kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 10268 Comm: syz-executor5 Not tainted 4.19.0-next-20181030+ #101 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kobject: 'loop1' (00000000c894f535): kobject_uevent_env RIP: 0010:put_fs_context+0x31/0x5a0 fs/fs_context.c:487 Code: 56 41 55 41 54 53 48 89 fb 4c 8d ab 98 00 00 00 48 83 ec 18 e8 10 25 9f ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 03 05 00 00 4c 8b a3 98 00 00 00 4d 85 e4 74 66 RSP: 0018:ffff880185effbd8 EFLAGS: 00010207 RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90002216000 kobject: 'loop1' (00000000c894f535): fill_kobj_path: path = '/devices/virtual/block/loop1' RDX: 0000000000000011 RSI: ffffffff81e04360 RDI: fffffffffffffff4 RBP: ffff880185effc18 R08: ffff880184d7a340 R09: ffffed003b5c5b67 R10: ffffed003b5c5b67 R11: ffff8801dae2db3b R12: ffff88017ff33030 R13: 000000000000008c R14: ffff8801c92d04c0 R15: ffff8801b9ff2940 FS: 00007fa7ad488700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffefd24f58 CR3: 00000001be61a000 CR4: 00000000001406f0 Call Trace: do_remount fs/namespace.c:2428 [inline] do_mount+0xda4/0x1ff0 fs/namespace.c:3020 kobject: 'loop3' (00000000c84016e2): kobject_uevent_env ksys_mount+0x12d/0x140 fs/namespace.c:3245 kobject: 'loop3' (00000000c84016e2): fill_kobj_path: path = '/devices/virtual/block/loop3' __do_sys_mount fs/namespace.c:3259 [inline] __se_sys_mount fs/namespace.c:3256 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3256 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 kobject: 'loop2' (00000000b991f5e5): kobject_uevent_env kobject: 'loop2' (00000000b991f5e5): fill_kobj_path: path = '/devices/virtual/block/loop2' entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459fda Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007fa7ad487a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fa7ad487b30 RCX: 0000000000459fda RDX: 00007fa7ad487ad0 RSI: 0000000020000080 RDI: 00007fa7ad487af0 RBP: 0000000020000080 R08: 00007fa7ad487b30 R09: 00007fa7ad487ad0 R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 R13: 0000000000100020 R14: 00000000004d8258 R15: 0000000000000003 Modules linked in: kobject: 'loop0' (00000000190ebc04): kobject_uevent_env kobject: 'loop0' (00000000190ebc04): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop0' (00000000190ebc04): kobject_uevent_env ---[ end trace a7f5b08bd6ca3234 ]--- kobject: 'loop0' (00000000190ebc04): fill_kobj_path: path = '/devices/virtual/block/loop0' RIP: 0010:put_fs_context+0x31/0x5a0 fs/fs_context.c:487 Code: 56 41 55 41 54 53 48 89 fb 4c 8d ab 98 00 00 00 48 83 ec 18 e8 10 25 9f ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 03 05 00 00 4c 8b a3 98 00 00 00 4d 85 e4 74 66 kobject: 'loop5' (00000000230010d0): kobject_uevent_env kobject: 'loop5' (00000000230010d0): fill_kobj_path: path = '/devices/virtual/block/loop5' RSP: 0018:ffff880185effbd8 EFLAGS: 00010207 kobject: 'loop0' (00000000190ebc04): kobject_uevent_env RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90002216000 RDX: 0000000000000011 RSI: ffffffff81e04360 RDI: fffffffffffffff4 kobject: '9p-126' (00000000d28f85d0): kobject_add_internal: parent: 'bdi', set: 'devices' RBP: ffff880185effc18 R08: ffff880184d7a340 R09: ffffed003b5c5b67 R10: ffffed003b5c5b67 R11: ffff8801dae2db3b R12: ffff88017ff33030 R13: 000000000000008c R14: ffff8801c92d04c0 R15: ffff8801b9ff2940 kobject: 'loop0' (00000000190ebc04): fill_kobj_path: path = '/devices/virtual/block/loop0' FS: 00007fa7ad488700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 kobject: '9p-126' (00000000d28f85d0): kobject_uevent_env CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kobject: 'loop1' (00000000c894f535): kobject_uevent_env CR2: 00007fd58e869ec8 CR3: 00000001be61a000 CR4: 00000000001406f0 kobject: 'loop1' (00000000c894f535): fill_kobj_path: path = '/devices/virtual/block/loop1'