./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1052072942 <...> Warning: Permanently added '10.128.1.155' (ECDSA) to the list of known hosts. execve("./syz-executor1052072942", ["./syz-executor1052072942"], 0x7ffcc182aae0 /* 10 vars */) = 0 brk(NULL) = 0x555556fc2000 brk(0x555556fc2c40) = 0x555556fc2c40 arch_prctl(ARCH_SET_FS, 0x555556fc2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1052072942", 4096) = 28 brk(0x555556fe3c40) = 0x555556fe3c40 brk(0x555556fe4000) = 0x555556fe4000 mprotect(0x7ff20bb4d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff203693000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 munmap(0x7ff203693000, 1048576) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "udf", 0, "undelete,nostrict,iocharset=cp1255,shortad,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open(".", O_RDONLY) = 4 renameat2(4, "./file0", AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0) = 0 openat(AT_FDCWD, ".", O_RDONLY) = 5 [ 55.572596][ T5071] loop0: detected capacity change from 0 to 2048 [ 55.585842][ T5071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.604240][ T5071] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 55.616018][ T5071] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 55.624434][ T5071] CPU: 1 PID: 5071 Comm: syz-executor105 Not tainted 6.1.0-syzkaller-13872-gb6bb9676f216 #0 [ 55.635349][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.645412][ T5071] RIP: 0010:crc_itu_t+0x107/0x2b0 [ 55.650456][ T5071] Code: 00 00 00 fc ff df b8 02 00 00 00 48 29 d8 48 89 44 24 08 48 8b 14 24 49 89 d7 66 0f 1f 84 00 00 00 00 00 4c 89 f8 48 c1 e8 03 <0f> b6 04 30 84 c0 0f 85 b1 00 00 00 42 0f b6 44 2a ff 41 0f b7 ce [ 55.670054][ T5071] RSP: 0018:ffffc90003b9f7b0 EFLAGS: 00010203 [ 55.676105][ T5071] RAX: 0000000000000004 RBX: 0000000000000096 RCX: 0000000000000000 [ 55.684167][ T5071] RDX: 0000000000000026 RSI: dffffc0000000000 RDI: 0000000000000001 [ 55.692129][ T5071] RBP: 00000000000000bc R08: ffffffff84438b79 R09: ffff88807b004c03 [ 55.700197][ T5071] R10: ffffed100f600981 R11: 1ffff1100f600980 R12: 0000000000000096 [ 55.708184][ T5071] R13: 0000000000000001 R14: 000000000000a489 R15: 0000000000000026 [ 55.716178][ T5071] FS: 0000555556fc2300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 55.725115][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.731700][ T5071] CR2: 00000000005fdeb8 CR3: 0000000077053000 CR4: 00000000003506e0 [ 55.739672][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.747630][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.755589][ T5071] Call Trace: [ 55.758861][ T5071] [ 55.761788][ T5071] udf_write_fi+0x5c7/0xc10 [ 55.766289][ T5071] udf_rename+0x8e2/0x1450 [ 55.770698][ T5071] ? udf_mknod+0x90/0x90 [ 55.774930][ T5071] ? vfs_rename+0x728/0x1130 [ 55.779521][ T5071] ? read_lock_is_recursive+0x10/0x10 [ 55.784896][ T5071] ? __lock_acquire+0x1f60/0x1f60 [ 55.789910][ T5071] ? generic_permission+0x229/0x500 [ 55.795094][ T5071] ? do_raw_spin_unlock+0x134/0x8a0 [ 55.800280][ T5071] ? memcpy+0x3c/0x60 [ 55.804247][ T5071] vfs_rename+0xd53/0x1130 [ 55.808654][ T5071] ? __ia32_sys_link+0x90/0x90 [ 55.813407][ T5071] ? _raw_spin_unlock+0x24/0x40 [ 55.818256][ T5071] ? security_path_rename+0x1ab/0x230 [ 55.823890][ T5071] do_renameat2+0xaad/0x12d0 [ 55.828470][ T5071] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 55.834446][ T5071] ? fsnotify_move+0x4e0/0x4e0 [ 55.839192][ T5071] ? getname_flags+0xb8/0x4e0 [ 55.843866][ T5071] ? __check_object_size+0x15a/0x210 [ 55.849171][ T5071] ? strncpy_from_user+0x1d6/0x330 [ 55.854363][ T5071] ? getname_flags+0x1ea/0x4e0 [ 55.859204][ T5071] __x64_sys_renameat2+0xce/0xe0 [ 55.864135][ T5071] do_syscall_64+0x3d/0xb0 [ 55.868542][ T5071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.874427][ T5071] RIP: 0033:0x7ff20badf8b9 [ 55.878840][ T5071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.898523][ T5071] RSP: 002b:00007ffd679a2e68 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 55.907748][ T5071] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff20badf8b9 [ 55.915833][ T5071] RDX: 0000000000000005 RSI: 00000000200001c0 RDI: 0000000000000005 [ 55.923791][ T5071] RBP: 00007ff20ba9f150 R08: 0000000000000000 R09: 0000000000000000 [ 55.931753][ T5071] R10: 0000000020000200 R11: 0000000000000246 R12: 00007ff20ba9f1e0 [ 55.939712][ T5071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.947687][ T5071] [ 55.950694][ T5071] Modules linked in: [ 55.954988][ T5071] ---[ end trace 0000000000000000 ]--- [ 55.960510][ T5071] RIP: 0010:crc_itu_t+0x107/0x2b0 [ 55.965575][ T5071] Code: 00 00 00 fc ff df b8 02 00 00 00 48 29 d8 48 89 44 24 08 48 8b 14 24 49 89 d7 66 0f 1f 84 00 00 00 00 00 4c 89 f8 48 c1 e8 03 <0f> b6 04 30 84 c0 0f 85 b1 00 00 00 42 0f b6 44 2a ff 41 0f b7 ce [ 55.985283][ T5071] RSP: 0018:ffffc90003b9f7b0 EFLAGS: 00010203 [ 55.991380][ T5071] RAX: 0000000000000004 RBX: 0000000000000096 RCX: 0000000000000000 [ 55.999349][ T5071] RDX: 0000000000000026 RSI: dffffc0000000000 RDI: 0000000000000001 [ 56.007364][ T5071] RBP: 00000000000000bc R08: ffffffff84438b79 R09: ffff88807b004c03 [ 56.015375][ T5071] R10: ffffed100f600981 R11: 1ffff1100f600980 R12: 0000000000000096 [ 56.023396][ T5071] R13: 0000000000000001 R14: 000000000000a489 R15: 0000000000000026 [ 56.031392][ T5071] FS: 0000555556fc2300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 56.040344][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.046930][ T5071] CR2: 00000000005fdeb8 CR3: 0000000077053000 CR4: 00000000003506e0 [ 56.054934][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.062951][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.071574][ T5071] Kernel panic - not syncing: Fatal exception [ 56.077905][ T5071] Kernel Offset: disabled [ 56.082225][ T5071] Rebooting in 86400 seconds..