should_failslab+0x9/0x14 mm/slab_common.c:1522
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 __do_kmalloc mm/slab.c:3716 [inline]
 __kmalloc+0x2c8/0x760 mm/slab.c:3727
 kmalloc include/linux/slab.h:518 [inline]
 sock_kmalloc+0x14e/0x1d0 net/core/sock.c:2009
 af_alg_alloc_areq+0x7b/0x270 crypto/af_alg.c:1090
 _aead_recvmsg crypto/algif_aead.c:157 [inline]
 aead_recvmsg+0x1c3/0x1ba0 crypto/algif_aead.c:334
BUG: unable to handle kernel NULL pointer dereference
 at 0000000000000000
PGD 1adf41067 
P4D 1adf41067 
PUD 1b4f1e067 
 sock_recvmsg_nosec net/socket.c:818 [inline]
 sock_recvmsg+0xd0/0x110 net/socket.c:825
PMD 0 
 ___sys_recvmsg+0x2b6/0x680 net/socket.c:2323
Oops: 0010 [#1] SMP KASAN
CPU: 0 PID: 25733 Comm: syz-executor1 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:          (null)
Code: 
Bad RIP value.
RSP: 0018:ffff8801c91a7590 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8801ad2ca800 RCX: 1ffffffff10ea9fd
RDX: ffff8801c91a7ab0 RSI: ffff8801d1e36a00 RDI: ffff8801d93a1d40
RBP: ffff8801c91a7700 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10039234eb7
R13: ffff8801c91a7ab0 R14: ffff8801ad2ca812 R15: ffff8801ad2cac58
FS:  00007f8f79803700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000001c7b13000 CR4: 00000000001406f0
 __sys_recvmsg+0x112/0x260 net/socket.c:2372
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __do_sys_recvmsg net/socket.c:2382 [inline]
 __se_sys_recvmsg net/socket.c:2379 [inline]
 __x64_sys_recvmsg+0x78/0xb0 net/socket.c:2379
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 sock_poll+0x1d1/0x710 net/socket.c:1168
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 
 vfs_poll+0x77/0x2a0 fs/select.c:40
1d 
 do_pollfd fs/select.c:848 [inline]
 do_poll fs/select.c:896 [inline]
 do_sys_poll+0x6fd/0x1100 fs/select.c:990
ba 
fb 
ff 
c3 
66 
2e 0f 
1f 
84 
00 
00 00 
00 
00 
66 
90 
48 
89 
f8 
48 
 __do_sys_poll fs/select.c:1048 [inline]
 __se_sys_poll fs/select.c:1036 [inline]
 __x64_sys_poll+0x189/0x510 fs/select.c:1036
89 f7 
48 
89 
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
d6 
48 
89 
ca 
4d 
89 
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
c2 4d 
RIP: 0033:0x455b29
89 
Code: 
c8 
1d 
4c 
ba 
8b 
fb 
4c 
ff 
24 
c3 
08 
66 
0f 
2e 
05 
0f 
<48> 
1f 
3d 
84 
01 
00 
f0 
00 
ff ff 
00 
0f 
00 
83 
00 
eb b9 
66 
fb 
90 
ff 
48 
c3 
89 
66 
f8 
2e 
48 
0f 
89 
1f 
f7 
84 
48 
00 00 00 
89 
00 
d6 48 
89 
RSP: 002b:00007fc2c24cdc68 EFLAGS: 00000246
ca 
 ORIG_RAX: 000000000000002f
4d 89 
RAX: ffffffffffffffda RBX: 00007fc2c24ce6d4 RCX: 0000000000455b29
c2 
RDX: 0000000000000000 RSI: 00000000200015c0 RDI: 0000000000000014
4d 
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
89 
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
c8 
R13: 00000000004c084a R14: 00000000004cffc8 R15: 0000000000000000
4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007f8f79802c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
RAX: ffffffffffffffda RBX: 00007f8f798036d4 RCX: 0000000000455b29
RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000020000040
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004c05f4 R14: 00000000004cfae8 R15: 0000000000000000
Modules linked in:
netlink: 12 bytes leftover after parsing attributes in process `syz-executor0'.
Dumping ftrace buffer:
   (ftrace buffer empty)
CR2: 0000000000000000
---[ end trace 1f7311f76bdb11c2 ]---
RIP: 0010:          (null)
Code: Bad RIP value.
RSP: 0018:ffff8801c91a7590 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8801ad2ca800 RCX: 1ffffffff10ea9fd
RDX: ffff8801c91a7ab0 RSI: ffff8801d1e36a00 RDI: ffff8801d93a1d40
RBP: ffff8801c91a7700 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10039234eb7
IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready
R13: ffff8801c91a7ab0 R14: ffff8801ad2ca812 R15: ffff8801ad2cac58
FS:  00007f8f79803700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000001c7b13000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400