syzbot
kernel panic: stack is corrupted in ni_enum_attr_ex
Status:
auto-obsoleted due to no activity on 2025/06/27 15:36
Subsystems:
ntfs3
[Documentation on labels]
Reported-by: syzbot+fe33beb8c5dba41e050b@syzkaller.appspotmail.com
First crash: 556d, last: 498d
▶
▼
Last patch testing requests (2)
| Created |
Duration |
User |
Patch |
Repo |
Result |
| 2025/05/02 07:08 |
19m
|
retest repro
|
|
upstream |
OK
log
|
| 2025/02/21 06:24 |
19m
|
retest repro
|
|
upstream |
report
log
|
Sample crash report:
Zero length message leads to an empty skb
loop0: detected capacity change from 0 to 4096
ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
ntfs3(loop0): ino=a, mi_enum_attr
ntfs3(loop0): Mark volume as dirty due to NTFS errors
Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: ni_enum_attr_ex+0x478/0x480 fs/ntfs3/ntfs_fs.h:-1
CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
<TASK>
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
panic+0x349/0x880 kernel/panic.c:354
__stack_chk_fail+0x15/0x20 kernel/panic.c:837
ni_enum_attr_ex+0x478/0x480 fs/ntfs3/ntfs_fs.h:-1
ntfs_read_mft fs/ntfs3/inode.c:123 [inline]
ntfs_iget5+0x2303/0x3640 fs/ntfs3/inode.c:540
ntfs_fill_super+0x3e86/0x4730 fs/ntfs3/super.c:1477
get_tree_bdev_flags+0x490/0x5c0 fs/super.c:1636
vfs_get_tree+0x90/0x2b0 fs/super.c:1759
do_new_mount+0x2cf/0xb70 fs/namespace.c:3878
do_mount fs/namespace.c:4218 [inline]
__do_sys_mount fs/namespace.c:4429 [inline]
__se_sys_mount+0x38c/0x400 fs/namespace.c:4406
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f82b7d8e90a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f82b8c7fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f82b8c7fef0 RCX: 00007f82b7d8e90a
RDX: 000020000001f800 RSI: 000020000001f840 RDI: 00007f82b8c7feb0
RBP: 000020000001f800 R08: 00007f82b8c7fef0 R09: 0000000000000010
R10: 0000000000000010 R11: 0000000000000246 R12: 000020000001f840
R13: 00007f82b8c7feb0 R14: 000000000001f83d R15: 0000200000000040
</TASK>
Kernel Offset: disabled
Rebooting in 86400 seconds..
* Struck through repros no longer work on HEAD.