./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2440352538 <...> Warning: Permanently added '10.128.1.103' (ECDSA) to the list of known hosts. execve("./syz-executor2440352538", ["./syz-executor2440352538"], 0x7ffcc3ca6d50 /* 10 vars */) = 0 brk(NULL) = 0x5555573d2000 brk(0x5555573d2c40) = 0x5555573d2c40 arch_prctl(ARCH_SET_FS, 0x5555573d2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555573d25d0) = 5299 set_robust_list(0x5555573d25e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f4606a05e10, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f4606a064e0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f4606a05eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f4606a064e0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2440352538", 4096) = 28 brk(0x5555573f3c40) = 0x5555573f3c40 brk(0x5555573f4000) = 0x5555573f4000 mprotect(0x7f4606ae6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 futex(0x7f4606aec6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f46069d5000 mprotect(0x7f46069d6000, 131072, PROT_READ|PROT_WRITE) = 0 clone(child_stack=0x7f46069f53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5300 attached , parent_tid=[5300], tls=0x7f46069f5700, child_tidptr=0x7f46069f59d0) = 5300 [pid 5299] futex(0x7f4606aec6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] set_robust_list(0x7f46069f59e0, 24 [pid 5299] <... futex resumed>) = 0 [pid 5300] <... set_robust_list resumed>) = 0 [pid 5299] futex(0x7f4606aec6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5300] memfd_create("syzkaller", 0) = 3 [pid 5300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45fe5d5000 [pid 5300] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5300] munmap(0x7f45fe5d5000, 2097152) = 0 [pid 5300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5300] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5300] close(3) = 0 [pid 5300] mkdir("./file0", 0777) = 0 [pid 5300] mount("/dev/loop0", "./file0", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5300] chdir("./file0") = 0 [pid 5300] ioctl(4, LOOP_CLR_FD) = 0 [pid 5300] close(4) = 0 [pid 5300] futex(0x7f4606aec6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5299] futex(0x7f4606aec6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7f4606aec6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5300] futex(0x7f4606aec6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5299] futex(0x7f4606aec6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7f4606aec6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5300] futex(0x7f4606aec6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5299] futex(0x7f4606aec6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7f4606aec6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] ftruncate(5, 33587199) = 0 [pid 5300] futex(0x7f4606aec6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5300] futex(0x7f4606aec6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7f4606aec6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7f4606aec6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 52.799342][ T5300] loop0: detected capacity change from 0 to 4096 [ 52.810271][ T5300] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [pid 5300] sendfile(4, 5, NULL, 281474978811909 [pid 5299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5299] futex(0x7f4606aec6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f45fe7b4000 [pid 5299] mprotect(0x7f45fe7b5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5299] clone(child_stack=0x7f45fe7d43f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5302], tls=0x7f45fe7d4700, child_tidptr=0x7f45fe7d49d0) = 5302 [pid 5299] futex(0x7f4606aec6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7f4606aec6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5302 attached [pid 5302] set_robust_list(0x7f45fe7d49e0, 24) = 0 [pid 5302] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = 6 [pid 5302] futex(0x7f4606aec6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7f4606aec6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7f4606aec6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... futex resumed>) = 1 [ 52.916226][ T5302] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 52.924067][ T5302] #PF: supervisor instruction fetch in kernel mode [ 52.930554][ T5302] #PF: error_code(0x0010) - not-present page [ 52.936511][ T5302] PGD 217c0067 P4D 217c0067 PUD 1e4e8067 PMD 0 [ 52.942742][ T5302] Oops: 0010 [#1] PREEMPT SMP KASAN [ 52.947916][ T5302] CPU: 0 PID: 5302 Comm: syz-executor244 Not tainted 6.1.0-syzkaller-09941-ge2ca6ba6ba01 #0 [ 52.957993][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.968028][ T5302] RIP: 0010:0x0 [ 52.971475][ T5302] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 52.978818][ T5302] RSP: 0018:ffffc90003c1fca8 EFLAGS: 00010286 [ 52.984866][ T5302] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880268b8000 [ 52.992850][ T5302] RDX: 0000000000000000 RSI: ffffea0001c79440 RDI: ffff888075eb0478 [ 53.000803][ T5302] RBP: ffffea0001c79440 R08: ffffffff81bc12ab R09: fffff9400038f289 [ 53.008757][ T5302] R10: fffff9400038f289 R11: 1ffffd400038f288 R12: 0000000000000000 [ 53.016728][ T5302] R13: 0000000000010000 R14: 1ffffd400038f288 R15: ffffffffffffffff [ 53.024684][ T5302] FS: 00007f45fe7d4700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.033599][ T5302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.040182][ T5302] CR2: ffffffffffffffd6 CR3: 000000002986e000 CR4: 00000000003506f0 [ 53.048137][ T5302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.056100][ T5302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.064052][ T5302] Call Trace: [ 53.067313][ T5302] [ 53.070226][ T5302] ntfs_sparse_cluster+0x767/0xa90 [ 53.075332][ T5302] ? __mark_inode_dirty+0x593/0x600 [ 53.080514][ T5302] ? ntfs_set_size+0x1a0/0x210 [ 53.085260][ T5302] ntfs_fallocate+0xbc6/0xfb0 [ 53.089922][ T5302] ? ntfs_file_release+0x200/0x200 [ 53.095009][ T5302] ? apparmor_file_permission+0x2da/0x310 [ 53.100716][ T5302] vfs_fallocate+0x515/0x670 [ 53.105287][ T5302] __x64_sys_fallocate+0xb9/0x100 [ 53.110289][ T5302] do_syscall_64+0x3d/0xb0 [ 53.114689][ T5302] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.120565][ T5302] RIP: 0033:0x7f4606a484c9 [ 53.124961][ T5302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.144546][ T5302] RSP: 002b:00007f45fe7d4308 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 53.152942][ T5302] RAX: ffffffffffffffda RBX: 00007f4606aec6f8 RCX: 00007f4606a484c9 [ 53.160891][ T5302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 53.168837][ T5302] RBP: 00007f4606aec6f0 R08: 0000000000000000 R09: 0000000000000000 [ 53.176787][ T5302] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f4606aec6fc [ 53.184736][ T5302] R13: 00007f4606ab93d8 R14: 0030656c69662f2e R15: 0000000000022000 [ 53.192692][ T5302] [ 53.195689][ T5302] Modules linked in: [ 53.199563][ T5302] CR2: 0000000000000000 [ 53.203790][ T5302] ---[ end trace 0000000000000000 ]--- [ 53.209220][ T5302] RIP: 0010:0x0 [ 53.212662][ T5302] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 53.220014][ T5302] RSP: 0018:ffffc90003c1fca8 EFLAGS: 00010286 [ 53.226068][ T5302] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880268b8000 [ 53.234025][ T5302] RDX: 0000000000000000 RSI: ffffea0001c79440 RDI: ffff888075eb0478 [ 53.241982][ T5302] RBP: ffffea0001c79440 R08: ffffffff81bc12ab R09: fffff9400038f289 [ 53.249938][ T5302] R10: fffff9400038f289 R11: 1ffffd400038f288 R12: 0000000000000000 [ 53.257893][ T5302] R13: 0000000000010000 R14: 1ffffd400038f288 R15: ffffffffffffffff [ 53.265847][ T5302] FS: 00007f45fe7d4700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.274774][ T5302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.281343][ T5302] CR2: ffffffffffffffd6 CR3: 000000002986e000 CR4: 00000000003506f0 [ 53.289297][ T5302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.297249][ T5302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.305221][ T5302] Kernel panic - not syncing: Fatal exception [ 53.311458][ T5302] Kernel Offset: disabled [ 53.315777][ T5302] Rebooting in 86400 seconds..