kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 6046 Comm: udevd Not tainted 4.19.101-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_last fs/namei.c:3262 [inline] RIP: 0010:path_openat+0x293/0x4500 fs/namei.c:3537 Code: 80 3c 02 00 0f 85 fa 34 00 00 48 8b 85 28 ff ff ff 48 8b 58 58 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b7 RSP: 0018:ffff888051087790 EFLAGS: 00010247 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81b02b3e RDX: 0000000000000000 RSI: ffffffff81b02b4c RDI: 0000000000000004 RBP: ffff888051087910 R08: ffff88804f398080 R09: 0000000000000002 R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000 R13: ffff888051087b38 R14: ffff888051087b38 R15: ffff888051087950 FS: 00007f91a4a8d7a0(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2c83f6d028 CR3: 00000000a8f1a000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_filp_open+0x1a1/0x280 fs/namei.c:3567 do_open_execat+0x140/0x660 fs/exec.c:853 open_exec+0x47/0x80 fs/exec.c:885 load_elf_binary+0x879/0x53a0 fs/binfmt_elf.c:780 search_binary_handler fs/exec.c:1653 [inline] search_binary_handler+0x179/0x570 fs/exec.c:1631 exec_binprm fs/exec.c:1695 [inline] __do_execve_file.isra.0+0x1227/0x2150 fs/exec.c:1819 do_execveat_common fs/exec.c:1866 [inline] do_execve fs/exec.c:1883 [inline] __do_sys_execve fs/exec.c:1964 [inline] __se_sys_execve fs/exec.c:1959 [inline] __x64_sys_execve+0x8f/0xc0 fs/exec.c:1959 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f91a4171207 Code: 77 19 f4 48 89 d7 44 89 c0 0f 05 48 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 f7 d8 64 41 89 01 eb df b8 3b 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 f3 c3 48 8b 15 00 8c 2d 00 f7 d8 64 89 02 RSP: 002b:00007ffdf5526fe8 EFLAGS: 00000206 ORIG_RAX: 000000000000003b RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f91a4171207 RDX: 00000000021e8e80 RSI: 00007ffdf55270e0 RDI: 00007ffdf55280f0 RBP: 0000000000625500 R08: 0000000000000414 R09: 0000000000000414 R10: 0000000000000000 R11: 0000000000000206 R12: 00000000021e8e80 R13: 0000000000000007 R14: 0000000002199030 R15: 0000000000000005 Modules linked in: netlink: 'syz-executor.5': attribute type 10 has an invalid length. device ip6tnl0 entered promiscuous mode team0: Device ip6tnl0 is of different type EXT4-fs (sda1): re-mounted. Opts: auto_da_alloc=0x0000000000000000, ---[ end trace 4c2ac2c31af0a06f ]--- RIP: 0010:do_last fs/namei.c:3262 [inline] RIP: 0010:path_openat+0x293/0x4500 fs/namei.c:3537 Code: 80 3c 02 00 0f 85 fa 34 00 00 48 8b 85 28 ff ff ff 48 8b 58 58 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b7 RSP: 0018:ffff888051087790 EFLAGS: 00010247 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81b02b3e RDX: 0000000000000000 RSI: ffffffff81b02b4c RDI: 0000000000000004 RBP: ffff888051087910 R08: ffff88804f398080 R09: 0000000000000002 R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000 R13: ffff888051087b38 R14: ffff888051087b38 R15: ffff888051087950 FS: 00007f91a4a8d7a0(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c42cb5ec20 CR3: 00000000a8f1a000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400