./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2520309916 <...> Warning: Permanently added '10.128.1.169' (ECDSA) to the list of known hosts. execve("./syz-executor2520309916", ["./syz-executor2520309916"], 0x7ffc4e399f50 /* 10 vars */) = 0 brk(NULL) = 0x5555568b3000 brk(0x5555568b3c40) = 0x5555568b3c40 arch_prctl(ARCH_SET_FS, 0x5555568b3300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2520309916", 4096) = 28 brk(0x5555568d4c40) = 0x5555568d4c40 brk(0x5555568d5000) = 0x5555568d5000 mprotect(0x7f98432c6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_ALG, SOCK_SEQPACKET, 0) = 3 bind(3, {sa_family=AF_ALG, salg_type="hash", salg_feat=0, salg_mask=0, salg_name="cryptd(crct10dif-generic)"}, 88) = 0 accept4(3, NULL, NULL, 0) = 4 accept4(4, NULL, NULL, 0) = 5 sendmmsg(5, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=MSG_DONTROUTE|MSG_DONTWAIT|MSG_EOR}, msg_len=0}], 1, MSG_EOR|MSG_NOSIGNAL|MSG_MORE) = 1 [ 85.011961][ T9] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 85.023700][ T9] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 85.032092][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.4.0-rc5-syzkaller-01107-ge431e712c836 #0 [ 85.041875][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 85.051911][ T9] Workqueue: cryptd cryptd_queue_worker [ 85.057452][ T9] RIP: 0010:crypto_shash_finup+0x53/0x160 [ 85.063154][ T9] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 05 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 00 48 8d 7b 20 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b [ 85.082741][ T9] RSP: 0018:ffffc900000e7ba0 EFLAGS: 00010202 [ 85.088785][ T9] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.096738][ T9] RDX: 0000000000000004 RSI: ffffffff83df35bf RDI: 0000000000000020 [ 85.104693][ T9] RBP: ffff888028350b08 R08: 0000000000000005 R09: 0000000000000000 [ 85.112645][ T9] R10: 0000000000000000 R11: 1ffffffff218470c R12: ffff8880123fa1c0 [ 85.120595][ T9] R13: ffff888029582ac8 R14: 0000000000000014 R15: 0000000000000000 [ 85.128549][ T9] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 85.137463][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.144029][ T9] CR2: 00007f251034e440 CR3: 000000007cc84000 CR4: 00000000003506f0 [ 85.151984][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.159932][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.167885][ T9] Call Trace: [ 85.171143][ T9] [ 85.174057][ T9] ? die_addr+0x3c/0xa0 [ 85.178201][ T9] ? exc_general_protection+0x129/0x230 [ 85.183744][ T9] ? asm_exc_general_protection+0x26/0x30 [ 85.189454][ T9] ? crypto_shash_finup+0x1f/0x160 [ 85.194547][ T9] ? crypto_shash_finup+0x53/0x160 [ 85.199641][ T9] shash_ahash_finup+0xdf/0x3a0 [ 85.204487][ T9] ? shash_async_setkey+0x240/0x240 [ 85.209677][ T9] ? mark_held_locks+0x9f/0xe0 [ 85.214435][ T9] cryptd_hash_finup+0xce/0x120 [ 85.219271][ T9] ? cryptd_hash_digest+0x1a0/0x1a0 [ 85.224454][ T9] cryptd_queue_worker+0x130/0x1d0 [ 85.229547][ T9] process_one_work+0x99a/0x15e0 [ 85.234476][ T9] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 85.239833][ T9] ? spin_bug+0x1c0/0x1c0 [ 85.244166][ T9] ? _raw_spin_lock_irq+0x45/0x50 [ 85.249180][ T9] worker_thread+0x67d/0x10c0 [ 85.253848][ T9] ? process_one_work+0x15e0/0x15e0 [ 85.259031][ T9] kthread+0x344/0x440 [ 85.263083][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 85.268699][ T9] ret_from_fork+0x1f/0x30 [ 85.273104][ T9] [ 85.276100][ T9] Modules linked in: [ 85.281818][ T9] ---[ end trace 0000000000000000 ]--- [ 85.287300][ T9] RIP: 0010:crypto_shash_finup+0x53/0x160 [ 85.293788][ T9] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 05 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 00 48 8d 7b 20 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b [ 85.313551][ T9] RSP: 0018:ffffc900000e7ba0 EFLAGS: 00010202 [ 85.319620][ T9] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.327748][ T9] RDX: 0000000000000004 RSI: ffffffff83df35bf RDI: 0000000000000020 [ 85.335861][ T9] RBP: ffff888028350b08 R08: 0000000000000005 R09: 0000000000000000 [ 85.343947][ T9] R10: 0000000000000000 R11: 1ffffffff218470c R12: ffff8880123fa1c0 [ 85.352019][ T9] R13: ffff888029582ac8 R14: 0000000000000014 R15: 0000000000000000 [ 85.359992][ T9] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 85.368941][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.375552][ T9] CR2: 00007f251034e440 CR3: 000000002aa8e000 CR4: 00000000003506f0 [ 85.383537][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.391511][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.399535][ T9] Kernel panic - not syncing: Fatal exception [ 85.405812][ T9] Kernel Offset: disabled [ 85.410125][ T9] Rebooting in 86400 seconds..