./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor877825324 <...> DUID 00:04:53:46:a9:9d:03:7a:46:b2:48:ff:4a:ea:3f:46:f2:43 forked to background, child pid 3181 [ 22.836308][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.845537][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. execve("./syz-executor877825324", ["./syz-executor877825324"], 0x7ffda00e1bb0 /* 10 vars */) = 0 brk(NULL) = 0x555555bbc000 brk(0x555555bbcc40) = 0x555555bbcc40 arch_prctl(ARCH_SET_FS, 0x555555bbc300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor877825324", 4096) = 27 brk(0x555555bddc40) = 0x555555bddc40 brk(0x555555bde000) = 0x555555bde000 mprotect(0x7f7b46723000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 132427) = 0 pwrite64(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x40\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\xf4\x00\x00\x00\xa3\xb8\xb2\x0f\xcf\x7a\xa8\x36\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 224, 0) = 224 pwrite64(3, "\x46\x49\x4c\x45\x30\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\x00\x38\x00\x01\x00\x98\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x60\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x48\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 312, 131072) = 312 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08", 31, 131552) = 31 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x46\x49\x4c\x45\x30\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\x00\x38\x00\x01\x00\x58\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x60\x00\x00\x00\x00\x00\x18\x00"..., 363, 132064) = 363 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 38.304051][ T3601] loop0: detected capacity change from 0 to 258 [ 38.313349][ T3601] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 38.322666][ T3601] ------------[ cut here ]------------ [ 38.328145][ T3601] kernel BUG at fs/ntfs/aops.c:186! [ 38.333341][ T3601] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 38.339391][ T3601] CPU: 0 PID: 3601 Comm: syz-executor877 Not tainted 6.1.0-rc1-next-20221020-syzkaller #0 [ 38.349259][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 38.359656][ T3601] RIP: 0010:ntfs_read_folio+0x2346/0x2e10 [ 38.365374][ T3601] Code: 00 48 8b 44 24 50 31 ff 48 8b 98 30 fd ff ff 48 c1 eb 03 83 e3 01 89 de e8 27 8c df fe 84 db 0f 85 59 eb ff ff e8 8a 8f df fe <0f> 0b e8 83 8f df fe 48 c7 c6 e0 70 01 8a 4c 89 f7 e8 94 08 16 ff [ 38.384987][ T3601] RSP: 0018:ffffc90003cdf6e0 EFLAGS: 00010293 [ 38.391056][ T3601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 38.399033][ T3601] RDX: ffff888024e357c0 RSI: ffffffff829cf656 RDI: 0000000000000001 [ 38.408798][ T3601] RBP: ffff888072e70050 R08: 0000000000000001 R09: 0000000000000000 [ 38.416770][ T3601] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888072e70050 [ 38.424740][ T3601] R13: ffffea0001c2e818 R14: ffffea0001c2e800 R15: ffffea0001c2e820 [ 38.432716][ T3601] FS: 0000555555bbc300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 38.441650][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.448239][ T3601] CR2: 00007fff8619c000 CR3: 000000007317e000 CR4: 00000000003506f0 [ 38.456218][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.464185][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.472167][ T3601] Call Trace: [ 38.475441][ T3601] [ 38.478374][ T3601] ? rcu_read_lock_sched_held+0xd/0x70 [ 38.483852][ T3601] ? folio_add_lru+0x341/0x680 [ 38.488618][ T3601] ? lock_release+0x0/0x810 [ 38.493127][ T3601] ? ntfs_read_folio+0x0/0x2e10 [ 38.497989][ T3601] ? folio_flags.constprop.0+0x53/0x150 [ 38.503541][ T3601] ? folio_add_lru+0x377/0x680 [ 38.508309][ T3601] ? ntfs_read_folio+0x0/0x2e10 [ 38.513172][ T3601] filemap_read_folio+0xdb/0x2c0 [ 38.518123][ T3601] ? filemap_read_folio+0x0/0x2c0 [ 38.523165][ T3601] ? folio_alloc+0x3f/0x70 [ 38.527602][ T3601] ? filemap_alloc_folio+0x108/0x3a0 [ 38.532911][ T3601] do_read_cache_folio+0x1df/0x510 [ 38.538038][ T3601] ? ntfs_read_folio+0x0/0x2e10 [ 38.542898][ T3601] read_cache_page+0x59/0x170 [ 38.547587][ T3601] map_mft_record+0x1db/0x8c0 [ 38.552276][ T3601] ntfs_read_locked_inode+0x19c/0x5ae0 [ 38.557741][ T3601] ? kmem_cache_alloc+0x1e6/0x3c0 [ 38.562807][ T3601] ntfs_read_inode_mount+0xe51/0x26a0 [ 38.568193][ T3601] ntfs_fill_super+0x1888/0x8f20 [ 38.573153][ T3601] ? ntfs_fill_super+0x0/0x8f20 [ 38.578012][ T3601] ? snprintf+0x0/0xf0 [ 38.582101][ T3601] ? __mutex_unlock_slowpath+0x0/0x5e0 [ 38.587581][ T3601] ? up_write+0x1ac/0x520 [ 38.591926][ T3601] ? set_blocksize+0x2e5/0x370 [ 38.596706][ T3601] mount_bdev+0x34d/0x410 [ 38.601042][ T3601] ? ntfs_fill_super+0x0/0x8f20 [ 38.605900][ T3601] ? ntfs_mount+0x0/0x40 [ 38.610152][ T3601] legacy_get_tree+0x105/0x220 [ 38.614923][ T3601] vfs_get_tree+0x89/0x2f0 [ 38.619339][ T3601] path_mount+0x1326/0x1e20 [ 38.623846][ T3601] ? kmem_cache_free+0xea/0x5b0 [ 38.628708][ T3601] ? path_mount+0x0/0x1e20 [ 38.633150][ T3601] ? putname+0xfe/0x140 [ 38.637317][ T3601] __x64_sys_mount+0x27f/0x300 [ 38.642085][ T3601] ? __x64_sys_mount+0x0/0x300 [ 38.646856][ T3601] ? _raw_spin_unlock_irq+0x2a/0x40 [ 38.652057][ T3601] ? ptrace_notify+0xfa/0x140 [ 38.657561][ T3601] do_syscall_64+0x35/0xb0 [ 38.662031][ T3601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 38.667935][ T3601] RIP: 0033:0x7f7b466b81fa [ 38.672351][ T3601] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 38.691957][ T3601] RSP: 002b:00007fff8619b068 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 38.700371][ T3601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7b466b81fa [ 38.708340][ T3601] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fff8619b080 [ 38.716309][ T3601] RBP: 00007fff8619b080 R08: 00007fff8619b0c0 R09: 0000555555bbc2c0 [ 38.724286][ T3601] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 38.732257][ T3601] R13: 00007fff8619b0c0 R14: 0000000000000004 R15: 0000000020000260 [ 38.740237][ T3601] [ 38.743248][ T3601] Modules linked in: [ 38.747454][ T3601] ---[ end trace 0000000000000000 ]--- [ 38.752919][ T3601] RIP: 0010:ntfs_read_folio+0x2346/0x2e10 [ 38.758694][ T3601] Code: 00 48 8b 44 24 50 31 ff 48 8b 98 30 fd ff ff 48 c1 eb 03 83 e3 01 89 de e8 27 8c df fe 84 db 0f 85 59 eb ff ff e8 8a 8f df fe <0f> 0b e8 83 8f df fe 48 c7 c6 e0 70 01 8a 4c 89 f7 e8 94 08 16 ff [ 38.778377][ T3601] RSP: 0018:ffffc90003cdf6e0 EFLAGS: 00010293 [ 38.784499][ T3601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 38.792470][ T3601] RDX: ffff888024e357c0 RSI: ffffffff829cf656 RDI: 0000000000000001 [ 38.800590][ T3601] RBP: ffff888072e70050 R08: 0000000000000001 R09: 0000000000000000 [ 38.808808][ T3601] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888072e70050 [ 38.816900][ T3601] R13: ffffea0001c2e818 R14: ffffea0001c2e800 R15: ffffea0001c2e820 [ 38.824972][ T3601] FS: 0000555555bbc300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 38.833891][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.840636][ T3601] CR2: 00007fff8619c000 CR3: 000000007317e000 CR4: 00000000003506f0 [ 38.848702][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.856765][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.864785][ T3601] Kernel panic - not syncing: Fatal exception [ 38.871000][ T3601] Kernel Offset: disabled [ 38.875316][ T3601] Rebooting in 86400 seconds..