loop0: detected capacity change from 0 to 4096 ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). BUG: unable to handle page fault for address: ffffed110016224e #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 5ffcd067 P4D 5ffcd067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:blk_finish_plug block/blk-core.c:1241 [inline] RIP: 0010:__submit_bio+0x46a/0x560 block/blk-core.c:637 Code: 7c 35 00 00 74 08 4c 89 e7 e8 92 00 64 fd 49 39 1c 24 74 07 e8 d7 9c fd fc eb 27 e8 d0 9c fd fc 48 89 df 31 f6 e8 c6 e0 ff ff <43> 80 7c 35 00 00 74 08 4c 89 e7 e8 56 01 64 fd 49 c7 04 24 00 00 RSP: 0018:ffffc9000d377060 EFLAGS: 00010246 RAX: 3d339c42f5c4bb00 RBX: ffffc9000d3770c0 RCX: 0000000000100000 RDX: ffffc9000e89a000 RSI: 0000000000000c4c RDI: 0000000000000c4d RBP: ffffc9000d377170 R08: ffffffff942a498f R09: 1ffffffff2854931 R10: dffffc0000000000 R11: fffffbfff2854932 R12: ffff888000b11278 R13: 1ffff1100016224f R14: dffffc00ffffffff R15: 1ffff92001a6ee10 FS: 00007f60bc2926c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed110016224e CR3: 00000000435c2000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __submit_bio_noacct_mq block/blk-core.c:710 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:739 submit_bh fs/buffer.c:2819 [inline] __sync_dirty_buffer+0x23d/0x390 fs/buffer.c:2857 ntfs_write_bh+0x5f7/0x7c0 fs/ntfs3/fsntfs.c:1481 mi_write+0x9b/0x1e0 fs/ntfs3/record.c:397 ni_write_inode+0xc4f/0x1020 fs/ntfs3/frecord.c:3363 ntfs_set_state+0x536/0x6c0 fs/ntfs3/fsntfs.c:991 ntfs_create_inode+0x56a/0x3760 fs/ntfs3/inode.c:1302 ntfs_create+0x3d/0x50 fs/ntfs3/namei.c:110 lookup_open fs/namei.c:3649 [inline] open_last_lookups fs/namei.c:3748 [inline] path_openat+0x1c03/0x3590 fs/namei.c:3984 do_filp_open+0x27f/0x4e0 fs/namei.c:4014 do_sys_openat2+0x13e/0x1d0 fs/open.c:1402 do_sys_open fs/open.c:1417 [inline] __do_sys_creat fs/open.c:1495 [inline] __se_sys_creat fs/open.c:1489 [inline] __x64_sys_creat+0x123/0x170 fs/open.c:1489 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f60bb385d29 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f60bc292038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 RAX: ffffffffffffffda RBX: 00007f60bb575fa0 RCX: 00007f60bb385d29 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 RBP: 00007f60bb401b08 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f60bb575fa0 R15: 00007ffdbe5fb728 Modules linked in: CR2: ffffed110016224e ---[ end trace 0000000000000000 ]--- RIP: 0010:blk_finish_plug block/blk-core.c:1241 [inline] RIP: 0010:__submit_bio+0x46a/0x560 block/blk-core.c:637 Code: 7c 35 00 00 74 08 4c 89 e7 e8 92 00 64 fd 49 39 1c 24 74 07 e8 d7 9c fd fc eb 27 e8 d0 9c fd fc 48 89 df 31 f6 e8 c6 e0 ff ff <43> 80 7c 35 00 00 74 08 4c 89 e7 e8 56 01 64 fd 49 c7 04 24 00 00 RSP: 0018:ffffc9000d377060 EFLAGS: 00010246 RAX: 3d339c42f5c4bb00 RBX: ffffc9000d3770c0 RCX: 0000000000100000 RDX: ffffc9000e89a000 RSI: 0000000000000c4c RDI: 0000000000000c4d RBP: ffffc9000d377170 R08: ffffffff942a498f R09: 1ffffffff2854931 R10: dffffc0000000000 R11: fffffbfff2854932 R12: ffff888000b11278 R13: 1ffff1100016224f R14: dffffc00ffffffff R15: 1ffff92001a6ee10 FS: 00007f60bc2926c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed110016224e CR3: 00000000435c2000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 7c 35 jl 0x37 2: 00 00 add %al,(%rax) 4: 74 08 je 0xe 6: 4c 89 e7 mov %r12,%rdi 9: e8 92 00 64 fd call 0xfd6400a0 e: 49 39 1c 24 cmp %rbx,(%r12) 12: 74 07 je 0x1b 14: e8 d7 9c fd fc call 0xfcfd9cf0 19: eb 27 jmp 0x42 1b: e8 d0 9c fd fc call 0xfcfd9cf0 20: 48 89 df mov %rbx,%rdi 23: 31 f6 xor %esi,%esi 25: e8 c6 e0 ff ff call 0xffffe0f0 * 2a: 43 80 7c 35 00 00 cmpb $0x0,0x0(%r13,%r14,1) <-- trapping instruction 30: 74 08 je 0x3a 32: 4c 89 e7 mov %r12,%rdi 35: e8 56 01 64 fd call 0xfd640190 3a: 49 rex.WB 3b: c7 .byte 0xc7 3c: 04 24 add $0x24,%al