loop1: detected capacity change from 0 to 723 ------------[ cut here ]------------ kernel BUG at fs/ntfs/malloc.h:31! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 16073 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller-16201-gb57b17e88bf5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 RIP: 0010:__ntfs_malloc fs/ntfs/malloc.h:31 [inline] RIP: 0010:ntfs_malloc_nofs+0xfd/0x100 fs/ntfs/malloc.h:52 Code: 17 e8 f7 f5 be fe 48 89 df be 42 0c 00 00 5b 41 5e 41 5f e9 55 1f 0d ff e8 e0 f5 be fe 31 c0 5b 41 5e 41 5f c3 e8 d3 f5 be fe <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 49 89 fe 49 bc RSP: 0018:ffffc9001657f7b8 EFLAGS: 00010283 RAX: ffffffff82cfcc7d RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc90005839000 RSI: 0000000000012b31 RDI: 0000000000012b32 RBP: ffff8880823d5510 R08: ffffffff82cfcbad R09: 1ffff1100f3c942a R10: dffffc0000000000 R11: ffffed100f3c942b R12: dffffc0000000000 R13: ffff888079e4a420 R14: ffff8880823d553f R15: dffffc0000000000 FS: 00007f3003c346c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7ca1c59000 CR3: 000000007419f000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ntfs_read_locked_inode+0x1f9c/0x4940 fs/ntfs/inode.c:703 ntfs_iget+0x113/0x190 fs/ntfs/inode.c:177 load_and_init_mft_mirror fs/ntfs/super.c:1035 [inline] load_system_files+0x100/0x4840 fs/ntfs/super.c:1780 ntfs_fill_super+0x19b3/0x2bd0 fs/ntfs/super.c:2900 mount_bdev+0x237/0x300 fs/super.c:1650 legacy_get_tree+0xef/0x190 fs/fs_context.c:662 vfs_get_tree+0x8c/0x280 fs/super.c:1771 do_new_mount+0x28f/0xae0 fs/namespace.c:3337 do_mount fs/namespace.c:3677 [inline] __do_sys_mount fs/namespace.c:3886 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3863 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f3002e7e1ea Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3003c33ee8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f3003c33f80 RCX: 00007f3002e7e1ea RDX: 0000000020000000 RSI: 00000000200000c0 RDI: 00007f3003c33f40 RBP: 0000000020000000 R08: 00007f3003c33f80 R09: 0000000000000002 R10: 0000000000000002 R11: 0000000000000202 R12: 00000000200000c0 R13: 00007f3003c33f40 R14: 0000000000001162 R15: 0000000020000100 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__ntfs_malloc fs/ntfs/malloc.h:31 [inline] RIP: 0010:ntfs_malloc_nofs+0xfd/0x100 fs/ntfs/malloc.h:52 Code: 17 e8 f7 f5 be fe 48 89 df be 42 0c 00 00 5b 41 5e 41 5f e9 55 1f 0d ff e8 e0 f5 be fe 31 c0 5b 41 5e 41 5f c3 e8 d3 f5 be fe <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 49 89 fe 49 bc RSP: 0018:ffffc9001657f7b8 EFLAGS: 00010283 RAX: ffffffff82cfcc7d RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc90005839000 RSI: 0000000000012b31 RDI: 0000000000012b32 RBP: ffff8880823d5510 R08: ffffffff82cfcbad R09: 1ffff1100f3c942a R10: dffffc0000000000 R11: ffffed100f3c942b R12: dffffc0000000000 R13: ffff888079e4a420 R14: ffff8880823d553f R15: dffffc0000000000 FS: 00007f3003c346c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f94ced29000 CR3: 000000007419f000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400