program: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, 0x0, 0x271) [ 74.877101][ T5304] Bluetooth: hci0: command tx timeout [ 74.921748][ T5319] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 74.928129][ T5319] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 74.933974][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 74.942283][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.946874][ T5319] RIP: 0010:do_move_mount+0x27d/0xb10 [ 74.949460][ T5319] Code: e8 68 21 83 ff 41 be ea ff ff ff 49 bd 00 00 00 00 00 fc ff df 48 8b 6c 24 18 4c 8b 7c 24 08 48 8d 5d 48 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 84 1a e5 ff 48 8b 1b 31 ff 48 89 [ 74.957750][ T5319] RSP: 0018:ffffc9000d5f7d50 EFLAGS: 00010206 [ 74.960352][ T5319] RAX: 0000000000000006 RBX: 0000000000000032 RCX: 0000000000100000 [ 74.963775][ T5319] RDX: ffffc9000def2000 RSI: 0000000000000466 RDI: 0000000000000467 [ 74.967109][ T5319] RBP: ffffffffffffffea R08: 0000000000000000 R09: 0000000000000000 [ 74.970632][ T5319] R10: 0000000000000000 R11: ffffffff823b4079 R12: ffff88801ab47288 [ 74.974437][ T5319] R13: dffffc0000000000 R14: 00000000ffffffea R15: ffff88803e8ff100 [ 74.978499][ T5319] FS: 00007f6a707ad6c0(0000) GS:ffff88808d6c7000(0000) knlGS:0000000000000000 [ 74.982745][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.985544][ T5319] CR2: 00007f6a6fbac2a0 CR3: 000000003f7ec000 CR4: 0000000000352ef0 [ 74.988953][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.992311][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.995641][ T5319] Call Trace: [ 74.997096][ T5319] [ 74.998399][ T5319] __se_sys_move_mount+0x4aa/0x580 [ 75.000679][ T5319] ? __pfx___se_sys_move_mount+0x10/0x10 [ 75.003045][ T5319] ? do_syscall_64+0xba/0x210 [ 75.005136][ T5319] ? __x64_sys_move_mount+0x20/0xc0 [ 75.007446][ T5319] do_syscall_64+0xf6/0x210 [ 75.009389][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.011490][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.013967][ T5319] RIP: 0033:0x7f6a6f98e969 [ 75.015858][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.024003][ T5319] RSP: 002b:00007f6a707ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 75.027526][ T5319] RAX: ffffffffffffffda RBX: 00007f6a6fbb5fa0 RCX: 00007f6a6f98e969 [ 75.030860][ T5319] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000003 [ 75.034070][ T5319] RBP: 00007f6a6fa10ab1 R08: 0000000000000271 R09: 0000000000000000 [ 75.037501][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.040813][ T5319] R13: 0000000000000000 R14: 00007f6a6fbb5fa0 R15: 00007fff3e9fc3a8 [ 75.044160][ T5319] [ 75.045513][ T5319] Modules linked in: [ 75.047769][ T5319] ---[ end trace 0000000000000000 ]--- [ 75.063916][ T5319] RIP: 0010:do_move_mount+0x27d/0xb10 [ 75.066066][ T5319] Code: e8 68 21 83 ff 41 be ea ff ff ff 49 bd 00 00 00 00 00 fc ff df 48 8b 6c 24 18 4c 8b 7c 24 08 48 8d 5d 48 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 84 1a e5 ff 48 8b 1b 31 ff 48 89 [ 75.074843][ T5319] RSP: 0018:ffffc9000d5f7d50 EFLAGS: 00010206 [ 75.077529][ T5319] RAX: 0000000000000006 RBX: 0000000000000032 RCX: 0000000000100000 [ 75.081926][ T5319] RDX: ffffc9000def2000 RSI: 0000000000000466 RDI: 0000000000000467 [ 75.086598][ T5319] RBP: ffffffffffffffea R08: 0000000000000000 R09: 0000000000000000 [ 75.090589][ T5319] R10: 0000000000000000 R11: ffffffff823b4079 R12: ffff88801ab47288 [ 75.093935][ T5319] R13: dffffc0000000000 R14: 00000000ffffffea R15: ffff88803e8ff100 [ 75.097404][ T5319] FS: 00007f6a707ad6c0(0000) GS:ffff88808d6c7000(0000) knlGS:0000000000000000 [ 75.101380][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.104213][ T5319] CR2: 00007f6a6fbac2a0 CR3: 000000003f7ec000 CR4: 0000000000352ef0 [ 75.107962][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.111988][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.115419][ T5319] Kernel panic - not syncing: Fatal exception [ 75.118107][ T5319] Kernel Offset: disabled [ 75.119865][ T5319] Rebooting in 86400 seconds..