./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor772494749 <...> Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. execve("./syz-executor772494749", ["./syz-executor772494749"], 0x7fff70205900 /* 10 vars */) = 0 brk(NULL) = 0x555584629000 brk(0x555584629d00) = 0x555584629d00 arch_prctl(ARCH_SET_FS, 0x555584629380) = 0 set_tid_address(0x555584629650) = 5834 set_robust_list(0x555584629660, 24) = 0 rseq(0x555584629ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor772494749", 4096) = 27 getrandom("\x39\x71\x16\x42\x93\x64\xd6\x9b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555584629d00 brk(0x55558464ad00) = 0x55558464ad00 brk(0x55558464b000) = 0x55558464b000 mprotect(0x7f9d7ce0b000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18executing program ) = 18 mkdirat(AT_FDCWD, "./file0", 000) = 0 unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = -1 EINVAL (Invalid argument) [ 88.007482][ T5834] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI [ 88.020290][ T5834] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 88.028697][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor772 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 88.039280][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.049335][ T5834] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 88.055259][ T5834] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 88.074990][ T5834] RSP: 0018:ffffc90003e2f958 EFLAGS: 00010206 [ 88.081059][ T5834] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 88.089060][ T5834] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888032eb2710 [ 88.097023][ T5834] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 88.104990][ T5834] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff888032eb2700 [ 88.112975][ T5834] R13: ffff888032eb2720 R14: 1ffff11006b34091 R15: ffff8880359a0488 [ 88.120999][ T5834] FS: 0000555584629380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 88.130385][ T5834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.137071][ T5834] CR2: 0000200000001000 CR3: 00000000786c2000 CR4: 00000000003526f0 [ 88.145149][ T5834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.153232][ T5834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.161318][ T5834] Call Trace: [ 88.164852][ T5834] [ 88.167806][ T5834] ? __die_body+0x5f/0xb0 [ 88.172158][ T5834] ? die_addr+0xb0/0xe0 [ 88.176483][ T5834] ? exc_general_protection+0x3dd/0x5d0 [ 88.182224][ T5834] ? asm_exc_general_protection+0x26/0x30 [ 88.188622][ T5834] ? clone_private_mount+0x184/0x3e0 [ 88.194278][ T5834] ? clone_private_mount+0x83/0x3e0 [ 88.199833][ T5834] ovl_fill_super+0x1a24/0x3560 [ 88.204921][ T5834] ? __pfx_ovl_fill_super+0x10/0x10 [ 88.210233][ T5834] ? __init_swait_queue_head+0xae/0x150 [ 88.215945][ T5834] ? shrinker_register+0x160/0x230 [ 88.221065][ T5834] ? sget_fc+0x909/0x9c0 [ 88.225340][ T5834] ? __pfx_set_anon_super_fc+0x10/0x10 [ 88.230808][ T5834] ? __pfx_ovl_fill_super+0x10/0x10 [ 88.236075][ T5834] get_tree_nodev+0xb7/0x140 [ 88.240854][ T5834] vfs_get_tree+0x90/0x2b0 [ 88.245273][ T5834] do_new_mount+0x2be/0xb40 [ 88.249774][ T5834] ? __pfx_do_new_mount+0x10/0x10 [ 88.254824][ T5834] __se_sys_mount+0x2d6/0x3c0 [ 88.259711][ T5834] ? __pfx___se_sys_mount+0x10/0x10 [ 88.264935][ T5834] ? do_syscall_64+0x100/0x230 [ 88.270514][ T5834] ? __x64_sys_mount+0x20/0xc0 [ 88.275628][ T5834] do_syscall_64+0xf3/0x230 [ 88.280241][ T5834] ? clear_bhb_loop+0x35/0x90 [ 88.285460][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.291433][ T5834] RIP: 0033:0x7f9d7cd98329 [ 88.295950][ T5834] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.315832][ T5834] RSP: 002b:00007ffdbd4bd438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.324263][ T5834] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f9d7cd98329 [ 88.332245][ T5834] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 88.340490][ T5834] RBP: 00007f9d7ce0b610 R08: 00002000000001c0 R09: 0000000000000000 [ 88.349258][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.357313][ T5834] R13: 00007ffdbd4bd608 R14: 0000000000000001 R15: 0000000000000001 [ 88.365347][ T5834] [ 88.368450][ T5834] Modules linked in: [ 88.372902][ T5834] ---[ end trace 0000000000000000 ]--- [ 88.378924][ T5834] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 88.384941][ T5834] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 88.405416][ T5834] RSP: 0018:ffffc90003e2f958 EFLAGS: 00010206 [ 88.412857][ T5834] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 88.421150][ T5834] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888032eb2710 [ 88.429423][ T5834] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 88.437663][ T5834] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff888032eb2700 [ 88.445718][ T5834] R13: ffff888032eb2720 R14: 1ffff11006b34091 R15: ffff8880359a0488 [ 88.453741][ T5834] FS: 0000555584629380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 88.462748][ T5834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.469413][ T5834] CR2: 000000000066c7e0 CR3: 00000000786c2000 CR4: 00000000003526f0 [ 88.477390][ T5834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.485684][ T5834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.494322][ T5834] Kernel panic - not syncing: Fatal exception [ 88.501388][ T5834] Kernel Offset: disabled [ 88.505823][ T5834] Rebooting in 86400 seconds..