./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor131411219
<...>
Warning: Permanently added '10.128.0.229' (ECDSA) to the list of known hosts.
execve("./syz-executor131411219", ["./syz-executor131411219"], 0x7ffcef996350 /* 10 vars */) = 0
brk(NULL) = 0x555556f00000
brk(0x555556f00c40) = 0x555556f00c40
arch_prctl(ARCH_SET_FS, 0x555556f00300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor131411219", 4096) = 27
brk(0x555556f21c40) = 0x555556f21c40
brk(0x555556f22000) = 0x555556f22000
mprotect(0x7f9400330000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
ftruncate(3, 2109376) = 0
pwrite64(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02", 69, 0) = 69
pwrite64(3, "\x46\x49\x4c\x45\x30\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\x00\x40\x00\x01\x00\xa0\x01\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x60\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x48\x00\x00\x00\x18\x00\x00\x00\x80\xcd\xc6\x42\x37\xc4\xd8\x01\x80\xcd\xc6\x42"..., 403, 16384) = 403
pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00\x00\x00\x48\x00\x00\x00\x01\x00\x40\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x11\x01\x04\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x03\x00\x46\x49\x4c\x45"..., 375, 18336) = 375
pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x46\x49\x4c\x45\x30\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x00\x40\x00\x01\x00\x60\x01\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x02\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00"..., 373, 20448) = 373
pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x46\x49\x4c\x45\x30\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x01\x00\x40\x00\x01\x00\xe8\x01\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00"..., 493, 22496) = 493
pwrite64(3, NULL, 0, 24544) = 0
pwrite64(3, NULL, 0, 26592) = 0
pwrite64(3, NULL, 0, 28640) = 0
pwrite64(3, NULL, 0, 32736) = 0
pwrite64(3, NULL, 0, 34784) = 0
pwrite64(3, NULL, 0, 36832) = 0
pwrite64(3, NULL, 0, 286848) = 0
pwrite64(3, NULL, 0, 1054688) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 39.975585][ T3611] loop0: detected capacity change from 0 to 4119
[ 39.985759][ T3611] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[ 39.996569][ T3611] ==================================================================
[ 40.004622][ T3611] BUG: KASAN: slab-out-of-bounds in run_unpack+0x8b7/0x970
[ 40.011826][ T3611] Read of size 1 at addr ffff88801bbdff02 by task syz-executor131/3611
[ 40.020043][ T3611]
[ 40.022345][ T3611] CPU: 0 PID: 3611 Comm: syz-executor131 Not tainted 6.0.0-rc5-syzkaller-00097-g38eddeedbbea #0
[ 40.032734][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 40.042766][ T3611] Call Trace:
[ 40.046026][ T3611]
[ 40.048938][ T3611] dump_stack_lvl+0xcd/0x134
[ 40.053527][ T3611] print_report.cold+0x2ba/0x719
[ 40.058467][ T3611] ? run_unpack+0x8b7/0x970
[ 40.062949][ T3611] kasan_report+0xb1/0x1e0
[ 40.067350][ T3611] ? run_unpack+0x8b7/0x970
[ 40.071832][ T3611] run_unpack+0x8b7/0x970
[ 40.076208][ T3611] ? run_pack+0x1100/0x1100
[ 40.080692][ T3611] ? ntfs_bread_run+0x310/0x310
[ 40.085520][ T3611] ? kfree+0x1fb/0x580
[ 40.089571][ T3611] run_unpack_ex+0xb0/0x7c0
[ 40.094054][ T3611] ? mi_enum_attr+0x34f/0x630
[ 40.098713][ T3611] ? ni_enum_attr_ex+0x281/0x400
[ 40.103631][ T3611] ? run_unpack+0x970/0x970
[ 40.108116][ T3611] ? ni_fname_type.part.0+0x1e0/0x1e0
[ 40.113570][ T3611] ? mi_read+0x27f/0x5b0
[ 40.117806][ T3611] ntfs_iget5+0xc20/0x3280
[ 40.122217][ T3611] ? ntfs_write_end+0x800/0x800
[ 40.127059][ T3611] ntfs_loadlog_and_replay+0x124/0x5d0
[ 40.132513][ T3611] ? ntfs_write_end+0x800/0x800
[ 40.137350][ T3611] ? ntfs_bio_fill_1+0xa10/0xa10
[ 40.142276][ T3611] ? destroy_inode+0xc4/0x1b0
[ 40.146946][ T3611] ? iput.part.0+0x55d/0x810
[ 40.151615][ T3611] ntfs_fill_super+0x1eff/0x37f0
[ 40.156550][ T3611] ? put_ntfs+0x330/0x330
[ 40.160955][ T3611] ? set_blocksize+0x2e5/0x370
[ 40.165709][ T3611] get_tree_bdev+0x440/0x760
[ 40.170293][ T3611] ? put_ntfs+0x330/0x330
[ 40.174614][ T3611] vfs_get_tree+0x89/0x2f0
[ 40.179024][ T3611] path_mount+0x1326/0x1e20
[ 40.183521][ T3611] ? kmem_cache_free+0xeb/0x5b0
[ 40.188363][ T3611] ? finish_automount+0x960/0x960
[ 40.193468][ T3611] ? putname+0xfe/0x140
[ 40.197620][ T3611] __x64_sys_mount+0x27f/0x300
[ 40.202379][ T3611] ? copy_mnt_ns+0xae0/0xae0
[ 40.206963][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 40.212158][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40
[ 40.217346][ T3611] ? ptrace_notify+0xfa/0x140
[ 40.222015][ T3611] do_syscall_64+0x35/0xb0
[ 40.226423][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.232307][ T3611] RIP: 0033:0x7f94002c539a
[ 40.236711][ T3611] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.256310][ T3611] RSP: 002b:00007fff9faa50f8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 40.264711][ T3611] RAX: ffffffffffffffda RBX: 00007fff9faa5150 RCX: 00007f94002c539a
[ 40.272673][ T3611] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fff9faa5110
[ 40.280633][ T3611] RBP: 00007fff9faa5110 R08: 00007fff9faa5150 R09: 0000000000000000
[ 40.288595][ T3611] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000338
[ 40.296557][ T3611] R13: 0000000000000003 R14: 0000000000000004 R15: 000000000000000d
[ 40.304526][ T3611]
[ 40.307530][ T3611]
[ 40.309840][ T3611] Allocated by task 3184:
[ 40.314151][ T3611] kasan_save_stack+0x1e/0x40
[ 40.318825][ T3611] __kasan_kmalloc+0xa9/0xd0
[ 40.323407][ T3611] rtnl_newlink+0x46/0xa0
[ 40.327727][ T3611] rtnetlink_rcv_msg+0x43a/0xca0
[ 40.332650][ T3611] netlink_rcv_skb+0x153/0x420
[ 40.337403][ T3611] netlink_unicast+0x543/0x7f0
[ 40.342154][ T3611] netlink_sendmsg+0x917/0xe10
[ 40.346905][ T3611] sock_sendmsg+0xcf/0x120
[ 40.351307][ T3611] ____sys_sendmsg+0x6eb/0x810
[ 40.356062][ T3611] ___sys_sendmsg+0x110/0x1b0
[ 40.360728][ T3611] __sys_sendmsg+0xf3/0x1c0
[ 40.365226][ T3611] do_syscall_64+0x35/0xb0
[ 40.369629][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.375512][ T3611]
[ 40.377824][ T3611] The buggy address belongs to the object at ffff88801bbdf000
[ 40.377824][ T3611] which belongs to the cache kmalloc-2k of size 2048
[ 40.392037][ T3611] The buggy address is located 1794 bytes to the right of
[ 40.392037][ T3611] 2048-byte region [ffff88801bbdf000, ffff88801bbdf800)
[ 40.405991][ T3611]
[ 40.408299][ T3611] The buggy address belongs to the physical page:
[ 40.414692][ T3611] page:ffffea00006ef600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bbd8
[ 40.424826][ T3611] head:ffffea00006ef600 order:3 compound_mapcount:0 compound_pincount:0
[ 40.433136][ T3611] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 40.441196][ T3611] raw: 00fff00000010200 ffffea00005da800 dead000000000002 ffff888011842000
[ 40.449768][ T3611] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000
[ 40.458335][ T3611] page dumped because: kasan: bad access detected
[ 40.464727][ T3611] page_owner tracks the page as allocated
[ 40.470425][ T3611] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5567869789, free_ts 0
[ 40.490041][ T3611] get_page_from_freelist+0x109b/0x2ce0
[ 40.495583][ T3611] __alloc_pages+0x1c7/0x510
[ 40.500163][ T3611] alloc_page_interleave+0x1e/0x200
[ 40.505349][ T3611] alloc_pages+0x22f/0x270
[ 40.509754][ T3611] allocate_slab+0x27e/0x3d0
[ 40.514330][ T3611] ___slab_alloc+0x7f1/0xe10
[ 40.518907][ T3611] __slab_alloc.constprop.0+0x4d/0xa0
[ 40.524267][ T3611] kmem_cache_alloc_trace+0x323/0x3e0
[ 40.529624][ T3611] virtio_pci_probe+0x44/0x410
[ 40.534378][ T3611] local_pci_probe+0xe1/0x1a0
[ 40.539042][ T3611] pci_device_probe+0x298/0x740
[ 40.543881][ T3611] really_probe+0x249/0xb90
[ 40.548377][ T3611] __driver_probe_device+0x1df/0x4d0
[ 40.553648][ T3611] driver_probe_device+0x4c/0x1a0
[ 40.558660][ T3611] __driver_attach+0x1d0/0x550
[ 40.563413][ T3611] bus_for_each_dev+0x147/0x1d0
[ 40.568248][ T3611] page_owner free stack trace missing
[ 40.573596][ T3611]
[ 40.575901][ T3611] Memory state around the buggy address:
[ 40.581522][ T3611] ffff88801bbdfe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 40.589583][ T3611] ffff88801bbdfe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 40.597634][ T3611] >ffff88801bbdff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 40.605680][ T3611] ^
[ 40.609729][ T3611] ffff88801bbdff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 40.617777][ T3611] ffff88801bbe0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 40.625820][ T3611] ==================================================================
[ 40.635063][ T3611] Kernel panic - not syncing: panic_on_warn set ...
[ 40.641676][ T3611] CPU: 1 PID: 3611 Comm: syz-executor131 Not tainted 6.0.0-rc5-syzkaller-00097-g38eddeedbbea #0
[ 40.652175][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 40.662210][ T3611] Call Trace:
[ 40.665470][ T3611]
[ 40.668380][ T3611] dump_stack_lvl+0xcd/0x134
[ 40.672955][ T3611] panic+0x2c8/0x627
[ 40.676835][ T3611] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 40.682799][ T3611] ? preempt_schedule_common+0x59/0xc0
[ 40.688261][ T3611] ? preempt_schedule_thunk+0x16/0x18
[ 40.693619][ T3611] ? run_unpack+0x8b7/0x970
[ 40.698103][ T3611] end_report.part.0+0x3f/0x7c
[ 40.702850][ T3611] kasan_report.cold+0xa/0xf
[ 40.707516][ T3611] ? run_unpack+0x8b7/0x970
[ 40.711997][ T3611] run_unpack+0x8b7/0x970
[ 40.716305][ T3611] ? run_pack+0x1100/0x1100
[ 40.720786][ T3611] ? ntfs_bread_run+0x310/0x310
[ 40.725690][ T3611] ? kfree+0x1fb/0x580
[ 40.729740][ T3611] run_unpack_ex+0xb0/0x7c0
[ 40.734238][ T3611] ? mi_enum_attr+0x34f/0x630
[ 40.738894][ T3611] ? ni_enum_attr_ex+0x281/0x400
[ 40.743810][ T3611] ? run_unpack+0x970/0x970
[ 40.748291][ T3611] ? ni_fname_type.part.0+0x1e0/0x1e0
[ 40.753641][ T3611] ? mi_read+0x27f/0x5b0
[ 40.757865][ T3611] ntfs_iget5+0xc20/0x3280
[ 40.762265][ T3611] ? ntfs_write_end+0x800/0x800
[ 40.767098][ T3611] ntfs_loadlog_and_replay+0x124/0x5d0
[ 40.772540][ T3611] ? ntfs_write_end+0x800/0x800
[ 40.777371][ T3611] ? ntfs_bio_fill_1+0xa10/0xa10
[ 40.782288][ T3611] ? destroy_inode+0xc4/0x1b0
[ 40.786945][ T3611] ? iput.part.0+0x55d/0x810
[ 40.791522][ T3611] ntfs_fill_super+0x1eff/0x37f0
[ 40.796442][ T3611] ? put_ntfs+0x330/0x330
[ 40.800754][ T3611] ? set_blocksize+0x2e5/0x370
[ 40.805498][ T3611] get_tree_bdev+0x440/0x760
[ 40.810076][ T3611] ? put_ntfs+0x330/0x330
[ 40.814384][ T3611] vfs_get_tree+0x89/0x2f0
[ 40.818781][ T3611] path_mount+0x1326/0x1e20
[ 40.823266][ T3611] ? kmem_cache_free+0xeb/0x5b0
[ 40.828098][ T3611] ? finish_automount+0x960/0x960
[ 40.833103][ T3611] ? putname+0xfe/0x140
[ 40.837242][ T3611] __x64_sys_mount+0x27f/0x300
[ 40.842005][ T3611] ? copy_mnt_ns+0xae0/0xae0
[ 40.846574][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 40.851755][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40
[ 40.856934][ T3611] ? ptrace_notify+0xfa/0x140
[ 40.861592][ T3611] do_syscall_64+0x35/0xb0
[ 40.865989][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.871863][ T3611] RIP: 0033:0x7f94002c539a
[ 40.876259][ T3611] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.895938][ T3611] RSP: 002b:00007fff9faa50f8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 40.904336][ T3611] RAX: ffffffffffffffda RBX: 00007fff9faa5150 RCX: 00007f94002c539a
[ 40.912289][ T3611] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fff9faa5110
[ 40.920245][ T3611] RBP: 00007fff9faa5110 R08: 00007fff9faa5150 R09: 0000000000000000
[ 40.928197][ T3611] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000338
[ 40.936147][ T3611] R13: 0000000000000003 R14: 0000000000000004 R15: 000000000000000d
[ 40.944102][ T3611]
[ 40.947605][ T3611] Kernel Offset: disabled
[ 40.951921][ T3611] Rebooting in 86400 seconds..