loop0: detected capacity change from 0 to 4096
ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
BUG: unable to handle page fault for address: ffffed110016224e
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 5ffcd067 P4D 5ffcd067 PUD 0
Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:blk_finish_plug block/blk-core.c:1241 [inline]
RIP: 0010:__submit_bio+0x46a/0x560 block/blk-core.c:637
Code: 7c 35 00 00 74 08 4c 89 e7 e8 92 00 64 fd 49 39 1c 24 74 07 e8 d7 9c fd fc eb 27 e8 d0 9c fd fc 48 89 df 31 f6 e8 c6 e0 ff ff <43> 80 7c 35 00 00 74 08 4c 89 e7 e8 56 01 64 fd 49 c7 04 24 00 00
RSP: 0018:ffffc9000d377060 EFLAGS: 00010246
RAX: 3d339c42f5c4bb00 RBX: ffffc9000d3770c0 RCX: 0000000000100000
RDX: ffffc9000e89a000 RSI: 0000000000000c4c RDI: 0000000000000c4d
RBP: ffffc9000d377170 R08: ffffffff942a498f R09: 1ffffffff2854931
R10: dffffc0000000000 R11: fffffbfff2854932 R12: ffff888000b11278
R13: 1ffff1100016224f R14: dffffc00ffffffff R15: 1ffff92001a6ee10
FS: 00007f60bc2926c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed110016224e CR3: 00000000435c2000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__submit_bio_noacct_mq block/blk-core.c:710 [inline]
submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:739
submit_bh fs/buffer.c:2819 [inline]
__sync_dirty_buffer+0x23d/0x390 fs/buffer.c:2857
ntfs_write_bh+0x5f7/0x7c0 fs/ntfs3/fsntfs.c:1481
mi_write+0x9b/0x1e0 fs/ntfs3/record.c:397
ni_write_inode+0xc4f/0x1020 fs/ntfs3/frecord.c:3363
ntfs_set_state+0x536/0x6c0 fs/ntfs3/fsntfs.c:991
ntfs_create_inode+0x56a/0x3760 fs/ntfs3/inode.c:1302
ntfs_create+0x3d/0x50 fs/ntfs3/namei.c:110
lookup_open fs/namei.c:3649 [inline]
open_last_lookups fs/namei.c:3748 [inline]
path_openat+0x1c03/0x3590 fs/namei.c:3984
do_filp_open+0x27f/0x4e0 fs/namei.c:4014
do_sys_openat2+0x13e/0x1d0 fs/open.c:1402
do_sys_open fs/open.c:1417 [inline]
__do_sys_creat fs/open.c:1495 [inline]
__se_sys_creat fs/open.c:1489 [inline]
__x64_sys_creat+0x123/0x170 fs/open.c:1489
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f60bb385d29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f60bc292038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f60bb575fa0 RCX: 00007f60bb385d29
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000
RBP: 00007f60bb401b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f60bb575fa0 R15: 00007ffdbe5fb728
</TASK>
Modules linked in:
CR2: ffffed110016224e
---[ end trace 0000000000000000 ]---
RIP: 0010:blk_finish_plug block/blk-core.c:1241 [inline]
RIP: 0010:__submit_bio+0x46a/0x560 block/blk-core.c:637
Code: 7c 35 00 00 74 08 4c 89 e7 e8 92 00 64 fd 49 39 1c 24 74 07 e8 d7 9c fd fc eb 27 e8 d0 9c fd fc 48 89 df 31 f6 e8 c6 e0 ff ff <43> 80 7c 35 00 00 74 08 4c 89 e7 e8 56 01 64 fd 49 c7 04 24 00 00
RSP: 0018:ffffc9000d377060 EFLAGS: 00010246
RAX: 3d339c42f5c4bb00 RBX: ffffc9000d3770c0 RCX: 0000000000100000
RDX: ffffc9000e89a000 RSI: 0000000000000c4c RDI: 0000000000000c4d
RBP: ffffc9000d377170 R08: ffffffff942a498f R09: 1ffffffff2854931
R10: dffffc0000000000 R11: fffffbfff2854932 R12: ffff888000b11278
R13: 1ffff1100016224f R14: dffffc00ffffffff R15: 1ffff92001a6ee10
FS: 00007f60bc2926c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed110016224e CR3: 00000000435c2000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: 7c 35 jl 0x37
2: 00 00 add %al,(%rax)
4: 74 08 je 0xe
6: 4c 89 e7 mov %r12,%rdi
9: e8 92 00 64 fd call 0xfd6400a0
e: 49 39 1c 24 cmp %rbx,(%r12)
12: 74 07 je 0x1b
14: e8 d7 9c fd fc call 0xfcfd9cf0
19: eb 27 jmp 0x42
1b: e8 d0 9c fd fc call 0xfcfd9cf0
20: 48 89 df mov %rbx,%rdi
23: 31 f6 xor %esi,%esi
25: e8 c6 e0 ff ff call 0xffffe0f0
* 2a: 43 80 7c 35 00 00 cmpb $0x0,0x0(%r13,%r14,1) <-- trapping instruction
30: 74 08 je 0x3a
32: 4c 89 e7 mov %r12,%rdi
35: e8 56 01 64 fd call 0xfd640190
3a: 49 rex.WB
3b: c7 .byte 0xc7
3c: 04 24 add $0x24,%al