BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 1b1029067 P4D 1b1029067 PUD 1b3005067 PMD 0 Oops: 0010 [#1] SMP KASAN CPU: 0 PID: 21985 Comm: syz-executor3 Not tainted 4.17.0+ #84 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010: (null) Code: Bad RIP value. RSP: 0018:ffff8801ae92f3a0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8801c654b800 RCX: 1ffffffff10ea9fd RDX: ffff8801ae92fc00 RSI: ffff8801c929d680 RDI: ffff8801bab11a00 RBP: ffff8801ae92f510 R08: ffff8801aa02ee38 R09: 0000000000000006 R10: ffff8801aa02e600 R11: 0000000000000000 R12: 1ffff10035d25e79 R13: ffff8801ae92fc00 R14: ffff8801c654b812 R15: ffff8801c654bc58 FS: 00007f89a4975700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 00000001a8183000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: sock_poll+0x1d1/0x710 net/socket.c:1168 vfs_poll+0x77/0x2a0 fs/select.c:40 ep_item_poll.isra.15+0x2c1/0x390 fs/eventpoll.c:887 ep_insert+0x6b8/0x1c00 fs/eventpoll.c:1459 __do_sys_epoll_ctl fs/eventpoll.c:2113 [inline] __se_sys_epoll_ctl fs/eventpoll.c:1999 [inline] __x64_sys_epoll_ctl+0xef1/0x10f0 fs/eventpoll.c:1999 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290 sctp: [Deprecated]: syz-executor6 (pid 22018) Use of int in maxseg socket option. Use struct sctp_assoc_value instead entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455b29 Code: sctp: [Deprecated]: syz-executor6 (pid 22018) Use of struct sctp_assoc_value in delayed_ack socket option. Use struct sctp_sack_info instead 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 sctp: [Deprecated]: syz-executor6 (pid 22023) Use of int in maxseg socket option. Use struct sctp_assoc_value instead RSP: 002b:00007f89a4974c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 RAX: ffffffffffffffda RBX: 00007f89a49756d4 RCX: 0000000000455b29 RDX: 0000000000000015 RSI: 0000000000000001 RDI: 0000000000000016 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020c85000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004bba61 R14: 00000000004c89b0 R15: 0000000000000000 Modules linked in: Dumping ftrace buffer: (ftrace buffer empty) CR2: 0000000000000000 ---[ end trace bf551387e645a6d4 ]--- RIP: 0010: (null) Code: Bad RIP value. RSP: 0018:ffff8801ae92f3a0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8801c654b800 RCX: 1ffffffff10ea9fd RDX: ffff8801ae92fc00 RSI: ffff8801c929d680 RDI: ffff8801bab11a00 RBP: ffff8801ae92f510 R08: ffff8801aa02ee38 R09: 0000000000000006 R10: ffff8801aa02e600 R11: 0000000000000000 R12: 1ffff10035d25e79 R13: ffff8801ae92fc00 R14: ffff8801c654b812 R15: ffff8801c654bc58 FS: 00007f89a4975700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 00000001a8183000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400