Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 68.360147][ T6894] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 68.372069][ T6894] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 68.380475][ T6894] CPU: 1 PID: 6894 Comm: syz-executor291 Not tainted 5.9.0-rc8-syzkaller #0 [ 68.389132][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.399191][ T6894] RIP: 0010:qp_release_pages+0x5a/0x310 [ 68.404724][ T6894] Code: 5c ad d1 fc 4d 85 f6 c7 44 24 04 00 00 00 00 0f 85 0f 01 00 00 e9 27 02 00 00 e8 c1 b0 d1 fc 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 62 02 00 00 48 8b 45 08 31 ff 49 89 c4 48 89 [ 68.424512][ T6894] RSP: 0018:ffffc900014e7948 EFLAGS: 00010202 [ 68.430654][ T6894] RAX: 0000000000000001 RBX: ffff8880a06990d0 RCX: ffffffff84a48f81 [ 68.438615][ T6894] RDX: ffff88808e3ec300 RSI: ffffffff84a48e4f RDI: 0000000000000008 [ 68.446675][ T6894] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880960634ff [ 68.454711][ T6894] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffffd [ 68.462671][ T6894] R13: dffffc0000000000 R14: fffffffffffffff2 R15: 0000000000000000 [ 68.470711][ T6894] FS: 0000000001e5e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 68.479627][ T6894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.486199][ T6894] CR2: 0000000020000040 CR3: 00000000a1e74000 CR4: 00000000001506e0 [ 68.494148][ T6894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.502110][ T6894] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.510188][ T6894] Call Trace: [ 68.513463][ T6894] qp_host_get_user_memory+0x249/0x3e0 [ 68.519087][ T6894] qp_broker_alloc+0x10f9/0x1bf0 [ 68.524015][ T6894] ? vmci_qpair_get_produce_indexes+0x5f0/0x5f0 [ 68.530251][ T6894] ? lock_is_held_type+0xbb/0xf0 [ 68.535172][ T6894] vmci_qp_broker_alloc+0x48/0x60 [ 68.540174][ T6894] vmci_host_do_alloc_queuepair.constprop.0+0x1b4/0x400 [ 68.547229][ T6894] ? copy_overflow+0x30/0x30 [ 68.551806][ T6894] ? lock_downgrade+0x830/0x830 [ 68.556638][ T6894] ? tomoyo_path_number_perm+0x441/0x590 [ 68.562255][ T6894] ? lockdep_hardirqs_on+0x53/0x100 [ 68.567445][ T6894] ? tomoyo_path_number_perm+0x24e/0x590 [ 68.573361][ T6894] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 68.579255][ T6894] vmci_host_unlocked_ioctl+0x13cc/0x1e60 [ 68.585075][ T6894] ? drv_cp_harray_to_user+0x1b0/0x1b0 [ 68.590535][ T6894] ? lock_is_held_type+0xbb/0xf0 [ 68.595450][ T6894] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 68.601585][ T6894] ? do_vfs_ioctl+0x27d/0x1090 [ 68.606846][ T6894] ? generic_block_fiemap+0x60/0x60 [ 68.612038][ T6894] ? build_open_flags+0x650/0x650 [ 68.617135][ T6894] ? _down_write_nest_lock+0x150/0x150 [ 68.622922][ T6894] ? __x64_sys_openat+0x13f/0x1f0 [ 68.627934][ T6894] ? bpf_lsm_file_ioctl+0x5/0x10 [ 68.633098][ T6894] ? drv_cp_harray_to_user+0x1b0/0x1b0 [ 68.638573][ T6894] __x64_sys_ioctl+0x193/0x200 [ 68.643325][ T6894] do_syscall_64+0x2d/0x70 [ 68.647911][ T6894] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.653811][ T6894] RIP: 0033:0x4402f9 [ 68.657883][ T6894] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 68.681056][ T6894] RSP: 002b:00007ffd6af99eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.689463][ T6894] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402f9 [ 68.697439][ T6894] RDX: 0000000020000100 RSI: 00000000000007a8 RDI: 0000000000000003 [ 68.705935][ T6894] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 68.715366][ T6894] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401b00 [ 68.723738][ T6894] R13: 0000000000401b90 R14: 0000000000000000 R15: 0000000000000000 [ 68.733531][ T6894] Modules linked in: [ 68.737919][ T6894] ---[ end trace 5d73c037702bf45c ]--- [ 68.743489][ T6894] RIP: 0010:qp_release_pages+0x5a/0x310 [ 68.749451][ T6894] Code: 5c ad d1 fc 4d 85 f6 c7 44 24 04 00 00 00 00 0f 85 0f 01 00 00 e9 27 02 00 00 e8 c1 b0 d1 fc 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 62 02 00 00 48 8b 45 08 31 ff 49 89 c4 48 89 [ 68.769938][ T6894] RSP: 0018:ffffc900014e7948 EFLAGS: 00010202 [ 68.776242][ T6894] RAX: 0000000000000001 RBX: ffff8880a06990d0 RCX: ffffffff84a48f81 [ 68.784344][ T6894] RDX: ffff88808e3ec300 RSI: ffffffff84a48e4f RDI: 0000000000000008 [ 68.792583][ T6894] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880960634ff [ 68.800683][ T6894] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffffd [ 68.808700][ T6894] R13: dffffc0000000000 R14: fffffffffffffff2 R15: 0000000000000000 [ 68.816671][ T6894] FS: 0000000001e5e880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 68.825657][ T6894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.832369][ T6894] CR2: 0000000020000040 CR3: 00000000a1e74000 CR4: 00000000001506e0 [ 68.840395][ T6894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.848414][ T6894] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.856385][ T6894] Kernel panic - not syncing: Fatal exception [ 68.863958][ T6894] Kernel Offset: disabled [ 68.868283][ T6894] Rebooting in 86400 seconds..