./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4087986430 <...> Warning: Permanently added '10.128.1.45' (ECDSA) to the list of known hosts. execve("./syz-executor4087986430", ["./syz-executor4087986430"], 0x7ffcbb2f1810 /* 10 vars */) = 0 brk(NULL) = 0x555555705000 brk(0x555555705c40) = 0x555555705c40 arch_prctl(ARCH_SET_FS, 0x555555705300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4087986430", 4096) = 28 brk(0x555555726c40) = 0x555555726c40 brk(0x555555727000) = 0x555555727000 mprotect(0x7f79c4f28000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f79bca50000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x40\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\xf4\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f79bca50000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 55.426557][ T4991] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4991 'syz-executor408' [ 55.460483][ T4991] loop0: detected capacity change from 0 to 4096 [ 55.471026][ T4991] ------------[ cut here ]------------ [ 55.476539][ T4991] kernel BUG at fs/ntfs/aops.c:186! [ 55.481753][ T4991] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 55.487809][ T4991] CPU: 0 PID: 4991 Comm: syz-executor408 Not tainted 6.4.0-rc4-syzkaller-00078-g929ed21dfdb6 #0 [ 55.498191][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 55.508229][ T4991] RIP: 0010:ntfs_read_folio+0x27d2/0x29f0 [ 55.513948][ T4991] Code: fa 48 83 7c 24 48 00 0f 84 eb 00 00 00 e8 c6 b8 ca fe e9 11 02 00 00 e8 bc b8 ca fe 0f 0b e8 b5 b8 ca fe 0f 0b e8 ae b8 ca fe <0f> 0b 48 8b 3c 24 be 08 00 00 00 e8 ce 8e 22 ff 48 b8 00 00 00 00 [ 55.533536][ T4991] RSP: 0018:ffffc900039cf5e0 EFLAGS: 00010293 [ 55.539580][ T4991] RAX: ffffffff82c0c472 RBX: 0000000000000000 RCX: ffff88807e235940 [ 55.547532][ T4991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.555484][ T4991] RBP: ffffc900039cf7b0 R08: ffffffff82c0a9f1 R09: ffffed100f0d100b [ 55.563439][ T4991] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea0001cc4c40 [ 55.571384][ T4991] R13: 1ffffd4000398988 R14: ffff888078688320 R15: ffff888078688088 [ 55.579333][ T4991] FS: 0000555555705300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 55.588240][ T4991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.594800][ T4991] CR2: 00000000005fdeb8 CR3: 0000000021f6e000 CR4: 00000000003506f0 [ 55.602750][ T4991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.610695][ T4991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.618643][ T4991] Call Trace: [ 55.621904][ T4991] [ 55.624815][ T4991] ? __die_body+0x5e/0xa0 [ 55.629122][ T4991] ? die+0x87/0xb0 [ 55.632828][ T4991] ? do_trap+0x11e/0x350 [ 55.637049][ T4991] ? ntfs_read_folio+0x27d2/0x29f0 [ 55.642138][ T4991] ? ntfs_read_folio+0x27d2/0x29f0 [ 55.647233][ T4991] ? do_error_trap+0x141/0x1f0 [ 55.651977][ T4991] ? ntfs_read_folio+0x27d2/0x29f0 [ 55.657064][ T4991] ? do_int3+0x30/0x30 [ 55.661110][ T4991] ? handle_invalid_op+0x2c/0x40 [ 55.666028][ T4991] ? ntfs_read_folio+0x27d2/0x29f0 [ 55.671116][ T4991] ? exc_invalid_op+0x33/0x50 [ 55.675767][ T4991] ? asm_exc_invalid_op+0x1a/0x20 [ 55.680770][ T4991] ? ntfs_read_folio+0xd51/0x29f0 [ 55.685770][ T4991] ? ntfs_read_folio+0x27d2/0x29f0 [ 55.690858][ T4991] ? ntfs_read_folio+0x27d2/0x29f0 [ 55.695950][ T4991] ? __lock_acquire+0x2070/0x2070 [ 55.700953][ T4991] ? ntfs_writepage+0x1ae0/0x1ae0 [ 55.705959][ T4991] ? folio_batch_add_and_move+0x16a/0x2c0 [ 55.711653][ T4991] ? folio_add_lru+0x6f0/0x6f0 [ 55.716402][ T4991] ? folio_add_lru+0x353/0x6f0 [ 55.721139][ T4991] filemap_read_folio+0x19d/0x7a0 [ 55.726143][ T4991] ? filemap_add_folio+0x580/0x580 [ 55.731230][ T4991] ? ntfs_writepage+0x1ae0/0x1ae0 [ 55.736235][ T4991] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 55.741932][ T4991] ? __filemap_get_folio+0x777/0xa00 [ 55.747209][ T4991] do_read_cache_folio+0x134/0x820 [ 55.752309][ T4991] ? ntfs_writepage+0x1ae0/0x1ae0 [ 55.757318][ T4991] do_read_cache_page+0x32/0x220 [ 55.762241][ T4991] map_mft_record+0x1cd/0x630 [ 55.766910][ T4991] ntfs_read_locked_inode+0x199/0x49c0 [ 55.772356][ T4991] ? __asan_memset+0x23/0x40 [ 55.776934][ T4991] ? ntfs_attr_reinit_search_ctx+0x4f/0x2e0 [ 55.782810][ T4991] ntfs_read_inode_mount+0xda6/0x2660 [ 55.788290][ T4991] ntfs_fill_super+0x1883/0x2bd0 [ 55.793222][ T4991] mount_bdev+0x2d0/0x3f0 [ 55.797537][ T4991] ? ntfs_mount+0x40/0x40 [ 55.801847][ T4991] legacy_get_tree+0xef/0x190 [ 55.806511][ T4991] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 55.812048][ T4991] vfs_get_tree+0x8c/0x270 [ 55.816468][ T4991] do_new_mount+0x28f/0xae0 [ 55.820976][ T4991] ? path_mount+0x5f2/0xf80 [ 55.825474][ T4991] ? do_move_mount_old+0x170/0x170 [ 55.830585][ T4991] ? user_path_at_empty+0x12f/0x180 [ 55.835769][ T4991] __se_sys_mount+0x2d9/0x3c0 [ 55.840428][ T4991] ? __x64_sys_mount+0xc0/0xc0 [ 55.845174][ T4991] ? syscall_enter_from_user_mode+0x32/0x230 [ 55.851136][ T4991] ? __x64_sys_mount+0x20/0xc0 [ 55.855882][ T4991] do_syscall_64+0x41/0xc0 [ 55.860279][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.866153][ T4991] RIP: 0033:0x7f79c4e9dafa [ 55.870548][ T4991] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.890140][ T4991] RSP: 002b:00007ffecff8e3f8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 55.898537][ T4991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f79c4e9dafa [ 55.906492][ T4991] RDX: 000000002001f600 RSI: 000000002001f640 RDI: 00007ffecff8e410 [ 55.914440][ T4991] RBP: 00007ffecff8e410 R08: 00007ffecff8e450 R09: 000000000001f5cf [ 55.922389][ T4991] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 55.930336][ T4991] R13: 00005555557052c0 R14: 0000000000000000 R15: 00007ffecff8e450 [ 55.938300][ T4991] [ 55.941314][ T4991] Modules linked in: [ 55.945363][ T4991] ---[ end trace 0000000000000000 ]--- [ 55.950821][ T4991] RIP: 0010:ntfs_read_folio+0x27d2/0x29f0 [ 55.956633][ T4991] Code: fa 48 83 7c 24 48 00 0f 84 eb 00 00 00 e8 c6 b8 ca fe e9 11 02 00 00 e8 bc b8 ca fe 0f 0b e8 b5 b8 ca fe 0f 0b e8 ae b8 ca fe <0f> 0b 48 8b 3c 24 be 08 00 00 00 e8 ce 8e 22 ff 48 b8 00 00 00 00 [ 55.976270][ T4991] RSP: 0018:ffffc900039cf5e0 EFLAGS: 00010293 [ 55.982359][ T4991] RAX: ffffffff82c0c472 RBX: 0000000000000000 RCX: ffff88807e235940 [ 55.990321][ T4991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.998313][ T4991] RBP: ffffc900039cf7b0 R08: ffffffff82c0a9f1 R09: ffffed100f0d100b [ 56.006743][ T4991] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea0001cc4c40 [ 56.014727][ T4991] R13: 1ffffd4000398988 R14: ffff888078688320 R15: ffff888078688088 [ 56.022713][ T4991] FS: 0000555555705300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.031618][ T4991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.038217][ T4991] CR2: 00000000005fdeb8 CR3: 0000000021f6e000 CR4: 00000000003506f0 [ 56.046200][ T4991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.054186][ T4991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.062173][ T4991] Kernel panic - not syncing: Fatal exception [ 56.068380][ T4991] Kernel Offset: disabled [ 56.072689][ T4991] Rebooting in 86400 seconds..