syzkaller login: [ 91.876020][ T8] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:27982' (ED25519) to the list of known hosts. executing program [ 92.755229][ T5099] loop0: detected capacity change from 0 to 32768 [ 92.789851][ T5099] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor423 (5099) [ 92.836927][ T5099] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 92.849795][ T5099] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 92.853347][ T5099] BTRFS info (device loop0): disk space caching is enabled [ 92.856151][ T5099] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 92.946463][ T5099] BTRFS info (device loop0): rebuilding free space tree [ 93.004629][ T5099] BTRFS info (device loop0): disabling free space tree [ 93.007450][ T5099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.020771][ T5099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.069915][ T5099] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 93.149249][ T5099] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 93.149258][ T5099] #PF: supervisor instruction fetch in kernel mode [ 93.149263][ T5099] #PF: error_code(0x0010) - not-present page [ 93.149267][ T5099] PGD 3b8bb067 P4D 3b8bb067 PUD 34df9067 PMD 0 [ 93.149280][ T5099] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI [ 93.149288][ T5099] CPU: 0 UID: 0 PID: 5099 Comm: syz-executor423 Not tainted 6.11.0-rc7-syzkaller #0 [ 93.149300][ T5099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.149307][ T5099] RIP: 0010:0x0 [ 93.149322][ T5099] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 93.149328][ T5099] RSP: 0018:ffffc90002dcf6b8 EFLAGS: 00010282 [ 93.149338][ T5099] RAX: 0000000000000000 RBX: ffff88801acc9000 RCX: 0000000000000001 [ 93.149346][ T5099] RDX: ffff88803353813e RSI: ffff88801f54b000 RDI: ffff88801acc9000 [ 93.149355][ T5099] RBP: 1ffff110066a7027 R08: 0000000000000000 R09: 000000000000009f [ 93.149388][ T5099] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88801f54b000 [ 93.149396][ T5099] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88803353813e [ 93.149404][ T5099] FS: 000055557dd86380(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 93.149415][ T5099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.149424][ T5099] CR2: ffffffffffffffd6 CR3: 0000000012056000 CR4: 0000000000350ef0 [ 93.149451][ T5099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.149460][ T5099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.149468][ T5099] Call Trace: [ 93.149472][ T5099] [ 93.149478][ T5099] ? __die_body+0x88/0xe0 [ 93.149606][ T5099] ? page_fault_oops+0x8e4/0xcc0 [ 93.149621][ T5099] ? page_ext_get+0x1d6/0x2a0 [ 93.149638][ T5099] ? __pfx_page_fault_oops+0x10/0x10 [ 93.149655][ T5099] ? mark_lock+0x9a/0x350 [ 93.149673][ T5099] ? __lock_acquire+0x137a/0x2040 [ 93.149689][ T5099] ? rcu_is_watching+0x15/0xb0 [ 93.149705][ T5099] ? is_errata93+0xbe/0x260 [ 93.149718][ T5099] ? exc_page_fault+0x5ed/0x8c0 [ 93.150487][ T5099] ? asm_exc_page_fault+0x26/0x30 [ 93.150507][ T5099] fbcon_putcs+0x255/0x390 [ 93.150554][ T5099] do_update_region+0x396/0x450 [ 93.150570][ T5099] invert_screen+0x401/0xe50 [ 93.150582][ T5099] ? __kasan_kmalloc_large+0x8a/0xa0 [ 93.150600][ T5099] ? __pfx_invert_screen+0x10/0x10 [ 93.150611][ T5099] ? vc_do_resize+0x31b/0x17f0 [ 93.150624][ T5099] ? vc_do_resize+0x31b/0x17f0 [ 93.150636][ T5099] ? trace_kmalloc+0x1f/0xd0 [ 93.150647][ T5099] ? __kmalloc_noprof+0x21a/0x400 [ 93.150660][ T5099] clear_selection+0x59/0x80 [ 93.150675][ T5099] vc_do_resize+0x6e6/0x17f0 [ 93.150686][ T5099] ? mark_lock+0x9a/0x350 [ 93.150709][ T5099] ? __pfx_vc_do_resize+0x10/0x10 [ 93.150723][ T5099] ? fb_match_mode+0x5b0/0x6f0 [ 93.150737][ T5099] ? fbcon_set_disp+0x76c/0x11d0 [ 93.150749][ T5099] ? fb_get_color_depth+0x159/0x280 [ 93.150760][ T5099] fbcon_set_disp+0xac9/0x11d0 [ 93.150768][ T5099] ? is_console_locked+0x9/0x20 [ 93.150802][ T5099] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 93.150818][ T5099] set_con2fb_map+0xa6c/0x10a0 [ 93.150833][ T5099] fbcon_set_con2fb_map_ioctl+0x207/0x320 [ 93.150848][ T5099] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 93.150858][ T5099] ? tomoyo_path_number_perm+0x71a/0x880 [ 93.150871][ T5099] do_fb_ioctl+0x38f/0x7b0 [ 93.150880][ T5099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 93.150890][ T5099] ? __pfx_do_fb_ioctl+0x10/0x10 [ 93.150906][ T5099] ? bpf_lsm_file_ioctl+0x9/0x10 [ 93.150921][ T5099] ? security_file_ioctl+0x87/0xb0 [ 93.150937][ T5099] ? __pfx_fb_ioctl+0x10/0x10 [ 93.150952][ T5099] __se_sys_ioctl+0xfc/0x170 [ 93.150965][ T5099] do_syscall_64+0xf3/0x230 [ 93.150979][ T5099] ? clear_bhb_loop+0x35/0x90 [ 93.150995][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.151006][ T5099] RIP: 0033:0x7f826b53ffa9 [ 93.151013][ T5099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 93.151020][ T5099] RSP: 002b:00007ffd2db58b88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.151028][ T5099] RAX: ffffffffffffffda RBX: 7573617461646f6e RCX: 00007f826b53ffa9 [ 93.151033][ T5099] RDX: 00000000200000c0 RSI: 0000000000004610 RDI: 0000000000000003 [ 93.151037][ T5099] RBP: 00007f826b5b95f0 R08: 000055557dd874c0 R09: 000055557dd874c0 [ 93.151042][ T5099] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2db58bb0 [ 93.151046][ T5099] R13: 00007ffd2db58dd8 R14: 431bde82d7b634db R15: 00007f826b58901d [ 93.151053][ T5099] [ 93.151056][ T5099] Modules linked in: [ 93.151061][ T5099] CR2: 0000000000000000 [ 93.151065][ T5099] ---[ end trace 0000000000000000 ]--- [ 93.151069][ T5099] RIP: 0010:0x0 [ 93.151076][ T5099] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 93.151080][ T5099] RSP: 0018:ffffc90002dcf6b8 EFLAGS: 00010282 [ 93.151085][ T5099] RAX: 0000000000000000 RBX: ffff88801acc9000 RCX: 0000000000000001 [ 93.151093][ T5099] RDX: ffff88803353813e RSI: ffff88801f54b000 RDI: ffff88801acc9000 [ 93.151101][ T5099] RBP: 1ffff110066a7027 R08: 0000000000000000 R09: 000000000000009f [ 93.151107][ T5099] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88801f54b000 [ 93.151114][ T5099] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88803353813e [ 93.151122][ T5099] FS: 000055557dd86380(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 93.151131][ T5099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.151138][ T5099] CR2: ffffffffffffffd6 CR3: 0000000012056000 CR4: 0000000000350ef0 [ 93.151166][ T5099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.151175][ T5099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.151184][ T5099] Kernel panic - not syncing: Fatal exception [ 93.151452][ T5099] Kernel Offset: disabled VM DIAGNOSIS: 20:09:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=ffffffff9a668f40 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002dcedf0 R8 =ffffffff8540b4bb R9 =1ffff11006682046 R10=dffffc0000000000 R11=ffffffff8540b470 R12=dffffc0000000000 R13=0000000000000065 R14=0000000000000065 R15=00000000000003f8 RIP=ffffffff8540b4ee RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557dd86380 ffffffff 00c00000 GS =0000 ffff88801fe00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffffffffffffd6 CR3=0000000012056000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffc0 Opmask01=0000000000000000 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2db58180 00007ffd2db58160 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2db582c0 00007ffd2db58140 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f826b5aa444 00007f826b5be2a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2db58180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2db582c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2db582c0 00007ffd2db58140 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2db58180 00007ffd2db58160 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007366727462 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002c31763d6568 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7461646f6e2c6568 6361635f7261656c 632c6563726f662d 73736572706d6f63 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000