./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor326813111 <...> DUID 00:04:7c:7c:42:18:3f:30:8d:b4:e2:57:c6:a5:0a:a4:65:8b forked to background, child pid 3209 [ 29.959285][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.969236][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. execve("./syz-executor326813111", ["./syz-executor326813111"], 0x7ffc756208d0 /* 10 vars */) = 0 brk(NULL) = 0x555555a15000 brk(0x555555a15c40) = 0x555555a15c40 arch_prctl(ARCH_SET_FS, 0x555555a15300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor326813111", 4096) = 27 brk(0x555555a36c40) = 0x555555a36c40 brk(0x555555a37000) = 0x555555a37000 mprotect(0x7f1f893e8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1f80e00000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\xff\x03\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x8f\x24\x2d\x5f\x49\x6d\x50\x0b\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f1f80e00000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 53.336873][ T3631] loop0: detected capacity change from 0 to 4096 [ 53.350202][ T3631] general protection fault, probably for non-canonical address 0xdffffc0000000047: 0000 [#1] PREEMPT SMP KASAN [ 53.361941][ T3631] KASAN: null-ptr-deref in range [0x0000000000000238-0x000000000000023f] [ 53.370422][ T3631] CPU: 1 PID: 3631 Comm: syz-executor326 Not tainted 6.1.0-rc7-syzkaller #0 [ 53.379078][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.389123][ T3631] RIP: 0010:ni_find_attr+0x98/0x8c0 [ 53.394337][ T3631] Code: b8 f1 f1 f1 f1 00 f3 f3 f3 48 89 54 24 38 4a 89 04 3a e8 0b 81 c1 fe 48 89 5c 24 28 48 81 c3 38 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 a9 9a 15 ff 4c 8b 33 31 ff 4c 89 [ 53.414198][ T3631] RSP: 0018:ffffc90003c2f500 EFLAGS: 00010206 [ 53.420264][ T3631] RAX: 0000000000000047 RBX: 0000000000000238 RCX: ffff88807e059d40 [ 53.429010][ T3631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.436975][ T3631] RBP: ffffc90003c2f5e0 R08: 0000000000000000 R09: 0000000000000000 [ 53.444940][ T3631] R10: 0000000000000003 R11: ffff88807e059d40 R12: 0000000000000000 [ 53.452906][ T3631] R13: 0000000000000000 R14: 0000000000010001 R15: dffffc0000000000 [ 53.460870][ T3631] FS: 0000555555a15300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 53.469793][ T3631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.476370][ T3631] CR2: 00000000005d84c8 CR3: 000000007eb87000 CR4: 00000000003506e0 [ 53.484335][ T3631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.492299][ T3631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.500262][ T3631] Call Trace: [ 53.503532][ T3631] [ 53.506461][ T3631] ? ni_load_mi+0x110/0x110 [ 53.510961][ T3631] ? ntfs_bread_run+0x3b0/0x3b0 [ 53.515811][ T3631] ? fs_reclaim_acquire+0xaa/0x120 [ 53.520921][ T3631] attr_load_runs_vcn+0xc2/0x330 [ 53.525861][ T3631] ? attr_data_write_resident+0x3d0/0x3d0 [ 53.532879][ T3631] ? rcu_read_lock_sched_held+0x87/0x110 [ 53.538510][ T3631] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 53.544491][ T3631] mi_read+0x311/0x510 [ 53.548647][ T3631] mi_get+0xf8/0x310 [ 53.552779][ T3631] ? al_enumerate+0x173/0x200 [ 53.558239][ T3631] ni_enum_attr_ex+0x355/0x6d0 [ 53.563014][ T3631] ? ni_find_attr+0x8c0/0x8c0 [ 53.567680][ T3631] ? ntfs_load_attr_list+0x3ff/0x4e0 [ 53.572965][ T3631] ntfs_iget5+0x1d3e/0x36f0 [ 53.577999][ T3631] ? check_index_root+0x680/0x680 [ 53.583017][ T3631] ? ni_load_mi+0x110/0x110 [ 53.587512][ T3631] ? utf16s_to_utf8s+0x737/0x740 [ 53.592447][ T3631] ntfs_fill_super+0x2127/0x42a0 [ 53.597393][ T3631] ? put_ntfs+0x2a0/0x2a0 [ 53.601725][ T3631] ? vscnprintf+0x80/0x80 [ 53.606066][ T3631] ? set_blocksize+0x1d5/0x360 [ 53.610827][ T3631] get_tree_bdev+0x400/0x620 [ 53.615412][ T3631] ? put_ntfs+0x2a0/0x2a0 [ 53.619740][ T3631] vfs_get_tree+0x88/0x270 [ 53.624150][ T3631] do_new_mount+0x289/0xad0 [ 53.628649][ T3631] ? do_move_mount_old+0x150/0x150 [ 53.633753][ T3631] ? user_path_at_empty+0x149/0x1a0 [ 53.638945][ T3631] __se_sys_mount+0x2d3/0x3c0 [ 53.643616][ T3631] ? __x64_sys_mount+0xc0/0xc0 [ 53.648375][ T3631] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 53.654352][ T3631] ? __x64_sys_mount+0x1c/0xc0 [ 53.659110][ T3631] do_syscall_64+0x3d/0xb0 [ 53.663520][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.669416][ T3631] RIP: 0033:0x7f1f8935caaa [ 53.673827][ T3631] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.694118][ T3631] RSP: 002b:00007ffed0a550c8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 53.702521][ T3631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f1f8935caaa [ 53.710485][ T3631] RDX: 0000000020000000 RSI: 000000002001f780 RDI: 00007ffed0a550e0 [ 53.718451][ T3631] RBP: 00007ffed0a550e0 R08: 00007ffed0a55120 R09: 000000000001f731 [ 53.726415][ T3631] R10: 0000000000000482 R11: 0000000000000286 R12: 0000000000000004 [ 53.734380][ T3631] R13: 0000555555a152c0 R14: 0000000000000482 R15: 00007ffed0a55120 [ 53.742442][ T3631] [ 53.745453][ T3631] Modules linked in: [ 53.750037][ T3631] ---[ end trace 0000000000000000 ]--- [ 53.756829][ T3631] RIP: 0010:ni_find_attr+0x98/0x8c0 [ 53.762050][ T3631] Code: b8 f1 f1 f1 f1 00 f3 f3 f3 48 89 54 24 38 4a 89 04 3a e8 0b 81 c1 fe 48 89 5c 24 28 48 81 c3 38 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 a9 9a 15 ff 4c 8b 33 31 ff 4c 89 [ 53.782791][ T3631] RSP: 0018:ffffc90003c2f500 EFLAGS: 00010206 [ 53.788914][ T3631] RAX: 0000000000000047 RBX: 0000000000000238 RCX: ffff88807e059d40 [ 53.796930][ T3631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.804925][ T3631] RBP: ffffc90003c2f5e0 R08: 0000000000000000 R09: 0000000000000000 [ 53.812885][ T3631] R10: 0000000000000003 R11: ffff88807e059d40 R12: 0000000000000000 [ 53.820931][ T3631] R13: 0000000000000000 R14: 0000000000010001 R15: dffffc0000000000 [ 53.828959][ T3631] FS: 0000555555a15300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.837942][ T3631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.844561][ T3631] CR2: 000000000061ba0c CR3: 000000007eb87000 CR4: 00000000003506f0 [ 53.852527][ T3631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.860539][ T3631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.868541][ T3631] Kernel panic - not syncing: Fatal exception [ 53.874648][ T3631] Kernel Offset: disabled [ 53.878966][ T3631] Rebooting in 86400 seconds..