[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty4. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.35' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.276814] audit: type=1400 audit(1600638715.720:8): avc: denied { execmem } for pid=6363 comm="syz-executor949" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 33.287156] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 33.307180] ------------[ cut here ]------------ [ 33.311938] kernel BUG at fs/ntfs/aops.c:207! [ 33.317923] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 33.323271] Modules linked in: [ 33.326440] CPU: 1 PID: 6363 Comm: syz-executor949 Not tainted 4.14.198-syzkaller #0 [ 33.334301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.343643] task: ffff888097608340 task.stack: ffff888098040000 [ 33.349679] RIP: 0010:ntfs_readpage+0x14c7/0x1a70 [ 33.354492] RSP: 0018:ffff888098047780 EFLAGS: 00010297 [ 33.359944] RAX: ffff888097608340 RBX: dffffc0000000000 RCX: 0000000000000000 [ 33.367394] RDX: 0000000000000000 RSI: ffffea0002047b40 RDI: ffff88808160a790 [ 33.374662] RBP: ffff88808160a788 R08: 0000000000000000 R09: ffff88808160ac18 [ 33.381920] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 33.389166] R13: ffff88808160a740 R14: ffff88808160aa08 R15: ffffea0002047b40 [ 33.396417] FS: 0000000002302880(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 33.404623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.410481] CR2: 000056523356dda8 CR3: 00000000a8379000 CR4: 00000000001406e0 [ 33.417744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.424991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.432235] Call Trace: [ 33.434808] ? __add_to_page_cache_locked+0x2ea/0x840 [ 33.440503] ? check_preemption_disabled+0x35/0x240 [ 33.445496] ? __lru_cache_add+0x178/0x250 [ 33.449707] ? ntfs_end_buffer_async_read+0x1040/0x1040 [ 33.455056] ? add_to_page_cache_lru+0x136/0x2b0 [ 33.459796] ? add_to_page_cache_locked+0x40/0x40 [ 33.464634] ? alloc_pages_current+0x15d/0x260 [ 33.469278] do_read_cache_page+0x38e/0xbb0 [ 33.473580] ? ntfs_end_buffer_async_read+0x1040/0x1040 [ 33.478919] ? ntfs_attr_lookup+0xed3/0x1f30 [ 33.483314] map_mft_record+0x1ca/0xbe0 [ 33.487265] ? _raw_spin_unlock+0x29/0x40 [ 33.491397] ntfs_read_locked_inode+0x1bf/0x5000 [ 33.496153] ? kmem_cache_alloc+0x2f8/0x3c0 [ 33.500447] ntfs_read_inode_mount+0xa89/0x1fb0 [ 33.505092] ntfs_fill_super+0x9a6/0x7170 [ 33.509215] ? vsnprintf+0x260/0x1340 [ 33.512986] ? pointer+0x9e0/0x9e0 [ 33.516500] ? lock_downgrade+0x740/0x740 [ 33.520622] ? ntfs_big_inode_init_once+0x20/0x20 [ 33.525438] ? snprintf+0xa5/0xd0 [ 33.528872] ? vsprintf+0x30/0x30 [ 33.532312] ? ns_test_super+0x50/0x50 [ 33.536188] ? set_blocksize+0x125/0x380 [ 33.540224] mount_bdev+0x2b3/0x360 [ 33.543825] ? ntfs_big_inode_init_once+0x20/0x20 [ 33.548655] mount_fs+0x92/0x2a0 [ 33.552001] vfs_kern_mount.part.0+0x5b/0x470 [ 33.556468] do_mount+0xe53/0x2a00 [ 33.560007] ? copy_mount_string+0x40/0x40 [ 33.564217] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 33.569207] ? copy_mnt_ns+0xa30/0xa30 [ 33.573074] ? copy_mount_options+0x1fa/0x2f0 [ 33.577540] ? copy_mnt_ns+0xa30/0xa30 [ 33.581418] SyS_mount+0xa8/0x120 [ 33.584866] ? copy_mnt_ns+0xa30/0xa30 [ 33.588741] do_syscall_64+0x1d5/0x640 [ 33.592609] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 33.597782] RIP: 0033:0x446e9a [ 33.600945] RSP: 002b:00007ffe68ccaa18 EFLAGS: 00000287 ORIG_RAX: 00000000000000a5 [ 33.608625] RAX: ffffffffffffffda RBX: 00007ffe68ccaa70 RCX: 0000000000446e9a [ 33.615867] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe68ccaa30 [ 33.623111] RBP: 00007ffe68ccaa30 R08: 00007ffe68ccaa70 R09: 00007ffe00000015 [ 33.630376] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000008 [ 33.637629] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 33.644875] Code: 89 04 00 00 49 83 be 88 fd ff ff 00 0f 85 3e f5 ff ff e8 5d 59 4c ff 49 8b 86 80 fd ff ff a8 08 0f 85 2a f5 ff ff e8 49 59 4c ff <0f> 0b e8 42 59 4c ff 48 8b 84 24 88 00 00 00 48 8d b8 c0 fd ff [ 33.663946] RIP: ntfs_readpage+0x14c7/0x1a70 RSP: ffff888098047780 [ 33.670796] ---[ end trace 0c9d4d83f11e2c2d ]--- [ 33.675565] Kernel panic - not syncing: Fatal exception [ 33.681920] Kernel Offset: disabled [ 33.685547] Rebooting in 86400 seconds..