[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.127' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 28.234082] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 28.243082] ------------[ cut here ]------------ [ 28.247842] kernel BUG at fs/ntfs/aops.c:207! [ 28.252617] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 28.257968] Modules linked in: [ 28.261136] CPU: 1 PID: 7946 Comm: syz-executor199 Not tainted 4.14.281-syzkaller #0 [ 28.268987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.278314] task: ffff8880b39f0380 task.stack: ffff88809cdd8000 [ 28.284350] RIP: 0010:ntfs_readpage+0x14c7/0x1a70 [ 28.289166] RSP: 0018:ffff88809cddf778 EFLAGS: 00010297 [ 28.294514] RAX: ffff8880b39f0380 RBX: dffffc0000000000 RCX: 0000000000000000 [ 28.301758] RDX: 0000000000000000 RSI: ffffea0002303440 RDI: ffff88808e282790 [ 28.309088] RBP: ffff88808e282788 R08: 0000000000000000 R09: ffff88808e282c18 [ 28.316334] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 28.323577] R13: ffff88808e282740 R14: ffff88808e282a08 R15: ffffea0002303440 [ 28.330820] FS: 0000555556947300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 28.339017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.344872] CR2: 00007ffc51865ff8 CR3: 000000009a9dc000 CR4: 00000000003406e0 [ 28.352120] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.359362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.366611] Call Trace: [ 28.369180] ? __add_to_page_cache_locked+0x2ea/0x840 [ 28.374346] ? check_preemption_disabled+0x35/0x240 [ 28.379356] ? __lru_cache_add+0x178/0x250 [ 28.383569] ? ntfs_end_buffer_async_read+0x1040/0x1040 [ 28.388905] ? add_to_page_cache_lru+0x136/0x2b0 [ 28.393650] ? add_to_page_cache_locked+0x40/0x40 [ 28.398464] ? alloc_pages_current+0x15d/0x260 [ 28.403018] do_read_cache_page+0x38e/0xc10 [ 28.407314] ? ntfs_end_buffer_async_read+0x1040/0x1040 [ 28.412651] ? ntfs_attr_lookup+0xeca/0x1f30 [ 28.417032] map_mft_record+0x1ca/0xbe0 [ 28.420982] ntfs_read_locked_inode+0x1bf/0x51b0 [ 28.425713] ? ntfs_mapping_pairs_decompress+0x755/0xf60 [ 28.431229] ? kmem_cache_alloc+0x2f8/0x3c0 [ 28.435523] ntfs_read_inode_mount+0xafb/0x2060 [ 28.440165] ntfs_fill_super+0x9a6/0x7170 [ 28.444292] ? vsnprintf+0x260/0x1340 [ 28.448065] ? pointer+0x9e0/0x9e0 [ 28.451580] ? lock_downgrade+0x740/0x740 [ 28.455704] ? ntfs_big_inode_init_once+0x20/0x20 [ 28.460521] ? snprintf+0xa5/0xd0 [ 28.463944] ? vsprintf+0x30/0x30 [ 28.467371] ? ns_test_super+0x50/0x50 [ 28.471230] ? set_blocksize+0x125/0x380 [ 28.475266] mount_bdev+0x2b3/0x360 [ 28.478865] ? ntfs_big_inode_init_once+0x20/0x20 [ 28.483695] mount_fs+0x92/0x2a0 [ 28.487038] vfs_kern_mount.part.0+0x5b/0x470 [ 28.491507] do_mount+0xe65/0x2a30 [ 28.495022] ? retint_kernel+0x2d/0x2d [ 28.498884] ? copy_mount_string+0x40/0x40 [ 28.503096] ? memset+0x20/0x40 [ 28.506347] ? copy_mount_options+0x1fa/0x2f0 [ 28.510816] ? copy_mnt_ns+0xa30/0xa30 [ 28.514677] SyS_mount+0xa8/0x120 [ 28.518106] ? copy_mnt_ns+0xa30/0xa30 [ 28.521970] do_syscall_64+0x1d5/0x640 [ 28.525833] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.530995] RIP: 0033:0x7f7cde80e49a [ 28.534691] RSP: 002b:00007ffe5a1633d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 28.542393] RAX: ffffffffffffffda RBX: 00007ffe5a163430 RCX: 00007f7cde80e49a [ 28.549641] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe5a1633f0 [ 28.556883] RBP: 00007ffe5a1633f0 R08: 00007ffe5a163430 R09: 0000000000000000 [ 28.564126] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000368 [ 28.571369] R13: 0000000000000003 R14: 0000000000000004 R15: 000000000000000f [ 28.578639] Code: 89 04 00 00 49 83 be 88 fd ff ff 00 0f 85 3e f5 ff ff e8 1d 5f 45 ff 49 8b 86 80 fd ff ff a8 08 0f 85 2a f5 ff ff e8 09 5f 45 ff <0f> 0b e8 02 5f 45 ff 48 8b 84 24 88 00 00 00 48 8d b8 c0 fd ff [ 28.597704] RIP: ntfs_readpage+0x14c7/0x1a70 RSP: ffff88809cddf778 [ 28.604702] ---[ end trace 458d9030a7c1bed3 ]--- [ 28.609474] Kernel panic - not syncing: Fatal exception [ 28.614890] Kernel Offset: disabled [ 28.618499] Rebooting in 86400 seconds..