./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor454436463 <...> DUID 00:04:03:2c:e5:fc:a2:19:b8:8b:c5:bf:62:63:19:3a:75:c6 forked to background, child pid 3186 [ 22.699002][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.708111][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.86' (ECDSA) to the list of known hosts. execve("./syz-executor454436463", ["./syz-executor454436463"], 0x7fff05f7f760 /* 10 vars */) = 0 brk(NULL) = 0x555556938000 brk(0x555556938d00) = 0x555556938d00 arch_prctl(ARCH_SET_FS, 0x5555569383c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor454436463", 4096) = 27 brk(0x555556959d00) = 0x555556959d00 brk(0x55555695a000) = 0x55555695a000 mprotect(0x7f06d86a0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f06d85f20a0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f06d85f2550}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f06d85f20a0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f06d85f2550}, NULL, 8) = 0 memfd_create("syzkaller", 0) = 3 ftruncate(3, 0) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- syzkaller login: [ 44.724773][ T3607] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 44.736505][ T3607] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 44.744896][ T3607] CPU: 1 PID: 3607 Comm: syz-executor454 Not tainted 6.1.0-rc1-next-20221019-syzkaller #0 [ 44.754777][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 44.764813][ T3607] RIP: 0010:hugetlbfs_parse_param+0x1dd/0x8e0 [ 44.770874][ T3607] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 84 06 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 65 10 4c 89 e2 48 c1 ea 03 <0f> b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 0c 84 c0 74 08 4c 89 e7 e8 [ 44.790463][ T3607] RSP: 0018:ffffc90003a5fb48 EFLAGS: 00010246 [ 44.796527][ T3607] RAX: dffffc0000000000 RBX: 1ffff9200074bf6b RCX: 0000000000000000 [ 44.804484][ T3607] RDX: 0000000000000000 RSI: ffffffff82350899 RDI: ffffc90003a5fc78 [ 44.812443][ T3607] RBP: ffff88801db5ac00 R08: 0000000000000005 R09: 0000000000000006 [ 44.820404][ T3607] R10: 0000000000000005 R11: 000000000008c001 R12: 0000000000000000 [ 44.828362][ T3607] R13: ffffc90003a5fc68 R14: ffff88801d5fbf00 R15: ffff88801db5acd0 [ 44.836320][ T3607] FS: 00005555569383c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 44.845236][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.851805][ T3607] CR2: 0000000020001000 CR3: 0000000074e4c000 CR4: 00000000003506e0 [ 44.859758][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.867710][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.875727][ T3607] Call Trace: [ 44.878988][ T3607] [ 44.881902][ T3607] ? hugetlbfs_parse_param+0x0/0x8e0 [ 44.887178][ T3607] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.892631][ T3607] ? lock_acquire+0x4fc/0x630 [ 44.897303][ T3607] ? bpf_lsm_sb_alloc_security-0xb/0x10 [ 44.902846][ T3607] ? hugetlbfs_parse_param+0x0/0x8e0 [ 44.908130][ T3607] vfs_parse_fs_param+0x1f9/0x3c0 [ 44.913160][ T3607] vfs_parse_fs_string+0xdb/0x170 [ 44.918167][ T3607] ? vfs_parse_fs_string+0x0/0x170 [ 44.923268][ T3607] ? __kmem_cache_alloc_node+0x1df/0x3e0 [ 44.928888][ T3607] ? hugetlbfs_init_fs_context+0x41/0x420 [ 44.934643][ T3607] ? bpf_lsm_sb_mnt_opts_compat-0xb/0x10 [ 44.940288][ T3607] generic_parse_monolithic+0x16f/0x1f0 [ 44.945826][ T3607] ? generic_parse_monolithic+0x0/0x1f0 [ 44.951358][ T3607] ? hugetlbfs_init_fs_context+0x0/0x420 [ 44.956983][ T3607] ? alloc_fs_context+0x5cb/0xa00 [ 44.962004][ T3607] path_mount+0x12de/0x1e20 [ 44.966501][ T3607] ? kmem_cache_free+0xea/0x5b0 [ 44.971366][ T3607] ? path_mount+0x0/0x1e20 [ 44.975771][ T3607] ? putname+0xfe/0x140 [ 44.979912][ T3607] __x64_sys_mount+0x27f/0x300 [ 44.984659][ T3607] ? __x64_sys_mount+0x0/0x300 [ 44.989406][ T3607] ? _raw_spin_unlock_irq+0x2a/0x40 [ 44.994590][ T3607] ? ptrace_notify+0xfa/0x140 [ 44.999256][ T3607] do_syscall_64+0x35/0xb0 [ 45.003664][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.009546][ T3607] RIP: 0033:0x7f06d8633fe9 [ 45.013952][ T3607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.033547][ T3607] RSP: 002b:00007ffe278e8e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.041946][ T3607] RAX: ffffffffffffffda RBX: 00007ffe278e8e28 RCX: 00007f06d8633fe9 [ 45.049905][ T3607] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 45.057860][ T3607] RBP: 00007ffe278e8e20 R08: 0000000020000280 R09: 00007f06d85f20a0 [ 45.065809][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.073759][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.081715][ T3607] [ 45.084717][ T3607] Modules linked in: [ 45.088798][ T3607] ---[ end trace 0000000000000000 ]--- [ 45.094335][ T3607] RIP: 0010:hugetlbfs_parse_param+0x1dd/0x8e0 [ 45.100560][ T3607] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 84 06 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 65 10 4c 89 e2 48 c1 ea 03 <0f> b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 0c 84 c0 74 08 4c 89 e7 e8 [ 45.120241][ T3607] RSP: 0018:ffffc90003a5fb48 EFLAGS: 00010246 [ 45.126306][ T3607] RAX: dffffc0000000000 RBX: 1ffff9200074bf6b RCX: 0000000000000000 [ 45.134289][ T3607] RDX: 0000000000000000 RSI: ffffffff82350899 RDI: ffffc90003a5fc78 [ 45.142275][ T3607] RBP: ffff88801db5ac00 R08: 0000000000000005 R09: 0000000000000006 [ 45.150254][ T3607] R10: 0000000000000005 R11: 000000000008c001 R12: 0000000000000000 [ 45.158240][ T3607] R13: ffffc90003a5fc68 R14: ffff88801d5fbf00 R15: ffff88801db5acd0 [ 45.166196][ T3607] FS: 00005555569383c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 45.175140][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.181745][ T3607] CR2: 00007f06d86453c0 CR3: 0000000074e4c000 CR4: 00000000003506f0 [ 45.189775][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.197826][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.205814][ T3607] Kernel panic - not syncing: Fatal exception [ 45.212021][ T3607] Kernel Offset: disabled [ 45.216333][ T3607] Rebooting in 86400 seconds..