BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 IP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 PGD 1e16ae067 P4D 1e16ae067 PUD 20dcb8067 PMD 0 binder: 10720:10721 Release 1 refcount change on invalid ref 2 ret -22 binder: 10720:10721 BC_FREE_BUFFER u0000000000000000 no match binder: 10720:10721 DecRefs 0 refcount change on invalid ref 4 ret -22 binder: 10720:10721 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 binder: 10720:10721 BC_DEAD_BINDER_DONE 0000000000000002 not found binder: 10721 RLIMIT_NICE not set binder_alloc: 10720: binder_alloc_buf, no vma binder: 10720:10723 transaction failed 29189/-3, size 0-0 line 2947 binder: 10720:10723 ioctl c0306201 2000dfd0 returned -14 Oops: 0000 [#1] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 10718 Comm: syz-executor5 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: 0018:ffffc90000ed7cb8 EFLAGS: 00010212 RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff816741f3 RDX: 00000000000001b6 RSI: ffffc90004727000 RDI: ffff8801e130f639 RBP: ffffc90000ed7d00 R08: 0000000000000001 R09: 0000000000000001 R10: ffffc90000ed7c80 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000002c8f R14: 000000000000240c R15: 0000000000000405 FS: 00007f1c230a0700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000001df52e000 CR4: 00000000001426f0 DR0: 0000000020001000 DR1: 0000000020001000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: crypto_alg_lookup+0x31/0x50 crypto/api.c:201 crypto_larval_lookup.part.8+0x34/0x1c0 crypto/api.c:218 crypto_larval_lookup crypto/api.c:212 [inline] crypto_alg_mod_lookup+0x77/0x120 crypto/api.c:271 crypto_find_alg crypto/api.c:501 [inline] crypto_alloc_tfm+0x67/0x180 crypto/api.c:534 crypto_alloc_skcipher+0x2c/0x40 crypto/skcipher.c:927 skcipher_bind+0x51/0x90 crypto/algif_skcipher.c:323 alg_bind+0x94/0x180 crypto/af_alg.c:179 SYSC_bind+0xa8/0x130 net/socket.c:1454 SyS_bind+0x24/0x30 net/socket.c:1440 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x452a39 RSP: 002b:00007f1c2309fc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452a39 RDX: 0000000000000058 RSI: 00000000208f6000 RDI: 0000000000000013 RBP: 0000000000000554 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f6080 R13: 00000000ffffffff R14: 00007f1c230a06d4 R15: 0000000000000000 Code: 89 7d d0 e8 70 61 c4 ff 48 8b 1d 89 df a6 01 48 81 fb 60 21 0e 83 0f 84 4c 01 00 00 c7 45 c4 fe ff ff ff 45 31 e4 e8 4d 61 c4 ff <44> 8b 6b 20 41 f6 c5 60 0f 85 03 01 00 00 e8 3a 61 c4 ff 44 89 RIP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: ffffc90000ed7cb8 CR2: 0000000000000020 ---[ end trace 56d11bde6bdfbf6c ]--- binder: 10720:10723 Release 1 refcount change on invalid ref 2 ret -22 binder: 10720:10723 BC_FREE_BUFFER u0000000000000000 no match binder: 10720:10723 DecRefs 0 refcount change on invalid ref 4 ret -22 binder: 10720:10723 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 binder: 10720:10723 BC_DEAD_BINDER_DONE 0000000000000002 not found binder: 10723 RLIMIT_NICE not set binder_alloc: 10720: binder_alloc_buf, no vma binder: 10720:10721 transaction failed 29189/-3, size 0-0 line 2947 binder: 10720:10723 got reply transaction with no transaction stack binder: 10720:10723 transaction failed 29201/-71, size 32-8 line 2747 binder: 10723 RLIMIT_NICE not set BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 IP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 PGD 1e16ae067 P4D 1e16ae067 PUD 20dcb8067 PMD 0 Oops: 0000 [#2] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 10738 Comm: syz-executor5 Tainted: G D 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: 0018:ffffc90000f5bcb8 EFLAGS: 00010212 RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff816741f3 RDX: 00000000000001ac RSI: ffffc90004829000 RDI: ffff8801e130f639 RBP: ffffc90000f5bd00 R08: 0000000000000001 R09: ffffffff81674363 R10: ffffc90000f5bc80 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000002c8f R14: 000000000000240c R15: 0000000000000405 FS: 00007f1c2305e700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000001df52e000 CR4: 00000000001406f0 DR0: 0000000020001000 DR1: 0000000020001000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: crypto_alg_lookup+0x31/0x50 crypto/api.c:201 crypto_larval_lookup.part.8+0x34/0x1c0 crypto/api.c:218 crypto_larval_lookup crypto/api.c:212 [inline] crypto_alg_mod_lookup+0x77/0x120 crypto/api.c:271 crypto_find_alg crypto/api.c:501 [inline] crypto_alloc_tfm+0x67/0x180 crypto/api.c:534 crypto_alloc_skcipher+0x2c/0x40 crypto/skcipher.c:927 skcipher_bind+0x51/0x90 crypto/algif_skcipher.c:323 alg_bind+0x94/0x180 crypto/af_alg.c:179 SYSC_bind+0xa8/0x130 net/socket.c:1454 SyS_bind+0x24/0x30 net/socket.c:1440 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x452a39 RSP: 002b:00007f1c2305dc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 00007f1c2305e700 RCX: 0000000000452a39 RDX: 0000000000000058 RSI: 00000000208f6000 RDI: 0000000000000013 RBP: 0000000000a6f880 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 R13: 0000000000a6f7ff R14: 00007f1c2305e9c0 R15: 0000000000000002 Code: 89 7d d0 e8 70 61 c4 ff 48 8b 1d 89 df a6 01 48 81 fb 60 21 0e 83 0f 84 4c 01 00 00 c7 45 c4 fe ff ff ff 45 31 e4 e8 4d 61 c4 ff <44> 8b 6b 20 41 f6 c5 60 0f 85 03 01 00 00 e8 3a 61 c4 ff 44 89 RIP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: ffffc90000f5bcb8 CR2: 0000000000000020 ---[ end trace 56d11bde6bdfbf6d ]---