 60.547392] [] ? sock_release+0x1c0/0x1c0 [ 60.553167] [] sk_destruct+0x63/0x80 [ 60.558503] [] __sk_free+0x4f/0x220 [ 60.563756] [] sk_free+0x2b/0x40 [ 60.568747] [] l2tp_session_free+0x19c/0x200 [ 60.574780] [] pppol2tp_session_destruct+0xd2/0x110 [ 60.581422] [] ? pppol2tp_seq_start+0x4e0/0x4e0 [ 60.587714] [] __sk_destruct+0x55/0x590 [ 60.593313] [] ? sock_release+0x1c0/0x1c0 [ 60.599088] [] sk_destruct+0x63/0x80 [ 60.604427] [] __sk_free+0x4f/0x220 [ 60.609678] [] sk_free+0x2b/0x40 [ 60.614670] [] pppol2tp_release+0x239/0x2e0 [ 60.620622] [] sock_release+0x96/0x1c0 [ 60.626132] [] sock_close+0x16/0x20 [ 60.631384] [] __fput+0x263/0x700 [ 60.636465] [] ____fput+0x15/0x20 [ 60.641544] [] task_work_run+0x10c/0x180 [ 60.647232] [] exit_to_usermode_loop+0xfc/0x120 [ 60.653524] [] do_fast_syscall_32+0x5c3/0x870 [ 60.659642] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.666283] [] entry_SYSENTER_compat+0x90/0xa2 [ 60.672488] Code: 49 8d bc 24 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c6 00 00 00 4d 8b b4 24 80 01 00 00 41 ff 8e 80 00 00 00 74 69 e8 55 1d ca fd 4c 89 ea 48 b8 00 [ 60.699523] RIP [] l2tp_session_free+0x11c/0x200 [ 60.706030] RSP [ 60.709630] CR2: 0000000000000080 [ 60.713537] Dumping ftrace buffer: [ 60.717063] (ftrace buffer empty) [ 60.720745] Kernel Offset: disabled [ 60.724346] Rebooting in 86400 seconds..