./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2023107140 <...> Warning: Permanently added '10.128.0.79' (ECDSA) to the list of known hosts. execve("./syz-executor2023107140", ["./syz-executor2023107140"], 0x7ffe12aa6e10 /* 10 vars */) = 0 brk(NULL) = 0x555556a0b000 brk(0x555556a0bc40) = 0x555556a0bc40 arch_prctl(ARCH_SET_FS, 0x555556a0b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2023107140", 4096) = 28 brk(0x555556a2cc40) = 0x555556a2cc40 brk(0x555556a2d000) = 0x555556a2d000 mprotect(0x7ff2c303f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2bab66000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\xff\x03\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x8f\x24\x2d\x5f\x49\x6d\x50\x0b\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7ff2bab66000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 54.600766][ T5067] loop0: detected capacity change from 0 to 4096 [ 54.612710][ T5067] general protection fault, probably for non-canonical address 0xdffffc0000000047: 0000 [#1] PREEMPT SMP KASAN [ 54.624451][ T5067] KASAN: null-ptr-deref in range [0x0000000000000238-0x000000000000023f] [ 54.632858][ T5067] CPU: 1 PID: 5067 Comm: syz-executor202 Not tainted 6.1.0-syzkaller-10971-g041fae9c105a #0 [ 54.642904][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 54.652938][ T5067] RIP: 0010:ni_find_attr+0xac/0x630 [ 54.658153][ T5067] Code: 04 25 28 00 00 00 48 89 44 24 78 31 c0 e8 5c 5d d1 fe 48 8d bd 38 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c1 04 00 00 48 8b 85 38 02 00 00 31 ff 48 89 c6 [ 54.677744][ T5067] RSP: 0018:ffffc90003bff6c8 EFLAGS: 00010216 [ 54.683798][ T5067] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.691753][ T5067] RDX: 0000000000000047 RSI: ffffffff82af5404 RDI: 0000000000000238 [ 54.699710][ T5067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.707667][ T5067] R10: 000000000000000a R11: 0000000000000000 R12: 0000000000000000 [ 54.715621][ T5067] R13: 1ffff9200077fedd R14: 0000000000000080 R15: 0000000000000000 [ 54.723583][ T5067] FS: 0000555556a0b300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 54.732500][ T5067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.739071][ T5067] CR2: 00000000005d84c8 CR3: 000000007da98000 CR4: 0000000000350ee0 [ 54.747030][ T5067] Call Trace: [ 54.750298][ T5067] [ 54.753214][ T5067] ? ni_load_mi+0x100/0x100 [ 54.757725][ T5067] attr_load_runs_vcn+0x9a/0x2b0 [ 54.762655][ T5067] ? attr_data_write_resident+0x380/0x380 [ 54.768370][ T5067] mi_read+0x4e3/0x5b0 [ 54.772432][ T5067] mi_get+0x94/0x2a0 [ 54.776320][ T5067] ni_load_mi_ex+0x162/0x470 [ 54.780904][ T5067] ? ni_std5+0x180/0x180 [ 54.785139][ T5067] ? ntfs_bread_run+0x320/0x320 [ 54.789983][ T5067] ni_enum_attr_ex+0x196/0x400 [ 54.794742][ T5067] ? rcu_read_lock_sched_held+0x3e/0x70 [ 54.800286][ T5067] ? ni_fname_type.part.0+0x1e0/0x1e0 [ 54.805657][ T5067] ? ntfs_load_attr_list+0x11b/0x550 [ 54.810944][ T5067] ntfs_iget5+0xac0/0x3280 [ 54.815351][ T5067] ? indx_read+0x452/0x810 [ 54.819764][ T5067] ? ntfs_write_end+0x800/0x800 [ 54.824604][ T5067] ? ni_load_mi+0x100/0x100 [ 54.829104][ T5067] ? utf16s_to_utf8s+0x313/0x390 [ 54.834030][ T5067] ntfs_fill_super+0x1d9b/0x3860 [ 54.838967][ T5067] ? put_ntfs+0x330/0x330 [ 54.843290][ T5067] ? set_blocksize+0x2c9/0x370 [ 54.848056][ T5067] get_tree_bdev+0x444/0x760 [ 54.852637][ T5067] ? put_ntfs+0x330/0x330 [ 54.856960][ T5067] vfs_get_tree+0x8d/0x2f0 [ 54.861365][ T5067] path_mount+0x132a/0x1e20 [ 54.865863][ T5067] ? kmem_cache_free+0xee/0x5c0 [ 54.870718][ T5067] ? finish_automount+0x960/0x960 [ 54.875734][ T5067] ? putname+0x102/0x140 [ 54.880056][ T5067] __x64_sys_mount+0x283/0x300 [ 54.884811][ T5067] ? copy_mnt_ns+0xb30/0xb30 [ 54.889392][ T5067] ? lockdep_hardirqs_on+0x7d/0x100 [ 54.894583][ T5067] ? _raw_spin_unlock_irq+0x2e/0x50 [ 54.899776][ T5067] ? ptrace_notify+0xfe/0x140 [ 54.904440][ T5067] do_syscall_64+0x39/0xb0 [ 54.908846][ T5067] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.914731][ T5067] RIP: 0033:0x7ff2c2fb3aaa [ 54.919132][ T5067] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 54.938900][ T5067] RSP: 002b:00007ffcde61e258 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 54.947319][ T5067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff2c2fb3aaa [ 54.955361][ T5067] RDX: 0000000020000000 RSI: 000000002001f780 RDI: 00007ffcde61e270 [ 54.963316][ T5067] RBP: 00007ffcde61e270 R08: 00007ffcde61e2b0 R09: 000000000001f731 [ 54.971272][ T5067] R10: 0000000000000482 R11: 0000000000000286 R12: 0000000000000004 [ 54.979230][ T5067] R13: 0000555556a0b2c0 R14: 0000000000000482 R15: 00007ffcde61e2b0 [ 54.987199][ T5067] [ 54.990206][ T5067] Modules linked in: [ 54.994298][ T5067] ---[ end trace 0000000000000000 ]--- [ 54.999863][ T5067] RIP: 0010:ni_find_attr+0xac/0x630 [ 55.005097][ T5067] Code: 04 25 28 00 00 00 48 89 44 24 78 31 c0 e8 5c 5d d1 fe 48 8d bd 38 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c1 04 00 00 48 8b 85 38 02 00 00 31 ff 48 89 c6 [ 55.024746][ T5067] RSP: 0018:ffffc90003bff6c8 EFLAGS: 00010216 [ 55.030836][ T5067] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 55.038835][ T5067] RDX: 0000000000000047 RSI: ffffffff82af5404 RDI: 0000000000000238 [ 55.046851][ T5067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.054807][ T5067] R10: 000000000000000a R11: 0000000000000000 R12: 0000000000000000 [ 55.062795][ T5067] R13: 1ffff9200077fedd R14: 0000000000000080 R15: 0000000000000000 [ 55.070784][ T5067] FS: 0000555556a0b300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 55.079737][ T5067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.086373][ T5067] CR2: 00007ff2c3019a18 CR3: 000000007da98000 CR4: 0000000000350ef0 [ 55.094327][ T5067] Kernel panic - not syncing: Fatal exception [ 55.101203][ T5067] Kernel Offset: disabled [ 55.105511][ T5067] Rebooting in 86400 seconds..