./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4183531722 <...> Warning: Permanently added '10.128.0.84' (ECDSA) to the list of known hosts. execve("./syz-executor4183531722", ["./syz-executor4183531722"], 0x7ffe0b3f2890 /* 10 vars */) = 0 brk(NULL) = 0x555557028000 brk(0x555557028c40) = 0x555557028c40 arch_prctl(ARCH_SET_FS, 0x555557028300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4183531722", 4096) = 28 brk(0x555557049c40) = 0x555557049c40 brk(0x55555704a000) = 0x55555704a000 mprotect(0x7f71e8d0e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_ALG, SOCK_SEQPACKET, 0) = 3 bind(3, {sa_family=AF_ALG, salg_type="hash", salg_feat=0, salg_mask=0, salg_name="sha512"}, 88) = 0 accept4(3, NULL, NULL, 0) = 4 sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=MSG_EOR|MSG_NOSIGNAL|MSG_MORE}, MSG_PROBE|MSG_CONFIRM|MSG_NOSIGNAL|MSG_MORE) = 0 [ 77.813777][ T5005] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 77.825807][ T5005] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 77.834408][ T5005] CPU: 0 PID: 5005 Comm: syz-executor418 Not tainted 6.4.0-rc5-syzkaller-01111-g26a4dd839eeb #0 [ 77.845016][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 77.855790][ T5005] RIP: 0010:shash_async_update+0x130/0x210 [ 77.862161][ T5005] Code: 36 0c a5 fd 48 8b 44 24 08 48 8b 6c 24 48 80 38 00 0f 85 c3 00 00 00 48 8b 04 24 4c 8b 68 50 49 8d 7d 20 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 bd 00 00 00 4d 8b 75 20 49 8d 7e 2c 48 89 fa 48 [ 77.882885][ T5005] RSP: 0018:ffffc90003a1f968 EFLAGS: 00010202 [ 77.889266][ T5005] RAX: ffff8880206b02a8 RBX: dffffc0000000000 RCX: 0000000000000000 [ 77.897555][ T5005] RDX: 0000000000000004 RSI: ffffffff83df3a1a RDI: 0000000000000020 [ 77.905557][ T5005] RBP: ffff888072b43240 R08: 0000000000000005 R09: 0000000000000000 [ 77.913636][ T5005] R10: 0000000000000dc0 R11: 0000000000000009 R12: 0000000000000dc0 [ 77.921639][ T5005] R13: 0000000000000000 R14: 1ffff110040d605f R15: ffff8880206b02f8 [ 77.929628][ T5005] FS: 0000555557028300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 77.938589][ T5005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.945191][ T5005] CR2: 00007f4ef51f2304 CR3: 000000001328b000 CR4: 00000000003506f0 [ 77.953207][ T5005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.961288][ T5005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.969277][ T5005] Call Trace: [ 77.972601][ T5005] [ 77.975547][ T5005] ? die_addr+0x3c/0xa0 [ 77.979827][ T5005] ? exc_general_protection+0x129/0x230 [ 77.985438][ T5005] ? asm_exc_general_protection+0x26/0x30 [ 77.991206][ T5005] ? shash_async_update+0x10a/0x210 [ 77.996451][ T5005] ? shash_async_update+0x130/0x210 [ 78.001673][ T5005] ? shash_async_update+0x10a/0x210 [ 78.006924][ T5005] ? shash_ahash_update+0x210/0x210 [ 78.012151][ T5005] ? lock_downgrade+0x690/0x690 [ 78.017057][ T5005] ? mark_held_locks+0x9f/0xe0 [ 78.021870][ T5005] ? __local_bh_enable_ip+0xa4/0x130 [ 78.027185][ T5005] ? hash_accept_nokey+0x90/0x90 [ 78.032169][ T5005] ? iov_iter_npages+0x102/0x6f0 [ 78.037245][ T5005] hash_sendmsg+0x434/0xde0 [ 78.041781][ T5005] ? hash_accept_nokey+0x90/0x90 [ 78.047005][ T5005] sock_sendmsg+0xde/0x190 [ 78.051450][ T5005] ____sys_sendmsg+0x733/0x920 [ 78.056251][ T5005] ? copy_msghdr_from_user+0xfc/0x150 [ 78.061744][ T5005] ? kernel_sendmsg+0x50/0x50 [ 78.066455][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.072470][ T5005] ___sys_sendmsg+0x110/0x1b0 [ 78.077195][ T5005] ? do_recvmmsg+0x6f0/0x6f0 [ 78.081833][ T5005] ? lock_sync+0x190/0x190 [ 78.086357][ T5005] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 78.091582][ T5005] ? do_raw_spin_lock+0x124/0x2b0 [ 78.096639][ T5005] ? spin_bug+0x1c0/0x1c0 [ 78.101002][ T5005] ? _raw_spin_lock_irq+0x45/0x50 [ 78.106062][ T5005] ? __fget_light+0x20a/0x270 [ 78.110796][ T5005] __sys_sendmsg+0xf7/0x1c0 [ 78.115361][ T5005] ? __sys_sendmsg_sock+0x40/0x40 [ 78.120413][ T5005] ? lock_downgrade+0x690/0x690 [ 78.125299][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.130560][ T5005] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.135794][ T5005] ? ptrace_notify+0xfe/0x140 [ 78.140771][ T5005] do_syscall_64+0x39/0xb0 [ 78.145409][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.152566][ T5005] RIP: 0033:0x7f71e8ca1c89 [ 78.158208][ T5005] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.181154][ T5005] RSP: 002b:00007ffebca0c5d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.189779][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f71e8ca1c89 [ 78.197946][ T5005] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 78.206376][ T5005] RBP: 00007f71e8c65e30 R08: 0000000000000000 R09: 0000000000000000 [ 78.214457][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f71e8c65ec0 [ 78.222533][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.230541][ T5005] [ 78.233604][ T5005] Modules linked in: [ 78.238556][ T5005] ---[ end trace 0000000000000000 ]--- [ 78.244183][ T5005] RIP: 0010:shash_async_update+0x130/0x210 [ 78.251587][ T5005] Code: 36 0c a5 fd 48 8b 44 24 08 48 8b 6c 24 48 80 38 00 0f 85 c3 00 00 00 48 8b 04 24 4c 8b 68 50 49 8d 7d 20 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 bd 00 00 00 4d 8b 75 20 49 8d 7e 2c 48 89 fa 48 [ 78.271653][ T5005] RSP: 0018:ffffc90003a1f968 EFLAGS: 00010202 [ 78.277863][ T5005] RAX: ffff8880206b02a8 RBX: dffffc0000000000 RCX: 0000000000000000 [ 78.286159][ T5005] RDX: 0000000000000004 RSI: ffffffff83df3a1a RDI: 0000000000000020 [ 78.294471][ T5005] RBP: ffff888072b43240 R08: 0000000000000005 R09: 0000000000000000 [ 78.303141][ T5005] R10: 0000000000000dc0 R11: 0000000000000009 R12: 0000000000000dc0 [ 78.311525][ T5005] R13: 0000000000000000 R14: 1ffff110040d605f R15: ffff8880206b02f8 [ 78.319611][ T5005] FS: 0000555557028300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 78.328696][ T5005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.335377][ T5005] CR2: 00007ffebcaca020 CR3: 000000001328b000 CR4: 00000000003506e0 [ 78.343760][ T5005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.351829][ T5005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.360282][ T5005] Kernel panic - not syncing: Fatal exception [ 78.366784][ T5005] Kernel Offset: disabled [ 78.371161][ T5005] Rebooting in 86400 seconds..