[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.312524] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 35.322024] ------------[ cut here ]------------ [ 35.326794] kernel BUG at fs/ntfs/aops.c:203! [ 35.331735] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 35.337102] CPU: 1 PID: 8081 Comm: syz-executor327 Not tainted 4.19.190-syzkaller #0 [ 35.344961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.354308] RIP: 0010:ntfs_readpage+0x1a6b/0x21b0 [ 35.359276] Code: ff e8 99 c2 1d ff 48 8b 9d 80 fd ff ff 31 ff 48 c1 eb 03 83 e3 01 89 de e8 b2 c3 1d ff 84 db 0f 85 75 f1 ff ff e8 75 c2 1d ff <0f> 0b e8 6e c2 1d ff 0f 0b e8 67 c2 1d ff 0f 0b e8 60 c2 1d ff 8b [ 35.378177] RSP: 0018:ffff8880a537f730 EFLAGS: 00010293 [ 35.383536] RAX: ffff8880b27b2380 RBX: 0000000000000000 RCX: ffffffff82449bee [ 35.390789] RDX: 0000000000000000 RSI: ffffffff82449bfb RDI: 0000000000000001 [ 35.398053] RBP: ffff8880b547ba08 R08: 0000000000000001 R09: 0000000000000000 [ 35.405305] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 35.412570] R13: ffff8880b547b788 R14: 0000000000000001 R15: ffffea0002372680 [ 35.419833] FS: 0000000000e89300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 35.428055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.433924] CR2: 000055ed5c7db760 CR3: 0000000095216000 CR4: 00000000001406e0 [ 35.441179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.448436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.456045] Call Trace: [ 35.458622] ? page_cache_tree_insert+0x3f0/0x3f0 [ 35.463451] ? check_preemption_disabled+0x41/0x280 [ 35.471084] ? ntfs_end_buffer_async_read+0x1210/0x1210 [ 35.476438] ? add_to_page_cache_lru+0x259/0x680 [ 35.481184] ? add_to_page_cache_locked+0x40/0x40 [ 35.486016] do_read_cache_page+0x533/0x1170 [ 35.490601] ? ntfs_attr_lookup+0x1020/0x1f90 [ 35.495083] ? ntfs_end_buffer_async_read+0x1210/0x1210 [ 35.500430] map_mft_record+0x1fe/0xc70 [ 35.504390] ntfs_read_locked_inode+0x19c/0x56f0 [ 35.509133] ? kmem_cache_alloc+0x2e1/0x370 [ 35.513436] ntfs_read_inode_mount+0xbc4/0x22b0 [ 35.518090] ntfs_fill_super+0xa16/0x7e10 [ 35.522234] ? pointer+0x850/0x850 [ 35.525757] ? lock_downgrade+0x720/0x720 [ 35.529887] ? ntfs_big_inode_init_once+0x20/0x20 [ 35.534718] ? vsprintf+0x30/0x30 [ 35.538163] ? wait_for_completion_io+0x10/0x10 [ 35.542900] ? set_blocksize+0x163/0x3f0 [ 35.547030] mount_bdev+0x2fc/0x3b0 [ 35.550640] ? ntfs_big_inode_init_once+0x20/0x20 [ 35.555463] mount_fs+0xa3/0x310 [ 35.558809] vfs_kern_mount.part.0+0x68/0x470 [ 35.563295] do_mount+0x113c/0x2f10 [ 35.566909] ? lock_acquire+0x170/0x3c0 [ 35.570895] ? check_preemption_disabled+0x41/0x280 [ 35.575917] ? copy_mount_string+0x40/0x40 [ 35.580134] ? copy_mount_options+0x59/0x380 [ 35.584522] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 35.589530] ? kmem_cache_alloc_trace+0x323/0x380 [ 35.594454] ? copy_mount_options+0x26f/0x380 [ 35.598938] ksys_mount+0xcf/0x130 [ 35.602460] __x64_sys_mount+0xba/0x150 [ 35.606415] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 35.610977] do_syscall_64+0xf9/0x620 [ 35.614760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 35.619939] RIP: 0033:0x44513a [ 35.623121] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 35.642064] RSP: 002b:00007ffd7a642f58 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 35.649756] RAX: ffffffffffffffda RBX: 00007ffd7a642fb0 RCX: 000000000044513a [ 35.657023] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd7a642f70 [ 35.664278] RBP: 00007ffd7a642f70 R08: 00007ffd7a642fb0 R09: 0000000000000000 [ 35.671707] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000290 [ 35.679223] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000006 [ 35.686588] Modules linked in: [ 35.690513] ---[ end trace 39a8eb032ec196cb ]--- [ 35.695311] RIP: 0010:ntfs_readpage+0x1a6b/0x21b0 [ 35.700245] Code: ff e8 99 c2 1d ff 48 8b 9d 80 fd ff ff 31 ff 48 c1 eb 03 83 e3 01 89 de e8 b2 c3 1d ff 84 db 0f 85 75 f1 ff ff e8 75 c2 1d ff <0f> 0b e8 6e c2 1d ff 0f 0b e8 67 c2 1d ff 0f 0b e8 60 c2 1d ff 8b [ 35.719443] RSP: 0018:ffff8880a537f730 EFLAGS: 00010293 [ 35.724889] RAX: ffff8880b27b2380 RBX: 0000000000000000 RCX: ffffffff82449bee [ 35.732161] RDX: 0000000000000000 RSI: ffffffff82449bfb RDI: 0000000000000001 [ 35.739662] RBP: ffff8880b547ba08 R08: 0000000000000001 R09: 0000000000000000 [ 35.747272] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 35.754705] R13: ffff8880b547b788 R14: 0000000000000001 R15: ffffea0002372680 [ 35.762071] FS: 0000000000e89300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 35.770344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.776279] CR2: 000055ed5c7db760 CR3: 0000000095216000 CR4: 00000000001406e0 [ 35.783578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.790895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.798224] Kernel panic - not syncing: Fatal exception [ 35.804107] Kernel Offset: disabled [ 35.807722] Rebooting in 86400 seconds..