loop0: detected capacity change from 0 to 4096 ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). BUG: unable to handle page fault for address: ffffed110013524e #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 5ffcd067 P4D 5ffcd067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:blk_finish_plug block/blk-core.c:1239 [inline] RIP: 0010:__submit_bio+0x43e/0x560 block/blk-core.c:637 Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 ef e8 7a 0c 64 fd 49 8b 7d 00 e8 11 8f ff ff 4c 8b 7c 24 10 48 8d 5c 24 60 4c 8b 6c 24 08 <43> 80 7c 35 00 00 74 08 4c 89 e7 e8 52 0c 64 fd 49 39 1c 24 74 07 RSP: 0018:ffffc900019cf040 EFLAGS: 00010246 RAX: 9a3c874c45c9f500 RBX: ffffc900019cf0a0 RCX: 0000000000100000 RDX: ffffc9000e172000 RSI: 00000000000007da RDI: 00000000000007db RBP: ffffc900019cf150 R08: ffffffff84a49e0d R09: 1ffffffff203302e R10: dffffc0000000000 R11: fffffbfff203302f R12: ffff8880009a9278 R13: 1ffff1100013524f R14: dffffc00ffffffff R15: 1ffff92000339e0c FS: 00007fa75a59a6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed110013524e CR3: 0000000043b7e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __submit_bio_noacct_mq block/blk-core.c:710 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:739 submit_bh fs/buffer.c:2819 [inline] __sync_dirty_buffer+0x23d/0x390 fs/buffer.c:2857 ntfs_write_bh+0x5f7/0x7c0 fs/ntfs3/fsntfs.c:1481 mi_write+0x9b/0x1e0 fs/ntfs3/record.c:397 ni_write_inode+0xc4f/0x1020 fs/ntfs3/frecord.c:3363 ntfs_set_state+0x536/0x6c0 fs/ntfs3/fsntfs.c:991 ntfs_create_inode+0x56a/0x3760 fs/ntfs3/inode.c:1302 ntfs_create+0x3d/0x50 fs/ntfs3/namei.c:110 lookup_open fs/namei.c:3649 [inline] open_last_lookups fs/namei.c:3748 [inline] path_openat+0x1c03/0x3590 fs/namei.c:3984 do_filp_open+0x27f/0x4e0 fs/namei.c:4014 do_sys_openat2+0x13e/0x1d0 fs/open.c:1402 do_sys_open fs/open.c:1417 [inline] __do_sys_openat fs/open.c:1433 [inline] __se_sys_openat fs/open.c:1428 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1428 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa759785d29 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa75a59a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa759975fa0 RCX: 00007fa759785d29 RDX: 0000000000048241 RSI: 0000000020000000 RDI: ffffffffffffff9c RBP: 00007fa759801b08 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fa759975fa0 R15: 00007ffe8caf59d8 Modules linked in: CR2: ffffed110013524e ---[ end trace 0000000000000000 ]--- RIP: 0010:blk_finish_plug block/blk-core.c:1239 [inline] RIP: 0010:__submit_bio+0x43e/0x560 block/blk-core.c:637 Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 ef e8 7a 0c 64 fd 49 8b 7d 00 e8 11 8f ff ff 4c 8b 7c 24 10 48 8d 5c 24 60 4c 8b 6c 24 08 <43> 80 7c 35 00 00 74 08 4c 89 e7 e8 52 0c 64 fd 49 39 1c 24 74 07 RSP: 0018:ffffc900019cf040 EFLAGS: 00010246 RAX: 9a3c874c45c9f500 RBX: ffffc900019cf0a0 RCX: 0000000000100000 RDX: ffffc9000e172000 RSI: 00000000000007da RDI: 00000000000007db RBP: ffffc900019cf150 R08: ffffffff84a49e0d R09: 1ffffffff203302e R10: dffffc0000000000 R11: fffffbfff203302f R12: ffff8880009a9278 R13: 1ffff1100013524f R14: dffffc00ffffffff R15: 1ffff92000339e0c FS: 00007fa75a59a6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed110013524e CR3: 0000000043b7e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: c1 e8 03 shr $0x3,%eax 3: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1) 8: 74 08 je 0x12 a: 4c 89 ef mov %r13,%rdi d: e8 7a 0c 64 fd call 0xfd640c8c 12: 49 8b 7d 00 mov 0x0(%r13),%rdi 16: e8 11 8f ff ff call 0xffff8f2c 1b: 4c 8b 7c 24 10 mov 0x10(%rsp),%r15 20: 48 8d 5c 24 60 lea 0x60(%rsp),%rbx 25: 4c 8b 6c 24 08 mov 0x8(%rsp),%r13 * 2a: 43 80 7c 35 00 00 cmpb $0x0,0x0(%r13,%r14,1) <-- trapping instruction 30: 74 08 je 0x3a 32: 4c 89 e7 mov %r12,%rdi 35: e8 52 0c 64 fd call 0xfd640c8c 3a: 49 39 1c 24 cmp %rbx,(%r12) 3e: 74 07 je 0x47