syzkaller login: [ 70.771342][ T7] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts.
executing program
executing program
executing program
[ 72.110414][ T4994] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4994 'syz-executor152'
[ 72.120995][ T4994] loop0: detected capacity change from 0 to 64
[ 72.149998][ T4998] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 72.174616][ T5002] loop0: detected capacity change from 0 to 64
[ 72.200009][ T5006] loop0: detected capacity change from 0 to 64
executing program
[ 72.223431][ T5010] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 72.249728][ T5014] loop0: detected capacity change from 0 to 64
[ 72.273977][ T5018] loop0: detected capacity change from 0 to 64
executing program
executing program
executing program
[ 72.295946][ T5022] loop0: detected capacity change from 0 to 64
[ 72.317372][ T5026] loop0: detected capacity change from 0 to 64
[ 72.339579][ T5030] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 72.360622][ T5034] loop0: detected capacity change from 0 to 64
[ 72.389034][ T5038] loop0: detected capacity change from 0 to 64
executing program
[ 72.409985][ T5042] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 72.434574][ T5046] loop0: detected capacity change from 0 to 64
[ 72.461035][ T5050] loop0: detected capacity change from 0 to 64
executing program
[ 72.482907][ T5054] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 72.506029][ T5058] loop0: detected capacity change from 0 to 64
[ 72.532635][ T5062] loop0: detected capacity change from 0 to 64
executing program
[ 72.559626][ T5066] loop0: detected capacity change from 0 to 64
[ 72.583787][ T5070] loop0: detected capacity change from 0 to 64
executing program
executing program
executing program
[ 72.660827][ T5074] loop0: detected capacity change from 0 to 64
[ 72.684408][ T5078] loop0: detected capacity change from 0 to 64
executing program
[ 72.706102][ T5082] loop0: detected capacity change from 0 to 64
executing program
executing program
executing program
[ 72.731181][ T5086] loop0: detected capacity change from 0 to 64
[ 72.752943][ T5090] loop0: detected capacity change from 0 to 64
[ 72.774997][ T5094] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 72.797248][ T5098] loop0: detected capacity change from 0 to 64
[ 72.819424][ T5102] loop0: detected capacity change from 0 to 64
executing program
[ 72.844430][ T5106] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 72.870899][ T5110] loop0: detected capacity change from 0 to 64
[ 72.897693][ T5114] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 72.923191][ T5118] loop0: detected capacity change from 0 to 64
[ 72.948100][ T5122] loop0: detected capacity change from 0 to 64
executing program
[ 72.970681][ T5126] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.001449][ T5130] loop0: detected capacity change from 0 to 64
[ 73.024931][ T5134] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.048579][ T5138] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.082386][ T5146] loop0: detected capacity change from 0 to 64
[ 73.107491][ T5150] loop0: detected capacity change from 0 to 64
executing program
executing program
executing program
[ 73.128206][ T5154] loop0: detected capacity change from 0 to 64
[ 73.152362][ T5158] loop0: detected capacity change from 0 to 64
[ 73.175606][ T5162] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.195322][ T5166] loop0: detected capacity change from 0 to 64
[ 73.219684][ T5170] loop0: detected capacity change from 0 to 64
executing program
[ 73.242820][ T5174] loop0: detected capacity change from 0 to 64
executing program
executing program
executing program
[ 73.269080][ T5178] loop0: detected capacity change from 0 to 64
[ 73.289019][ T5182] loop0: detected capacity change from 0 to 64
[ 73.311167][ T5186] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.338145][ T5190] loop0: detected capacity change from 0 to 64
[ 73.356824][ T5194] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.378402][ T5198] loop0: detected capacity change from 0 to 64
[ 73.407468][ T5202] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.429769][ T5206] loop0: detected capacity change from 0 to 64
[ 73.454851][ T5210] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.482544][ T5214] loop0: detected capacity change from 0 to 64
[ 73.506717][ T5218] loop0: detected capacity change from 0 to 64
executing program
[ 73.528040][ T5222] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.555164][ T5226] loop0: detected capacity change from 0 to 64
[ 73.580043][ T5230] loop0: detected capacity change from 0 to 64
executing program
[ 73.604197][ T5234] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.635210][ T5238] loop0: detected capacity change from 0 to 64
[ 73.660199][ T5242] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.692702][ T5246] loop0: detected capacity change from 0 to 64
[ 73.722801][ T5250] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.745902][ T5254] loop0: detected capacity change from 0 to 64
[ 73.768237][ T5258] loop0: detected capacity change from 0 to 64
executing program
executing program
executing program
[ 73.794036][ T5262] loop0: detected capacity change from 0 to 64
[ 73.816381][ T5266] loop0: detected capacity change from 0 to 64
[ 73.839241][ T5270] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.871239][ T5274] loop0: detected capacity change from 0 to 64
[ 73.897748][ T5278] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.926341][ T5282] loop0: detected capacity change from 0 to 64
[ 73.954410][ T5286] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 73.987989][ T5291] loop0: detected capacity change from 0 to 64
[ 74.021708][ T5295] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 74.047068][ T5299] loop0: detected capacity change from 0 to 64
[ 74.073318][ T5303] loop0: detected capacity change from 0 to 64
executing program
executing program
executing program
[ 74.099719][ T5307] loop0: detected capacity change from 0 to 64
[ 74.119647][ T5311] loop0: detected capacity change from 0 to 64
[ 74.143228][ T5315] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 74.163719][ T5319] loop0: detected capacity change from 0 to 64
[ 74.188100][ T5323] loop0: detected capacity change from 0 to 64
executing program
executing program
[ 74.218508][ T5327] loop0: detected capacity change from 0 to 64
[ 74.245661][ T5331] loop0: detected capacity change from 0 to 64
executing program
executing program
executing program
[ 74.268880][ T5335] loop0: detected capacity change from 0 to 64
[ 74.289876][ T5339] loop0: detected capacity change from 0 to 64
[ 74.311946][ T5343] loop0: detected capacity change from 0 to 64
[ 74.333494][ T5347] ffff888028b33600[2] piv 140728523542527 < prev_piv 18446744071730568112
[ 74.342441][ T5347] WARN at mas_validate_limits:7117 (1)
[ 74.348156][ T5347] MAS: tree=ffff88801fb59cc0 enode=ffff888028b3360c
[ 74.348175][ T5347] [1] index=1ffff000 last=0
[ 74.359469][ T5347] min=7f2c3f441000 max=ffffffffffffffff alloc=0000000000000000, depth=1, flags=0
[ 74.369096][ T5347] Check index & last
[ 74.373002][ T5347] maple_tree(ffff88801fb59cc0) flags 30B, height 2 root ffff88807c3a041e
[ 74.381481][ T5347] 0-ffffffffffffffff: node ffff88807c3a0400 depth 0 type 3 parent ffff88801fb59cc1 contents: 93824471642112 18446603345184751616 0 0 0 0 0 0 0 0 | 01 01| ffff88802ccaca0c 139828015558655 ffff88807ce4120c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000
[ 74.416904][ T5347] 0-7f2c3f326fff: node ffff88802ccaca00 depth 1 type 1 parent ffff88807c3a0406 contents: 0000000000000000 1FFFEFFF ffff88802369a300 1FFFFFFF ffff88802369a200 20FFFFFF ffff8880278dba00 21000FFF 0000000000000000 5555574DBFFF ffff8880278db500 5555574FDFFF 0000000000000000 7F2C36F0CFFF ffff888028e22a00 7F2C36F0DFFF ffff8880278db600 7F2C3F325FFF ffff8880278db400 7F2C3F326FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000009
[ 74.461912][ T5347] 0-1fffefff: 0000000000000000
[ 74.467144][ T5347] 1ffff000-1fffffff: ffff88802369a300
[ 74.472911][ T5347] 20000000-20ffffff: ffff88802369a200
[ 74.478710][ T5347] 21000000-21000fff: ffff8880278dba00
[ 74.484474][ T5347] 21001000-5555574dbfff: 0000000000000000
[ 74.490595][ T5347] 5555574dc000-5555574fdfff: ffff8880278db500
[ 74.497089][ T5347] 5555574fe000-7f2c36f0cfff: 0000000000000000
[ 74.503501][ T5347] 7f2c36f0d000-7f2c36f0dfff: ffff888028e22a00
[ 74.509958][ T5347] 7f2c36f0e000-7f2c3f325fff: ffff8880278db600
[ 74.516408][ T5347] 7f2c3f326000-7f2c3f326fff: ffff8880278db400
[ 74.522878][ T5347] 7f2c3f327000-ffffffffffffffff: node ffff88807ce41200 depth 1 type 1 parent ffff88807c3a040e contents: ffff8880212ed000 7F2C3F346FFF ffff8880770c6c00 7F2C3F347FFF ffff8880212ed300 7F2C3F367FFF ffff8880278db200 7F2C3F370FFF ffff8880278dbe00 7F2C3F40CFFF ffff8880278dbf00 7F2C3F439FFF ffff8880278db300 7F2C3F43DFFF ffff8880278dbd00 7F2C3F440FFF ffff8880278dbc00 7F2C3F446FFF 0000000000000000 7FFDE9A5BFFF ffff8880278dbb00 7FFDE9A7CFFF 0000000000000000 7FFDE9BA9FFF ffff8880278db900 7FFDE9BADFFF ffff8880278db800 7FFDE9BAFFFF 0000000000000000 FFFFFFFFFFFFFFFF 000000000000000e
[ 74.575512][ T5347] 7f2c3f327000-7f2c3f346fff: ffff8880212ed000
[ 74.581962][ T5347] 7f2c3f347000-7f2c3f347fff: ffff8880770c6c00
[ 74.588426][ T5347] 7f2c3f348000-7f2c3f367fff: ffff8880212ed300
[ 74.594882][ T5347] 7f2c3f368000-7f2c3f370fff: ffff8880278db200
[ 74.601382][ T5347] 7f2c3f371000-7f2c3f40cfff: ffff8880278dbe00
[ 74.607852][ T5347] 7f2c3f40d000-7f2c3f439fff: ffff8880278dbf00
[ 74.614303][ T5347] 7f2c3f43a000-7f2c3f43dfff: ffff8880278db300
[ 74.620773][ T5347] 7f2c3f43e000-7f2c3f440fff: ffff8880278dbd00
[ 74.627235][ T5347] 7f2c3f441000-7f2c3f446fff: ffff8880278dbc00
[ 74.633641][ T5347] 7f2c3f447000-7ffde9a5bfff: 0000000000000000
[ 74.640096][ T5347] 7ffde9a5c000-7ffde9a7cfff: ffff8880278dbb00
[ 74.646527][ T5347] 7ffde9a7d000-7ffde9ba9fff: 0000000000000000
[ 74.653061][ T5347] 7ffde9baa000-7ffde9badfff: ffff8880278db900
[ 74.659506][ T5347] 7ffde9bae000-7ffde9baffff: ffff8880278db800
[ 74.665907][ T5347] 7ffde9bb0000-ffffffffffffffff: 0000000000000000
[ 74.672709][ T5347] Pass: 6046802 Run:6046803
[ 74.677268][ T5347] CPU: 0 PID: 5347 Comm: syz-executor152 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0
[ 74.687326][ T5347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 74.697393][ T5347] Call Trace:
[ 74.700657][ T5347]
[ 74.703575][ T5347] dump_stack_lvl+0x136/0x150
[ 74.708259][ T5347] mt_validate+0x1ba9/0x4370
[ 74.712860][ T5347] ? mas_split.isra.0+0x1810/0x1810
[ 74.718076][ T5347] ? rwsem_wake.isra.0+0xc3/0x110
[ 74.723124][ T5347] validate_mm+0x9d/0x470
[ 74.727450][ T5347] ? vma_iter_store+0x9a0/0x9a0
[ 74.732301][ T5347] do_vmi_align_munmap+0x1199/0x1680
[ 74.737594][ T5347] ? __split_vma+0x830/0x830
[ 74.742185][ T5347] ? mtree_range_walk+0x63e/0x940
[ 74.747214][ T5347] ? mas_walk+0x5c7/0x7c0
[ 74.751587][ T5347] do_vmi_munmap+0x266/0x430
[ 74.756173][ T5347] __vm_munmap+0x137/0x380
[ 74.760583][ T5347] ? do_vmi_munmap+0x430/0x430
[ 74.765349][ T5347] ? syscall_enter_from_user_mode+0x26/0x80
[ 74.771243][ T5347] __x64_sys_munmap+0x62/0x80
[ 74.775921][ T5347] do_syscall_64+0x39/0xb0
[ 74.780325][ T5347] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 74.786211][ T5347] RIP: 0033:0x7f2c3f3bb9d7
[ 74.790613][ T5347] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 74.810216][ T5347] RSP: 002b:00007f2c3f367168 EFLAGS: 00000246 ORIG_RAX: 000000000000000b
[ 74.818619][ T5347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2c3f3bb9d7
[ 74.826579][ T5347] RDX: 0000000000008000 RSI: 0000000000008000 RDI: 00007f2c36f26000
[ 74.834546][ T5347] RBP: 00007f2c36f26000 R08: 0000000000000000 R09: 0000000000000280
[ 74.842692][ T5347] R10: 0000000000008000 R11: 0000000000000246 R12: 00007f2c3f3676b8
[ 74.850657][ T5347] R13: 00007f2c3f367180 R14: 00007f2c3f3671c0 R15: 00007f2c3f4407a8
[ 74.858638][ T5347]
[ 74.861814][ T5347] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 74.873541][ T5347] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 74.881936][ T5347] CPU: 0 PID: 5347 Comm: syz-executor152 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0
[ 74.891986][ T5347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 74.902023][ T5347] RIP: 0010:mt_validate+0x32ac/0x4370
[ 74.907398][ T5347] Code: 89 ee e8 97 18 77 f7 49 83 fd 06 0f 84 a6 06 00 00 e8 48 1c 77 f7 49 01 de 48 ba 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <80> 3c 10 00 0f 85 4b 10 00 00 4d 8b 2e 4c 89 ff 4c 89 ee e8 dc 17
[ 74.927001][ T5347] RSP: 0018:ffffc9000423f940 EFLAGS: 00010256
[ 74.933060][ T5347] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 74.941025][ T5347] RDX: dffffc0000000000 RSI: ffffffff8a0db288 RDI: 0000000000000007
[ 74.948989][ T5347] RBP: ffff888028b33600 R08: 0000000000000007 R09: 0000000000000000
[ 74.956948][ T5347] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 74.964912][ T5347] R13: ffff888028b33600 R14: 0000000000000000 R15: ffff800216450000
[ 74.972879][ T5347] FS: 00007f2c3f367700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 74.981801][ T5347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.988368][ T5347] CR2: 00007f2c3f3fd000 CR3: 0000000015ff7000 CR4: 0000000000350ef0
[ 74.996326][ T5347] Call Trace:
[ 74.999672][ T5347]
[ 75.002588][ T5347] ? die_addr+0x3c/0xa0
[ 75.006739][ T5347] ? exc_general_protection+0x129/0x230
[ 75.012283][ T5347] ? asm_exc_general_protection+0x26/0x30
[ 75.018002][ T5347] ? mt_validate+0x3298/0x4370
[ 75.022771][ T5347] ? mt_validate+0x32ac/0x4370
[ 75.027539][ T5347] ? mas_split.isra.0+0x1810/0x1810
[ 75.032739][ T5347] ? rwsem_wake.isra.0+0xc3/0x110
[ 75.037763][ T5347] validate_mm+0x9d/0x470
[ 75.042080][ T5347] ? vma_iter_store+0x9a0/0x9a0
[ 75.046919][ T5347] do_vmi_align_munmap+0x1199/0x1680
[ 75.052202][ T5347] ? __split_vma+0x830/0x830
[ 75.056781][ T5347] ? mtree_range_walk+0x63e/0x940
[ 75.061803][ T5347] ? mas_walk+0x5c7/0x7c0
[ 75.066131][ T5347] do_vmi_munmap+0x266/0x430
[ 75.070716][ T5347] __vm_munmap+0x137/0x380
[ 75.075126][ T5347] ? do_vmi_munmap+0x430/0x430
[ 75.079889][ T5347] ? syscall_enter_from_user_mode+0x26/0x80
[ 75.085786][ T5347] __x64_sys_munmap+0x62/0x80
[ 75.090462][ T5347] do_syscall_64+0x39/0xb0
[ 75.094876][ T5347] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 75.100760][ T5347] RIP: 0033:0x7f2c3f3bb9d7
[ 75.105156][ T5347] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 75.124751][ T5347] RSP: 002b:00007f2c3f367168 EFLAGS: 00000246 ORIG_RAX: 000000000000000b
[ 75.133155][ T5347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2c3f3bb9d7
[ 75.141117][ T5347] RDX: 0000000000008000 RSI: 0000000000008000 RDI: 00007f2c36f26000
[ 75.149080][ T5347] RBP: 00007f2c36f26000 R08: 0000000000000000 R09: 0000000000000280
[ 75.157033][ T5347] R10: 0000000000008000 R11: 0000000000000246 R12: 00007f2c3f3676b8
[ 75.165025][ T5347] R13: 00007f2c3f367180 R14: 00007f2c3f3671c0 R15: 00007f2c3f4407a8
[ 75.173016][ T5347]
[ 75.176050][ T5347] Modules linked in:
[ 75.180176][ T5347] ---[ end trace 0000000000000000 ]---
[ 75.185704][ T5347] RIP: 0010:mt_validate+0x32ac/0x4370
[ 75.191303][ T5347] Code: 89 ee e8 97 18 77 f7 49 83 fd 06 0f 84 a6 06 00 00 e8 48 1c 77 f7 49 01 de 48 ba 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <80> 3c 10 00 0f 85 4b 10 00 00 4d 8b 2e 4c 89 ff 4c 89 ee e8 dc 17
[ 75.210956][ T5347] RSP: 0018:ffffc9000423f940 EFLAGS: 00010256
[ 75.217052][ T5347] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 75.225020][ T5347] RDX: dffffc0000000000 RSI: ffffffff8a0db288 RDI: 0000000000000007
[ 75.233015][ T5347] RBP: ffff888028b33600 R08: 0000000000000007 R09: 0000000000000000
[ 75.241094][ T5347] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 75.249169][ T5347] R13: ffff888028b33600 R14: 0000000000000000 R15: ffff800216450000
[ 75.257188][ T5347] FS: 00007f2c3f367700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 75.266107][ T5347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 75.272724][ T5347] CR2: 00007f2c3f3fd000 CR3: 0000000015ff7000 CR4: 0000000000350ef0
[ 75.280754][ T5347] Kernel panic - not syncing: Fatal exception
[ 75.287653][ T5347] Kernel Offset: disabled
[ 75.292012][ T5347] Rebooting in 86400 seconds..