[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.772356] audit: type=1400 audit(1602148310.744:8): avc: denied { execmem } for pid=6474 comm="syz-executor040" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 35.782601] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 35.802164] ------------[ cut here ]------------ [ 35.806918] kernel BUG at fs/ntfs/aops.c:203! [ 35.813363] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 35.818757] CPU: 1 PID: 6474 Comm: syz-executor040 Not tainted 4.19.150-syzkaller #0 [ 35.826606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.835962] RIP: 0010:ntfs_readpage+0x1c0b/0x24d0 [ 35.840778] Code: ff e8 d9 71 16 ff 48 8b 9d 80 fd ff ff 31 ff 48 c1 eb 03 83 e3 01 89 de e8 f2 72 16 ff 84 db 0f 85 0b f0 ff ff e8 b5 71 16 ff <0f> 0b 48 c7 c7 60 e9 bf 89 e8 77 bb 5a 01 e8 a2 71 16 ff 0f 0b 48 [ 35.859647] RSP: 0018:ffff88808497f758 EFLAGS: 00010293 [ 35.864981] RAX: ffff88808ce0e580 RBX: 0000000000000000 RCX: ffffffff825b609e [ 35.872220] RDX: 0000000000000000 RSI: ffffffff825b60ab RDI: 0000000000000001 [ 35.879467] RBP: ffff88808af93a08 R08: 0000000000000001 R09: 0000000000000000 [ 35.886720] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 35.893974] R13: ffff88808af93788 R14: 0000000000000001 R15: ffffea00020a0580 [ 35.901217] FS: 0000000000ae6880(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000 [ 35.909411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.915272] CR2: 00007fe01dde0000 CR3: 000000008cefb000 CR4: 00000000001406e0 [ 35.922529] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.929768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.937006] Call Trace: [ 35.939568] ? page_cache_tree_insert+0x410/0x410 [ 35.944384] ? check_preemption_disabled+0x41/0x2b0 [ 35.949389] ? ntfs_end_buffer_async_read+0x1300/0x1300 [ 35.954723] ? add_to_page_cache_lru+0x259/0x6c0 [ 35.959462] ? add_to_page_cache_locked+0x40/0x40 [ 35.964276] do_read_cache_page+0x533/0x11d0 [ 35.968673] ? ntfs_end_buffer_async_read+0x1300/0x1300 [ 35.974007] map_mft_record+0x228/0xd00 [ 35.977977] ntfs_read_locked_inode+0x19c/0x5490 [ 35.982706] ntfs_read_inode_mount+0xcba/0x23b0 [ 35.987434] ntfs_fill_super+0x1761/0x89d2 [ 35.991641] ? snprintf+0xbb/0xf0 [ 35.995070] ? vsprintf+0x30/0x30 [ 35.998496] ? ntfs_remount+0x500/0x500 [ 36.002440] ? __mutex_add_waiter+0x160/0x160 [ 36.006913] ? set_blocksize+0x163/0x3f0 [ 36.010946] mount_bdev+0x2fc/0x3b0 [ 36.014549] ? ntfs_remount+0x500/0x500 [ 36.018493] mount_fs+0xa3/0x318 [ 36.021831] vfs_kern_mount.part.0+0x68/0x470 [ 36.026298] do_mount+0x51c/0x2f10 [ 36.029812] ? do_raw_spin_unlock+0x171/0x240 [ 36.034289] ? check_preemption_disabled+0x41/0x2b0 [ 36.039278] ? copy_mount_string+0x40/0x40 [ 36.043502] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 36.048316] ? copy_mount_options+0x261/0x370 [ 36.052781] ksys_mount+0xcf/0x130 [ 36.056291] __x64_sys_mount+0xba/0x150 [ 36.060248] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 36.064804] do_syscall_64+0xf9/0x670 [ 36.068613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 36.073775] RIP: 0033:0x446e9a [ 36.076942] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 36.095838] RSP: 002b:00007ffe2b6ea978 EFLAGS: 00000287 ORIG_RAX: 00000000000000a5 [ 36.103517] RAX: ffffffffffffffda RBX: 00007ffe2b6ea9d0 RCX: 0000000000446e9a [ 36.110771] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe2b6ea990 [ 36.118011] RBP: 00007ffe2b6ea990 R08: 00007ffe2b6ea9d0 R09: 00007ffe00000015 [ 36.125252] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000008 [ 36.132492] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 36.139755] Modules linked in: [ 36.144716] ---[ end trace 70f50a87865d8e83 ]--- [ 36.149479] RIP: 0010:ntfs_readpage+0x1c0b/0x24d0 [ 36.154306] Code: ff e8 d9 71 16 ff 48 8b 9d 80 fd ff ff 31 ff 48 c1 eb 03 83 e3 01 89 de e8 f2 72 16 ff 84 db 0f 85 0b f0 ff ff e8 b5 71 16 ff <0f> 0b 48 c7 c7 60 e9 bf 89 e8 77 bb 5a 01 e8 a2 71 16 ff 0f 0b 48 [ 36.173627] RSP: 0018:ffff88808497f758 EFLAGS: 00010293 [ 36.178992] RAX: ffff88808ce0e580 RBX: 0000000000000000 RCX: ffffffff825b609e [ 36.186282] RDX: 0000000000000000 RSI: ffffffff825b60ab RDI: 0000000000000001 [ 36.193531] RBP: ffff88808af93a08 R08: 0000000000000001 R09: 0000000000000000 [ 36.200822] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 36.208116] R13: ffff88808af93788 R14: 0000000000000001 R15: ffffea00020a0580 [ 36.215432] FS: 0000000000ae6880(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000 [ 36.223642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.229532] CR2: 0000564e892a9970 CR3: 000000008cefb000 CR4: 00000000001406f0 [ 36.236815] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.244071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.251362] Kernel panic - not syncing: Fatal exception [ 36.257911] Kernel Offset: disabled [ 36.261520] Rebooting in 86400 seconds..