./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2606090379 <...> Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. execve("./syz-executor2606090379", ["./syz-executor2606090379"], 0x7ffe41b00810 /* 10 vars */) = 0 brk(NULL) = 0x555557455000 brk(0x555557455d00) = 0x555557455d00 arch_prctl(ARCH_SET_FS, 0x555557455380) = 0 set_tid_address(0x555557455650) = 5034 set_robust_list(0x555557455660, 24) = 0 rseq(0x555557455ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2606090379", 4096) = 28 getrandom("\x9d\x34\x88\x3f\xdd\x92\x37\xcc", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557455d00 brk(0x555557476d00) = 0x555557476d00 brk(0x555557477000) = 0x555557477000 mprotect(0x7f3cf230c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3ce9e3d000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x04\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f3ce9e3d000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 73.110932][ T5034] syz-executor260[5034]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 73.157738][ T5034] loop0: detected capacity change from 0 to 4096 [ 73.170000][ T5034] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 73.179596][ T5034] ------------[ cut here ]------------ [ 73.185112][ T5034] kernel BUG at fs/ntfs/aops.c:186! [ 73.190460][ T5034] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 73.196529][ T5034] CPU: 0 PID: 5034 Comm: syz-executor260 Not tainted 6.6.0-rc4-syzkaller-00029-gcbf3a2cb156a #0 [ 73.206936][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 73.216995][ T5034] RIP: 0010:ntfs_read_folio+0x27b4/0x29c0 [ 73.222752][ T5034] Code: fa 48 83 7c 24 48 00 0f 84 e1 00 00 00 e8 34 b9 c5 fe e9 02 02 00 00 e8 2a b9 c5 fe 0f 0b e8 23 b9 c5 fe 0f 0b e8 1c b9 c5 fe <0f> 0b 48 8b 3c 24 be 08 00 00 00 e8 dc 36 20 ff 48 b8 00 00 00 00 [ 73.242362][ T5034] RSP: 0018:ffffc90003b4f5a0 EFLAGS: 00010293 [ 73.248434][ T5034] RAX: ffffffff82c85294 RBX: 0000000000000000 RCX: ffff888025860000 [ 73.256436][ T5034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.264420][ T5034] RBP: ffffc90003b4f770 R08: ffffffff82c83827 R09: 1ffff1100ef6100a [ 73.272397][ T5034] R10: dffffc0000000000 R11: ffffed100ef6100b R12: ffffea0001d41940 [ 73.280368][ T5034] R13: 1ffffd40003a8328 R14: ffff888077b08320 R15: ffff888077b08088 [ 73.288343][ T5034] FS: 0000555557455380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 73.297276][ T5034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.303876][ T5034] CR2: 00000000005fdeb8 CR3: 0000000079379000 CR4: 00000000003506f0 [ 73.311855][ T5034] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.319825][ T5034] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.327795][ T5034] Call Trace: [ 73.331080][ T5034] [ 73.334015][ T5034] ? __die_body+0x8b/0xe0 [ 73.338357][ T5034] ? die+0xa1/0xd0 [ 73.342082][ T5034] ? do_trap+0x153/0x380 [ 73.346335][ T5034] ? ntfs_read_folio+0x27b4/0x29c0 [ 73.351460][ T5034] ? do_error_trap+0x1dc/0x2c0 [ 73.356234][ T5034] ? ntfs_read_folio+0x27b4/0x29c0 [ 73.361356][ T5034] ? __mod_lruvec_page_state+0xaa/0x430 [ 73.366915][ T5034] ? do_int3+0x50/0x50 [ 73.371010][ T5034] ? handle_invalid_op+0x34/0x40 [ 73.375957][ T5034] ? ntfs_read_folio+0x27b4/0x29c0 [ 73.381078][ T5034] ? exc_invalid_op+0x33/0x50 [ 73.385777][ T5034] ? asm_exc_invalid_op+0x1a/0x20 [ 73.390806][ T5034] ? ntfs_read_folio+0xd47/0x29c0 [ 73.395841][ T5034] ? ntfs_read_folio+0x27b4/0x29c0 [ 73.400963][ T5034] ? ntfs_read_folio+0x27b4/0x29c0 [ 73.406093][ T5034] ? read_lock_is_recursive+0x20/0x20 [ 73.411472][ T5034] ? __lock_acquire+0x7f70/0x7f70 [ 73.416514][ T5034] ? ntfs_writepage+0x1ab0/0x1ab0 [ 73.421580][ T5034] ? folio_add_lru+0x9d0/0x9d0 [ 73.426367][ T5034] ? folio_add_lru+0x4b2/0x9d0 [ 73.431136][ T5034] ? folio_add_lru+0x27b/0x9d0 [ 73.435904][ T5034] filemap_read_folio+0x19c/0x770 [ 73.440934][ T5034] ? ntfs_writepage+0x1ab0/0x1ab0 [ 73.445971][ T5034] ? maybe_unlock_mmap_for_io+0xe0/0xe0 [ 73.451537][ T5034] ? __filemap_get_folio+0x92f/0xbb0 [ 73.456827][ T5034] do_read_cache_folio+0x134/0x810 [ 73.461965][ T5034] ? ntfs_writepage+0x1ab0/0x1ab0 [ 73.466996][ T5034] do_read_cache_page+0x30/0x210 [ 73.471935][ T5034] map_mft_record+0x1cd/0x630 [ 73.476621][ T5034] ntfs_read_locked_inode+0x193/0x4980 [ 73.482087][ T5034] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0 [ 73.488076][ T5034] ? ntfs_attr_get_search_ctx+0x51/0x180 [ 73.493721][ T5034] ? __asan_memset+0x23/0x40 [ 73.498318][ T5034] ? ntfs_attr_reinit_search_ctx+0x4f/0x2e0 [ 73.504223][ T5034] ntfs_read_inode_mount+0xda6/0x2660 [ 73.509642][ T5034] ntfs_fill_super+0x1883/0x2bd0 [ 73.514598][ T5034] mount_bdev+0x237/0x300 [ 73.518936][ T5034] ? ntfs_mount+0x40/0x40 [ 73.523268][ T5034] ? get_tree_bdev+0x5b0/0x5b0 [ 73.528039][ T5034] ? vfs_parse_fs_string+0x190/0x230 [ 73.533335][ T5034] ? vfs_parse_fs_param+0x410/0x410 [ 73.538563][ T5034] ? cap_capable+0x1b4/0x240 [ 73.543197][ T5034] legacy_get_tree+0xef/0x190 [ 73.547899][ T5034] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 73.553451][ T5034] vfs_get_tree+0x8c/0x280 [ 73.557882][ T5034] do_new_mount+0x28f/0xae0 [ 73.562400][ T5034] ? do_move_mount_old+0x170/0x170 [ 73.567520][ T5034] ? user_path_at_empty+0x12f/0x180 [ 73.572733][ T5034] __se_sys_mount+0x2d9/0x3c0 [ 73.577418][ T5034] ? __x64_sys_mount+0xc0/0xc0 [ 73.582186][ T5034] ? syscall_enter_from_user_mode+0x32/0x230 [ 73.588178][ T5034] ? __x64_sys_mount+0x20/0xc0 [ 73.593000][ T5034] do_syscall_64+0x41/0xc0 [ 73.597420][ T5034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.603324][ T5034] RIP: 0033:0x7f3cf227bcfa [ 73.607795][ T5034] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.627406][ T5034] RSP: 002b:00007fff4698a678 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 73.635873][ T5034] RAX: ffffffffffffffda RBX: 00007fff4698a690 RCX: 00007f3cf227bcfa [ 73.643850][ T5034] RDX: 0000000020000000 RSI: 000000002001ee80 RDI: 00007fff4698a690 [ 73.651823][ T5034] RBP: 0000000000000004 R08: 00007fff4698a6d0 R09: 000000000001ee16 [ 73.659796][ T5034] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 73.667763][ T5034] R13: 00007fff4698a6d0 R14: 0000000000000003 R15: 0000000000200000 [ 73.675743][ T5034] [ 73.678770][ T5034] Modules linked in: [ 73.682881][ T5034] ---[ end trace 0000000000000000 ]--- [ 73.688355][ T5034] RIP: 0010:ntfs_read_folio+0x27b4/0x29c0 [ 73.694169][ T5034] Code: fa 48 83 7c 24 48 00 0f 84 e1 00 00 00 e8 34 b9 c5 fe e9 02 02 00 00 e8 2a b9 c5 fe 0f 0b e8 23 b9 c5 fe 0f 0b e8 1c b9 c5 fe <0f> 0b 48 8b 3c 24 be 08 00 00 00 e8 dc 36 20 ff 48 b8 00 00 00 00 [ 73.713871][ T5034] RSP: 0018:ffffc90003b4f5a0 EFLAGS: 00010293 [ 73.719973][ T5034] RAX: ffffffff82c85294 RBX: 0000000000000000 RCX: ffff888025860000 [ 73.727940][ T5034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.735998][ T5034] RBP: ffffc90003b4f770 R08: ffffffff82c83827 R09: 1ffff1100ef6100a [ 73.744017][ T5034] R10: dffffc0000000000 R11: ffffed100ef6100b R12: ffffea0001d41940 [ 73.752065][ T5034] R13: 1ffffd40003a8328 R14: ffff888077b08320 R15: ffff888077b08088 [ 73.760072][ T5034] FS: 0000555557455380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 73.768996][ T5034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.775639][ T5034] CR2: 00000000005fdeb8 CR3: 0000000079379000 CR4: 00000000003506f0 [ 73.783664][ T5034] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.791705][ T5034] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.799699][ T5034] Kernel panic - not syncing: Fatal exception [ 73.806072][ T5034] Kernel Offset: disabled [ 73.810393][ T5034] Rebooting in 86400 seconds..