./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2339480199 <...> [ 97.410742][ T58] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. execve("./syz-executor2339480199", ["./syz-executor2339480199"], 0x7ffdc9e43420 /* 10 vars */) = 0 brk(NULL) = 0x555587b37000 brk(0x555587b37d00) = 0x555587b37d00 arch_prctl(ARCH_SET_FS, 0x555587b37380) = 0 set_tid_address(0x555587b37650) = 5837 set_robust_list(0x555587b37660, 24) = 0 rseq(0x555587b37ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2339480199", 4096) = 28 getrandom("\x88\x27\x9e\x48\xb3\xee\x0c\x8f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555587b37d00 brk(0x555587b58d00) = 0x555587b58d00 brk(0x555587b59000) = 0x555587b59000 mprotect(0x7fbb3e1ba000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 ioctl(3, TIOCSETD, [15]) = 0 ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x20000000008) = -1 EOPNOTSUPP (Operation not supported) exit_group(0) = ? [ 100.837372][ T5837] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN PTI [ 100.849988][ T5837] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f] [ 100.858496][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor233 Not tainted 6.14.0-rc1-next-20250204-syzkaller #0 [ 100.869093][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.879182][ T5837] RIP: 0010:qca_close+0x72/0x2e0 [ 100.884160][ T5837] Code: 64 af f6 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 20 28 5d f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 100.903785][ T5837] RSP: 0018:ffffc90003cb79f0 EFLAGS: 00010206 [ 100.909881][ T5837] RAX: 000000000000002b RBX: ffff888012bb2400 RCX: ffff88802e269e00 [ 100.917938][ T5837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 100.925948][ T5837] RBP: 1ffff110025764b7 R08: ffffffff8187d8b3 R09: 1ffffffff2860723 [ 100.933947][ T5837] R10: dffffc0000000000 R11: ffffffff88c8a130 R12: 0000000000000000 [ 100.941940][ T5837] R13: dffffc0000000000 R14: ffff888012bb25b8 R15: 0000000000000000 [ 100.949926][ T5837] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 100.958890][ T5837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.965492][ T5837] CR2: 00007fbb3e1c10d0 CR3: 000000000e738000 CR4: 00000000003526f0 [ 100.973477][ T5837] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.981474][ T5837] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.989440][ T5837] Call Trace: [ 100.992712][ T5837] [ 100.995638][ T5837] ? __die_body+0x5f/0xb0 [ 100.999974][ T5837] ? die_addr+0xb0/0xe0 [ 101.004150][ T5837] ? exc_general_protection+0x3dd/0x5d0 [ 101.009725][ T5837] ? asm_exc_general_protection+0x26/0x30 [ 101.015464][ T5837] ? __pfx_qca_close+0x10/0x10 [ 101.020258][ T5837] ? enable_work+0x2e3/0x360 [ 101.024869][ T5837] ? qca_close+0x72/0x2e0 [ 101.029199][ T5837] hci_uart_tty_close+0x205/0x290 [ 101.034246][ T5837] tty_ldisc_kill+0xa3/0x1a0 [ 101.038845][ T5837] tty_ldisc_release+0x1a1/0x200 [ 101.043792][ T5837] tty_release_struct+0x2b/0xe0 [ 101.048640][ T5837] tty_release+0xd06/0x12c0 [ 101.053145][ T5837] ? __pfx_tty_release+0x10/0x10 [ 101.058110][ T5837] __fput+0x3e9/0x9f0 [ 101.062112][ T5837] task_work_run+0x24f/0x310 [ 101.066721][ T5837] ? __pfx_task_work_run+0x10/0x10 [ 101.071847][ T5837] ? switch_task_namespaces+0xe4/0x110 [ 101.077315][ T5837] do_exit+0xa2a/0x28e0 [ 101.081480][ T5837] ? __pfx_do_exit+0x10/0x10 [ 101.086077][ T5837] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 101.092058][ T5837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.098411][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.103694][ T5837] ? lockdep_hardirqs_on+0x99/0x150 [ 101.109073][ T5837] do_group_exit+0x207/0x2c0 [ 101.113664][ T5837] __x64_sys_exit_group+0x3f/0x40 [ 101.118703][ T5837] x64_sys_call+0x26a8/0x26b0 [ 101.123399][ T5837] do_syscall_64+0xf3/0x230 [ 101.127907][ T5837] ? clear_bhb_loop+0x35/0x90 [ 101.132600][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.138502][ T5837] RIP: 0033:0x7fbb3e145c79 [ 101.142927][ T5837] Code: Unable to access opcode bytes at 0x7fbb3e145c4f. [ 101.149953][ T5837] RSP: 002b:00007ffe5ba71518 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 101.158377][ T5837] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb3e145c79 [ 101.166359][ T5837] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 101.174321][ T5837] RBP: 00007fbb3e1c0270 R08: ffffffffffffffb8 R09: 00007ffe5ba71738 [ 101.182284][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb3e1c0270 [ 101.190336][ T5837] R13: 0000000000000000 R14: 00007fbb3e1c0cc0 R15: 00007fbb3e117a60 [ 101.198318][ T5837] [ 101.201327][ T5837] Modules linked in: [ 101.205462][ T5837] ---[ end trace 0000000000000000 ]--- [ 101.211062][ T5837] RIP: 0010:qca_close+0x72/0x2e0 [ 101.216037][ T5837] Code: 64 af f6 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 20 28 5d f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 101.235765][ T5837] RSP: 0018:ffffc90003cb79f0 EFLAGS: 00010206 [ 101.242349][ T5837] RAX: 000000000000002b RBX: ffff888012bb2400 RCX: ffff88802e269e00 [ 101.250452][ T5837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 101.258529][ T5837] RBP: 1ffff110025764b7 R08: ffffffff8187d8b3 R09: 1ffffffff2860723 [ 101.266544][ T5837] R10: dffffc0000000000 R11: ffffffff88c8a130 R12: 0000000000000000 [ 101.274562][ T5837] R13: dffffc0000000000 R14: ffff888012bb25b8 R15: 0000000000000000 [ 101.282591][ T5837] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 101.291601][ T5837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.298221][ T5837] CR2: 00007fbb3e1c10d0 CR3: 000000000e738000 CR4: 00000000003526f0 [ 101.306210][ T5837] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.314684][ T5837] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.322708][ T5837] Kernel panic - not syncing: Fatal exception [ 101.329120][ T5837] Kernel Offset: disabled [ 101.333445][ T5837] Rebooting in 86400 seconds..