./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor37604608 <...> DUID 00:04:ce:8e:a7:1a:d5:92:ad:c3:fd:35:80:c9:2b:13:ab:38 forked to background, child pid 4671 [ 33.587212][ T4672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.597328][ T4672] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.131' (ECDSA) to the list of known hosts. execve("./syz-executor37604608", ["./syz-executor37604608"], 0x7ffc1db11f50 /* 10 vars */) = 0 brk(NULL) = 0x55555719b000 brk(0x55555719bc40) = 0x55555719bc40 arch_prctl(ARCH_SET_FS, 0x55555719b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor37604608", 4096) = 26 brk(0x5555571bcc40) = 0x5555571bcc40 brk(0x5555571bd000) = 0x5555571bd000 mprotect(0x7f29d38c2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_ALG, SOCK_SEQPACKET, 0) = 3 bind(3, {sa_family=AF_ALG, salg_type="hash", salg_feat=0, salg_mask=0, salg_name="cryptd(crct10dif-generic)"}, 88) = 0 accept4(3, NULL, NULL, 0) = 4 accept4(4, NULL, NULL, 0) = 5 sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=0}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_CONFIRM|MSG_NOSIGNAL|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY) = 0 syzkaller login: [ 70.878612][ T5006] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 70.890357][ T5006] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 70.898755][ T5006] CPU: 1 PID: 5006 Comm: kworker/1:3 Not tainted 6.4.0-rc5-syzkaller-00859-g37ff78e977f1 #0 [ 70.908887][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 70.918937][ T5006] Workqueue: cryptd cryptd_queue_worker [ 70.924531][ T5006] RIP: 0010:crypto_shash_final+0x49/0x120 [ 70.930241][ T5006] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 00 48 8d 7b 20 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a8 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 70.949836][ T5006] RSP: 0018:ffffc90003a3fca8 EFLAGS: 00010202 [ 70.955886][ T5006] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.963850][ T5006] RDX: 0000000000000004 RSI: ffffffff83df1715 RDI: 0000000000000020 [ 70.971807][ T5006] RBP: ffff88801b756b08 R08: 0000000000000005 R09: 00000000ffffff8d [ 70.979764][ T5006] R10: 0000000000000000 R11: 1ffffffff21842f8 R12: ffff888029311988 [ 70.987719][ T5006] R13: ffff88801b756b08 R14: ffff888014eaa600 R15: ffff8880b993bd80 [ 70.995692][ T5006] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 71.004611][ T5006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.011179][ T5006] CR2: 00007f6c11c57440 CR3: 00000000221e4000 CR4: 00000000003506e0 [ 71.019248][ T5006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.027290][ T5006] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.035245][ T5006] Call Trace: [ 71.038506][ T5006] [ 71.041423][ T5006] ? die_addr+0x3c/0xa0 [ 71.045659][ T5006] ? exc_general_protection+0x129/0x230 [ 71.051209][ T5006] ? asm_exc_general_protection+0x26/0x30 [ 71.056924][ T5006] ? crypto_shash_final+0x15/0x120 [ 71.062045][ T5006] ? crypto_shash_final+0x49/0x120 [ 71.067224][ T5006] ? crypto_shash_final+0x15/0x120 [ 71.072329][ T5006] cryptd_hash_final+0xea/0x140 [ 71.077253][ T5006] ? cryptd_hash_finup+0x120/0x120 [ 71.082348][ T5006] cryptd_queue_worker+0x130/0x1d0 [ 71.087444][ T5006] process_one_work+0x99a/0x15e0 [ 71.092461][ T5006] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 71.097831][ T5006] ? spin_bug+0x1c0/0x1c0 [ 71.102176][ T5006] ? _raw_spin_lock_irq+0x45/0x50 [ 71.107207][ T5006] worker_thread+0x67d/0x10c0 [ 71.111887][ T5006] ? process_one_work+0x15e0/0x15e0 [ 71.117078][ T5006] kthread+0x344/0x440 [ 71.121137][ T5006] ? kthread_complete_and_exit+0x40/0x40 [ 71.126845][ T5006] ret_from_fork+0x1f/0x30 [ 71.131251][ T5006] [ 71.134251][ T5006] Modules linked in: [ 71.138242][ T5006] ---[ end trace 0000000000000000 ]--- [ 71.143708][ T5006] RIP: 0010:crypto_shash_final+0x49/0x120 [ 71.149484][ T5006] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 00 48 8d 7b 20 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a8 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 71.170360][ T5006] RSP: 0018:ffffc90003a3fca8 EFLAGS: 00010202 [ 71.176427][ T5006] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 71.184485][ T5006] RDX: 0000000000000004 RSI: ffffffff83df1715 RDI: 0000000000000020 [ 71.192604][ T5006] RBP: ffff88801b756b08 R08: 0000000000000005 R09: 00000000ffffff8d [ 71.200596][ T5006] R10: 0000000000000000 R11: 1ffffffff21842f8 R12: ffff888029311988 [ 71.208642][ T5006] R13: ffff88801b756b08 R14: ffff888014eaa600 R15: ffff8880b993bd80 [ 71.216607][ T5006] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 71.225640][ T5006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.232243][ T5006] CR2: 00007f6c11c57440 CR3: 00000000221e4000 CR4: 00000000003506e0 [ 71.240229][ T5006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.248249][ T5006] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.256215][ T5006] Kernel panic - not syncing: Fatal exception [ 71.262500][ T5006] Kernel Offset: disabled [ 71.266816][ T5006] Rebooting in 86400 seconds..