program:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
close_range(r0, r3, 0x0)
[ 68.574600][ T5305] Bluetooth: hci0: command tx timeout
[ 68.653529][ T5320] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 68.658789][ T5320] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[ 68.663527][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.14.0-rc2-syzkaller #0
[ 68.667218][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.671697][ T5320] RIP: 0010:__lock_acquire+0x6a/0x2100
[ 68.673897][ T5320] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb de 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
[ 68.681811][ T5320] RSP: 0018:ffffc9000d2e7770 EFLAGS: 00010006
[ 68.684244][ T5320] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000
[ 68.687270][ T5320] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018
[ 68.690251][ T5320] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[ 68.693324][ T5320] R10: dffffc0000000000 R11: fffffbfff2036b8f R12: ffff888000efc880
[ 68.697238][ T5320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018
[ 68.701242][ T5320] FS: 00007f561f6136c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 68.704806][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.707347][ T5320] CR2: 0000400000000440 CR3: 0000000044932000 CR4: 0000000000352ef0
[ 68.710555][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.713763][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.717405][ T5320] Call Trace:
[ 68.718931][ T5320] <TASK>
[ 68.720272][ T5320] ? __die_body+0x5f/0xb0
[ 68.722028][ T5320] ? die_addr+0xb0/0xe0
[ 68.723610][ T5320] ? exc_general_protection+0x3dd/0x5d0
[ 68.725624][ T5320] ? asm_exc_general_protection+0x26/0x30
[ 68.727830][ T5320] ? __lock_acquire+0x6a/0x2100
[ 68.729787][ T5320] ? mark_lock+0x9a/0x360
[ 68.731647][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 68.734224][ T5320] lock_acquire+0x1ed/0x550
[ 68.736267][ T5320] ? add_wait_queue+0x46/0x180
[ 68.738276][ T5320] ? __pfx_lock_acquire+0x10/0x10
[ 68.740406][ T5320] ? queue_work_on+0x25f/0x380
[ 68.742343][ T5320] ? __pfx_queue_work_on+0x10/0x10
[ 68.744349][ T5320] ? __local_bh_enable_ip+0x168/0x200
[ 68.746373][ T5320] ? preempt_schedule_notrace_thunk+0x1a/0x30
[ 68.748647][ T5320] ? trace_irq_disable+0x2c/0x120
[ 68.750872][ T5320] _raw_spin_lock_irqsave+0xd5/0x120
[ 68.753310][ T5320] ? add_wait_queue+0x46/0x180
[ 68.755485][ T5320] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 68.757747][ T5320] ? virtio_transport_send_pkt_info+0xd13/0x10b0
[ 68.760173][ T5320] add_wait_queue+0x46/0x180
[ 68.762058][ T5320] virtio_transport_release+0x4c4/0xce0
[ 68.764303][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 68.767048][ T5320] ? __pfx_virtio_transport_release+0x10/0x10
[ 68.769824][ T5320] ? __pfx_woken_wake_function+0x10/0x10
[ 68.772105][ T5320] ? __local_bh_enable_ip+0x168/0x200
[ 68.774190][ T5320] ? __vsock_release+0xa4/0x4f0
[ 68.776029][ T5320] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 68.778188][ T5320] ? __vsock_release+0x2c/0x4f0
[ 68.780658][ T5320] ? do_raw_spin_unlock+0x58/0x8b0
[ 68.783184][ T5320] ? __vsock_release+0x3b/0x4f0
[ 68.785550][ T5320] __vsock_release+0xf1/0x4f0
[ 68.787516][ T5320] vsock_release+0x97/0x100
[ 68.789237][ T5320] sock_close+0xbc/0x240
[ 68.790847][ T5320] ? __pfx_sock_close+0x10/0x10
[ 68.792751][ T5320] __fput+0x3e9/0x9f0
[ 68.794301][ T5320] task_work_run+0x24f/0x310
[ 68.796022][ T5320] ? _raw_spin_unlock+0x28/0x50
[ 68.798200][ T5320] ? __pfx_task_work_run+0x10/0x10
[ 68.800903][ T5320] ? syscall_exit_to_user_mode+0xa3/0x340
[ 68.803467][ T5320] syscall_exit_to_user_mode+0x13f/0x340
[ 68.805916][ T5320] do_syscall_64+0x100/0x230
[ 68.808057][ T5320] ? clear_bhb_loop+0x35/0x90
[ 68.809908][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.812132][ T5320] RIP: 0033:0x7f561e78cde9
[ 68.813806][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.823164][ T5320] RSP: 002b:00007f561f613038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 68.826536][ T5320] RAX: 0000000000000000 RBX: 00007f561e9a5fa0 RCX: 00007f561e78cde9
[ 68.829809][ T5320] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[ 68.833049][ T5320] RBP: 00007f561e80e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 68.836348][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.840295][ T5320] R13: 0000000000000000 R14: 00007f561e9a5fa0 R15: 00007ffc2ea09248
[ 68.844123][ T5320] </TASK>
[ 68.845577][ T5320] Modules linked in:
[ 68.847180][ T5320] ---[ end trace 0000000000000000 ]---
[ 68.849077][ T5320] RIP: 0010:__lock_acquire+0x6a/0x2100
[ 68.850914][ T5320] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb de 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
[ 68.858010][ T5320] RSP: 0018:ffffc9000d2e7770 EFLAGS: 00010006
[ 68.860575][ T5320] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000
[ 68.864568][ T5320] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018
[ 68.868479][ T5320] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[ 68.871727][ T5320] R10: dffffc0000000000 R11: fffffbfff2036b8f R12: ffff888000efc880
[ 68.874926][ T5320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018
[ 68.878062][ T5320] FS: 00007f561f6136c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 68.881122][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.883765][ T5320] CR2: 0000400000000440 CR3: 0000000044932000 CR4: 0000000000352ef0
[ 68.887315][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.891008][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.894015][ T5320] Kernel panic - not syncing: Fatal exception
[ 68.896454][ T5320] Kernel Offset: disabled
[ 68.898083][ T5320] Rebooting in 86400 seconds..