./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1100747910 <...> DUID 00:04:a3:03:08:15:93:78:e3:1f:4c:1c:fb:56:e6:f5:4b:05 forked to background, child pid 3181 [ 23.199425][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.211289][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts. execve("./syz-executor1100747910", ["./syz-executor1100747910"], 0x7fff1d226b40 /* 10 vars */) = 0 brk(NULL) = 0x555557488000 brk(0x555557488c40) = 0x555557488c40 arch_prctl(ARCH_SET_FS, 0x555557488300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1100747910", 4096) = 28 brk(0x5555574a9c40) = 0x5555574a9c40 brk(0x5555574aa000) = 0x5555574aa000 mprotect(0x7f34b3e4b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mknod("./file0", 000) = 0 syzkaller login: [ 40.834050][ T3609] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 40.845781][ T3609] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 40.854181][ T3609] CPU: 1 PID: 3609 Comm: syz-executor110 Not tainted 6.1.0-rc1-next-20221021-syzkaller #0 [ 40.864050][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 40.874088][ T3609] RIP: 0010:strchr+0x17/0xa0 [ 40.878671][ T3609] Code: 48 89 34 24 e8 5a 37 82 f8 48 8b 34 24 eb 9a 0f 1f 40 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 40.898270][ T3609] RSP: 0018:ffffc90003c3fad0 EFLAGS: 00010282 [ 40.904329][ T3609] RAX: dffffc0000000000 RBX: 1ffff92000787f77 RCX: 0000000000000000 [ 40.912296][ T3609] RDX: 0000000000000000 RSI: 000000000000003a RDI: 0000000000000000 [ 40.920257][ T3609] RBP: 1ffff92000787f62 R08: 0000000000000005 R09: 0000000000000009 [ 40.928214][ T3609] R10: 0000000000000003 R11: 000000000008c001 R12: 0000000000000000 [ 40.936165][ T3609] R13: 0000000000000000 R14: ffff88807e7e3b90 R15: dffffc0000000000 [ 40.944133][ T3609] FS: 0000555557488300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 40.953087][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.959662][ T3609] CR2: 0000000020001000 CR3: 00000000268e7000 CR4: 00000000003506e0 [ 40.967630][ T3609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.975613][ T3609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.983573][ T3609] Call Trace: [ 40.986837][ T3609] [ 40.989752][ T3609] ? kasan_set_track-0xf/0x30 [ 40.994423][ T3609] ? kasan_save_stack+0x1e/0x40 [ 40.999263][ T3609] mpol_parse_str+0x79/0xa90 [ 41.003845][ T3609] ? alloc_fs_context+0x582/0xa00 [ 41.008855][ T3609] ? fs_param_is_string+0xd5/0x210 [ 41.013949][ T3609] ? __x64_sys_mount+0x27f/0x300 [ 41.018875][ T3609] ? mpol_parse_str+0x0/0xa90 [ 41.023543][ T3609] ? __fs_parse+0x269/0x890 [ 41.028035][ T3609] shmem_parse_one+0x7d8/0xa60 [ 41.032791][ T3609] ? shmem_parse_one+0x0/0xa60 [ 41.037547][ T3609] ? lock_release+0x5cb/0x810 [ 41.042213][ T3609] ? __kmem_cache_alloc_node+0x4a/0x3e0 [ 41.047919][ T3609] ? __kmem_cache_alloc_node+0x4a/0x3e0 [ 41.053453][ T3609] ? bpf_lsm_sb_alloc_security-0xb/0x10 [ 41.058982][ T3609] ? shmem_parse_one+0x0/0xa60 [ 41.063733][ T3609] vfs_parse_fs_param+0x1f9/0x3c0 [ 41.068765][ T3609] vfs_parse_fs_string+0xdb/0x170 [ 41.073790][ T3609] ? vfs_parse_fs_string+0x0/0x170 [ 41.078893][ T3609] ? shmem_init_fs_context+0x41/0x270 [ 41.084266][ T3609] ? ____kasan_slab_free-0xf/0x1c0 [ 41.089367][ T3609] ? shmem_init_fs_context+0x0/0x270 [ 41.094641][ T3609] ? shmem_init_fs_context+0x1ec/0x270 [ 41.100101][ T3609] ? bpf_lsm_sb_mnt_opts_compat-0xb/0x10 [ 41.105745][ T3609] shmem_parse_options+0x15f/0x240 [ 41.110869][ T3609] path_mount+0x12de/0x1e20 [ 41.115365][ T3609] ? kmem_cache_free+0xea/0x5b0 [ 41.120220][ T3609] ? path_mount+0x0/0x1e20 [ 41.124641][ T3609] ? putname+0xfe/0x140 [ 41.128794][ T3609] __x64_sys_mount+0x27f/0x300 [ 41.133551][ T3609] ? __x64_sys_mount+0x0/0x300 [ 41.138301][ T3609] ? _raw_spin_unlock_irq+0x2a/0x40 [ 41.143492][ T3609] ? ptrace_notify+0xfa/0x140 [ 41.148154][ T3609] do_syscall_64+0x35/0xb0 [ 41.152560][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.158444][ T3609] RIP: 0033:0x7f34b3ddeb19 [ 41.162869][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.182461][ T3609] RSP: 002b:00007ffdebbcaee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.190945][ T3609] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f34b3ddeb19 [ 41.198902][ T3609] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 41.206859][ T3609] RBP: 00007f34b3da2cc0 R08: 0000000020000100 R09: 0000000000000000 [ 41.214815][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34b3da2d50 [ 41.222770][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.230731][ T3609] [ 41.233745][ T3609] Modules linked in: [ 41.239091][ T3609] ---[ end trace 0000000000000000 ]--- [ 41.244566][ T3609] RIP: 0010:strchr+0x17/0xa0 [ 41.249201][ T3609] Code: 48 89 34 24 e8 5a 37 82 f8 48 8b 34 24 eb 9a 0f 1f 40 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 41.269079][ T3609] RSP: 0018:ffffc90003c3fad0 EFLAGS: 00010282 [ 41.275139][ T3609] RAX: dffffc0000000000 RBX: 1ffff92000787f77 RCX: 0000000000000000 [ 41.283162][ T3609] RDX: 0000000000000000 RSI: 000000000000003a RDI: 0000000000000000 [ 41.291197][ T3609] RBP: 1ffff92000787f62 R08: 0000000000000005 R09: 0000000000000009 [ 41.299200][ T3609] R10: 0000000000000003 R11: 000000000008c001 R12: 0000000000000000 [ 41.307206][ T3609] R13: 0000000000000000 R14: ffff88807e7e3b90 R15: dffffc0000000000 [ 41.315167][ T3609] FS: 0000555557488300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 41.324287][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.330927][ T3609] CR2: 00007f34b3e51270 CR3: 00000000268e7000 CR4: 00000000003506f0 [ 41.338924][ T3609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.346926][ T3609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.354888][ T3609] Kernel panic - not syncing: Fatal exception [ 41.361087][ T3609] Kernel Offset: disabled [ 41.365403][ T3609] Rebooting in 86400 seconds..