./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3477672390 <...> DUID 00:04:7c:7c:42:18:3f:30:8d:b4:e2:57:c6:a5:0a:a4:65:8b forked to background, child pid 4659 [ 39.114462][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.124226][ T4660] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.129' (ECDSA) to the list of known hosts. execve("./syz-executor3477672390", ["./syz-executor3477672390"], 0x7ffdddecd470 /* 10 vars */) = 0 brk(NULL) = 0x555555936000 brk(0x555555936c40) = 0x555555936c40 arch_prctl(ARCH_SET_FS, 0x555555936300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3477672390", 4096) = 28 brk(0x555555957c40) = 0x555555957c40 brk(0x555555958000) = 0x555555958000 mprotect(0x7f2cad9cf000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ca54f7000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x40\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f2ca54f7000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 66.309751][ T4995] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4995 'syz-executor347' [ 66.349783][ T4995] loop0: detected capacity change from 0 to 4096 [ 66.361877][ T4995] ------------[ cut here ]------------ [ 66.367428][ T4995] kernel BUG at fs/ntfs/aops.c:186! [ 66.372631][ T4995] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 66.378697][ T4995] CPU: 1 PID: 4995 Comm: syz-executor347 Not tainted 6.3.0-syzkaller-13225-g7163a2111f6c #0 [ 66.388772][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 66.398825][ T4995] RIP: 0010:ntfs_read_folio+0x27d2/0x29f0 [ 66.404571][ T4995] Code: fa 48 83 7c 24 48 00 0f 84 eb 00 00 00 e8 d6 c5 ca fe e9 11 02 00 00 e8 cc c5 ca fe 0f 0b e8 c5 c5 ca fe 0f 0b e8 be c5 ca fe <0f> 0b 48 8b 3c 24 be 08 00 00 00 e8 4e 9b 22 ff 48 b8 00 00 00 00 [ 66.424172][ T4995] RSP: 0018:ffffc90003a5f5e0 EFLAGS: 00010293 [ 66.430244][ T4995] RAX: ffffffff82c0ca52 RBX: 0000000000000000 RCX: ffff888018e91dc0 [ 66.438221][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.446193][ T4995] RBP: ffffc90003a5f7b0 R08: ffffffff82c0afd1 R09: ffffed100e70600b [ 66.454167][ T4995] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea0001cae480 [ 66.462145][ T4995] R13: 1ffffd4000395c90 R14: ffff888073830320 R15: ffff888073830088 [ 66.470129][ T4995] FS: 0000555555936300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 66.479065][ T4995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.485656][ T4995] CR2: 00007ffec323d000 CR3: 000000007abbb000 CR4: 00000000003506e0 [ 66.493657][ T4995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.501635][ T4995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.509618][ T4995] Call Trace: [ 66.512912][ T4995] [ 66.515854][ T4995] ? __lock_acquire+0x2000/0x2000 [ 66.520893][ T4995] ? ntfs_writepage+0x1ae0/0x1ae0 [ 66.525928][ T4995] ? folio_batch_add_and_move+0x16a/0x2c0 [ 66.531653][ T4995] ? folio_add_lru+0x6f0/0x6f0 [ 66.536421][ T4995] ? folio_add_lru+0x353/0x6f0 [ 66.541187][ T4995] filemap_read_folio+0x19d/0x7a0 [ 66.546218][ T4995] ? filemap_add_folio+0x580/0x580 [ 66.551334][ T4995] ? ntfs_writepage+0x1ae0/0x1ae0 [ 66.556366][ T4995] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 66.562093][ T4995] ? __filemap_get_folio+0x777/0xa00 [ 66.567386][ T4995] do_read_cache_folio+0x134/0x820 [ 66.572506][ T4995] ? ntfs_writepage+0x1ae0/0x1ae0 [ 66.577542][ T4995] do_read_cache_page+0x32/0x220 [ 66.582484][ T4995] map_mft_record+0x1cd/0x630 [ 66.587179][ T4995] ntfs_read_locked_inode+0x199/0x49c0 [ 66.592652][ T4995] ? __asan_memset+0x23/0x40 [ 66.597273][ T4995] ? ntfs_attr_reinit_search_ctx+0x4f/0x2e0 [ 66.603208][ T4995] ntfs_read_inode_mount+0xda6/0x2660 [ 66.608615][ T4995] ntfs_fill_super+0x1883/0x2bd0 [ 66.613576][ T4995] mount_bdev+0x274/0x3a0 [ 66.617911][ T4995] ? ntfs_mount+0x40/0x40 [ 66.622253][ T4995] legacy_get_tree+0xef/0x190 [ 66.628181][ T4995] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 66.633771][ T4995] vfs_get_tree+0x8c/0x270 [ 66.638197][ T4995] do_new_mount+0x28f/0xae0 [ 66.642710][ T4995] ? path_mount+0x5f2/0xf80 [ 66.647219][ T4995] ? do_move_mount_old+0x170/0x170 [ 66.652349][ T4995] ? user_path_at_empty+0x12f/0x180 [ 66.657668][ T4995] __se_sys_mount+0x2d9/0x3c0 [ 66.662387][ T4995] ? __x64_sys_mount+0xc0/0xc0 [ 66.667192][ T4995] ? syscall_enter_from_user_mode+0x32/0x230 [ 66.673187][ T4995] ? __x64_sys_mount+0x20/0xc0 [ 66.677965][ T4995] do_syscall_64+0x41/0xc0 [ 66.682401][ T4995] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.688303][ T4995] RIP: 0033:0x7f2cad944b2a [ 66.692723][ T4995] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.712339][ T4995] RSP: 002b:00007ffec323c2b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 66.720771][ T4995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2cad944b2a [ 66.728750][ T4995] RDX: 0000000020000000 RSI: 000000002001e740 RDI: 00007ffec323c2d0 [ 66.736727][ T4995] RBP: 00007ffec323c2d0 R08: 00007ffec323c310 R09: 000000000001e718 [ 66.744703][ T4995] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 66.752675][ T4995] R13: 00005555559362c0 R14: 0000000000000000 R15: 00007ffec323c310 [ 66.760656][ T4995] [ 66.763690][ T4995] Modules linked in: [ 66.767806][ T4995] ---[ end trace 0000000000000000 ]--- [ 66.773301][ T4995] RIP: 0010:ntfs_read_folio+0x27d2/0x29f0 [ 66.779107][ T4995] Code: fa 48 83 7c 24 48 00 0f 84 eb 00 00 00 e8 d6 c5 ca fe e9 11 02 00 00 e8 cc c5 ca fe 0f 0b e8 c5 c5 ca fe 0f 0b e8 be c5 ca fe <0f> 0b 48 8b 3c 24 be 08 00 00 00 e8 4e 9b 22 ff 48 b8 00 00 00 00 [ 66.798875][ T4995] RSP: 0018:ffffc90003a5f5e0 EFLAGS: 00010293 [ 66.804962][ T4995] RAX: ffffffff82c0ca52 RBX: 0000000000000000 RCX: ffff888018e91dc0 [ 66.812992][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.821045][ T4995] RBP: ffffc90003a5f7b0 R08: ffffffff82c0afd1 R09: ffffed100e70600b [ 66.829067][ T4995] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea0001cae480 [ 66.837100][ T4995] R13: 1ffffd4000395c90 R14: ffff888073830320 R15: ffff888073830088 [ 66.845075][ T4995] FS: 0000555555936300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 66.854043][ T4995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.860672][ T4995] CR2: 00007ffec323d000 CR3: 000000007abbb000 CR4: 00000000003506e0 [ 66.868696][ T4995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.876736][ T4995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.884711][ T4995] Kernel panic - not syncing: Fatal exception [ 66.891064][ T4995] Kernel Offset: disabled [ 66.895397][ T4995] Rebooting in 86400 seconds..