[ OK ] Found device /dev/ttyS0. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.96' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.952030] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 26.960733] ------------[ cut here ]------------ [ 26.965480] kernel BUG at fs/ntfs/aops.c:207! [ 26.970024] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 26.975472] Modules linked in: [ 26.978643] CPU: 0 PID: 7988 Comm: syz-executor193 Not tainted 4.14.279-syzkaller #0 [ 26.986498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.995837] task: ffff888096dd45c0 task.stack: ffff888095e78000 [ 27.001882] RIP: 0010:ntfs_readpage+0x14c7/0x1a70 [ 27.006695] RSP: 0018:ffff888095e7f778 EFLAGS: 00010297 [ 27.012035] RAX: ffff888096dd45c0 RBX: dffffc0000000000 RCX: 0000000000000000 [ 27.019283] RDX: 0000000000000000 RSI: ffffea0002380340 RDI: ffff88808db6e790 [ 27.026616] RBP: ffff88808db6e788 R08: 0000000000000000 R09: ffff88808db6ec18 [ 27.033864] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 27.041126] R13: ffff88808db6e740 R14: ffff88808db6ea08 R15: ffffea0002380340 [ 27.048368] FS: 0000555556b04300(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 27.056563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.062417] CR2: 0000560bc4de1bb8 CR3: 00000000b46dd000 CR4: 00000000003406f0 [ 27.069662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.076901] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.084140] Call Trace: [ 27.086704] ? __add_to_page_cache_locked+0x2ea/0x840 [ 27.091868] ? check_preemption_disabled+0x35/0x240 [ 27.096861] ? __lru_cache_add+0x178/0x250 [ 27.101069] ? ntfs_end_buffer_async_read+0x1040/0x1040 [ 27.106406] ? add_to_page_cache_lru+0x136/0x2b0 [ 27.111133] ? add_to_page_cache_locked+0x40/0x40 [ 27.115949] ? alloc_pages_current+0x15d/0x260 [ 27.120588] do_read_cache_page+0x38e/0xc10 [ 27.124882] ? ntfs_end_buffer_async_read+0x1040/0x1040 [ 27.130216] ? ntfs_attr_lookup+0xeca/0x1f30 [ 27.134593] map_mft_record+0x1ca/0xbe0 [ 27.138539] ntfs_read_locked_inode+0x1bf/0x51b0 [ 27.143268] ? ntfs_mapping_pairs_decompress+0x755/0xf60 [ 27.148704] ? kmem_cache_alloc+0x2f8/0x3c0 [ 27.152998] ntfs_read_inode_mount+0xafb/0x2060 [ 27.157640] ntfs_fill_super+0x9a6/0x7170 [ 27.161760] ? vsnprintf+0x260/0x1340 [ 27.165530] ? pointer+0x9e0/0x9e0 [ 27.169128] ? lock_downgrade+0x740/0x740 [ 27.173245] ? ntfs_big_inode_init_once+0x20/0x20 [ 27.178064] ? snprintf+0xa5/0xd0 [ 27.181486] ? vsprintf+0x30/0x30 [ 27.184912] ? ns_test_super+0x50/0x50 [ 27.188771] ? set_blocksize+0x125/0x380 [ 27.192801] mount_bdev+0x2b3/0x360 [ 27.196398] ? ntfs_big_inode_init_once+0x20/0x20 [ 27.201211] mount_fs+0x92/0x2a0 [ 27.204550] vfs_kern_mount.part.0+0x5b/0x470 [ 27.209017] do_mount+0xe65/0x2a30 [ 27.212563] ? retint_kernel+0x2d/0x2d [ 27.216420] ? copy_mount_string+0x40/0x40 [ 27.220634] ? memset+0x20/0x40 [ 27.223909] ? copy_mount_options+0x1fa/0x2f0 [ 27.228382] ? copy_mnt_ns+0xa30/0xa30 [ 27.232247] SyS_mount+0xa8/0x120 [ 27.235677] ? copy_mnt_ns+0xa30/0xa30 [ 27.239547] do_syscall_64+0x1d5/0x640 [ 27.243417] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 27.248582] RIP: 0033:0x7f549092633a [ 27.252272] RSP: 002b:00007fffe3bc84d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 27.259954] RAX: ffffffffffffffda RBX: 00007fffe3bc8530 RCX: 00007f549092633a [ 27.267197] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffe3bc84f0 [ 27.274440] RBP: 00007fffe3bc84f0 R08: 00007fffe3bc8530 R09: 0000000000000000 [ 27.281689] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000200002c0 [ 27.288932] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000008 [ 27.296186] Code: 89 04 00 00 49 83 be 88 fd ff ff 00 0f 85 3e f5 ff ff e8 9d 5f 45 ff 49 8b 86 80 fd ff ff a8 08 0f 85 2a f5 ff ff e8 89 5f 45 ff <0f> 0b e8 82 5f 45 ff 48 8b 84 24 88 00 00 00 48 8d b8 c0 fd ff [ 27.315243] RIP: ntfs_readpage+0x14c7/0x1a70 RSP: ffff888095e7f778 [ 27.322377] ---[ end trace 897a1f5114fd005e ]--- [ 27.327131] Kernel panic - not syncing: Fatal exception [ 27.332680] Kernel Offset: disabled [ 27.336284] Rebooting in 86400 seconds..