attempt to access beyond end of device
loop2: rw=0, want=1100, limit=289
attempt to access beyond end of device
loop1: rw=0, want=568, limit=281
------------[ cut here ]------------
kernel BUG at fs/ntfs/aops.c:207!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 11678 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888051baa6c0 task.stack: ffff888046e98000
RIP: 0010:ntfs_read_block fs/ntfs/aops.c:207 [inline]
RIP: 0010:ntfs_readpage+0x14c7/0x1a70 fs/ntfs/aops.c:456
RSP: 0018:ffff888046e9f780 EFLAGS: 00010212
RAX: 0000000000040000 RBX: dffffc0000000000 RCX: ffffc9000652c000
RDX: 0000000000004516 RSI: ffffffff820f9aa7 RDI: ffff888041cfa790
RBP: ffff888041cfa788 R08: 0000000000000000 R09: ffff888041cfac18
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: ffff888041cfa740 R14: ffff888041cfaa08 R15: ffffea0000d5d980
FS:  00007fae3cea6700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff9a73d4000 CR3: 0000000099e57000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713
 read_mapping_page include/linux/pagemap.h:398 [inline]
 ntfs_map_page fs/ntfs/aops.h:89 [inline]
 map_mft_record_page fs/ntfs/mft.c:85 [inline]
 map_mft_record+0x1ca/0xbe0 fs/ntfs/mft.c:168
 ntfs_read_locked_inode+0x1bf/0x5160 fs/ntfs/inode.c:582
 ntfs_read_inode_mount+0xafb/0x2040 fs/ntfs/inode.c:2121
 ntfs_fill_super+0x9a6/0x7170 fs/ntfs/super.c:2871
 mount_bdev+0x2b3/0x360 fs/super.c:1134
 mount_fs+0x92/0x2a0 fs/super.c:1237
 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
 vfs_kern_mount fs/namespace.c:1036 [inline]
 do_new_mount fs/namespace.c:2549 [inline]
 do_mount+0xe53/0x2a00 fs/namespace.c:2879
 SYSC_mount fs/namespace.c:3095 [inline]
 SyS_mount+0xa8/0x120 fs/namespace.c:3072
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x467afa
RSP: 002b:00007fae3cea5fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fae3cea6000
RBP: 00007fae3cea6040 R08: 00007fae3cea6040 R09: 0000000020000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
R13: 0000000020000100 R14: 00007fae3cea6000 R15: 0000000020086e00
Code: 89 04 00 00 49 83 be 88 fd ff ff 00 0f 85 3e f5 ff ff e8 dd 8a 45 ff 49 8b 86 80 fd ff ff a8 08 0f 85 2a f5 ff ff e8 c9 8a 45 ff <0f> 0b e8 c2 8a 45 ff 48 8b 84 24 88 00 00 00 48 8d b8 c0 fd ff 
RIP: ntfs_read_block fs/ntfs/aops.c:207 [inline] RSP: ffff888046e9f780
RIP: ntfs_readpage+0x14c7/0x1a70 fs/ntfs/aops.c:456 RSP: ffff888046e9f780
ntfs: volume version 3.1.
loop2: rw=0, want=1104, limit=289
ntfs: volume version 3.1.
attempt to access beyond end of device
loop2: rw=0, want=564, limit=289
attempt to access beyond end of device
loop2: rw=0, want=568, limit=289
ntfs: volume version 3.1.
---[ end trace e1704d3e8fec0b95 ]---