./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2287461688 <...> Warning: Permanently added '10.128.1.101' (ECDSA) to the list of known hosts. execve("./syz-executor2287461688", ["./syz-executor2287461688"], 0x7ffedf71b1e0 /* 10 vars */) = 0 brk(NULL) = 0x5555559cf000 brk(0x5555559cfc40) = 0x5555559cfc40 arch_prctl(ARCH_SET_FS, 0x5555559cf300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2287461688", 4096) = 28 brk(0x5555559f0c40) = 0x5555559f0c40 brk(0x5555559f1000) = 0x5555559f1000 mprotect(0x7f474c42c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4743f54000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f4743f54000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "ntfs3", MS_NOEXEC|MS_POSIXACL, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "/proc/schedstat", O_RDONLY) = 4 read(4, "version 15\ntimestamp 4294942345\ncpu0 0 0 0 0 0 0 30207406723 44016802364 21317\ndomain0 3 0 0 0 0 0 0"..., 8224) = 290 syzkaller login: [ 51.947269][ T3632] loop0: detected capacity change from 0 to 4096 [ 51.958849][ T3632] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 51.988328][ T3632] ================================================================== [ 51.996417][ T3632] BUG: KASAN: out-of-bounds in ntfs_set_ea+0xcb5/0x1760 [ 52.003374][ T3632] Read of size 18446744069414584420 at addr ffff88824a6c8610 by task syz-executor228/3632 [ 52.013263][ T3632] [ 52.015584][ T3632] CPU: 0 PID: 3632 Comm: syz-executor228 Not tainted 6.1.0-syzkaller-03295-g02bf43c7b7f7 #0 [ 52.025620][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.035652][ T3632] Call Trace: [ 52.038917][ T3632] [ 52.041826][ T3632] dump_stack_lvl+0x1b1/0x28e [ 52.046516][ T3632] ? nf_tcp_handle_invalid+0x62e/0x62e [ 52.051977][ T3632] ? __wake_up_klogd+0xcd/0x100 [ 52.056829][ T3632] ? panic+0x710/0x710 [ 52.060891][ T3632] ? _printk+0xc0/0x100 [ 52.065027][ T3632] print_address_description+0x74/0x340 [ 52.070551][ T3632] print_report+0x107/0x1f0 [ 52.075032][ T3632] ? _raw_spin_lock+0x40/0x40 [ 52.079690][ T3632] ? memset+0x1f/0x40 [ 52.083648][ T3632] ? __virt_addr_valid+0x193/0x2d0 [ 52.088740][ T3632] ? ntfs_set_ea+0xcb5/0x1760 [ 52.093395][ T3632] kasan_report+0xcd/0x100 [ 52.097793][ T3632] ? ntfs_set_ea+0xcb5/0x1760 [ 52.102457][ T3632] ? ntfs_set_ea+0xcb5/0x1760 [ 52.107122][ T3632] kasan_check_range+0x2a7/0x2e0 [ 52.112089][ T3632] ? ntfs_set_ea+0xcb5/0x1760 [ 52.116755][ T3632] memmove+0x25/0x60 [ 52.120645][ T3632] ntfs_set_ea+0xcb5/0x1760 [ 52.125150][ T3632] ? ntfs_save_wsl_perm+0x490/0x490 [ 52.130334][ T3632] ? aa_get_newest_label+0xf4/0x640 [ 52.135516][ T3632] ? __kmem_cache_free+0x71/0x110 [ 52.140539][ T3632] ? mutex_lock_io_nested+0x60/0x60 [ 52.145739][ T3632] ? from_kgid+0x193/0x6b0 [ 52.150160][ T3632] ? make_kgid+0x710/0x710 [ 52.154561][ T3632] ? apparmor_capable+0x139/0x1a0 [ 52.160525][ T3632] ntfs_save_wsl_perm+0x1f4/0x490 [ 52.165539][ T3632] ? ntfs_listxattr+0x530/0x530 [ 52.170367][ T3632] ? memcpy+0x3c/0x60 [ 52.174330][ T3632] ? setattr_copy+0x319/0x560 [ 52.178995][ T3632] ntfs3_setattr+0x959/0xb40 [ 52.183569][ T3632] ? ntfs_xattr_user_list+0x10/0x10 [ 52.188745][ T3632] ? __vfs_getxattr+0x476/0x4b0 [ 52.193576][ T3632] ? put_page+0x230/0x230 [ 52.197886][ T3632] ? security_inode_setattr+0x109/0x150 [ 52.203410][ T3632] ? put_page+0x230/0x230 [ 52.207720][ T3632] notify_change+0xe50/0x1100 [ 52.212378][ T3632] ? security_path_chown+0x11d/0x160 [ 52.217639][ T3632] chown_common+0x5b6/0x910 [ 52.222126][ T3632] ? __ia32_sys_chmod+0x180/0x180 [ 52.227129][ T3632] ? rcu_read_lock_any_held+0xb1/0x130 [ 52.232563][ T3632] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 52.237826][ T3632] ? __mnt_want_write+0x221/0x2a0 [ 52.242839][ T3632] do_fchownat+0x165/0x240 [ 52.247245][ T3632] ? chown_common+0x910/0x910 [ 52.251920][ T3632] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 52.257886][ T3632] __x64_sys_chown+0x7e/0x90 [ 52.262468][ T3632] do_syscall_64+0x3d/0xb0 [ 52.266873][ T3632] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.272759][ T3632] RIP: 0033:0x7f474c3a07c9 [ 52.277155][ T3632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.296827][ T3632] RSP: 002b:00007ffdedf21528 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 52.305217][ T3632] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f474c3a07c9 [ 52.313168][ T3632] RDX: 0000000039323420 RSI: 0000000000000000 RDI: 0000000020001d80 [ 52.321120][ T3632] RBP: 00007f474c360060 R08: 0000000000000000 R09: 0000000000000000 [ 52.329066][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f474c3600f0 [ 52.337012][ T3632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.344966][ T3632] [ 52.347965][ T3632] [ 52.350270][ T3632] Memory state around the buggy address: [ 52.355904][ T3632] BUG: unable to handle page fault for address: ffffed10494d90a0 [ 52.363592][ T3632] #PF: supervisor read access in kernel mode [ 52.369541][ T3632] #PF: error_code(0x0000) - not-present page [ 52.375494][ T3632] PGD 23ffee067 P4D 23ffee067 PUD 13fff4067 PMD 0 [ 52.381980][ T3632] Oops: 0000 [#1] PREEMPT SMP KASAN [ 52.387154][ T3632] CPU: 0 PID: 3632 Comm: syz-executor228 Not tainted 6.1.0-syzkaller-03295-g02bf43c7b7f7 #0 [ 52.397190][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.407221][ T3632] RIP: 0010:memcpy_erms+0x6/0x10 [ 52.412141][ T3632] Code: fe ff ff cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 52.431724][ T3632] RSP: 0018:ffffc90003b2f688 EFLAGS: 00010086 [ 52.437767][ T3632] RAX: ffffc90003b2f6a0 RBX: ffff88824a6c8500 RCX: 0000000000000010 [ 52.445722][ T3632] RDX: 0000000000000010 RSI: ffffed10494d90a0 RDI: ffffc90003b2f6a0 [ 52.453684][ T3632] RBP: ffffc90003b2f700 R08: ffffffff8a8ea68e R09: fffff52000765ed9 [ 52.461633][ T3632] R10: fffff52000765ed9 R11: 1ffff92000765ed8 R12: ffffc90003b2f6a0 [ 52.469582][ T3632] R13: ffff88824a6c8580 R14: 0000000000000100 R15: ffffc90003b2f6b0 [ 52.477631][ T3632] FS: 00005555559cf300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 52.486559][ T3632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.493129][ T3632] CR2: ffffed10494d90a0 CR3: 00000000460de000 CR4: 00000000003506f0 [ 52.501088][ T3632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.509559][ T3632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.517508][ T3632] Call Trace: [ 52.520781][ T3632] [ 52.523702][ T3632] print_report+0x191/0x1f0 [ 52.528218][ T3632] ? ntfs_set_ea+0xcb5/0x1760 [ 52.532884][ T3632] kasan_report+0xcd/0x100 [ 52.537285][ T3632] ? ntfs_set_ea+0xcb5/0x1760 [ 52.541961][ T3632] ? ntfs_set_ea+0xcb5/0x1760 [ 52.546630][ T3632] kasan_check_range+0x2a7/0x2e0 [ 52.551554][ T3632] ? ntfs_set_ea+0xcb5/0x1760 [ 52.556212][ T3632] memmove+0x25/0x60 [ 52.560088][ T3632] ntfs_set_ea+0xcb5/0x1760 [ 52.564575][ T3632] ? ntfs_save_wsl_perm+0x490/0x490 [ 52.569755][ T3632] ? aa_get_newest_label+0xf4/0x640 [ 52.574935][ T3632] ? __kmem_cache_free+0x71/0x110 [ 52.579945][ T3632] ? mutex_lock_io_nested+0x60/0x60 [ 52.585124][ T3632] ? from_kgid+0x193/0x6b0 [ 52.589523][ T3632] ? make_kgid+0x710/0x710 [ 52.593919][ T3632] ? apparmor_capable+0x139/0x1a0 [ 52.598925][ T3632] ntfs_save_wsl_perm+0x1f4/0x490 [ 52.603937][ T3632] ? ntfs_listxattr+0x530/0x530 [ 52.608855][ T3632] ? memcpy+0x3c/0x60 [ 52.612821][ T3632] ? setattr_copy+0x319/0x560 [ 52.617479][ T3632] ntfs3_setattr+0x959/0xb40 [ 52.622054][ T3632] ? ntfs_xattr_user_list+0x10/0x10 [ 52.627231][ T3632] ? __vfs_getxattr+0x476/0x4b0 [ 52.632065][ T3632] ? put_page+0x230/0x230 [ 52.636382][ T3632] ? security_inode_setattr+0x109/0x150 [ 52.641909][ T3632] ? put_page+0x230/0x230 [ 52.646221][ T3632] notify_change+0xe50/0x1100 [ 52.650881][ T3632] ? security_path_chown+0x11d/0x160 [ 52.656143][ T3632] chown_common+0x5b6/0x910 [ 52.660628][ T3632] ? __ia32_sys_chmod+0x180/0x180 [ 52.665628][ T3632] ? rcu_read_lock_any_held+0xb1/0x130 [ 52.671068][ T3632] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 52.676333][ T3632] ? __mnt_want_write+0x221/0x2a0 [ 52.681336][ T3632] do_fchownat+0x165/0x240 [ 52.685733][ T3632] ? chown_common+0x910/0x910 [ 52.690401][ T3632] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 52.696362][ T3632] __x64_sys_chown+0x7e/0x90 [ 52.700941][ T3632] do_syscall_64+0x3d/0xb0 [ 52.705340][ T3632] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.711213][ T3632] RIP: 0033:0x7f474c3a07c9 [ 52.715606][ T3632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.735188][ T3632] RSP: 002b:00007ffdedf21528 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 52.743578][ T3632] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f474c3a07c9 [ 52.751530][ T3632] RDX: 0000000039323420 RSI: 0000000000000000 RDI: 0000000020001d80 [ 52.759499][ T3632] RBP: 00007f474c360060 R08: 0000000000000000 R09: 0000000000000000 [ 52.767447][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f474c3600f0 [ 52.775397][ T3632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.783348][ T3632] [ 52.786353][ T3632] Modules linked in: [ 52.790225][ T3632] CR2: ffffed10494d90a0 [ 52.794355][ T3632] ---[ end trace 0000000000000000 ]--- [ 52.799786][ T3632] RIP: 0010:memcpy_erms+0x6/0x10 [ 52.804731][ T3632] Code: fe ff ff cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 52.824313][ T3632] RSP: 0018:ffffc90003b2f688 EFLAGS: 00010086 [ 52.830357][ T3632] RAX: ffffc90003b2f6a0 RBX: ffff88824a6c8500 RCX: 0000000000000010 [ 52.838326][ T3632] RDX: 0000000000000010 RSI: ffffed10494d90a0 RDI: ffffc90003b2f6a0 [ 52.846294][ T3632] RBP: ffffc90003b2f700 R08: ffffffff8a8ea68e R09: fffff52000765ed9 [ 52.854253][ T3632] R10: fffff52000765ed9 R11: 1ffff92000765ed8 R12: ffffc90003b2f6a0 [ 52.862219][ T3632] R13: ffff88824a6c8580 R14: 0000000000000100 R15: ffffc90003b2f6b0 [ 52.870177][ T3632] FS: 00005555559cf300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 52.879094][ T3632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.885666][ T3632] CR2: ffffed10494d90a0 CR3: 00000000460de000 CR4: 00000000003506f0 [ 52.893632][ T3632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.901588][ T3632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.909544][ T3632] Kernel panic - not syncing: Fatal exception [ 52.915742][ T3632] Kernel Offset: disabled [ 52.920059][ T3632] Rebooting in 86400 seconds..