./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor992184941 <...> Warning: Permanently added '10.128.0.213' (ECDSA) to the list of known hosts. execve("./syz-executor992184941", ["./syz-executor992184941"], 0x7ffcf7bd3d40 /* 10 vars */) = 0 brk(NULL) = 0x5555568c8000 brk(0x5555568c8c40) = 0x5555568c8c40 arch_prctl(ARCH_SET_FS, 0x5555568c8300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor992184941", 4096) = 27 brk(0x5555568e9c40) = 0x5555568e9c40 brk(0x5555568ea000) = 0x5555568ea000 mprotect(0x7f886455a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f885c081000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f885c081000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 syzkaller login: [ 53.086959][ T5300] loop0: detected capacity change from 0 to 4096 [ 53.098518][ T5300] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 write(4, NULL, 65191) = -1 EFAULT (Bad address) openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 write(6, "8", 1) = 1 [ 53.155478][ T5300] FAULT_INJECTION: forcing a failure. [ 53.155478][ T5300] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 53.168970][ T5300] CPU: 0 PID: 5300 Comm: syz-executor992 Not tainted 6.1.0-syzkaller-09941-ge2ca6ba6ba01 #0 [ 53.179081][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.189123][ T5300] Call Trace: [ 53.192399][ T5300] [ 53.195317][ T5300] dump_stack_lvl+0x1b1/0x28e [ 53.200004][ T5300] ? nf_tcp_handle_invalid+0x62e/0x62e [ 53.205450][ T5300] ? panic+0x710/0x710 [ 53.209504][ T5300] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 53.215472][ T5300] should_fail_ex+0x3aa/0x4e0 [ 53.220140][ T5300] prepare_alloc_pages+0x1d7/0x5a0 [ 53.225246][ T5300] __alloc_pages+0x161/0x560 [ 53.229825][ T5300] ? zone_statistics+0x160/0x160 [ 53.234753][ T5300] ? alloc_pages+0x520/0x7b0 [ 53.239334][ T5300] folio_alloc+0x1a/0x50 [ 53.243563][ T5300] filemap_alloc_folio+0xca/0x2c0 [ 53.248574][ T5300] ? filemap_add_folio+0x5c0/0x5c0 [ 53.253673][ T5300] ? xas_load+0x135/0x150 [ 53.257992][ T5300] __filemap_get_folio+0x892/0x1250 [ 53.263180][ T5300] ? page_cache_prev_miss+0x4e0/0x4e0 [ 53.268536][ T5300] ? rcu_read_lock_sched_held+0x87/0x110 [ 53.274162][ T5300] ? __kmem_cache_alloc_node+0x21a/0x340 [ 53.279790][ T5300] ? ni_readpage_cmpr+0x211/0xa90 [ 53.284816][ T5300] pagecache_get_page+0x28/0x250 [ 53.289754][ T5300] ni_readpage_cmpr+0x327/0xa90 [ 53.294626][ T5300] ntfs_read_folio+0x175/0x1e0 [ 53.299432][ T5300] filemap_read_folio+0x187/0x7d0 [ 53.304492][ T5300] ? folio_alloc+0x47/0x50 [ 53.308923][ T5300] ? ntfs_writepage+0x110/0x110 [ 53.313776][ T5300] ? maybe_unlock_mmap_for_io+0x130/0x130 [ 53.319498][ T5300] ? __down_read_common+0x156/0x2a0 [ 53.324697][ T5300] filemap_get_pages+0xadb/0x10d0 [ 53.329746][ T5300] ? filemap_read+0xea0/0xea0 [ 53.334427][ T5300] ? __might_sleep+0xc0/0xc0 [ 53.339033][ T5300] filemap_read+0x3cf/0xea0 [ 53.343552][ T5300] ? rcu_read_lock_sched_held+0x87/0x110 [ 53.349181][ T5300] ? find_get_pages_range_tag+0x780/0x780 [ 53.354908][ T5300] ? apparmor_file_permission+0x2da/0x310 [ 53.360713][ T5300] ? generic_file_read_iter+0x8f/0x540 [ 53.366175][ T5300] ? ntfs_file_read_iter+0x1a2/0x230 [ 53.371463][ T5300] vfs_read+0x7ac/0xbf0 [ 53.375622][ T5300] ? kernel_read+0x1f0/0x1f0 [ 53.380215][ T5300] ? ptrace_stop+0x74d/0x970 [ 53.384821][ T5300] ? _raw_spin_unlock_irq+0x2a/0x40 [ 53.390368][ T5300] ? __fdget+0x14c/0x210 [ 53.394621][ T5300] __x64_sys_pread64+0x1af/0x240 [ 53.399559][ T5300] ? ksys_pread64+0x1d0/0x1d0 [ 53.404255][ T5300] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 53.410239][ T5300] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 53.416217][ T5300] do_syscall_64+0x3d/0xb0 [ 53.420639][ T5300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.426534][ T5300] RIP: 0033:0x7f88644cdc89 [ 53.430971][ T5300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.450590][ T5300] RSP: 002b:00007ffcf4b86c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 53.459010][ T5300] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f88644cdc89 [ 53.466976][ T5300] RDX: 0000000000000040 RSI: 00000000200001c0 RDI: 0000000000000005 [ 53.474941][ T5300] RBP: 00007ffcf4b86c60 R08: 0000000000000001 R09: 00007f8864480038 [ 53.482908][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 53.490873][ T5300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.498859][ T5300] [ 53.502601][ T5300] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 53.514314][ T5300] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 53.522705][ T5300] CPU: 0 PID: 5300 Comm: syz-executor992 Not tainted 6.1.0-syzkaller-09941-ge2ca6ba6ba01 #0 [ 53.532746][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.542778][ T5300] RIP: 0010:unlock_page+0x24/0x130 [ 53.547889][ T5300] Code: 00 00 00 00 00 90 41 57 41 56 41 54 53 49 89 fe 49 bf 00 00 00 00 00 fc ff df e8 97 da ce ff 49 8d 5e 08 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 2d 74 24 00 48 8b 1b 48 89 de 48 [ 53.567473][ T5300] RSP: 0018:ffffc90003c1f708 EFLAGS: 00010202 [ 53.573569][ T5300] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888026ec8000 [ 53.581584][ T5300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.589540][ T5300] RBP: 0000000000000001 R08: ffffffff82ccf6fe R09: fffff9400039dc59 [ 53.597489][ T5300] R10: fffff9400039dc59 R11: 1ffffd400039dc58 R12: ffff88802b93a788 [ 53.605439][ T5300] R13: 00000000fffffff4 R14: 0000000000000000 R15: dffffc0000000000 [ 53.613394][ T5300] FS: 00005555568c8300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.622398][ T5300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.628970][ T5300] CR2: 0000000000000000 CR3: 000000002a04e000 CR4: 00000000003506f0 [ 53.636930][ T5300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.644890][ T5300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.652848][ T5300] Call Trace: [ 53.656116][ T5300] [ 53.659045][ T5300] ni_readpage_cmpr+0x57d/0xa90 [ 53.663892][ T5300] ntfs_read_folio+0x175/0x1e0 [ 53.668734][ T5300] filemap_read_folio+0x187/0x7d0 [ 53.673750][ T5300] ? folio_alloc+0x47/0x50 [ 53.678167][ T5300] ? ntfs_writepage+0x110/0x110 [ 53.683011][ T5300] ? maybe_unlock_mmap_for_io+0x130/0x130 [ 53.688901][ T5300] ? __down_read_common+0x156/0x2a0 [ 53.694088][ T5300] filemap_get_pages+0xadb/0x10d0 [ 53.699114][ T5300] ? filemap_read+0xea0/0xea0 [ 53.703784][ T5300] ? __might_sleep+0xc0/0xc0 [ 53.708371][ T5300] filemap_read+0x3cf/0xea0 [ 53.712963][ T5300] ? rcu_read_lock_sched_held+0x87/0x110 [ 53.718676][ T5300] ? find_get_pages_range_tag+0x780/0x780 [ 53.724392][ T5300] ? apparmor_file_permission+0x2da/0x310 [ 53.730100][ T5300] ? generic_file_read_iter+0x8f/0x540 [ 53.735550][ T5300] ? ntfs_file_read_iter+0x1a2/0x230 [ 53.740823][ T5300] vfs_read+0x7ac/0xbf0 [ 53.744970][ T5300] ? kernel_read+0x1f0/0x1f0 [ 53.749548][ T5300] ? ptrace_stop+0x74d/0x970 [ 53.754131][ T5300] ? _raw_spin_unlock_irq+0x2a/0x40 [ 53.759323][ T5300] ? __fdget+0x14c/0x210 [ 53.763556][ T5300] __x64_sys_pread64+0x1af/0x240 [ 53.768486][ T5300] ? ksys_pread64+0x1d0/0x1d0 [ 53.773160][ T5300] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 53.779138][ T5300] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 53.785109][ T5300] do_syscall_64+0x3d/0xb0 [ 53.789518][ T5300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.795403][ T5300] RIP: 0033:0x7f88644cdc89 [ 53.799805][ T5300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.819396][ T5300] RSP: 002b:00007ffcf4b86c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 53.827797][ T5300] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f88644cdc89 [ 53.835775][ T5300] RDX: 0000000000000040 RSI: 00000000200001c0 RDI: 0000000000000005 [ 53.843730][ T5300] RBP: 00007ffcf4b86c60 R08: 0000000000000001 R09: 00007f8864480038 [ 53.851697][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 53.859662][ T5300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.867625][ T5300] [ 53.870633][ T5300] Modules linked in: [ 53.874884][ T5300] ---[ end trace 0000000000000000 ]--- [ 53.880576][ T5300] RIP: 0010:unlock_page+0x24/0x130 [ 53.885705][ T5300] Code: 00 00 00 00 00 90 41 57 41 56 41 54 53 49 89 fe 49 bf 00 00 00 00 00 fc ff df e8 97 da ce ff 49 8d 5e 08 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 2d 74 24 00 48 8b 1b 48 89 de 48 [ 53.905535][ T5300] RSP: 0018:ffffc90003c1f708 EFLAGS: 00010202 [ 53.911761][ T5300] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888026ec8000 [ 53.919760][ T5300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.927746][ T5300] RBP: 0000000000000001 R08: ffffffff82ccf6fe R09: fffff9400039dc59 [ 53.935717][ T5300] R10: fffff9400039dc59 R11: 1ffffd400039dc58 R12: ffff88802b93a788 [ 53.943763][ T5300] R13: 00000000fffffff4 R14: 0000000000000000 R15: dffffc0000000000 [ 53.951796][ T5300] FS: 00005555568c8300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.960754][ T5300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.967382][ T5300] CR2: 0000000000000000 CR3: 000000002a04e000 CR4: 00000000003506f0 [ 53.975343][ T5300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.983396][ T5300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.991421][ T5300] Kernel panic - not syncing: Fatal exception [ 53.997629][ T5300] Kernel Offset: disabled [ 54.001954][ T5300] Rebooting in 86400 seconds..