process 'syz.0.17' launched './file0' with NULL argv: empty string added Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 4706 Comm: syz.0.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) pc : get_user_arg_ptr+0x104/0x2dc fs/exec.c:418 lr : get_user_arg_ptr+0xe0/0x2dc fs/exec.c:418 sp : ffff80001fdf7c70 x29: ffff80001fdf7c70 x28: 00000000200022c0 x27: ffff0000d6c20000 x26: dfff800000000000 x25: ffff0000cd3dd858 x24: 0000000000000000 x23: 0000000000400040 x22: dfff800000000000 x21: 000000200022c000 x20: 00000000fffffff2 x19: 0000000000000000 x18: 0000000000000001 x17: 6972747320797470 x16: ffff80000890c69c x15: 204c4c554e206874 x14: 0000000000000001 x13: 1ffff0000287402b x12: 0000000097863b1e x11: ff8080000890c678 x10: 00000000200022c0 x9 : 0000ffffffffffff x8 : 00000000200022c0 x7 : ffff800008762ed0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: get_user_arg_ptr+0x104/0x2dc fs/exec.c:418 count fs/exec.c:433 [inline] do_execveat_common+0x2e8/0x7fc fs/exec.c:1922 do_execve fs/exec.c:2027 [inline] __do_sys_execve fs/exec.c:2103 [inline] __se_sys_execve fs/exec.c:2098 [inline] __arm64_sys_execve+0x98/0xb0 fs/exec.c:2098 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x28c arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x5c/0x140 arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 Code: d503229f 2a1f03f4 2a1f03e0 f8400953 (2a1403e1) ---[ end trace f2962be3e2e179ee ]--- ---------------- Code disassembly (best guess): 0: d503229f csdb 4: 2a1f03f4 mov w20, wzr 8: 2a1f03e0 mov w0, wzr c: f8400953 ldtr x19, [x10] * 10: 2a1403e1 mov w1, w20 <-- trapping instruction