./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2553685121 <...> Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. execve("./syz-executor2553685121", ["./syz-executor2553685121"], 0x7ffe6832df10 /* 10 vars */) = 0 brk(NULL) = 0x555556365000 brk(0x555556365d00) = 0x555556365d00 arch_prctl(ARCH_SET_FS, 0x555556365380) = 0 set_tid_address(0x555556365650) = 5037 set_robust_list(0x555556365660, 24) = 0 rseq(0x555556365ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2553685121", 4096) = 28 getrandom("\xe7\xd9\x79\xb6\x38\x41\x45\xba", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556365d00 brk(0x555556386d00) = 0x555556386d00 brk(0x555556387000) = 0x555556387000 mprotect(0x7fdf54218000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_ALG, SOCK_SEQPACKET, 0) = 3 bind(3, {sa_family=AF_ALG, salg_type="aead", salg_feat=0, salg_mask=0, salg_name="pcrypt(generic-gcm-aesni)"}, 88) = 0 socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 4 setsockopt(4, SOL_TCP, TCP_REPAIR, [1], 4) = 0 connect(4, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0 setsockopt(4, SOL_TCP, TCP_ULP, [7564404], 4) = 0 setsockopt(4, SOL_TLS, TLS_TX, "\x04\x03\x33\x00\x83\x7a\xd5\x52\xee\xd2\x2b\x08\xa4\x61\x6b\xf4\x5c\x64\xc5\x00\x00\x00\x87\x8f\x00\x00\x00\x00\x5a\x44\x00\x08\xff\xff\xff\xff\xff\xff\xff\xff", 40) = 0 write(4, "\\", 1) = -1 EBADMSG (Bad message) exit_group(0) = ? [ 59.694703][ T2415] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 59.706459][ T2415] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 59.714862][ T2415] CPU: 1 PID: 2415 Comm: kworker/u4:9 Not tainted 6.5.0-syzkaller-03967-gbd6c11bc43c4 #0 [ 59.724658][ T2415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 59.734709][ T2415] Workqueue: pencrypt_parallel padata_parallel_worker [ 59.741474][ T2415] RIP: 0010:scatterwalk_copychunks+0x3e0/0x560 [ 59.747621][ T2415] Code: f0 48 c1 e8 03 80 3c 08 00 0f 85 7f 01 00 00 49 8d 44 24 08 4d 89 26 48 bf 00 00 00 00 00 fc ff df 48 89 44 24 10 48 c1 e8 03 <0f> b6 04 38 84 c0 74 08 3c 03 0f 8e 45 01 00 00 48 8b 44 24 08 41 [ 59.767217][ T2415] RSP: 0018:ffffc9000b5ef5f8 EFLAGS: 00010202 [ 59.773267][ T2415] RAX: 0000000000000001 RBX: 0000000000000000 RCX: dffffc0000000000 [ 59.781225][ T2415] RDX: ffff888028689dc0 RSI: ffffffff841e5144 RDI: dffffc0000000000 [ 59.789184][ T2415] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 59.797143][ T2415] R10: 0000000000000002 R11: ffffffff81dba072 R12: 0000000000000000 [ 59.805099][ T2415] R13: 0000000000000001 R14: ffffc9000b5ef850 R15: 0000000000000000 [ 59.813054][ T2415] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 59.821973][ T2415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.828547][ T2415] CR2: 00007fcf1ef52440 CR3: 00000000783fe000 CR4: 00000000003506e0 [ 59.836506][ T2415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.844460][ T2415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.852413][ T2415] Call Trace: [ 59.855677][ T2415] [ 59.858593][ T2415] ? die_addr+0x3b/0xa0 [ 59.862740][ T2415] ? exc_general_protection+0x154/0x230 [ 59.868308][ T2415] ? asm_exc_general_protection+0x26/0x30 [ 59.874020][ T2415] ? __kasan_kmalloc+0xa2/0xb0 [ 59.878777][ T2415] ? sg_next+0x84/0xb0 [ 59.882837][ T2415] ? scatterwalk_copychunks+0x3e0/0x560 [ 59.888371][ T2415] ? scatterwalk_copychunks+0x3a7/0x560 [ 59.893909][ T2415] skcipher_walk_next+0x730/0x1610 [ 59.899014][ T2415] skcipher_walk_first+0xf7/0x3d0 [ 59.904032][ T2415] skcipher_walk_aead_common+0x7a0/0xbb0 [ 59.909660][ T2415] gcmaes_crypt_by_sg+0x354/0x830 [ 59.914692][ T2415] ? ecb_encrypt+0x170/0x170 [ 59.919272][ T2415] ? arch_stack_walk+0x6d/0xf0 [ 59.924026][ T2415] ? arch_stack_walk+0x8b/0xf0 [ 59.928783][ T2415] ? lockdep_unlock+0x11b/0x290 [ 59.933624][ T2415] ? __lock_acquire+0x250f/0x5de0 [ 59.938642][ T2415] gcmaes_encrypt+0xee/0x220 [ 59.943224][ T2415] ? gcmaes_crypt_by_sg+0x830/0x830 [ 59.948416][ T2415] generic_gcmaes_encrypt+0x14d/0x1b0 [ 59.953779][ T2415] ? gcmaes_encrypt+0x220/0x220 [ 59.958628][ T2415] ? lock_sync+0x190/0x190 [ 59.963040][ T2415] crypto_aead_encrypt+0xbc/0x100 [ 59.968061][ T2415] crypto_aead_encrypt+0xbc/0x100 [ 59.973076][ T2415] pcrypt_aead_enc+0x17/0x70 [ 59.977660][ T2415] padata_parallel_worker+0x64/0xb0 [ 59.982848][ T2415] process_one_work+0xaa2/0x16f0 [ 59.987775][ T2415] ? lock_sync+0x190/0x190 [ 59.992180][ T2415] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 59.997541][ T2415] ? spin_bug+0x1d0/0x1d0 [ 60.001860][ T2415] worker_thread+0x687/0x1110 [ 60.006531][ T2415] ? process_one_work+0x16f0/0x16f0 [ 60.011721][ T2415] kthread+0x33a/0x430 [ 60.015774][ T2415] ? kthread_complete_and_exit+0x40/0x40 [ 60.021393][ T2415] ret_from_fork+0x2c/0x70 [ 60.025794][ T2415] ? kthread_complete_and_exit+0x40/0x40 [ 60.031411][ T2415] ret_from_fork_asm+0x11/0x20 [ 60.036172][ T2415] [ 60.039173][ T2415] Modules linked in: [ 60.043108][ T2415] ---[ end trace 0000000000000000 ]--- [ 60.048588][ T2415] RIP: 0010:scatterwalk_copychunks+0x3e0/0x560 [ 60.054783][ T2415] Code: f0 48 c1 e8 03 80 3c 08 00 0f 85 7f 01 00 00 49 8d 44 24 08 4d 89 26 48 bf 00 00 00 00 00 fc ff df 48 89 44 24 10 48 c1 e8 03 <0f> b6 04 38 84 c0 74 08 3c 03 0f 8e 45 01 00 00 48 8b 44 24 08 41 [ 60.074425][ T2415] RSP: 0018:ffffc9000b5ef5f8 EFLAGS: 00010202 [ 60.080509][ T2415] RAX: 0000000000000001 RBX: 0000000000000000 RCX: dffffc0000000000 [ 60.088506][ T2415] RDX: ffff888028689dc0 RSI: ffffffff841e5144 RDI: dffffc0000000000 [ 60.096496][ T2415] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 60.104476][ T2415] R10: 0000000000000002 R11: ffffffff81dba072 R12: 0000000000000000 [ 60.112471][ T2415] R13: 0000000000000001 R14: ffffc9000b5ef850 R15: 0000000000000000 [ 60.120466][ T2415] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 60.129413][ T2415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.136024][ T2415] CR2: 00007fcf1ef52440 CR3: 00000000783fe000 CR4: 00000000003506e0 [ 60.143985][ T2415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.151971][ T2415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.159971][ T2415] Kernel panic - not syncing: Fatal exception in interrupt [ 60.167339][ T2415] Kernel Offset: disabled [ 60.171650][ T2415] Rebooting in 86400 seconds..