program: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0xfffffffd, 0x20000}, 0x8) close(r1) [ 68.671281][ T5304] Bluetooth: hci0: command tx timeout [ 68.731991][ T5319] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 68.736812][ T5319] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 68.739957][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 68.744548][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.748960][ T5319] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 68.751348][ T5319] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb e2 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc [ 68.759077][ T5319] RSP: 0018:ffffc9000d0e7870 EFLAGS: 00010006 [ 68.761595][ T5319] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.764562][ T5319] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 68.767679][ T5319] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 68.770918][ T5319] R10: dffffc0000000000 R11: fffffbfff2036c0f R12: ffff888000a54880 [ 68.774302][ T5319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 68.777449][ T5319] FS: 00007f5eb16b16c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 68.781219][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.784949][ T5319] CR2: 0000400000000440 CR3: 0000000043418000 CR4: 0000000000352ef0 [ 68.788699][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.791767][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.794821][ T5319] Call Trace: [ 68.796182][ T5319] [ 68.797396][ T5319] ? __die_body+0x5f/0xb0 [ 68.799293][ T5319] ? die_addr+0xb0/0xe0 [ 68.801295][ T5319] ? exc_general_protection+0x3dd/0x5d0 [ 68.803988][ T5319] ? asm_exc_general_protection+0x26/0x30 [ 68.806517][ T5319] ? __lock_acquire+0x6a/0x2100 [ 68.808297][ T5319] ? mark_lock+0x9a/0x360 [ 68.809832][ T5319] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.812088][ T5319] lock_acquire+0x1ed/0x550 [ 68.813778][ T5319] ? add_wait_queue+0x46/0x180 [ 68.815670][ T5319] ? __pfx_lock_acquire+0x10/0x10 [ 68.817860][ T5319] ? queue_work_on+0x25f/0x380 [ 68.820105][ T5319] ? __pfx_queue_work_on+0x10/0x10 [ 68.822337][ T5319] ? __local_bh_enable_ip+0x168/0x200 [ 68.824580][ T5319] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 68.826741][ T5319] ? trace_irq_disable+0x2c/0x120 [ 68.828505][ T5319] _raw_spin_lock_irqsave+0xd5/0x120 [ 68.830384][ T5319] ? add_wait_queue+0x46/0x180 [ 68.832031][ T5319] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 68.834382][ T5319] ? virtio_transport_send_pkt_info+0xd13/0x10b0 [ 68.837123][ T5319] add_wait_queue+0x46/0x180 [ 68.839146][ T5319] virtio_transport_release+0x4c4/0xce0 [ 68.841313][ T5319] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.843536][ T5319] ? __pfx_virtio_transport_release+0x10/0x10 [ 68.845932][ T5319] ? __pfx_woken_wake_function+0x10/0x10 [ 68.848414][ T5319] ? __local_bh_enable_ip+0x168/0x200 [ 68.851048][ T5319] ? __vsock_release+0xa4/0x4f0 [ 68.853139][ T5319] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 68.855326][ T5319] ? __vsock_release+0x3b/0x4f0 [ 68.857118][ T5319] __vsock_release+0xf1/0x4f0 [ 68.858876][ T5319] vsock_release+0x97/0x100 [ 68.860788][ T5319] sock_close+0xbc/0x240 [ 68.862889][ T5319] ? __pfx_sock_close+0x10/0x10 [ 68.865434][ T5319] __fput+0x3e9/0x9f0 [ 68.867317][ T5319] __x64_sys_close+0x7f/0x110 [ 68.869188][ T5319] do_syscall_64+0xf3/0x230 [ 68.871006][ T5319] ? clear_bhb_loop+0x35/0x90 [ 68.872834][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.875142][ T5319] RIP: 0033:0x7f5eb078cde9 [ 68.876901][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.885283][ T5319] RSP: 002b:00007f5eb16b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.888348][ T5319] RAX: ffffffffffffffda RBX: 00007f5eb09a5fa0 RCX: 00007f5eb078cde9 [ 68.891460][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 68.894565][ T5319] RBP: 00007f5eb080e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.898397][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.901923][ T5319] R13: 0000000000000000 R14: 00007f5eb09a5fa0 R15: 00007ffce120aef8 [ 68.905033][ T5319] [ 68.906295][ T5319] Modules linked in: [ 68.907856][ T5319] ---[ end trace 0000000000000000 ]--- [ 68.909977][ T5319] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 68.912515][ T5319] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb e2 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc [ 68.920110][ T5319] RSP: 0018:ffffc9000d0e7870 EFLAGS: 00010006 [ 68.922745][ T5319] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.926152][ T5319] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 68.929178][ T5319] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 68.932154][ T5319] R10: dffffc0000000000 R11: fffffbfff2036c0f R12: ffff888000a54880 [ 68.935542][ T5319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 68.939443][ T5319] FS: 00007f5eb16b16c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 68.942823][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.945231][ T5319] CR2: 0000400000000440 CR3: 0000000043418000 CR4: 0000000000352ef0 [ 68.948227][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.951704][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.955452][ T5319] Kernel panic - not syncing: Fatal exception [ 68.958078][ T5319] Kernel Offset: disabled [ 68.959815][ T5319] Rebooting in 86400 seconds..