[Moto G4 Play ROMs, Kernels, Recoveries, & Other De] spiked_mistborn:
VPN disconnect reboot

I found a reproducible bug that causes a reboot with the r18 kernel. When using the built-in Android VPN feature the phone reboots as soon as I click disconnect. I tested with the stock kernel and it works fine, also tested with and without SuperSu. Phone is a xt1607 running stock ROM 6.0.1. The VPN type is PPTP.

<1>[ 328.175881,1] Unable to handle kernel NULL pointer dereference at virtual address 00000004
<1>[ 328.175928,1] pgd = c0004000
<1>[ 328.175946,1] [00000004] *pgd=00000000
<0>[ 328.175977,1] Internal error: Oops: 5 [#1] PREEMPT SMP ARM
<4>[ 328.175995,1] Modules linked in:
<4>[ 328.176025,1] CPU: 1 PID: 9399 Comm: pppd Tainted: G W 3.10.104-r18-g15931b7-03706-gec43596 #2
<4>[ 328.176046,1] task: c5fa78c0 ti: dc0f4000 task.ti: dc0f4000
<4>[ 328.176081,1] PC is at ppp_unregister_channel+0x200/0x2c0
<4>[ 328.176106,1] LR is at _raw_spin_unlock_irqrestore+0x28/0x48
<4>[ 328.176129,1] pc : [<c06ca324>] lr : [<c0e1b918>] psr: 600f0013
<4>[ 328.176129,1] sp : dc0f5da0 ip : 00000091 fp : d2f00548
<4>[ 328.176153,1] r10: dfdc9a60 r9 : dfdc9a60 r8 : dee68fcc
<4>[ 328.176172,1] r7 : ccafb590 r6 : c15cdc40 r5 : e2d848cc r4 : dee68f80
<4>[ 328.176191,1] r3 : 00000004 r2 : 00000000 r1 : 00000000 r0 : 00000000
<4>[ 328.176212,1] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
<4>[ 328.176232,1] Control: 10c0383d Table: a2b2c06a DAC: 00000015
<0>[ 328.176250,1] Process pppd (pid: 9399, stack limit = 0xdc0f4238)
<0>[ 328.176268,1] Stack: (0xdc0f5da0 to 0xdc0f6000)
<0>[ 328.176299,1] 5da0: e1506400 00000000 c2a16d00 e3b61010 dfdc9a40 c06d0934 e1506400 c06d3cac
<0>[ 328.176327,1] 5dc0: dfdc9a60 00000000 dfcadf68 e3b61010 00000008 c0bc2b14 d2f00540 00000000
<0>[ 328.176356,1] 5de0: dfcadf68 c02934a8 00000000 00000000 e2fffa90 c5fa7d44 00000000 c16490b8
<0>[ 328.176384,1] 5e00: c5fa78c0 de508540 de508574 00418004 fffffdfe c015d770 c5fa78c0 002f002f
<0>[ 328.176412,1] 5e20: dc0f4000 c5fa7d64 c5fa78c0 00000001 dc0f4000 c0138c5c 00000000 00000000
<0>[ 328.176440,1] 5e40: 00000002 e1316000 002f002f c0e1e388 c5fa78c0 56e80405 e131601c dc0f5ee8
<0>[ 328.176468,1] 5e60: fffffdfe c013a76c dc0f4000 00000009 c29d4000 dc0f5ee8 c0f01c48 c014d950
<0>[ 328.176497,1] 5e80: 603d2b40 0000004c c151d290 da5e4ec0 c15e1064 da5e53c4 418004fc 00040005
<0>[ 328.176525,1] 5ea0: 00040006 dc0f5ed4 c25ee300 dc0f4000 dc0f5fb0 c151c408 dc0f5ed4 dc0f5ee8
<0>[ 328.176554,1] 5ec0: b6d980f8 b6d980fc fffffdfe c01111a4 0000000a c0e1b418 0000000a c0e1b918
<0>[ 328.176582,1] 5ee0: 0000000a c013d950 00000009 00000000 00000000 00000000 00000000 00000000
<0>[ 328.176610,1] 5f00: c151c408 fffffdfe 00000000 be86a810 00000008 00000000 dc0f4000 c02ac660
<0>[ 328.176638,1] 5f20: dc0f5f4c 00000000 be86a840 00000000 be86a8c0 000006bf 00000807 310fd355
<0>[ 328.176666,1] 5f40: 00000000 000006bf 30898980 00000807 310fd355 000006bf 30898980 000006bf
<0>[ 328.176696,1] 5f60: 2a78fbd9 000006bf 2a78fbd9 56e80405 c010db64 dc0f4000 dc0f4000 dc0f4000
<0>[ 328.176724,1] 5f80: dc0f5fb0 c010db64 dc0f4000 00000000 b6fc7d54 c01116c0 be86a810 00000000
<0>[ 328.176752,1] 5fa0: 000006bf 0000014f c010db64 c010da28 00000008 be86a840 00000000 be86a8c0
<0>[ 328.176780,1] 5fc0: be86a810 00000000 000006bf 0000014f be86a840 00000008 b6f7fbd1 b6fc7d54
<0>[ 328.176808,1] 5fe0: be86a808 be86a7f8 b6d704c9 b6d980f8 40070010 00000008 00000000 00252522
<4>[ 328.176853,1] [<c06ca324>] (ppp_unregister_channel) from [<c06d0934>] (pppox_unbind_sock+0x1c/0x28)
<4>[ 328.176892,1] [<c06d0934>] (pppox_unbind_sock) from [<c06d3cac>] (pppopns_release+0xe0/0x118)
<4>[ 328.176926,1] [<c06d3cac>] (pppopns_release) from [<c0bc2b14>] (sock_close+0x24/0xac)
<4>[ 328.176961,1] [<c0bc2b14>] (sock_close) from [<c02934a8>] (____fput+0x98/0x224)
<4>[ 328.176993,1] [<c02934a8>] (____fput) from [<c015d770>] (task_work_run+0xb8/0xf4)
<4>[ 328.177031,1] [<c015d770>] (task_work_run) from [<c0138c5c>] (do_exit+0x304/0x9c0)
<4>[ 328.177061,1] [<c0138c5c>] (do_exit) from [<c013a76c>] (do_group_exit+0x38/0xb0)
<4>[ 328.177093,1] [<c013a76c>] (do_group_exit) from [<c014d950>] (get_signal_to_deliver+0x324/0x668)
<4>[ 328.177127,1] [<c014d950>] (get_signal_to_deliver) from [<c01111a4>] (do_signal+0x9c/0x458)
<4>[ 328.177162,1] [<c01111a4>] (do_signal) from [<c01116c0>] (do_work_pending+0x74/0xbc)
<4>[ 328.177194,1] [<c01116c0>] (do_work_pending) from [<c010da28>] (work_pending+0xc/0x20)
<0>[ 328.177223,1] Code: e5940064 e2803004 f57ff05b f5d3f000 (e1932f9f)
<4>[ 328.177947,3] ---[ end trace 55110d0257cc6671 ]---