program:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x64}}, 0x0)
openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x16, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702fb1e14000000b7030000000000008500000083000000bf090000000000005509010000000000a600000000000000bf91000000000000b7020000001600"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
close_range(r1, r3, 0x0)
[ 68.981072][ T4665] Bluetooth: hci0: command tx timeout
[ 69.074699][ T5320] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 69.079768][ T5320] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[ 69.083003][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.14.0-rc2-syzkaller #0
[ 69.086254][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.090533][ T5320] RIP: 0010:__lock_acquire+0x6a/0x2100
[ 69.093127][ T5320] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb de 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
[ 69.100430][ T5320] RSP: 0018:ffffc9000d5ef770 EFLAGS: 00010006
[ 69.103258][ T5320] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000
[ 69.106685][ T5320] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018
[ 69.109844][ T5320] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[ 69.112833][ T5320] R10: dffffc0000000000 R11: fffffbfff2036b8f R12: ffff88801f3e2440
[ 69.116166][ T5320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018
[ 69.119706][ T5320] FS: 00007f355fdf56c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 69.123785][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.126435][ T5320] CR2: 00004000000017c0 CR3: 00000000427d6000 CR4: 0000000000352ef0
[ 69.129675][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.132870][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.136164][ T5320] Call Trace:
[ 69.138003][ T5320] <TASK>
[ 69.139779][ T5320] ? __die_body+0x5f/0xb0
[ 69.142242][ T5320] ? die_addr+0xb0/0xe0
[ 69.144463][ T5320] ? exc_general_protection+0x3dd/0x5d0
[ 69.146742][ T5320] ? asm_exc_general_protection+0x26/0x30
[ 69.149007][ T5320] ? __lock_acquire+0x6a/0x2100
[ 69.150875][ T5320] ? mark_lock+0x9a/0x360
[ 69.152476][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 69.154602][ T5320] lock_acquire+0x1ed/0x550
[ 69.156189][ T5320] ? add_wait_queue+0x46/0x180
[ 69.157897][ T5320] ? __pfx_lock_acquire+0x10/0x10
[ 69.159519][ T5320] ? queue_work_on+0x25f/0x380
[ 69.161426][ T5320] ? __local_bh_enable_ip+0x168/0x200
[ 69.163737][ T5320] ? __pfx_queue_work_on+0x10/0x10
[ 69.166147][ T5320] ? __local_bh_enable_ip+0x168/0x200
[ 69.168506][ T5320] ? vsock_loopback_send_pkt+0xb6/0x100
[ 69.170722][ T5320] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 69.173016][ T5320] ? do_raw_spin_unlock+0x58/0x8b0
[ 69.174999][ T5320] _raw_spin_lock_irqsave+0xd5/0x120
[ 69.177142][ T5320] ? add_wait_queue+0x46/0x180
[ 69.179631][ T5320] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 69.183331][ T5320] ? virtio_transport_send_pkt_info+0xd13/0x10b0
[ 69.185997][ T5320] add_wait_queue+0x46/0x180
[ 69.187912][ T5320] virtio_transport_release+0x4c4/0xce0
[ 69.190184][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 69.192693][ T5320] ? __pfx_virtio_transport_release+0x10/0x10
[ 69.195354][ T5320] ? __pfx_woken_wake_function+0x10/0x10
[ 69.197991][ T5320] ? __local_bh_enable_ip+0x168/0x200
[ 69.200577][ T5320] ? __vsock_release+0xa4/0x4f0
[ 69.202735][ T5320] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 69.205088][ T5320] ? __vsock_release+0x2c/0x4f0
[ 69.207200][ T5320] ? do_raw_spin_unlock+0x58/0x8b0
[ 69.209340][ T5320] ? __vsock_release+0x3b/0x4f0
[ 69.211342][ T5320] __vsock_release+0xf1/0x4f0
[ 69.213081][ T5320] vsock_release+0x97/0x100
[ 69.214854][ T5320] sock_close+0xbc/0x240
[ 69.216800][ T5320] ? __pfx_sock_close+0x10/0x10
[ 69.218997][ T5320] __fput+0x3e9/0x9f0
[ 69.220715][ T5320] task_work_run+0x24f/0x310
[ 69.222548][ T5320] ? _raw_spin_unlock+0x28/0x50
[ 69.224439][ T5320] ? __pfx_task_work_run+0x10/0x10
[ 69.226410][ T5320] ? syscall_exit_to_user_mode+0xa3/0x340
[ 69.228538][ T5320] syscall_exit_to_user_mode+0x13f/0x340
[ 69.230785][ T5320] do_syscall_64+0x100/0x230
[ 69.232676][ T5320] ? clear_bhb_loop+0x35/0x90
[ 69.234993][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.237983][ T5320] RIP: 0033:0x7f356398cde9
[ 69.239981][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 69.247166][ T5320] RSP: 002b:00007f355fdf5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 69.250476][ T5320] RAX: 0000000000000000 RBX: 00007f3563ba5fa0 RCX: 00007f356398cde9
[ 69.254102][ T5320] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 000000000000000a
[ 69.257013][ T5320] RBP: 00007f3563a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 69.260128][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.263165][ T5320] R13: 0000000000000000 R14: 00007f3563ba5fa0 R15: 00007ffe3eb4a108
[ 69.266019][ T5320] </TASK>
[ 69.267302][ T5320] Modules linked in:
[ 69.268845][ T5320] ---[ end trace 0000000000000000 ]---
[ 69.271473][ T5320] RIP: 0010:__lock_acquire+0x6a/0x2100
[ 69.274060][ T5320] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb de 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
[ 69.281841][ T5320] RSP: 0018:ffffc9000d5ef770 EFLAGS: 00010006
[ 69.284172][ T5320] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000
[ 69.287881][ T5320] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018
[ 69.291127][ T5320] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[ 69.294212][ T5320] R10: dffffc0000000000 R11: fffffbfff2036b8f R12: ffff88801f3e2440
[ 69.297105][ T5320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018
[ 69.300071][ T5320] FS: 00007f355fdf56c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 69.303624][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.306827][ T5320] CR2: 00004000000017c0 CR3: 00000000427d6000 CR4: 0000000000352ef0
[ 69.310771][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.313956][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.317402][ T5320] Kernel panic - not syncing: Fatal exception
[ 69.320091][ T5320] Kernel Offset: disabled
[ 69.321866][ T5320] Rebooting in 86400 seconds..