Warning: Permanently added '10.128.0.106' (ECDSA) to the list of known hosts. syzkaller login: [ 73.411718][ T5003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.419751][ T5003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.429147][ T5003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.437363][ T5003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.445224][ T5003] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.452544][ T5003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.548682][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.561214][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.576791][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.587760][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 73.596167][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.605180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.619475][ T5001] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5001 'syz-executor387' [ 73.676173][ T5001] loop0: detected capacity change from 0 to 8192 [ 73.687284][ T5001] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.701020][ T5001] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 73.710677][ T5001] REISERFS (device loop0): using ordered data mode [ 73.717348][ T5001] reiserfs: using flush barriers [ 73.723647][ T5001] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.740688][ T5001] REISERFS (device loop0): checking transaction log (loop0) [ 73.791498][ T5001] REISERFS (device loop0): Using r5 hash to sort names [ 73.892216][ C0] general protection fault, probably for non-canonical address 0xdffffc000000839c: 0000 [#1] PREEMPT SMP KASAN [ 73.903969][ C0] KASAN: probably user-memory-access in range [0x0000000000041ce0-0x0000000000041ce7] [ 73.913531][ C0] CPU: 0 PID: 5001 Comm: syz-executor387 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 73.923427][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 73.933510][ C0] RIP: 0010:__iterate_interfaces+0x85/0x570 [ 73.939432][ C0] Code: 40 1b 00 00 4c 39 f3 0f 84 82 02 00 00 48 bd 00 00 00 00 00 fc ff df e8 f9 d5 ec f7 4c 8d a3 98 1c 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 04 28 84 c0 74 08 3c 03 0f 8e 5d 04 00 00 8b bb 98 1c 00 00 [ 73.959049][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010206 [ 73.965141][ C0] RAX: 000000000000839c RBX: 0000000000040048 RCX: 0000000000000100 [ 73.973120][ C0] RDX: ffff888026db8000 RSI: ffffffff89974db7 RDI: 0000000000000005 [ 73.981103][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 73.989079][ C0] R10: 0000000000000000 R11: ffffc90000007ff8 R12: 0000000000041ce0 [ 73.997056][ C0] R13: 0000000000000000 R14: ffff88802ab22920 R15: 0000000000000002 [ 74.005032][ C0] FS: 00005555565e7300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 74.013967][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.020554][ C0] CR2: 0000564e16122000 CR3: 0000000021303000 CR4: 00000000003506f0 [ 74.028535][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.036510][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.044503][ C0] Call Trace: [ 74.047779][ C0] [ 74.050627][ C0] ? __mac80211_hwsim_beacon_tx+0x5e0/0x5e0 [ 74.056548][ C0] ? __mac80211_hwsim_beacon_tx+0x5e0/0x5e0 [ 74.062469][ C0] ? skb_put_data.isra.0+0x30/0x30 [ 74.067594][ C0] ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 [ 74.074637][ C0] mac80211_hwsim_beacon+0x101/0x200 [ 74.079951][ C0] __hrtimer_run_queues+0x599/0xa30 [ 74.085174][ C0] ? __remove_hrtimer+0x2a0/0x2a0 [ 74.090212][ C0] ? ktime_get_update_offsets_now+0x3ef/0x5c0 [ 74.096303][ C0] hrtimer_run_softirq+0x17f/0x360 [ 74.101443][ C0] __do_softirq+0x1d4/0x905 [ 74.105969][ C0] irq_exit_rcu+0xb7/0x120 [ 74.110392][ C0] sysvec_apic_timer_interrupt+0x97/0xc0 [ 74.116032][ C0] [ 74.118958][ C0] [ 74.121887][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.127895][ C0] RIP: 0010:memmove+0x28/0x1b0 [ 74.132686][ C0] Code: c3 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48 [ 74.152395][ C0] RSP: 0018:ffffc900039aefb0 EFLAGS: 00010282 [ 74.158467][ C0] RAX: ffff888073521fb4 RBX: 0000000000000002 RCX: fffffffff2718d78 [ 74.166445][ C0] RDX: ffffffffffffffe1 RSI: ffff888080e0920d RDI: ffff888080e0921d [ 74.174414][ C0] RBP: 0000000000000020 R08: ffff888073521f85 R09: 0000766972705f73 [ 74.182383][ C0] R10: 667265736965722e R11: 0000766972705f73 R12: 0000000000000001 [ 74.190356][ C0] R13: 0000000000000001 R14: ffff888073521fa4 R15: 0000000000000010 [ 74.198337][ C0] leaf_paste_entries+0x44d/0x910 [ 74.203483][ C0] balance_leaf+0x9853/0xddc0 [ 74.208182][ C0] ? reiserfs_prepare_for_journal+0x162/0x2b0 [ 74.214253][ C0] ? fix_nodes+0x14cf/0x8660 [ 74.218856][ C0] ? replace_key+0x170/0x170 [ 74.223482][ C0] do_balance+0x319/0x810 [ 74.227818][ C0] ? get_right_neighbor_position+0x170/0x170 [ 74.233836][ C0] ? wait_for_completion_io_timeout+0x20/0x20 [ 74.239917][ C0] reiserfs_paste_into_item+0x74b/0x8d0 [ 74.245477][ C0] ? reiserfs_delete_object+0x210/0x210 [ 74.251054][ C0] ? search_by_entry_key+0x960/0x960 [ 74.256343][ C0] ? reiserfs_new_inode+0x343/0x2110 [ 74.261638][ C0] ? r5_hash+0xaf/0xd0 [ 74.265713][ C0] ? make_cpu_key+0x26/0x2a0 [ 74.270311][ C0] reiserfs_add_entry+0x8cb/0xcf0 [ 74.275343][ C0] ? reiserfs_lookup+0x610/0x610 [ 74.280281][ C0] ? wait_for_completion_io_timeout+0x20/0x20 [ 74.286366][ C0] ? dquot_get_next_dqblk+0x180/0x180 [ 74.291759][ C0] ? make_vfsgid+0x170/0x170 [ 74.296359][ C0] reiserfs_mkdir+0x683/0x990 [ 74.301041][ C0] ? reiserfs_mknod+0x710/0x710 [ 74.305898][ C0] ? lock_acquire+0x32/0xc0 [ 74.310407][ C0] ? reiserfs_xattr_init+0x3e8/0xbc0 [ 74.315705][ C0] ? down_write_killable_nested+0x250/0x250 [ 74.321616][ C0] reiserfs_xattr_init+0x57e/0xbc0 [ 74.326758][ C0] reiserfs_fill_super+0x2129/0x2eb0 [ 74.332059][ C0] ? reiserfs_remount+0x1650/0x1650 [ 74.337280][ C0] ? snprintf+0xbf/0x100 [ 74.341725][ C0] mount_bdev+0x357/0x420 [ 74.346065][ C0] ? reiserfs_remount+0x1650/0x1650 [ 74.351276][ C0] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 74.356311][ C0] legacy_get_tree+0x109/0x220 [ 74.361087][ C0] vfs_get_tree+0x8d/0x350 [ 74.365511][ C0] path_mount+0x134b/0x1e40 [ 74.370026][ C0] ? kmem_cache_free+0xe9/0x480 [ 74.374880][ C0] ? finish_automount+0x9b0/0x9b0 [ 74.379917][ C0] ? putname+0x102/0x140 [ 74.384172][ C0] __x64_sys_mount+0x283/0x300 [ 74.388945][ C0] ? copy_mnt_ns+0xb30/0xb30 [ 74.393556][ C0] ? syscall_enter_from_user_mode+0x26/0x80 [ 74.399460][ C0] do_syscall_64+0x39/0xb0 [ 74.403896][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.409801][ C0] RIP: 0033:0x7fdf5f19069a [ 74.414263][ C0] ------------[ cut here ]------------ [ 74.419707][ C0] WARNING: CPU: 0 PID: 5001 at arch/x86/mm/tlb.c:1295 nmi_uaccess_okay+0x99/0xb0 [ 74.428849][ C0] Modules linked in: [ 74.432736][ C0] CPU: 0 PID: 5001 Comm: syz-executor387 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 74.442629][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 74.452685][ C0] RIP: 0010:nmi_uaccess_okay+0x99/0xb0 [ 74.458150][ C0] Code: d8 48 ba 00 f0 ff ff ff ff 0f 00 41 b8 01 00 00 00 48 21 d0 48 ba 00 00 00 00 80 88 ff ff 48 01 d0 48 39 85 80 00 00 00 74 b0 <0f> 0b eb ac 0f 0b eb a0 e8 5a 59 9d 00 eb 8d e8 53 59 9d 00 eb be [ 74.477762][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010007 [ 74.483843][ C0] RAX: ffff888021303000 RBX: ffff8880780c8000 RCX: 0000000000000100 [ 74.491818][ C0] RDX: ffff888000000000 RSI: ffffffff8a063b4d RDI: ffff8880780c8080 [ 74.499791][ C0] RBP: ffff8880780c8000 R08: 0000000000000001 R09: 00007fdf5f190670 [ 74.507770][ C0] R10: 00007fdf5f1906b0 R11: 0000000000000001 R12: 00007fdf5f190670 [ 74.515739][ C0] R13: 00007fdf5f1906b0 R14: 0000000000000000 R15: ffffc90000007b88 [ 74.523707][ C0] FS: 00005555565e7300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 74.532727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.539309][ C0] CR2: 0000564e16122000 CR3: 0000000021303000 CR4: 00000000003506f0 [ 74.547275][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.555242][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.563230][ C0] Call Trace: [ 74.566507][ C0] [ 74.569349][ C0] copy_from_user_nmi+0x62/0x150 [ 74.574301][ C0] show_opcodes+0x5d/0xd0 [ 74.578661][ C0] ? _printk+0xbf/0xf0 [ 74.582745][ C0] ? syslog_print_all+0x3a0/0x3a0 [ 74.587790][ C0] show_iret_regs+0x30/0x60 [ 74.592329][ C0] __show_regs+0x22/0x680 [ 74.596664][ C0] ? is_bpf_text_address+0x9d/0x1b0 [ 74.601890][ C0] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.607968][ C0] show_trace_log_lvl+0x256/0x390 [ 74.613024][ C0] die_addr+0x3c/0xa0 [ 74.617028][ C0] exc_general_protection+0x129/0x230 [ 74.622410][ C0] asm_exc_general_protection+0x26/0x30 [ 74.627976][ C0] RIP: 0010:__iterate_interfaces+0x85/0x570 [ 74.633879][ C0] Code: 40 1b 00 00 4c 39 f3 0f 84 82 02 00 00 48 bd 00 00 00 00 00 fc ff df e8 f9 d5 ec f7 4c 8d a3 98 1c 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 04 28 84 c0 74 08 3c 03 0f 8e 5d 04 00 00 8b bb 98 1c 00 00 [ 74.653507][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010206 [ 74.659591][ C0] RAX: 000000000000839c RBX: 0000000000040048 RCX: 0000000000000100 [ 74.667558][ C0] RDX: ffff888026db8000 RSI: ffffffff89974db7 RDI: 0000000000000005 [ 74.675528][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 74.683504][ C0] R10: 0000000000000000 R11: ffffc90000007ff8 R12: 0000000000041ce0 [ 74.691489][ C0] R13: 0000000000000000 R14: ffff88802ab22920 R15: 0000000000000002 [ 74.699464][ C0] ? __iterate_interfaces+0x77/0x570 [ 74.704762][ C0] ? __mac80211_hwsim_beacon_tx+0x5e0/0x5e0 [ 74.710687][ C0] ? __mac80211_hwsim_beacon_tx+0x5e0/0x5e0 [ 74.716625][ C0] ? skb_put_data.isra.0+0x30/0x30 [ 74.721775][ C0] ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 [ 74.728826][ C0] mac80211_hwsim_beacon+0x101/0x200 [ 74.734126][ C0] __hrtimer_run_queues+0x599/0xa30 [ 74.739344][ C0] ? __remove_hrtimer+0x2a0/0x2a0 [ 74.744371][ C0] ? ktime_get_update_offsets_now+0x3ef/0x5c0 [ 74.750461][ C0] hrtimer_run_softirq+0x17f/0x360 [ 74.755588][ C0] __do_softirq+0x1d4/0x905 [ 74.760119][ C0] irq_exit_rcu+0xb7/0x120 [ 74.764557][ C0] sysvec_apic_timer_interrupt+0x97/0xc0 [ 74.770205][ C0] [ 74.773135][ C0] [ 74.776068][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.782067][ C0] RIP: 0010:memmove+0x28/0x1b0 [ 74.786841][ C0] Code: c3 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48 [ 74.806452][ C0] RSP: 0018:ffffc900039aefb0 EFLAGS: 00010282 [ 74.812519][ C0] RAX: ffff888073521fb4 RBX: 0000000000000002 RCX: fffffffff2718d78 [ 74.820490][ C0] RDX: ffffffffffffffe1 RSI: ffff888080e0920d RDI: ffff888080e0921d [ 74.828460][ C0] RBP: 0000000000000020 R08: ffff888073521f85 R09: 0000766972705f73 [ 74.836429][ C0] R10: 667265736965722e R11: 0000766972705f73 R12: 0000000000000001 [ 74.844399][ C0] R13: 0000000000000001 R14: ffff888073521fa4 R15: 0000000000000010 [ 74.852390][ C0] leaf_paste_entries+0x44d/0x910 [ 74.857448][ C0] balance_leaf+0x9853/0xddc0 [ 74.862140][ C0] ? reiserfs_prepare_for_journal+0x162/0x2b0 [ 74.868215][ C0] ? fix_nodes+0x14cf/0x8660 [ 74.872825][ C0] ? replace_key+0x170/0x170 [ 74.877434][ C0] do_balance+0x319/0x810 [ 74.881773][ C0] ? get_right_neighbor_position+0x170/0x170 [ 74.887764][ C0] ? wait_for_completion_io_timeout+0x20/0x20 [ 74.893850][ C0] reiserfs_paste_into_item+0x74b/0x8d0 [ 74.899404][ C0] ? reiserfs_delete_object+0x210/0x210 [ 74.905013][ C0] ? search_by_entry_key+0x960/0x960 [ 74.910305][ C0] ? reiserfs_new_inode+0x343/0x2110 [ 74.915601][ C0] ? r5_hash+0xaf/0xd0 [ 74.919676][ C0] ? make_cpu_key+0x26/0x2a0 [ 74.924274][ C0] reiserfs_add_entry+0x8cb/0xcf0 [ 74.929311][ C0] ? reiserfs_lookup+0x610/0x610 [ 74.934256][ C0] ? wait_for_completion_io_timeout+0x20/0x20 [ 74.940344][ C0] ? dquot_get_next_dqblk+0x180/0x180 [ 74.945731][ C0] ? make_vfsgid+0x170/0x170 [ 74.950327][ C0] reiserfs_mkdir+0x683/0x990 [ 74.955012][ C0] ? reiserfs_mknod+0x710/0x710 [ 74.959870][ C0] ? lock_acquire+0x32/0xc0 [ 74.964385][ C0] ? reiserfs_xattr_init+0x3e8/0xbc0 [ 74.969677][ C0] ? down_write_killable_nested+0x250/0x250 [ 74.975668][ C0] reiserfs_xattr_init+0x57e/0xbc0 [ 74.980790][ C0] reiserfs_fill_super+0x2129/0x2eb0 [ 74.986116][ C0] ? reiserfs_remount+0x1650/0x1650 [ 74.991329][ C0] ? snprintf+0xbf/0x100 [ 74.995586][ C0] mount_bdev+0x357/0x420 [ 74.999931][ C0] ? reiserfs_remount+0x1650/0x1650 [ 75.005139][ C0] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 75.010173][ C0] legacy_get_tree+0x109/0x220 [ 75.014955][ C0] vfs_get_tree+0x8d/0x350 [ 75.019383][ C0] path_mount+0x134b/0x1e40 [ 75.023904][ C0] ? kmem_cache_free+0xe9/0x480 [ 75.028756][ C0] ? finish_automount+0x9b0/0x9b0 [ 75.033793][ C0] ? putname+0x102/0x140 [ 75.038045][ C0] __x64_sys_mount+0x283/0x300 [ 75.042825][ C0] ? copy_mnt_ns+0xb30/0xb30 [ 75.047427][ C0] ? syscall_enter_from_user_mode+0x26/0x80 [ 75.053333][ C0] do_syscall_64+0x39/0xb0 [ 75.057769][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.063693][ C0] RIP: 0033:0x7fdf5f19069a [ 75.068169][ C0] Code: Unable to access opcode bytes at 0x7fdf5f190670. [ 75.075185][ C0] RSP: 002b:00007fffd1387398 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 75.083598][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdf5f19069a [ 75.091576][ C0] RDX: 0000000020001100 RSI: 0000000020000180 RDI: 00007fffd13873b0 [ 75.099564][ C0] RBP: 00007fffd13873b0 R08: 00007fffd13873f0 R09: 00000000000010de [ 75.107534][ C0] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000004 [ 75.115506][ C0] R13: 00005555565e72b8 R14: 0000000000000080 R15: 00007fffd13873f0 [ 75.123483][ C0] [ 75.126514][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.134100][ C0] Kernel Offset: disabled [ 75.138433][ C0] Rebooting in 86400 seconds..