DUID 00:04:ef:eb:16:6a:bb:4b:eb:e8:98:52:3b:5c:58:f5:72:fb forked to background, child pid 3208 [ 37.894388][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.914339][ T3209] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.95' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 61.250182][ T3635] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 61.262038][ T3635] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 61.270466][ T3635] CPU: 1 PID: 3635 Comm: syz-executor159 Not tainted 6.1.22-syzkaller #0 [ 61.278914][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 61.288966][ T3635] RIP: 0010:io_poll_remove_entries+0x39a/0x5f0 [ 61.295163][ T3635] Code: c4 40 4c 89 e0 48 c1 e8 03 4d 89 fd 42 80 3c 38 00 74 08 4c 89 e7 e8 e5 19 b2 fd 49 8b 1c 24 4c 8d 7b 08 4d 89 fe 49 c1 ee 03 <43> 80 3c 2e 00 74 08 4c 89 ff e8 c7 19 b2 fd 49 8b 2f 48 85 ed 0f [ 61.314776][ T3635] RSP: 0018:ffffc90003b2f9d0 EFLAGS: 00010202 [ 61.320843][ T3635] RAX: 1ffff11003e87a08 RBX: 0000000000000000 RCX: ffff888026ae9d40 [ 61.328814][ T3635] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 61.336782][ T3635] RBP: 0000000001000000 R08: ffffffff842d9385 R09: fffffbfff204de31 [ 61.344752][ T3635] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801f43d040 [ 61.352740][ T3635] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000008 [ 61.360711][ T3635] FS: 0000555555928300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 61.369663][ T3635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.376331][ T3635] CR2: 00007f0da2349b20 CR3: 000000007763c000 CR4: 00000000003506e0 [ 61.384323][ T3635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.392312][ T3635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.400284][ T3635] Call Trace: [ 61.403563][ T3635] [ 61.406498][ T3635] __io_arm_poll_handler+0x5df/0x920 [ 61.411821][ T3635] io_arm_poll_handler+0x707/0xc30 [ 61.416949][ T3635] ? io_ringfd_unregister+0x450/0x450 [ 61.422330][ T3635] ? io_arm_poll_handler+0xc30/0xc30 [ 61.427627][ T3635] io_queue_async+0xa6/0x640 [ 61.432223][ T3635] ? io_req_task_submit+0x151/0x1f0 [ 61.437441][ T3635] handle_tw_list+0x2aa/0x480 [ 61.442149][ T3635] tctx_task_work+0x11b/0x660 [ 61.446842][ T3635] ? task_work_run+0x1fc/0x300 [ 61.451612][ T3635] ? percpu_ref_get_many+0x1a0/0x1a0 [ 61.456930][ T3635] ? _raw_spin_lock_irq+0xdb/0x110 [ 61.462232][ T3635] ? do_raw_spin_unlock+0x137/0x8a0 [ 61.467432][ T3635] ? _raw_spin_unlock_irq+0x1f/0x40 [ 61.472638][ T3635] ? lockdep_hardirqs_on+0x94/0x130 [ 61.477876][ T3635] task_work_run+0x246/0x300 [ 61.482499][ T3635] ? task_work_cancel+0x2b0/0x2b0 [ 61.487531][ T3635] ? exit_to_user_mode_loop+0x39/0x100 [ 61.493001][ T3635] exit_to_user_mode_loop+0xd9/0x100 [ 61.498326][ T3635] exit_to_user_mode_prepare+0xb1/0x140 [ 61.503875][ T3635] syscall_exit_to_user_mode+0x60/0x270 [ 61.509433][ T3635] do_syscall_64+0x49/0xb0 [ 61.513885][ T3635] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.519925][ T3635] RIP: 0033:0x7f0da22dc5c3 [ 61.524340][ T3635] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 61.544418][ T3635] RSP: 002b:00007ffdd4888a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 61.552842][ T3635] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f0da22dc5c3 [ 61.561009][ T3635] RDX: 0000000000000000 RSI: 000000000000561c RDI: 0000000000000003 [ 61.569413][ T3635] RBP: 00007ffdd4888a40 R08: 0000000000000000 R09: 0000000000000000 [ 61.577397][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd4888a38 [ 61.585413][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.593403][ T3635] [ 61.596618][ T3635] Modules linked in: [ 61.600772][ T3635] ---[ end trace 0000000000000000 ]--- [ 61.606269][ T3635] RIP: 0010:io_poll_remove_entries+0x39a/0x5f0 [ 61.612518][ T3635] Code: c4 40 4c 89 e0 48 c1 e8 03 4d 89 fd 42 80 3c 38 00 74 08 4c 89 e7 e8 e5 19 b2 fd 49 8b 1c 24 4c 8d 7b 08 4d 89 fe 49 c1 ee 03 <43> 80 3c 2e 00 74 08 4c 89 ff e8 c7 19 b2 fd 49 8b 2f 48 85 ed 0f [ 61.632478][ T3635] RSP: 0018:ffffc90003b2f9d0 EFLAGS: 00010202 [ 61.638713][ T3635] RAX: 1ffff11003e87a08 RBX: 0000000000000000 RCX: ffff888026ae9d40 [ 61.646765][ T3635] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 61.654779][ T3635] RBP: 0000000001000000 R08: ffffffff842d9385 R09: fffffbfff204de31 [ 61.662927][ T3635] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801f43d040 [ 61.671245][ T3635] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000008 [ 61.679283][ T3635] FS: 0000555555928300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 61.688374][ T3635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.694984][ T3635] CR2: 00007f0da2349b20 CR3: 000000007763c000 CR4: 00000000003506e0 [ 61.703324][ T3635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.711521][ T3635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.719594][ T3635] Kernel panic - not syncing: Fatal exception [ 61.725989][ T3635] Kernel Offset: disabled [ 61.730330][ T3635] Rebooting in 86400 seconds..