RBP: 00007f4f9b2611d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffc5a435b0f R14: 00007f4f9b261300 R15: 0000000000022000 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] CPU: 0 UID: 0 PID: 8314 Comm: syz-executor.2 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:put_mnt_ns+0x2f/0x180 Code: 54 55 53 48 89 fb e8 10 2c b1 ff 48 85 db 74 3b e8 06 2c b1 ff 48 8d 7b 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 27 01 00 00 48 8b 6b 20 bf 08 00 00 00 48 89 ee RSP: 0018:ffff88801d78f9d8 EFLAGS: 00010213 RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc900094d4000 RDX: 0000000000000002 RSI: ffffffff81c407da RDI: 0000000000000014 RBP: ffff88800d03aa90 R08: 0000000000000001 R09: ffffed1009858846 R10: fffffffffffffff4 R11: 0000000000000001 R12: fffffffffffffff4 R13: 00000003720e0180 R14: ffff88801aae30c0 R15: ffff888017165bb8 FS: 00007f4f9b261700(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f91d75e4c50 CR3: 000000004c1e1000 CR4: 0000000000350ef0 Call Trace: nsproxy_free+0x36/0x5a0 create_new_namespaces+0x585/0x750 copy_namespaces+0x45c/0x580 copy_process+0x26e4/0x72a0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x430 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4f9dcebb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4f9b261188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f4f9ddfef60 RCX: 00007f4f9dcebb19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 RBP: 00007f4f9b2611d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffc5a435b0f R14: 00007f4f9b261300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:put_mnt_ns+0x2f/0x180 Code: 54 55 53 48 89 fb e8 10 2c b1 ff 48 85 db 74 3b e8 06 2c b1 ff 48 8d 7b 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 27 01 00 00 48 8b 6b 20 bf 08 00 00 00 48 89 ee RSP: 0018:ffff88801d78f9d8 EFLAGS: 00010213 RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc900094d4000 RDX: 0000000000000002 RSI: ffffffff81c407da RDI: 0000000000000014 RBP: ffff88800d03aa90 R08: 0000000000000001 R09: ffffed1009858846 R10: fffffffffffffff4 R11: 0000000000000001 R12: fffffffffffffff4 R13: 00000003720e0180 R14: ffff88801aae30c0 R15: ffff888017165bb8 FS: 00007f4f9b261700(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f91d75e4c50 CR3: 000000004c1e1000 CR4: 0000000000350ef0 loop0: detected capacity change from 0 to 545 loop6: detected capacity change from 0 to 545 loop5: detected capacity change from 0 to 545 loop4: detected capacity change from 0 to 545 EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz-executor.6: Bad quota inode: 4, type: 1 EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #4: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz-executor.0: Bad quota inode: 4, type: 1 ext4 filesystem being mounted at /syzkaller-testdir073695677/syzkaller.iE4daf/129/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs warning (device loop6): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs error (device loop7): ext4_quota_enable:7139: comm syz-executor.7: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop7): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs warning (device loop0): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. EXT4-fs (loop0): mount failed EXT4-fs error (device loop5): ext4_quota_enable:7139: comm syz-executor.5: Bad quota inode: 4, type: 1 EXT4-fs (loop6): mount failed loop3: detected capacity change from 0 to 545 EXT4-fs warning (device loop5): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop7): mount failed EXT4-fs (loop5): mount failed EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz-executor.3: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop3): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop3): mount failed loop5: detected capacity change from 0 to 545 EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) loop4: detected capacity change from 0 to 545 EXT4-fs error (device loop5): ext4_quota_enable:7139: comm syz-executor.5: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop5): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. loop7: detected capacity change from 0 to 545 EXT4-fs (loop5): mount failed EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #4: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop7): ext4_quota_enable:7139: comm syz-executor.7: Bad quota inode: 4, type: 1 ext4 filesystem being mounted at /syzkaller-testdir073695677/syzkaller.iE4daf/130/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs warning (device loop7): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop7): mount failed EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop6: detected capacity change from 0 to 545 loop7: detected capacity change from 0 to 545 EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) loop5: detected capacity change from 0 to 545 EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #4: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz-executor.6: Bad quota inode: 4, type: 1 EXT4-fs error (device loop7): ext4_quota_enable:7139: comm syz-executor.7: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop6): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop6): mount failed loop3: detected capacity change from 0 to 545 EXT4-fs warning (device loop7): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop7): mount failed loop0: detected capacity change from 0 to 545 EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop5): ext4_quota_enable:7139: comm syz-executor.5: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop5): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) loop4: detected capacity change from 0 to 545 EXT4-fs (loop5): mount failed EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz-executor.3: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop3): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop3): mount failed EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. ext4 filesystem being mounted at /syzkaller-testdir073695677/syzkaller.iE4daf/131/file0 supports timestamps until 2038-01-19 (0x7fffffff) ext4 filesystem being mounted at /syzkaller-testdir218103274/syzkaller.KhsYTZ/142/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop7: detected capacity change from 0 to 545 EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #4: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop7): ext4_quota_enable:7139: comm syz-executor.7: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop7): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop7): mount failed loop6: detected capacity change from 0 to 545 loop3: detected capacity change from 0 to 545 EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) loop5: detected capacity change from 0 to 545 EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz-executor.6: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop6): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. EXT4-fs (loop6): mount failed ext4 filesystem being mounted at /syzkaller-testdir852377465/syzkaller.N7VSCV/143/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop5): ext4_quota_enable:7139: comm syz-executor.5: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop5): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. loop4: detected capacity change from 0 to 545 EXT4-fs (loop5): mount failed EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz-executor.4: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop4): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. loop7: detected capacity change from 0 to 545 EXT4-fs (loop4): mount failed EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop0: detected capacity change from 0 to 545 EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #4: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs error (device loop7): ext4_quota_enable:7139: comm syz-executor.7: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop7): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) EXT4-fs (loop7): mount failed EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz-executor.0: Bad quota inode: 4, type: 1 EXT4-fs warning (device loop0): ext4_enable_quotas:7177: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. EXT4-fs (loop0): mount failed ---------------- Code disassembly (best guess): 0: 54 push %rsp 1: 55 push %rbp 2: 53 push %rbx 3: 48 89 fb mov %rdi,%rbx 6: e8 10 2c b1 ff callq 0xffb12c1b b: 48 85 db test %rbx,%rbx e: 74 3b je 0x4b 10: e8 06 2c b1 ff callq 0xffb12c1b 15: 48 8d 7b 20 lea 0x20(%rbx),%rdi 19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 20: fc ff df 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 27 01 00 00 jne 0x15b 34: 48 8b 6b 20 mov 0x20(%rbx),%rbp 38: bf 08 00 00 00 mov $0x8,%edi 3d: 48 89 ee mov %rbp,%rsi