./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1697990408 <...> Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. execve("./syz-executor1697990408", ["./syz-executor1697990408"], 0x7fffa4c91120 /* 10 vars */) = 0 brk(NULL) = 0x555572776000 brk(0x555572776d00) = 0x555572776d00 arch_prctl(ARCH_SET_FS, 0x555572776380) = 0 set_tid_address(0x555572776650) = 5218 set_robust_list(0x555572776660, 24) = 0 rseq(0x555572776ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1697990408", 4096) = 28 getrandom("\xd6\x0b\x11\x8a\xe1\xb1\xbe\x6e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555572776d00 brk(0x555572797d00) = 0x555572797d00 brk(0x555572798000) = 0x555572798000 mprotect(0x7fc4b4325000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc4abe00000 write(3, "\xce\xfa\xad\x1b\x00\x0e\x00\x00\xff\x7f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x73\x2f\x0d\x00\x00\x00\x00\x00\x00\x6b\x61\x6c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7fc4abe00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "bfs", 0, "\x9f\xce\xf7\x73\x37\x1e\x4e\x03\x5a\x4f\xf1\x90\xbe\xa4\xef\xd6\x86\x42\x04\x6c\x23\xbe\x8a\x9a\xae\x70\xa0\x04\x38\x60\xf9\x89\x31\xe9\xa9\xd2\xa4\xcb\x9b\x6c\xbf\xab\x8d\x88\x54\x2e\xaf\xc9\x85\x11\x79\xa8\xbc\x28\xda\xd0\xfb\xfc\x05\x80\x4b\x2b") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = -1 ENOTDIR (Not a directory) openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) mkdirat(AT_FDCWD, "./file1", 0110) = 0 mkdir("./bus", 000) = 0 [ 61.263927][ T5218] loop0: detected capacity change from 0 to 64 mount(NULL, "./bus", "overlay", 0, "upperdir=./file1,lowerdir=./file0,workdir=./bus,") = 0 chdir("./bus") = 0 [ 61.307651][ T5218] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.323072][ T5218] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 61.330890][ T5218] #PF: supervisor instruction fetch in kernel mode [ 61.337475][ T5218] #PF: error_code(0x0010) - not-present page [ 61.343451][ T5218] PGD 8000000021d98067 P4D 8000000021d98067 PUD 2e130067 PMD 0 [ 61.351080][ T5218] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN PTI [ 61.357144][ T5218] CPU: 0 UID: 0 PID: 5218 Comm: syz-executor169 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 61.368315][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.378359][ T5218] RIP: 0010:0x0 [ 61.381826][ T5218] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 61.389167][ T5218] RSP: 0018:ffffc9000355f558 EFLAGS: 00010246 [ 61.395212][ T5218] RAX: 1ffffffff17f1868 RBX: ffffffff8bf8c340 RCX: ffff88807f5b8000 [ 61.403177][ T5218] RDX: 0000000000000000 RSI: ffff8880255dabc0 RDI: ffff888079ef8018 [ 61.411478][ T5218] RBP: ffffc9000355f670 R08: ffffffff820c2f53 R09: 1ffffffff29ad8e9 [ 61.419440][ T5218] R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 61.427411][ T5218] R13: ffff8880255dabc0 R14: 1ffff11004abb578 R15: 1ffff920006abeb0 [ 61.435635][ T5218] FS: 0000555572776380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 61.444550][ T5218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.451116][ T5218] CR2: ffffffffffffffd6 CR3: 0000000075370000 CR4: 00000000003506f0 [ 61.459071][ T5218] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.467046][ T5218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.475105][ T5218] Call Trace: [ 61.478377][ T5218] [ 61.481319][ T5218] ? __die_body+0x88/0xe0 [ 61.485673][ T5218] ? page_fault_oops+0x8e4/0xcc0 [ 61.490597][ T5218] ? __pfx_page_fault_oops+0x10/0x10 [ 61.495962][ T5218] ? do_raw_spin_unlock+0x13c/0x8b0 [ 61.501165][ T5218] ? d_alloc_parallel+0x14a8/0x1600 [ 61.506356][ T5218] ? rcu_is_watching+0x15/0xb0 [ 61.511110][ T5218] ? is_errata93+0xbe/0x260 [ 61.515615][ T5218] ? exc_page_fault+0x5ed/0x8c0 [ 61.520477][ T5218] ? asm_exc_page_fault+0x26/0x30 [ 61.525493][ T5218] ? __lookup_slow+0x153/0x3f0 [ 61.530260][ T5218] __lookup_slow+0x28c/0x3f0 [ 61.534838][ T5218] ? __pfx___lookup_slow+0x10/0x10 [ 61.539942][ T5218] ? __d_lookup+0x64/0x7b0 [ 61.544348][ T5218] lookup_one_unlocked+0x1a4/0x290 [ 61.549446][ T5218] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 61.555061][ T5218] ? __kasan_kmalloc+0x98/0xb0 [ 61.559817][ T5218] ? lookup_one_qstr_excl+0x11f/0x260 [ 61.565178][ T5218] ? filename_create+0x297/0x540 [ 61.570109][ T5218] ? __x64_sys_mknod+0x8c/0xa0 [ 61.574866][ T5218] ovl_lookup_single+0x200/0xbd0 [ 61.579808][ T5218] ? __pfx_ovl_lookup_single+0x10/0x10 [ 61.585255][ T5218] ovl_lookup_layer+0x417/0x510 [ 61.590113][ T5218] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 61.595509][ T5218] ? ovl_lookup+0x8b2/0x2a60 [ 61.600091][ T5218] ? ovl_lookup+0x8b2/0x2a60 [ 61.604667][ T5218] ? ovl_lookup+0x8b2/0x2a60 [ 61.609242][ T5218] ? __kmalloc_noprof+0x21a/0x400 [ 61.614272][ T5218] ovl_lookup+0xcf7/0x2a60 [ 61.618701][ T5218] ? __pfx_ovl_lookup+0x10/0x10 [ 61.623553][ T5218] ? __pfx_lock_acquire+0x10/0x10 [ 61.628570][ T5218] ? d_alloc+0x142/0x190 [ 61.632802][ T5218] ? do_raw_spin_unlock+0x13c/0x8b0 [ 61.637993][ T5218] ? _raw_spin_unlock+0x28/0x50 [ 61.642929][ T5218] ? d_alloc+0x142/0x190 [ 61.647163][ T5218] lookup_one_qstr_excl+0x11f/0x260 [ 61.652355][ T5218] filename_create+0x297/0x540 [ 61.657118][ T5218] ? __pfx_filename_create+0x10/0x10 [ 61.662398][ T5218] ? __pfx_lock_release+0x10/0x10 [ 61.667416][ T5218] do_mknodat+0x18b/0x5b0 [ 61.671739][ T5218] ? __pfx_do_mknodat+0x10/0x10 [ 61.676574][ T5218] ? getname_flags+0x1e3/0x540 [ 61.681322][ T5218] __x64_sys_mknod+0x8c/0xa0 [ 61.685896][ T5218] do_syscall_64+0xf3/0x230 [ 61.690383][ T5218] ? clear_bhb_loop+0x35/0x90 [ 61.695040][ T5218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.700923][ T5218] RIP: 0033:0x7fc4b42b2839 [ 61.705321][ T5218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.724916][ T5218] RSP: 002b:00007ffef3368b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 61.733407][ T5218] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fc4b42b2839 [ 61.741358][ T5218] RDX: 0000000000000700 RSI: 0000000000002000 RDI: 0000000020000140 [ 61.749329][ T5218] RBP: 00007fc4b4325610 R08: 0000000000000000 R09: 0000000000000000 [ 61.757281][ T5218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.765231][ T5218] R13: 00007ffef3368d28 R14: 0000000000000001 R15: 0000000000000001 [ 61.773189][ T5218] [ 61.776189][ T5218] Modules linked in: [ 61.780075][ T5218] CR2: 0000000000000000 [ 61.784227][ T5218] ---[ end trace 0000000000000000 ]--- [ 61.789663][ T5218] RIP: 0010:0x0 [ 61.793107][ T5218] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 61.800452][ T5218] RSP: 0018:ffffc9000355f558 EFLAGS: 00010246 [ 61.806528][ T5218] RAX: 1ffffffff17f1868 RBX: ffffffff8bf8c340 RCX: ffff88807f5b8000 [ 61.814529][ T5218] RDX: 0000000000000000 RSI: ffff8880255dabc0 RDI: ffff888079ef8018 [ 61.822572][ T5218] RBP: ffffc9000355f670 R08: ffffffff820c2f53 R09: 1ffffffff29ad8e9 [ 61.830536][ T5218] R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 61.838578][ T5218] R13: ffff8880255dabc0 R14: 1ffff11004abb578 R15: 1ffff920006abeb0 [ 61.846530][ T5218] FS: 0000555572776380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 61.855526][ T5218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.862090][ T5218] CR2: ffffffffffffffd6 CR3: 0000000075370000 CR4: 00000000003506f0 [ 61.870047][ T5218] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.877999][ T5218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.885953][ T5218] Kernel panic - not syncing: Fatal exception [ 61.892211][ T5218] Kernel Offset: disabled [ 61.896523][ T5218] Rebooting in 86400 seconds..