program: socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x5, 0x8000}, 0x8) close(r1) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000000000084000000050006005676835b68420d84613f5529227eef1de2cbb4fc91748f6377961938c4dcba77fc5493e6195bfb100926a85449"], 0x10}}], 0x2, 0x0) (async) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000000000084000000050006005676835b68420d84613f5529227eef1de2cbb4fc91748f6377961938c4dcba77fc5493e6195bfb100926a85449"], 0x10}}], 0x2, 0x0) [ 68.929740][ T5314] Bluetooth: hci0: command tx timeout [ 68.998171][ T5330] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 69.002785][ T5330] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 69.005935][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 69.009703][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.013919][ T5330] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 69.015978][ T5330] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 1b 98 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 a8 26 8b 00 48 be 00 00 00 00 00 fc [ 69.023033][ T5330] RSP: 0018:ffffc900019c7870 EFLAGS: 00010006 [ 69.025178][ T5330] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.028083][ T5330] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 69.031021][ T5330] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 69.034087][ T5330] R10: dffffc0000000000 R11: fffffbfff203680f R12: ffff888000842440 [ 69.036995][ T5330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 69.039998][ T5330] FS: 00007f5fb40316c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 69.043236][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.045602][ T5330] CR2: 0000000020000440 CR3: 000000004487c000 CR4: 0000000000352ef0 [ 69.048601][ T5330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.051633][ T5330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.054762][ T5330] Call Trace: [ 69.056073][ T5330] [ 69.057293][ T5330] ? __die_body+0x5f/0xb0 [ 69.058973][ T5330] ? die_addr+0xb0/0xe0 [ 69.060602][ T5330] ? exc_general_protection+0x3dd/0x5d0 [ 69.062747][ T5330] ? asm_exc_general_protection+0x26/0x30 [ 69.064955][ T5330] ? __lock_acquire+0x6a/0x2100 [ 69.066836][ T5330] ? mark_lock+0x9a/0x360 [ 69.068517][ T5330] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.070664][ T5330] lock_acquire+0x1ed/0x550 [ 69.072354][ T5330] ? add_wait_queue+0x46/0x180 [ 69.074149][ T5330] ? __pfx_lock_acquire+0x10/0x10 [ 69.076040][ T5330] ? queue_work_on+0x25f/0x380 [ 69.077846][ T5330] ? __pfx_queue_work_on+0x10/0x10 [ 69.079742][ T5330] ? __local_bh_enable_ip+0x168/0x200 [ 69.081602][ T5330] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 69.083796][ T5330] ? trace_irq_disable+0x2c/0x120 [ 69.085579][ T5330] _raw_spin_lock_irqsave+0xd5/0x120 [ 69.087604][ T5330] ? add_wait_queue+0x46/0x180 [ 69.089299][ T5330] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 69.091243][ T5330] ? virtio_transport_send_pkt_info+0xd13/0x10b0 [ 69.093623][ T5330] add_wait_queue+0x46/0x180 [ 69.095364][ T5330] virtio_transport_release+0x4c4/0xce0 [ 69.097459][ T5330] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.099940][ T5330] ? __pfx_virtio_transport_release+0x10/0x10 [ 69.102365][ T5330] ? __pfx_woken_wake_function+0x10/0x10 [ 69.104419][ T5330] ? __local_bh_enable_ip+0x168/0x200 [ 69.106182][ T5330] ? __vsock_release+0xa4/0x4f0 [ 69.108022][ T5330] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 69.110162][ T5330] ? __vsock_release+0x3b/0x4f0 [ 69.111785][ T5330] __vsock_release+0xf1/0x4f0 [ 69.113575][ T5330] vsock_release+0x97/0x100 [ 69.115337][ T5330] sock_close+0xbc/0x240 [ 69.116907][ T5330] ? __pfx_sock_close+0x10/0x10 [ 69.118612][ T5330] __fput+0x3e9/0x9f0 [ 69.120149][ T5330] __x64_sys_close+0x7f/0x110 [ 69.121931][ T5330] do_syscall_64+0xf3/0x230 [ 69.123670][ T5330] ? clear_bhb_loop+0x35/0x90 [ 69.125534][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.127827][ T5330] RIP: 0033:0x7f5fb318cda9 [ 69.129446][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.136562][ T5330] RSP: 002b:00007f5fb4031038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.139862][ T5330] RAX: ffffffffffffffda RBX: 00007f5fb33a5fa0 RCX: 00007f5fb318cda9 [ 69.142865][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 69.145770][ T5330] RBP: 00007f5fb320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.148520][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.151689][ T5330] R13: 0000000000000000 R14: 00007f5fb33a5fa0 R15: 00007ffef1c11e08 [ 69.154421][ T5330] [ 69.155529][ T5330] Modules linked in: [ 69.157119][ T5330] ---[ end trace 0000000000000000 ]--- [ 69.159266][ T5330] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 69.161486][ T5330] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 1b 98 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 a8 26 8b 00 48 be 00 00 00 00 00 fc [ 69.168354][ T5330] RSP: 0018:ffffc900019c7870 EFLAGS: 00010006 [ 69.170368][ T5330] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.172925][ T5330] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 69.175913][ T5330] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 69.178855][ T5330] R10: dffffc0000000000 R11: fffffbfff203680f R12: ffff888000842440 [ 69.181835][ T5330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 69.184657][ T5330] FS: 00007f5fb40316c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 69.188043][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.190982][ T5330] CR2: 0000000020000440 CR3: 000000004487c000 CR4: 0000000000352ef0 [ 69.194461][ T5330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.197558][ T5330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.200489][ T5330] Kernel panic - not syncing: Fatal exception [ 69.203191][ T5330] Kernel Offset: disabled [ 69.204934][ T5330] Rebooting in 86400 seconds..