./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4168326223 <...> Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. execve("./syz-executor4168326223", ["./syz-executor4168326223"], 0x7ffd842306c0 /* 10 vars */) = 0 brk(NULL) = 0x555556b3c000 brk(0x555556b3cd00) = 0x555556b3cd00 arch_prctl(ARCH_SET_FS, 0x555556b3c380) = 0 set_tid_address(0x555556b3c650) = 5005 set_robust_list(0x555556b3c660, 24) = 0 rseq(0x555556b3cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4168326223", 4096) = 28 getrandom("\x98\xa7\x7d\x13\x92\xdb\x41\xca", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b3cd00 brk(0x555556b5dd00) = 0x555556b5dd00 brk(0x555556b5e000) = 0x555556b5e000 mprotect(0x7ffb896b8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5006 ./strace-static-x86_64: Process 5006 attached [pid 5006] set_robust_list(0x555556b3c660, 24) = 0 [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5006] setpgid(0, 0) = 0 [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5006] write(3, "1000", 4) = 4 [pid 5006] close(3) = 0 [pid 5006] memfd_create("syzkaller", 0) = 3 [pid 5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffb81206000 [pid 5006] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xf3\x0f\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x0c\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 97703) = 97703 [pid 5006] munmap(0x7ffb81206000, 138412032) = 0 [pid 5006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5006] close(3) = 0 [pid 5006] mkdir("./file0", 0777) = 0 [ 142.289081][ T5006] loop0: detected capacity change from 0 to 190 [ 142.312227][ T5006] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 142.329249][ T5006] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 142.338250][ T5006] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 142.358489][ T5006] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 142.366828][ T5006] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 142.382899][ T5006] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 142.394168][ T5006] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 142.403323][ T5006] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 142.416610][ T5006] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 142.430696][ T5006] ntfs: volume version 3.1. [ 142.436267][ T5006] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 142.447275][ T5006] syz-executor416: attempt to access beyond end of device [ 142.447275][ T5006] loop0: rw=0, sector=552, nr_sectors = 8 limit=190 [ 142.461175][ T5006] ===================================================== [ 142.468629][ T5006] BUG: KMSAN: uninit-value in post_read_mst_fixup+0xab8/0xb70 [ 142.476285][ T5006] post_read_mst_fixup+0xab8/0xb70 [ 142.481641][ T5006] ntfs_end_buffer_async_read+0xbb8/0x1a70 [ 142.487690][ T5006] end_bio_bh_io_sync+0x130/0x1d0 [ 142.492869][ T5006] bio_endio+0xb17/0xb70 [ 142.497269][ T5006] submit_bio_noacct+0x230/0x2840 [ 142.502459][ T5006] submit_bio+0x171/0x1c0 [ 142.507007][ T5006] submit_bh_wbc+0x7de/0x850 [ 142.511724][ T5006] submit_bh+0x26/0x30 [ 142.515886][ T5006] ntfs_read_folio+0x364b/0x3930 [ 142.521051][ T5006] filemap_read_folio+0xce/0x370 [ 142.526161][ T5006] do_read_cache_folio+0x3b4/0x11e0 [ 142.531580][ T5006] read_cache_page+0x63/0x1c0 [ 142.536493][ T5006] ntfs_lookup_inode_by_name+0x1d97/0x50d0 [ 142.542477][ T5006] check_windows_hibernation_status+0xc4/0xca0 [ 142.548838][ T5006] load_system_files+0x6d84/0x97b0 [ 142.554082][ T5006] ntfs_fill_super+0x307e/0x45d0 [ 142.559226][ T5006] mount_bdev+0x3d7/0x560 [ 142.563698][ T5006] ntfs_mount+0x4d/0x60 [ 142.568075][ T5006] legacy_get_tree+0x110/0x290 [ 142.572994][ T5006] vfs_get_tree+0xa5/0x520 [ 142.577576][ T5006] do_new_mount+0x68d/0x1550 [ 142.582313][ T5006] path_mount+0x73d/0x1f20 [ 142.586919][ T5006] __se_sys_mount+0x725/0x810 [ 142.591733][ T5006] __x64_sys_mount+0xe4/0x140 [ 142.596587][ T5006] do_syscall_64+0x44/0x110 [ 142.601252][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 142.607383][ T5006] [ 142.609787][ T5006] Uninit was created at: [ 142.614245][ T5006] __alloc_pages+0x9a4/0xe00 [ 142.619037][ T5006] alloc_pages_mpol+0x62b/0x9d0 [ 142.624186][ T5006] folio_alloc+0x1da/0x380 [ 142.628837][ T5006] filemap_alloc_folio+0xa5/0x430 [ 142.634023][ T5006] do_read_cache_folio+0x163/0x11e0 [ 142.639513][ T5006] read_cache_page+0x63/0x1c0 [ 142.644379][ T5006] ntfs_lookup_inode_by_name+0x1d97/0x50d0 [ 142.650503][ T5006] check_windows_hibernation_status+0xc4/0xca0 [ 142.656853][ T5006] load_system_files+0x6d84/0x97b0 [ 142.662064][ T5006] ntfs_fill_super+0x307e/0x45d0 [ 142.667231][ T5006] mount_bdev+0x3d7/0x560 [ 142.671719][ T5006] ntfs_mount+0x4d/0x60 [ 142.676010][ T5006] legacy_get_tree+0x110/0x290 [ 142.681006][ T5006] vfs_get_tree+0xa5/0x520 [ 142.685581][ T5006] do_new_mount+0x68d/0x1550 [ 142.690426][ T5006] path_mount+0x73d/0x1f20 [ 142.695027][ T5006] __se_sys_mount+0x725/0x810 [ 142.699908][ T5006] __x64_sys_mount+0xe4/0x140 [ 142.704732][ T5006] do_syscall_64+0x44/0x110 [ 142.709429][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 142.715498][ T5006] [ 142.718030][ T5006] CPU: 1 PID: 5006 Comm: syz-executor416 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 142.728609][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 142.738812][ T5006] ===================================================== [ 142.745818][ T5006] Disabling lock debugging due to kernel taint [ 142.752133][ T5006] Kernel panic - not syncing: kmsan.panic set ... [ 142.758641][ T5006] CPU: 1 PID: 5006 Comm: syz-executor416 Tainted: G B 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 142.770668][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 142.780816][ T5006] Call Trace: [ 142.784173][ T5006] [ 142.787194][ T5006] dump_stack_lvl+0x1bf/0x240 [ 142.791979][ T5006] dump_stack+0x1e/0x20 [ 142.796225][ T5006] panic+0x4de/0xc90 [ 142.800241][ T5006] ? add_taint+0x108/0x1a0 [ 142.804780][ T5006] kmsan_report+0x2d0/0x2d0 [ 142.809430][ T5006] ? __msan_warning+0x96/0x110 [ 142.814375][ T5006] ? post_read_mst_fixup+0xab8/0xb70 [ 142.819870][ T5006] ? ntfs_end_buffer_async_read+0xbb8/0x1a70 [ 142.825976][ T5006] ? end_bio_bh_io_sync+0x130/0x1d0 [ 142.831285][ T5006] ? bio_endio+0xb17/0xb70 [ 142.835844][ T5006] ? submit_bio_noacct+0x230/0x2840 [ 142.841225][ T5006] ? submit_bio+0x171/0x1c0 [ 142.845834][ T5006] ? submit_bh_wbc+0x7de/0x850 [ 142.850710][ T5006] ? submit_bh+0x26/0x30 [ 142.855108][ T5006] ? ntfs_read_folio+0x364b/0x3930 [ 142.860394][ T5006] ? filemap_read_folio+0xce/0x370 [ 142.865665][ T5006] ? do_read_cache_folio+0x3b4/0x11e0 [ 142.871181][ T5006] ? read_cache_page+0x63/0x1c0 [ 142.876209][ T5006] ? ntfs_lookup_inode_by_name+0x1d97/0x50d0 [ 142.882338][ T5006] ? check_windows_hibernation_status+0xc4/0xca0 [ 142.888834][ T5006] ? load_system_files+0x6d84/0x97b0 [ 142.894257][ T5006] ? ntfs_fill_super+0x307e/0x45d0 [ 142.899484][ T5006] ? mount_bdev+0x3d7/0x560 [ 142.904155][ T5006] ? ntfs_mount+0x4d/0x60 [ 142.908643][ T5006] ? legacy_get_tree+0x110/0x290 [ 142.913748][ T5006] ? vfs_get_tree+0xa5/0x520 [ 142.918464][ T5006] ? do_new_mount+0x68d/0x1550 [ 142.923337][ T5006] ? path_mount+0x73d/0x1f20 [ 142.928091][ T5006] ? __se_sys_mount+0x725/0x810 [ 142.933082][ T5006] ? __x64_sys_mount+0xe4/0x140 [ 142.938026][ T5006] ? do_syscall_64+0x44/0x110 [ 142.942822][ T5006] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 142.949233][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 142.955228][ T5006] ? wake_up_bit+0x5d/0x360 [ 142.959844][ T5006] ? filter_irq_stacks+0x60/0x1a0 [ 142.965031][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 142.971464][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 142.977441][ T5006] __msan_warning+0x96/0x110 [ 142.982160][ T5006] post_read_mst_fixup+0xab8/0xb70 [ 142.987462][ T5006] ? wake_up_bit+0xb3/0x360 [ 142.992138][ T5006] ntfs_end_buffer_async_read+0xbb8/0x1a70 [ 142.998098][ T5006] end_bio_bh_io_sync+0x130/0x1d0 [ 143.003267][ T5006] ? __kunmap_atomic+0xe0/0xe0 [ 143.008132][ T5006] ? verify_bh+0x2c0/0x2c0 [ 143.012682][ T5006] ? verify_bh+0x2c0/0x2c0 [ 143.017251][ T5006] bio_endio+0xb17/0xb70 [ 143.021655][ T5006] submit_bio_noacct+0x230/0x2840 [ 143.026867][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 143.032830][ T5006] submit_bio+0x171/0x1c0 [ 143.037335][ T5006] submit_bh_wbc+0x7de/0x850 [ 143.042077][ T5006] submit_bh+0x26/0x30 [ 143.046271][ T5006] ntfs_read_folio+0x364b/0x3930 [ 143.051364][ T5006] ? filter_irq_stacks+0x60/0x1a0 [ 143.056529][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 143.062969][ T5006] filemap_read_folio+0xce/0x370 [ 143.068073][ T5006] ? ntfs_writepage+0x2200/0x2200 [ 143.073224][ T5006] do_read_cache_folio+0x3b4/0x11e0 [ 143.078614][ T5006] ? ntfs_writepage+0x2200/0x2200 [ 143.083829][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 143.089807][ T5006] read_cache_page+0x63/0x1c0 [ 143.094647][ T5006] ntfs_lookup_inode_by_name+0x1d97/0x50d0 [ 143.100601][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 143.106983][ T5006] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 143.112983][ T5006] check_windows_hibernation_status+0xc4/0xca0 [ 143.119313][ T5006] load_system_files+0x6d84/0x97b0 [ 143.124588][ T5006] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 143.130822][ T5006] ntfs_fill_super+0x307e/0x45d0 [ 143.135923][ T5006] mount_bdev+0x3d7/0x560 [ 143.140420][ T5006] ? ntfs_mount+0x60/0x60 [ 143.144863][ T5006] ntfs_mount+0x4d/0x60 [ 143.149154][ T5006] legacy_get_tree+0x110/0x290 [ 143.154097][ T5006] ? ntfs_rl_punch_nolock+0x2af0/0x2af0 [ 143.159781][ T5006] ? legacy_parse_monolithic+0x260/0x260 [ 143.165603][ T5006] vfs_get_tree+0xa5/0x520 [ 143.170117][ T5006] ? mount_capable+0x97/0x120 [ 143.174920][ T5006] do_new_mount+0x68d/0x1550 [ 143.179699][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 143.185712][ T5006] path_mount+0x73d/0x1f20 [ 143.190299][ T5006] ? user_path_at_empty+0x33e/0x3b0 [ 143.195650][ T5006] __se_sys_mount+0x725/0x810 [ 143.200442][ T5006] __x64_sys_mount+0xe4/0x140 [ 143.205250][ T5006] do_syscall_64+0x44/0x110 [ 143.209925][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 143.215996][ T5006] RIP: 0033:0x7ffb89645daa [ 143.220525][ T5006] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 143.240297][ T5006] RSP: 002b:00007ffd737dfae8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 143.248860][ T5006] RAX: ffffffffffffffda RBX: 00007ffd737dfaf0 RCX: 00007ffb89645daa [ 143.256940][ T5006] RDX: 000000002001f1c0 RSI: 000000002001f200 RDI: 00007ffd737dfaf0 [ 143.264990][ T5006] RBP: 0000000000000004 R08: 00007ffd737dfb30 R09: 00000000000009ac [ 143.273064][ T5006] R10: 0000000000200003 R11: 0000000000000286 R12: 00007ffd737dfb30 [ 143.281140][ T5006] R13: 0000000000000003 R14: 0000000000017da7 R15: 00007ffb8968d03b [ 143.289221][ T5006] [ 143.292684][ T5006] Kernel Offset: disabled [ 143.297063][ T5006] Rebooting in 86400 seconds..