syzkaller login: [ 92.087978][ T1232] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:4935' (ED25519) to the list of known hosts. executing program [ 94.002979][ T5317] loop0: detected capacity change from 0 to 4096 [ 94.014100][ T5317] ======================================================= [ 94.014100][ T5317] WARNING: The mand mount option has been deprecated and [ 94.014100][ T5317] and is ignored by this kernel. Remove the mand [ 94.014100][ T5317] option from the mount to silence this warning. [ 94.014100][ T5317] ======================================================= [ 94.064367][ T5317] ntfs3(loop0): ino=3, Correct links count -> 2. [ 94.109087][ T5317] ntfs3(loop0): ino=1a, mi_enum_attr [ 94.115830][ T5317] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 94.136936][ T25] audit: type=1800 audit(1750156051.265:2): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor306" name="file0" dev="loop0" ino=28 res=0 errno=0 [ 94.149869][ T5317] ntfs3(loop0): ino=1b, "file0" ntfs_rename [ 94.154382][ T5317] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 94.160193][ T5317] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 94.165121][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz-executor306 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 94.170220][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.174788][ T5317] RIP: 0010:pick_link+0x4f1/0xe80 [ 94.177049][ T5317] Code: 4c 89 f7 e8 81 fa ea ff 4d 8b 36 4d 85 f6 0f 84 9b 00 00 00 e8 50 7c 87 ff 49 bf 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 b9 06 00 00 41 0f b6 2e bf 2f 00 00 00 [ 94.186642][ T5317] RSP: 0018:ffffc9000101f7e8 EFLAGS: 00010246 [ 94.189089][ T5317] RAX: 0000000000000000 RBX: ffffc9000101f908 RCX: ffff888036404880 [ 94.192329][ T5317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.195610][ T5317] RBP: 0000000000000000 R08: ffff888036404880 R09: 0000000000000002 [ 94.198938][ T5317] R10: 000000003b9aca00 R11: 0000000000000000 R12: 1ffff92000203f8b [ 94.202411][ T5317] R13: ffffc9000101fc20 R14: 0000000000000002 R15: dffffc0000000000 [ 94.207043][ T5317] FS: 000055558d5a7380(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 94.211134][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.213797][ T5317] CR2: 00007f497fb909c0 CR3: 000000004511d000 CR4: 0000000000352ef0 [ 94.217162][ T5317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.220575][ T5317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.224002][ T5317] Call Trace: [ 94.225645][ T5317] [ 94.226993][ T5317] step_into+0xc5d/0xf30 [ 94.228910][ T5317] ? __d_lookup_rcu+0x427/0x490 [ 94.231281][ T5317] ? __pfx_step_into+0x10/0x10 [ 94.233848][ T5317] path_openat+0x1bc6/0x3830 [ 94.236232][ T5317] ? arch_stack_walk+0xfc/0x150 [ 94.238657][ T5317] ? __pfx_path_openat+0x10/0x10 [ 94.240843][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.243304][ T5317] do_filp_open+0x1fa/0x410 [ 94.245272][ T5317] ? __lock_acquire+0xab9/0xd20 [ 94.247436][ T5317] ? __pfx_do_filp_open+0x10/0x10 [ 94.249941][ T5317] ? _raw_spin_unlock+0x28/0x50 [ 94.253279][ T5317] ? alloc_fd+0x64c/0x6c0 [ 94.255442][ T5317] do_sys_openat2+0x121/0x1c0 [ 94.257936][ T5317] ? __pfx_do_sys_openat2+0x10/0x10 [ 94.260487][ T5317] __x64_sys_open+0x11e/0x150 [ 94.262453][ T5317] do_syscall_64+0xfa/0x3b0 [ 94.264331][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.266539][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.269069][ T5317] ? clear_bhb_loop+0x60/0xb0 [ 94.271090][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.273880][ T5317] RIP: 0033:0x7f5126261ed9 [ 94.276107][ T5317] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 94.284345][ T5317] RSP: 002b:00007ffea7b344c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 94.287924][ T5317] RAX: ffffffffffffffda RBX: 00007f51262caac0 RCX: 00007f5126261ed9 [ 94.291861][ T5317] RDX: 0000000000000000 RSI: 0000000000048500 RDI: 0000200000000a80 [ 94.295612][ T5317] RBP: 0000200000001240 R08: 000055558d5a84c0 R09: 000055558d5a84c0 [ 94.298832][ T5317] R10: 000055558d5a84c0 R11: 0000000000000246 R12: 0000000000000000 [ 94.302159][ T5317] R13: 00007ffea7b34718 R14: 431bde82d7b634db R15: 00007f51262ab03b [ 94.305518][ T5317] [ 94.307039][ T5317] Modules linked in: [ 94.309193][ T5317] ---[ end trace 0000000000000000 ]--- [ 94.315612][ T5317] RIP: 0010:pick_link+0x4f1/0xe80 [ 94.317830][ T5317] Code: 4c 89 f7 e8 81 fa ea ff 4d 8b 36 4d 85 f6 0f 84 9b 00 00 00 e8 50 7c 87 ff 49 bf 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 b9 06 00 00 41 0f b6 2e bf 2f 00 00 00 [ 94.327860][ T5317] RSP: 0018:ffffc9000101f7e8 EFLAGS: 00010246 [ 94.330354][ T5317] RAX: 0000000000000000 RBX: ffffc9000101f908 RCX: ffff888036404880 [ 94.333621][ T5317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.337250][ T5317] RBP: 0000000000000000 R08: ffff888036404880 R09: 0000000000000002 [ 94.341136][ T5317] R10: 000000003b9aca00 R11: 0000000000000000 R12: 1ffff92000203f8b [ 94.345320][ T5317] R13: ffffc9000101fc20 R14: 0000000000000002 R15: dffffc0000000000 [ 94.348663][ T5317] FS: 000055558d5a7380(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 94.352635][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.356271][ T5317] CR2: 00007f497fb909c0 CR3: 000000004511d000 CR4: 0000000000352ef0 [ 94.359808][ T5317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.363422][ T5317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.367244][ T5317] Kernel panic - not syncing: Fatal exception [ 94.371124][ T5317] Kernel Offset: disabled [ 94.373807][ T5317] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:27:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000101f010 R8 =ffff888033b98237 R9 =1ffff11006773046 R10=dffffc0000000000 R11=ffffffff854737b0 R12=dffffc0000000000 R13=ffffffff99ac48f8 R14=ffffffff99dc9780 R15=0000000000000000 RIP=ffffffff8547382c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558d5a7380 ffffffff 00c00000 GS =0000 ffff88808d251000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f497fb909c0 CR3=000000004511d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000100 Opmask01=0000000000000000 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00657a69735f6575 6575715f6776612e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea7b33ac0 00007ffea7b33aa0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea7b33c00 00007ffea7b33a80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51262e6da4 00007f51262fa240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea7b33ac0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea7b33c00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea7b33c00 00007ffea7b33a80 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea7b33ac0 00007ffea7b33aa0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000337366746e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5564cf2232b6d72b bce72fc5f0c193e9 e1f04e67d30d4700 2c6563726f662c39 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7369642c6563726f 662c647261637369 642c313030303030 3030303030303030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d393538386f7369 3d74657372616863 6f692c6174656d77 6f68732c64726163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000