[] do_new_mount fs/namespace.c:2994 [inline] [] path_mount+0xe9c/0x14dc fs/namespace.c:3324 [] do_mount fs/namespace.c:3337 [inline] [] __do_sys_mount fs/namespace.c:3545 [inline] [] sys_mount+0x360/0x3ee fs/namespace.c:3522 [] ret_from_syscall+0x0/0x2 ================================================================== BUG: KASAN: null-ptr-deref in ext4_fill_super+0x1fe/0x8016 fs/ext4/super.c:5550 Write of size 8 at addr 0000000000000090 by task syz-executor.0/4021 CPU: 1 PID: 4021 Comm: syz-executor.0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113 [] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119 [] __dump_stack lib/dump_stack.c:88 [inline] [] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106 [] __kasan_report mm/kasan/report.c:446 [inline] [] kasan_report+0x1de/0x1e0 mm/kasan/report.c:459 [] check_region_inline mm/kasan/generic.c:183 [inline] [] __asan_store8+0x6e/0x96 mm/kasan/generic.c:256 [] ext4_fill_super+0x1fe/0x8016 fs/ext4/super.c:5550 [] get_tree_bdev+0x276/0x3c4 fs/super.c:1292 [] ext4_get_tree+0x26/0x30 fs/ext4/super.c:5582 [] vfs_get_tree+0x4a/0x19c fs/super.c:1497 [] do_new_mount fs/namespace.c:2994 [inline] [] path_mount+0xe9c/0x14dc fs/namespace.c:3324 [] do_mount fs/namespace.c:3337 [inline] [] __do_sys_mount fs/namespace.c:3545 [inline] [] sys_mount+0x360/0x3ee fs/namespace.c:3522 [] ret_from_syscall+0x0/0x2 ================================================================== Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000000000090 Oops [#1] Modules linked in: CPU: 1 PID: 4021 Comm: syz-executor.0 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) epc : ext4_fill_super+0x204/0x8016 fs/ext4/super.c:5550 ra : ext4_fill_super+0x1fe/0x8016 fs/ext4/super.c:5550 epc : ffffffff807b5566 ra : ffffffff807b5560 sp : ffffaf8008797940 gp : ffffffff85863ac0 tp : ffffaf802200b080 t0 : 0000000000000000 t1 : 0000000000006000 t2 : 00007fffd510a1b7 s0 : ffffaf8008797bd0 s1 : ffffaf8007572000 a0 : ffffaf80089dad88 a1 : 0000000000000007 a2 : 1ffff5f004401610 a3 : ffffffff831a6b2e a4 : 0000000000000000 a5 : 0000000000000001 a6 : 0000000000f00000 a7 : ffffaf805a9e44c7 s2 : ffffaf80089dad00 s3 : 0000000000000000 s4 : ffffaf8022cbb0a0 s5 : ffffaf8022cbb000 s6 : ffffffff807b5362 s7 : ffffaf8007572068 s8 : ffffaf800ab50540 s9 : 1ffff5f0010f2f98 s10: ffffffff85889780 s11: ffffaf8007572678 t3 : 000000007fffffff t4 : fffff5ef0b53c898 t5 : fffff5ef0b53c899 t6 : 0000000000040000 status: 0000000000000120 badaddr: 0000000000000090 cause: 000000000000000f [] get_tree_bdev+0x276/0x3c4 fs/super.c:1292 [] ext4_get_tree+0x26/0x30 fs/ext4/super.c:5582 [] vfs_get_tree+0x4a/0x19c fs/super.c:1497 [] do_new_mount fs/namespace.c:2994 [inline] [] path_mount+0xe9c/0x14dc fs/namespace.c:3324 [] do_mount fs/namespace.c:3337 [inline] [] __do_sys_mount fs/namespace.c:3545 [inline] [] sys_mount+0x360/0x3ee fs/namespace.c:3522 [] ret_from_syscall+0x0/0x2 ---[ end trace 0000000000000000 ]---