./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4247987011 <...> Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. execve("./syz-executor4247987011", ["./syz-executor4247987011"], 0x7ffd86fefc20 /* 10 vars */) = 0 brk(NULL) = 0x555556a76000 brk(0x555556a76d00) = 0x555556a76d00 arch_prctl(ARCH_SET_FS, 0x555556a76380) = 0 set_tid_address(0x555556a76650) = 5040 set_robust_list(0x555556a76660, 24) = 0 rseq(0x555556a76ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4247987011", 4096) = 28 getrandom("\x9d\x71\x95\x9a\xc6\x3b\x95\xd7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556a76d00 brk(0x555556a97d00) = 0x555556a97d00 brk(0x555556a98000) = 0x555556a98000 mprotect(0x7fee4e0cd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee45c1c000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\xff\xff\xff\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xf3\x0f\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x0c\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 97703) = 97703 munmap(0x7fee45c1c000, 97703) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 41.715948][ T5040] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5040 'syz-executor424' [ 41.729158][ T5040] loop0: detected capacity change from 0 to 190 [ 41.737762][ T5040] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 41.747984][ T5040] ntfs: (device loop0): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 41.757805][ T5040] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 41.765908][ T5040] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 41.778930][ T5040] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 41.791853][ T5040] ------------[ cut here ]------------ [ 41.797319][ T5040] kernel BUG at fs/ntfs/malloc.h:31! [ 41.802648][ T5040] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.808718][ T5040] CPU: 0 PID: 5040 Comm: syz-executor424 Not tainted 6.5.0-rc3-next-20230728-syzkaller #0 [ 41.818591][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 41.828646][ T5040] RIP: 0010:ntfs_read_locked_inode+0x4064/0x5860 [ 41.835052][ T5040] Code: 3c 02 00 0f 85 bc 0e 00 00 48 8b 73 28 48 c7 c2 80 4c a2 8a 48 c7 c7 80 7d a2 8a e8 76 3c fe ff e9 ca d0 ff ff e8 fc bc cf fe <0f> 0b e8 f5 bc cf fe 48 8d bb a8 fe ff ff b8 ff ff 37 00 48 89 fa [ 41.854643][ T5040] RSP: 0018:ffffc90003b1f9a8 EFLAGS: 00010293 [ 41.860784][ T5040] RAX: 0000000000000000 RBX: ffff8880755b1be0 RCX: 0000000000000000 [ 41.868750][ T5040] RDX: ffff8880276cd940 RSI: ffffffff82b746f4 RDI: 0000000000000007 [ 41.876714][ T5040] RBP: ffff888010192000 R08: 0000000000000007 R09: 0000000000000000 [ 41.884764][ T5040] R10: 0000000000000000 R11: ffffffff8a40008b R12: ffff888140ba7800 [ 41.892815][ T5040] R13: ffff888010192110 R14: 0000000000000000 R15: 0000000000000000 [ 41.900777][ T5040] FS: 0000555556a76380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 41.909725][ T5040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.916312][ T5040] CR2: 00000000005fdeb8 CR3: 00000000241e3000 CR4: 00000000003506f0 [ 41.924279][ T5040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.932244][ T5040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.940322][ T5040] Call Trace: [ 41.943608][ T5040] [ 41.946536][ T5040] ? die+0x31/0x80 [ 41.950270][ T5040] ? do_trap+0x1ab/0x3b0 [ 41.954528][ T5040] ? ntfs_read_locked_inode+0x4064/0x5860 [ 41.960256][ T5040] ? do_error_trap+0x9e/0x160 [ 41.965112][ T5040] ? ntfs_read_locked_inode+0x4064/0x5860 [ 41.970834][ T5040] ? handle_invalid_op+0x2c/0x30 [ 41.975795][ T5040] ? ntfs_read_locked_inode+0x4064/0x5860 [ 41.981512][ T5040] ? exc_invalid_op+0x2d/0x40 [ 41.986189][ T5040] ? asm_exc_invalid_op+0x1a/0x20 [ 41.991473][ T5040] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.997540][ T5040] ? ntfs_read_locked_inode+0x4064/0x5860 [ 42.003258][ T5040] ? ntfs_read_locked_inode+0x4064/0x5860 [ 42.008978][ T5040] ? ntfs_read_locked_inode+0x4064/0x5860 [ 42.014695][ T5040] ? iget5_locked+0x44/0xe0 [ 42.019208][ T5040] ntfs_iget+0x130/0x180 [ 42.023710][ T5040] ? ntfs_read_locked_inode+0x5860/0x5860 [ 42.029428][ T5040] ? lockdep_init_map_type+0x16d/0x7c0 [ 42.034898][ T5040] ntfs_fill_super+0x2825/0x9100 [ 42.039844][ T5040] ? parse_options+0x1db0/0x1db0 [ 42.044779][ T5040] ? preempt_count_sub+0x150/0x150 [ 42.049895][ T5040] ? do_raw_spin_lock+0x12e/0x2b0 [ 42.054921][ T5040] ? down_write+0x14f/0x200 [ 42.059426][ T5040] ? down_write_killable_nested+0x250/0x250 [ 42.065355][ T5040] ? sb_set_blocksize+0xf6/0x120 [ 42.070310][ T5040] ? setup_bdev_super+0x385/0x770 [ 42.075333][ T5040] ? parse_options+0x1db0/0x1db0 [ 42.080269][ T5040] mount_bdev+0x1f3/0x350 [ 42.084596][ T5040] ? sget+0x610/0x610 [ 42.088575][ T5040] ? vfs_parse_fs_string+0xfb/0x150 [ 42.093778][ T5040] ? apparmor_capable+0x1da/0x4e0 [ 42.098805][ T5040] ? ntfs_rl_punch_nolock+0x15d0/0x15d0 [ 42.104348][ T5040] legacy_get_tree+0x109/0x220 [ 42.109115][ T5040] vfs_get_tree+0x88/0x350 [ 42.113529][ T5040] path_mount+0x1492/0x1ed0 [ 42.118032][ T5040] ? kmem_cache_free+0xf0/0x490 [ 42.122882][ T5040] ? finish_automount+0xa50/0xa50 [ 42.127920][ T5040] ? putname+0x101/0x140 [ 42.132167][ T5040] __x64_sys_mount+0x293/0x310 [ 42.136929][ T5040] ? copy_mnt_ns+0xb60/0xb60 [ 42.141540][ T5040] ? _raw_spin_unlock_irq+0x2e/0x50 [ 42.146742][ T5040] ? ptrace_notify+0xf4/0x130 [ 42.151434][ T5040] do_syscall_64+0x38/0xb0 [ 42.155857][ T5040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.161770][ T5040] RIP: 0033:0x7fee4e05a8ba [ 42.166182][ T5040] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.185787][ T5040] RSP: 002b:00007ffeb67f2ec8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 42.194457][ T5040] RAX: ffffffffffffffda RBX: 00007ffeb67f2ee0 RCX: 00007fee4e05a8ba [ 42.202424][ T5040] RDX: 000000002001f1c0 RSI: 000000002001f200 RDI: 00007ffeb67f2ee0 [ 42.210391][ T5040] RBP: 0000000000000004 R08: 00007ffeb67f2f20 R09: 0000000000000987 [ 42.218354][ T5040] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 42.226322][ T5040] R13: 00007ffeb67f2f20 R14: 0000000000000003 R15: 0000000000017da7 [ 42.234294][ T5040] [ 42.237301][ T5040] Modules linked in: [ 42.241369][ T5040] ---[ end trace 0000000000000000 ]--- [ 42.246863][ T5040] RIP: 0010:ntfs_read_locked_inode+0x4064/0x5860 [ 42.253255][ T5040] Code: 3c 02 00 0f 85 bc 0e 00 00 48 8b 73 28 48 c7 c2 80 4c a2 8a 48 c7 c7 80 7d a2 8a e8 76 3c fe ff e9 ca d0 ff ff e8 fc bc cf fe <0f> 0b e8 f5 bc cf fe 48 8d bb a8 fe ff ff b8 ff ff 37 00 48 89 fa [ 42.272888][ T5040] RSP: 0018:ffffc90003b1f9a8 EFLAGS: 00010293 [ 42.278947][ T5040] RAX: 0000000000000000 RBX: ffff8880755b1be0 RCX: 0000000000000000 [ 42.286935][ T5040] RDX: ffff8880276cd940 RSI: ffffffff82b746f4 RDI: 0000000000000007 [ 42.294930][ T5040] RBP: ffff888010192000 R08: 0000000000000007 R09: 0000000000000000 [ 42.302993][ T5040] R10: 0000000000000000 R11: ffffffff8a40008b R12: ffff888140ba7800 [ 42.311026][ T5040] R13: ffff888010192110 R14: 0000000000000000 R15: 0000000000000000 [ 42.319054][ T5040] FS: 0000555556a76380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 42.328009][ T5040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.334630][ T5040] CR2: 00007fee45c33000 CR3: 00000000241e3000 CR4: 00000000003506e0 [ 42.342685][ T5040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.350730][ T5040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.358706][ T5040] Kernel panic - not syncing: Fatal exception [ 42.364936][ T5040] Kernel Offset: disabled [ 42.369246][ T5040] Rebooting in 86400 seconds..