[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   14.307963] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   18.639725] random: sshd: uninitialized urandom read (32 bytes read)
[   19.169779] random: sshd: uninitialized urandom read (32 bytes read)
[   20.291201] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts.
[   25.738171] random: sshd: uninitialized urandom read (32 bytes read)
2018/07/20 16:53:38 fuzzer started
[   27.675322] random: cc1: uninitialized urandom read (8 bytes read)
2018/07/20 16:53:42 dialing manager at 10.128.0.26:36283
2018/07/20 16:53:43 syscalls: 1180
2018/07/20 16:53:43 code coverage: enabled
2018/07/20 16:53:43 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/07/20 16:53:43 setuid sandbox: enabled
2018/07/20 16:53:43 namespace sandbox: enabled
2018/07/20 16:53:43 fault injection: CONFIG_FAULT_INJECTION is not enabled
2018/07/20 16:53:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/07/20 16:53:43 net packed injection: enabled
2018/07/20 16:53:43 net device setup: enabled
[   31.904204] random: crng init done
16:54:05 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x81000200000002, &(0x7f0000000140)=0x78, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af)
write$binfmt_elf64(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x4e0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='vegas\x00', 0xffaf)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/20, 0x14}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x858)

16:54:05 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc)

16:54:05 executing program 7:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r1, 0x0)
r2 = accept4$unix(r1, 0x0, &(0x7f0000000000)=0x21, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
socket$unix(0x1, 0x0, 0x0)
getpeername(r2, &(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, <r3=>0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140))

16:54:05 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082)
memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)

16:54:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001200050a000000000000000000000000", @ANYBLOB="0000000000000000140012000c00010069706970000000000400040008000a0002000000222d1684fc1c18e942a73ff7dd2a6104fc59fbd71861f6bf3a01eaaf17866b181ea400bf0e37e8a67ab44e2add0540ff8a3859692d8815d532297f91d18f231ba4cc56a8f5e81d0ae0cde92252430eab1a64a7702c04dfbb69a576c70b8d810f765aa594cb9117c89ed7268059c1922f1386443c1f7651fe02aa4fe7b8ac89"], 0x2}, 0x1}, 0x0)

16:54:05 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x1, 0x0, 0x7ff}, [{0x0, 0x0, 0x0, 0x10001}]}, 0x78)
write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000006400000000000000000000007938dc47000000000000000000000000000000000000000000000000000000000000"], 0x58)

16:54:05 executing program 6:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r1 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000100)=0x7fffffff, 0x356)
sendto$unix(r1, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)

16:54:05 executing program 1:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77}, 0xb)

[   52.750842] IPVS: Creating netns size=2536 id=1
[   52.828456] IPVS: Creating netns size=2536 id=2
[   52.917987] IPVS: Creating netns size=2536 id=3
[   52.962487] IPVS: Creating netns size=2536 id=4
[   53.005547] IPVS: Creating netns size=2536 id=5
[   53.063872] IPVS: Creating netns size=2536 id=6
[   53.119283] IPVS: Creating netns size=2536 id=7
[   53.191169] IPVS: Creating netns size=2536 id=8
[   53.535670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   53.575485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   53.595777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   53.663941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   53.734078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   53.795917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   53.830736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   53.870534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   53.890543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   53.920120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   53.932224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   53.956131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   53.969675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   54.006160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   54.066544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   54.090221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   54.124435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   54.143371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   54.150655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   54.161855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   54.183783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   54.197550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   54.208081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   54.215066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   54.256571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   54.287033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   54.294604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   54.312952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   54.358029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   54.375768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   54.408719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   54.416923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.424882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.444572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   54.453614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   54.461059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   54.470083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   54.480883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.491797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.499699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.507395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.515456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   54.523206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   54.532348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   54.544733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   54.553215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.562503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.583113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   54.591468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   54.599646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   54.621944] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   54.638876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   54.645991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.660506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.670486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   54.680031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   54.688216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.695714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.703967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.711844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.724129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   54.731879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   54.749769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   54.757184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   54.765862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.781182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.805488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   54.818598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.826097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.879037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   54.904139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   54.926464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.934134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.945488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   54.989803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   54.998631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   55.010099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.020876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.047586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   55.055287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   55.063756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   55.078638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.086125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.098960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   55.109136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.116630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.125425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   55.138651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   55.149111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.156605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.205426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   55.216577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.225869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.251720] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   55.272191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.280123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.976158] ip (4802) used greatest stack depth: 23976 bytes left
[   57.369731] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   57.400034] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   57.457775] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   57.571212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.585053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.596369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.614345] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   57.623970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.632444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.651189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.668999] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.676349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.692538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.712498] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   57.821604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   57.846066] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.858741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.865460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.881673] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.898278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.904993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.935967] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   58.047965] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   58.054157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.061492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.077962] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   58.127302] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   58.133418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.140846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.268566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   58.274992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.286219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
16:54:11 executing program 3:
r0 = socket$inet(0x2, 0x801, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x400000000003, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffedb)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/163)
socket$inet(0x2, 0x80000, 0xf42)
connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10)
connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
connect(r0, &(0x7f0000000000)=@un=@abs, 0x80)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x3, 0x3, 0x9, 0x1, 0x502b}})

16:54:11 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$selinux_user(r1, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES64=r1], 0x23)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r1, 0x800007)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
splice(r3, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x7, 0x1)
fsync(r3)
ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000005c0)=""/4096)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000040)={0x1})

16:54:11 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x6, 0x4)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x2)
getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc)

16:54:11 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4000, 0x0)
ioctl(r0, 0x100000000, &(0x7f0000000000)='F')
mremap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil)
mlock2(&(0x7f00002d3000/0x3000)=nil, 0x3000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00')
ioctl$KDENABIO(r1, 0x4b36)

16:54:12 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)="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")
sendfile(r0, r0, &(0x7f0000000100)=0x804, 0x1)
close(r0)

16:54:12 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677219a66f75705f69", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00'])
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0)
pwrite64(r0, &(0x7f00000000c0)="6e1871e9f4c3cc613a200205f4b743bb2e953d294e49705bd91776c8972fbf9a6b743083a7eccf43dc557b8d9f510ed74645e613c2ee65f20f9584759d7a886e2352e10082061342588b24181c3184684e3906c3e474af7013b6b07351a926d0b3180ec020d51f5be0372671ffc14e8baf7c74ca8b6f16bb6407d5e595ed824409ba57549c3c5a239d9e7f1f0df8266af225e2f9", 0x94, 0x0)

16:54:12 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x6)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_pts(r2, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x9)
ioctl$TCFLSH(r2, 0x540b, 0x5)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x81, 0x80)

16:54:12 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x80000001, 0x4)
recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x37, &(0x7f00000006c0), 0x38a, &(0x7f0000003040)=""/4096, 0x1000}, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000080)={@empty, @loopback=0x7f000001}, 0xc)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000006c0)=0xfffffffffffffff9, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000000040)={'lo\x00', @ifru_names='lo\x00'})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x60800, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000040)="ff", 0x1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r3=>0x0)
ptrace$setopts(0x4206, r3, 0x4, 0xfba362d085a572de)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
write$P9_RSETATTR(r2, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000200))
ptrace$getregs(0xe, r3, 0xfffffffffffffffc, &(0x7f00000001c0))
epoll_create(0xb91)
bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
rt_sigreturn()
sendto$inet(r0, &(0x7f00000000c0)="a2dfe1016521f4d2a4ff06d1125d390d468295cca58531fd782a46a5dcf62701a39ee1558c831abca97af5600c94c4085115847f88516ff121f8732c58c967c19350bf093fadd8cf12d16d46f3f8268f95df19c4d0c53473aae2dcb21c2b2ea4e8096d086f33ab5382acf7bff897a776cd54f6ca213d80aba4ee1b6fdc4f76cbe8f28951389184209d21c952126bccac672377e331bdd84ca9", 0x99, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000300))

16:54:12 executing program 4:
mkdir(&(0x7f000000dff6)='./control\x00', 0x0)
r0 = open$dir(&(0x7f00000000c0)='./control\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./control\x00')
r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0)
r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000400)='./control/file0\x00')
renameat2(r1, &(0x7f0000000000)='./control\x00', r2, &(0x7f0000000040)='./control\x00', 0x0)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140))
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x204, 0x70bd28, 0x25dfdbfe, {0x2}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x6e}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000)

16:54:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$addseals(r0, 0x409, 0x7)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100225bd7000fddbdf250100000008000600010000804c0003350300030002000000080800000000000014000600fe8000000000000000000000000000bb08000500ac7b9f4124ef8b622b8000000000000000000000000000120800030000000000"], 0x68}, 0x1}, 0x40)
write(r0, &(0x7f0000000000)="2400000024007fffffff9e0000007701000000ff0100000000000000f1ffffff0100ff10", 0x24)
recvfrom$unix(r0, &(0x7f00000001c0)=""/33, 0x21, 0x40000001, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e)

16:54:12 executing program 7:
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0)

16:54:12 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cd9ff4)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000084fffc))
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cba000)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000))
r2 = dup3(r1, r0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000000c0))

16:54:12 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x80}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x100, @ipv4={[], [0xff, 0xff]}, 0xabd6}, 0x1c)
sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0xc, 0x29, 0x3b}], 0xc}}], 0x2, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
bind(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x3, 0x3, 0x0, 0x1}}, 0x80)
write$P9_RSTAT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="430000007d02ec00003c005c3100000000200000000002000000000000000000081000080000fffbffffe509000000000000030021403a06007b707070302d00000000"], 0x43)

16:54:12 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = socket(0x11, 0x2, 0x0)
dup2(r2, r0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0xfffffffe8000201f})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x9, 0x800, 0x7})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1})
ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300), &(0x7f0000000340), 0x8)

16:54:12 executing program 1:
r0 = timerfd_create(0x5, 0x80800)
fstat(r0, &(0x7f0000000080))
r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffffffe)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0)
r4 = getpgrp(0xffffffffffffffff)
capset(&(0x7f0000000140)={0x20071026, r4}, &(0x7f0000000180)={0x3, 0x7fffffff, 0x3, 0x4, 0x4, 0x7})
fchdir(r3)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x1000})
fdatasync(r5)

16:54:12 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0x100, 0x7f1d)
sendto$inet6(r0, &(0x7f0000000140)="0303000007005b0000000000fff55b4202938207d9bb37c81e1bbbed5bcc7cb26111b8301ee616d5c01843000000000053c0f485472da7222a2bb401000000c3b5003500f55dc667b3009b000000faffffff00000000aeb46245004bad2a66c9c19bc6e3408804", 0x3a8, 0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x210800800, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x1d}}, 0x1c)

16:54:12 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000070000000000000000000000010015004e2000f16ae63d80d9171adceb00020013000200000027bd70000435000002000b00d40000000800000000000000006c9fd7a8333fa5cefb8e1cf53b679d8e19ace9cd596a75a6500dc06cb3754940807cd131436c15af72c1bea17a4441454561aa6e3142776668c6c979c1cb3476565657aced0786fb86ea60c84c3c46dba5289f717cb5eefe68f1bbe41191a90d6bac0eeed4"], 0x38}, 0x1}, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x200000004, 0x1ffff)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0xfffffd6c)

[   59.850248] capability: warning: `syz-executor1' uses deprecated v2 capabilities in a way that may be insecure
16:54:12 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x13)

16:54:12 executing program 7:
mkdir(&(0x7f00000011c0)='./file0\x00', 0x20)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001100)='/dev/rfkill\x00', 0x30001, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000001180)='cgroup,systemselinux\x00', 0x15, 0x1)
mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040))
connect$l2tp(r2, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80}, 0x4}}}, 0x32)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e)

16:54:12 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x1, 0x4)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0)
ioctl$TIOCCBRK(r1, 0x5428)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000005})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200)

16:54:12 executing program 6:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380))
mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000680)='bdev\x00', 0x20004, &(0x7f00000009c0))
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='bdev*%selinux/\x00', &(0x7f00000000c0)='cgroup.stat\x00', &(0x7f0000000100)='ppp1\x00', &(0x7f0000000140)='ramfs\x00', &(0x7f0000000180)='mslos\x00', &(0x7f0000000200)='cgroup.stat\x00', &(0x7f0000000240)='ramfs\x00'], &(0x7f0000000380)=[&(0x7f00000002c0)='\x00', &(0x7f0000000340)='security\x00'])
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000))
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000480))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)
ioctl$TIOCSBRK(r1, 0x5427)

16:54:12 executing program 1:
r0 = getpid()
ptrace$pokeuser(0x6, r0, 0x5, 0x81)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f657865000008843d7909004bddd9f191be10eebf000ee9fffbc74ace7d000054fa07424adee916d2da75afe70b35a0fda071fb35331ce39b120bf9359c5a6568641006d7c020637405ab73e72926e3332653")
flistxattr(r1, &(0x7f0000000200)=""/8, 0x0)
accept4$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14, 0x80800)

16:54:12 executing program 5:
r0 = timerfd_create(0x0, 0x40000)
fcntl$setstatus(r0, 0x4, 0x42c00)
fcntl$setstatus(r0, 0x4, 0x40000)

[   60.009136] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080
[   60.017370] IP: [<ffffffff836c1180>] l2tp_session_create+0xc60/0x16f0
[   60.024048] PGD 1b8cfa067 [   60.026688] PUD 1cad1c067 
PMD 0 [   60.030171] 
[   60.031794] Oops: 0002 [#1] PREEMPT SMP KASAN
[   60.036266] Dumping ftrace buffer:
[   60.039777]    (ftrace buffer empty)
[   60.043461] Modules linked in:
[   60.046750] CPU: 0 PID: 6054 Comm: syz-executor7 Not tainted 4.9.113-g47bbcd6 #14
[   60.054341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   60.063675] task: ffff8801c99a9800 task.stack: ffff8801b6390000
[   60.069703] RIP: 0010:[<ffffffff836c1180>]  [<ffffffff836c1180>] l2tp_session_create+0xc60/0x16f0
[   60.078812] RSP: 0018:ffff8801b6397ab0  EFLAGS: 00010246
[   60.084232] RAX: 0000000000000000 RBX: ffff8801ce102280 RCX: 1ffff1003933541d
[   60.091475] RDX: 1ffff1003941e210 RSI: ffff8801c99aa0c8 RDI: ffff8801ca0f1080
[   60.098719] RBP: ffff8801b6397b50 R08: ffff8801c99aa0e8 R09: 0000000000000000
[   60.105960] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ca0f0f58
[   60.113205] R13: 0000000000000000 R14: ffff8801ca0f0f00 R15: ffff8801b6397c68
[   60.120450] FS:  0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f574fb40
[   60.128649] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   60.134505] CR2: 0000000000000080 CR3: 00000001c5672000 CR4: 00000000001606f0
[   60.141751] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   60.148995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   60.156238] Stack:
[   60.158358]  0000000000000201 ffffffff836c2491 ffff8801b6397ad0 ffffffff81235c4d
[   60.166347]  ffff8801ca0f0f00 ffff8801ce1023d8 ffff8801ca0f0f58 ffff8801ce1023d0
[   60.174333]  ffff8801ce102330 ffff8801ca0f0f20 0000000000000000 0000000000000000
[   60.182321] Call Trace:
[   60.184884]  [<ffffffff836c2491>] ? l2tp_session_get+0x1d1/0x790
[   60.191004]  [<ffffffff81235c4d>] ? trace_hardirqs_on+0xd/0x10
[   60.196950]  [<ffffffff836c6337>] pppol2tp_connect+0x10d7/0x18f0
[   60.203069]  [<ffffffff836c5260>] ? pppol2tp_seq_show+0xc30/0xc30
[   60.209276]  [<ffffffff81cf28ef>] ? security_socket_connect+0x8f/0xc0
[   60.215830]  [<ffffffff83017958>] SYSC_connect+0x1b8/0x300
[   60.221429]  [<ffffffff830177a0>] ? SYSC_bind+0x280/0x280
[   60.226941]  [<ffffffff815d7610>] ? get_unused_fd_flags+0xd0/0xd0
[   60.233153]  [<ffffffff812d9d70>] ? compat_SyS_get_robust_list+0x310/0x310
[   60.240138]  [<ffffffff83019951>] ? SyS_socket+0x121/0x1b0
[   60.245739]  [<ffffffff83019830>] ? move_addr_to_kernel+0x50/0x50
[   60.251944]  [<ffffffff8301a224>] SyS_connect+0x24/0x30
[   60.257280]  [<ffffffff8301a200>] ? SyS_accept+0x30/0x30
[   60.262705]  [<ffffffff81006da7>] do_fast_syscall_32+0x2f7/0x870
[   60.268820]  [<ffffffff81003036>] ? trace_hardirqs_off_thunk+0x1a/0x1c
[   60.275462]  [<ffffffff839fb690>] entry_SYSENTER_compat+0x90/0xa2
[   60.281663] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 <f0> ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 
[   60.308413] RIP  [<ffffffff836c1180>] l2tp_session_create+0xc60/0x16f0
[   60.315173]  RSP <ffff8801b6397ab0>
[   60.318769] CR2: 0000000000000080
[   60.322209] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080
[   60.330435] IP:[   60.331376] ---[ end trace 23d6670611305bbf ]---
[   60.331381] Kernel panic - not syncing: Fatal exception
[   60.342201]  [<ffffffff836bcd0c>] l2tp_session_free+0x11c/0x200
[   60.348251] PGD 1b8cfa067 [   60.350895] PUD 1cad1c067 
PMD 0 [   60.354380] 
[   60.356004] Oops: 0002 [#2] PREEMPT SMP KASAN
[   60.360473] Dumping ftrace buffer:
[   60.363985]    (ftrace buffer empty)
[   60.367670] Modules linked in:
[   60.370967] CPU: 1 PID: 6052 Comm: syz-executor7 Tainted: G      D         4.9.113-g47bbcd6 #14
[   60.379773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   60.389104] task: ffff8801a565b000 task.stack: ffff8801c5798000
[   60.395132] RIP: 0010:[<ffffffff836bcd0c>]  [<ffffffff836bcd0c>] l2tp_session_free+0x11c/0x200
[   60.403983] RSP: 0018:ffff8801c579fb38  EFLAGS: 00010246
[   60.409408] RAX: dffffc0000000000 RBX: ffff8801ce102280 RCX: 0000000000000000
[   60.416655] RDX: 1ffff1003941e210 RSI: ffffffff836bcce1 RDI: ffff8801ca0f1080
[   60.423903] RBP: ffff8801c579fb58 R08: ffff8801a565b8e8 R09: 0000000000000000
[   60.431147] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ca0f0f00
[   60.438395] R13: ffff8801ce102288 R14: 0000000000000000 R15: ffff8801ca0f0f58
[   60.445642] FS:  0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:000000000a111900
[   60.453841] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   60.459707] CR2: 0000000000000080 CR3: 00000001c5672000 CR4: 00000000001606f0
[   60.466958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   60.474206] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   60.481447] Stack:
[   60.483569]  ffff8801ce102328 dffffc0000000000 ffff8801ce102280 0000000000000000
[   60.491565]  ffff8801c579fbb0 ffffffff836bd594 ffff8801ca0f0fd8 ffffed003941e1eb
[   60.499565]  ffff8801ca0f0f58 ffff8801ca0f0f20 ffff8801ca0f0f00 ffff8801b75d1380
[   60.507567] Call Trace:
[   60.510132]  [<ffffffff836bd594>] l2tp_tunnel_closeall+0x284/0x350
[   60.516788]  [<ffffffff836bddc2>] l2tp_tunnel_destruct+0x2f2/0x590
[   60.523084]  [<ffffffff836bdc7a>] ? l2tp_tunnel_destruct+0x1aa/0x590
[   60.529550]  [<ffffffff836bdad0>] ? l2tp_tunnel_del_work+0x470/0x470
[   60.536020]  [<ffffffff83013be0>] ? sock_release+0x1c0/0x1c0
[   60.541794]  [<ffffffff83021095>] __sk_destruct+0x55/0x590
[   60.547392]  [<ffffffff83013be0>] ? sock_release+0x1c0/0x1c0
[   60.553167]  [<ffffffff83028b23>] sk_destruct+0x63/0x80
[   60.558503]  [<ffffffff83028b8f>] __sk_free+0x4f/0x220
[   60.563756]  [<ffffffff83028d8b>] sk_free+0x2b/0x40
[   60.568747]  [<ffffffff836bcd8c>] l2tp_session_free+0x19c/0x200
[   60.574780]  [<ffffffff836c45f2>] pppol2tp_session_destruct+0xd2/0x110
[   60.581422]  [<ffffffff836c4520>] ? pppol2tp_seq_start+0x4e0/0x4e0
[   60.587714]  [<ffffffff83021095>] __sk_destruct+0x55/0x590
[   60.593313]  [<ffffffff83013be0>] ? sock_release+0x1c0/0x1c0
[   60.599088]  [<ffffffff83028b23>] sk_destruct+0x63/0x80
[   60.604427]  [<ffffffff83028b8f>] __sk_free+0x4f/0x220
[   60.609678]  [<ffffffff83028d8b>] sk_free+0x2b/0x40
[   60.614670]  [<ffffffff836c78f9>] pppol2tp_release+0x239/0x2e0
[   60.620622]  [<ffffffff83013ab6>] sock_release+0x96/0x1c0
[   60.626132]  [<ffffffff83013bf6>] sock_close+0x16/0x20
[   60.631384]  [<ffffffff815782e3>] __fput+0x263/0x700
[   60.636465]  [<ffffffff81578805>] ____fput+0x15/0x20
[   60.641544]  [<ffffffff8119838c>] task_work_run+0x10c/0x180
[   60.647232]  [<ffffffff8100559c>] exit_to_usermode_loop+0xfc/0x120
[   60.653524]  [<ffffffff81007073>] do_fast_syscall_32+0x5c3/0x870
[   60.659642]  [<ffffffff81003036>] ? trace_hardirqs_off_thunk+0x1a/0x1c
[   60.666283]  [<ffffffff839fb690>] entry_SYSENTER_compat+0x90/0xa2
[   60.672488] Code: 49 8d bc 24 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c6 00 00 00 4d 8b b4 24 80 01 00 00 <f0> 41 ff 8e 80 00 00 00 74 69 e8 55 1d ca fd 4c 89 ea 48 b8 00 
[   60.699523] RIP  [<ffffffff836bcd0c>] l2tp_session_free+0x11c/0x200
[   60.706030]  RSP <ffff8801c579fb38>
[   60.709630] CR2: 0000000000000080
[   60.713537] Dumping ftrace buffer:
[   60.717063]    (ftrace buffer empty)
[   60.720745] Kernel Offset: disabled
[   60.724346] Rebooting in 86400 seconds..