general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] CPU: 0 PID: 25607 Comm: syz-executor.0 Not tainted 5.15.138-syzkaller-00280-geb99a642b7e6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 RIP: 0010:do_rmdir+0x339/0x630 fs/namei.c:4131 Code: ff 4c 89 64 24 50 72 0d e8 a4 79 b2 ff 45 89 fc e9 99 00 00 00 49 8d 5f 30 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 c9 7e f4 ff 48 83 3b 00 74 5d e8 6e RSP: 0018:ffffc90000bb7de0 EFLAGS: 00010202 RAX: 0000000000000007 RBX: 0000000000000038 RCX: dffffc0000000000 RDX: ffffc90000c09000 RSI: 00000000000001ce RDI: 00000000000001cf RBP: ffffc90000bb7f08 R08: ffffffff81c01f70 R09: ffffed102fb4d560 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88817d ---------------- Code disassembly (best guess): 0: ff 4c 89 64 decl 0x64(%rcx,%rcx,4) 4: 24 50 and $0x50,%al 6: 72 0d jb 0x15 8: e8 a4 79 b2 ff call 0xffb279b1 d: 45 89 fc mov %r15d,%r12d 10: e9 99 00 00 00 jmp 0xae 15: 49 8d 5f 30 lea 0x30(%r15),%rbx 19: 48 89 d8 mov %rbx,%rax 1c: 48 c1 e8 03 shr $0x3,%rax 20: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx 27: fc ff df * 2a: 80 3c 08 00 cmpb $0x0,(%rax,%rcx,1) <-- trapping instruction 2e: 74 08 je 0x38 30: 48 89 df mov %rbx,%rdi 33: e8 c9 7e f4 ff call 0xfff47f01 38: 48 83 3b 00 cmpq $0x0,(%rbx) 3c: 74 5d je 0x9b 3e: e8 .byte 0xe8 3f: 6e outsb %ds:(%rsi),(%dx)