./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3740901462 <...> DUID 00:04:d9:3a:76:1c:b4:63:be:bc:0b:c2:08:9c:83:36:98:31 forked to background, child pid 3213 [ 29.996909][ T3214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.008790][ T3214] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. execve("./syz-executor3740901462", ["./syz-executor3740901462"], 0x7ffd3a1c67d0 /* 10 vars */) = 0 brk(NULL) = 0x555555a16000 brk(0x555555a16c40) = 0x555555a16c40 arch_prctl(ARCH_SET_FS, 0x555555a16300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3740901462", 4096) = 28 brk(0x555555a37c40) = 0x555555a37c40 brk(0x555555a38000) = 0x555555a38000 mprotect(0x7f2e1d0f0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 132427) = 0 pwrite64(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x40\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\xf4\x00\x00\x00\xa3\xb8\xb2\x0f\xcf\x7a\xa8\x36\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 224, 0) = 224 pwrite64(3, "\x46\x49\x4c\x45\x30\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\x00\x38\x00\x01\x00\x98\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x60\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x48\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 312, 131072) = 312 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08", 31, 131552) = 31 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x46\x49\x4c\x45\x30\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\x00\x38\x00\x01\x00\x58\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x60\x00\x00\x00\x00\x00\x18\x00"..., 363, 132064) = 363 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 52.995430][ T3634] loop0: detected capacity change from 0 to 258 [ 53.005892][ T3634] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 53.015312][ T3634] ------------[ cut here ]------------ [ 53.020793][ T3634] kernel BUG at fs/ntfs/aops.c:186! [ 53.025979][ T3634] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.032026][ T3634] CPU: 1 PID: 3634 Comm: syz-executor374 Not tainted 6.1.0-rc5-syzkaller-00320-gb6e7fdfd6f6a #0 [ 53.042414][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.052449][ T3634] RIP: 0010:ntfs_read_block+0x21f0/0x2440 [ 53.058169][ T3634] Code: e9 e4 00 00 00 e8 a0 9a c7 fe e9 56 02 00 00 48 83 7c 24 58 00 0f 84 db 00 00 00 e8 8a 9a c7 fe e9 07 02 00 00 e8 80 9a c7 fe <0f> 0b 48 8b 7c 24 18 be 08 00 00 00 e8 9f 92 1c ff 48 b8 00 00 00 [ 53.077763][ T3634] RSP: 0018:ffffc90003b9f5c0 EFLAGS: 00010293 [ 53.083819][ T3634] RAX: ffffffff82c4f9a0 RBX: 0000000000000000 RCX: ffff88802783ba80 [ 53.091785][ T3634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.099746][ T3634] RBP: ffffc90003b9f7d0 R08: ffffffff82c4d96a R09: ffffed100e30f00b [ 53.107711][ T3634] R10: ffffed100e30f00b R11: 1ffff1100e30f00a R12: ffffea0001c83c40 [ 53.115671][ T3634] R13: dffffc0000000000 R14: ffff888071878088 R15: ffffea0001c83c40 [ 53.123637][ T3634] FS: 0000555555a16300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 53.132559][ T3634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.139137][ T3634] CR2: 00000000010d52f8 CR3: 0000000077d46000 CR4: 00000000003506e0 [ 53.147105][ T3634] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.155065][ T3634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.163024][ T3634] Call Trace: [ 53.166292][ T3634] [ 53.169216][ T3634] ? trace_lock_release+0x95/0x220 [ 53.174320][ T3634] ? lock_release+0x81/0x870 [ 53.178902][ T3634] ? __lock_acquire+0x1f60/0x1f60 [ 53.183914][ T3634] ? compound_nr+0x1b0/0x1b0 [ 53.188497][ T3634] ? folio_add_lru+0x480/0x960 [ 53.193248][ T3634] filemap_read_folio+0x1ba/0x7f0 [ 53.198260][ T3634] ? ntfs_writepage+0x1d10/0x1d10 [ 53.203274][ T3634] ? maybe_unlock_mmap_for_io+0x130/0x130 [ 53.208987][ T3634] ? filemap_alloc_folio+0x1ac/0x1c0 [ 53.214272][ T3634] do_read_cache_folio+0x2d3/0x790 [ 53.219375][ T3634] ? ntfs_writepage+0x1d10/0x1d10 [ 53.224396][ T3634] read_cache_page+0x56/0x270 [ 53.229328][ T3634] map_mft_record+0x1dc/0x610 [ 53.233999][ T3634] ntfs_read_locked_inode+0x19d/0x4680 [ 53.239458][ T3634] ? ntfs_mapping_pairs_decompress+0xb49/0x1280 [ 53.245694][ T3634] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0 [ 53.251670][ T3634] ? memset+0x1f/0x40 [ 53.255642][ T3634] ? ntfs_attr_reinit_search_ctx+0x4b/0x2e0 [ 53.261533][ T3634] ntfs_read_inode_mount+0xd85/0x25c0 [ 53.266913][ T3634] ntfs_fill_super+0x187a/0x2bf0 [ 53.271849][ T3634] mount_bdev+0x26c/0x3a0 [ 53.276172][ T3634] ? ntfs_mount+0x40/0x40 [ 53.280499][ T3634] legacy_get_tree+0xea/0x180 [ 53.285173][ T3634] ? ntfs_rl_punch_nolock+0x1600/0x1600 [ 53.290710][ T3634] vfs_get_tree+0x88/0x270 [ 53.295117][ T3634] do_new_mount+0x289/0xad0 [ 53.299611][ T3634] ? do_move_mount_old+0x160/0x160 [ 53.304714][ T3634] ? user_path_at_empty+0x149/0x1a0 [ 53.309908][ T3634] __se_sys_mount+0x2e3/0x3d0 [ 53.314583][ T3634] ? __x64_sys_mount+0xc0/0xc0 [ 53.319336][ T3634] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 53.325320][ T3634] ? __x64_sys_mount+0x1c/0xc0 [ 53.330076][ T3634] do_syscall_64+0x2b/0x70 [ 53.334488][ T3634] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.340374][ T3634] RIP: 0033:0x7f2e1d0851fa [ 53.344801][ T3634] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.364406][ T3634] RSP: 002b:00007ffd3b8b4768 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 53.372816][ T3634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2e1d0851fa [ 53.380781][ T3634] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd3b8b4780 [ 53.388749][ T3634] RBP: 00007ffd3b8b4780 R08: 00007ffd3b8b47c0 R09: 0000555555a162c0 [ 53.396713][ T3634] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 53.404675][ T3634] R13: 00007ffd3b8b47c0 R14: 0000000000000004 R15: 0000000020000260 [ 53.412644][ T3634] [ 53.415652][ T3634] Modules linked in: [ 53.419695][ T3634] ---[ end trace 0000000000000000 ]--- [ 53.425250][ T3634] RIP: 0010:ntfs_read_block+0x21f0/0x2440 [ 53.430994][ T3634] Code: e9 e4 00 00 00 e8 a0 9a c7 fe e9 56 02 00 00 48 83 7c 24 58 00 0f 84 db 00 00 00 e8 8a 9a c7 fe e9 07 02 00 00 e8 80 9a c7 fe <0f> 0b 48 8b 7c 24 18 be 08 00 00 00 e8 9f 92 1c ff 48 b8 00 00 00 [ 53.450641][ T3634] RSP: 0018:ffffc90003b9f5c0 EFLAGS: 00010293 [ 53.456697][ T3634] RAX: ffffffff82c4f9a0 RBX: 0000000000000000 RCX: ffff88802783ba80 [ 53.464685][ T3634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.472683][ T3634] RBP: ffffc90003b9f7d0 R08: ffffffff82c4d96a R09: ffffed100e30f00b [ 53.480674][ T3634] R10: ffffed100e30f00b R11: 1ffff1100e30f00a R12: ffffea0001c83c40 [ 53.488643][ T3634] R13: dffffc0000000000 R14: ffff888071878088 R15: ffffea0001c83c40 [ 53.496638][ T3634] FS: 0000555555a16300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.505586][ T3634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.512190][ T3634] CR2: 00007ffd3b8b5000 CR3: 0000000077d46000 CR4: 00000000003506f0 [ 53.520188][ T3634] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.528153][ T3634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.536166][ T3634] Kernel panic - not syncing: Fatal exception [ 53.542369][ T3634] Kernel Offset: disabled [ 53.546688][ T3634] Rebooting in 86400 seconds..