[v5.15] general protection fault in truncate_inode_pages_final (2)
1 view
Skip to first unread message
syzbot
Mar 4, 2025, 3:02:30 PM3/4/25
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: c16c81c81336 Linux 5.15.178
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13080254580000
kernel config: https://syzkaller.appspot.com/x/.config?x=d302c69e93fb6774
dashboard link: https://syzkaller.appspot.com/bug?extid=709226ed7064f9149174
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/267e46ee7273/disk-c16c81c8.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/944e289206cf/vmlinux-c16c81c8.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f8cadf62458e/bzImage-c16c81c8.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+709226...@syzkaller.appspotmail.com
ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
general protection fault, probably for non-canonical address 0xfde2ce42d6a4fa8b: 0000 [#1] PREEMPT SMP KASAN
KASAN: maybe wild-memory-access in range [0xef169216b527d458-0xef169216b527d45f]
CPU: 0 PID: 9292 Comm: syz.4.751 Not tainted 5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:trace_hardirqs_on+0x66/0x80 kernel/trace/trace_preemptirq.c:49
Code: ff eb 18 e8 5c 81 f9 ff eb 1c e8 55 81 f9 ff 48 8b 7c 24 08 31 f6 e8 29 00 00 00 65 c7 05 66 2e 7c 7e 00 00 00 00 e8 e9 90 db <ff> 48 8b 7c 24 08 5b e9 1e 4b b8 08 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc9000326f928 EFLAGS: 00010046
RAX: fde2ce42d6a4fb00 RBX: 0000000000000000 RCX: ffffffff81633dd8
RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0
RBP: ffffc9000326fab0 R08: dffffc0000000000 R09: fffffbfff2131846
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805fdad538
R13: dffffc0000000000 R14: ffff88805fdad598 R15: ffff88805fdad370
FS: 00007f6de28256c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2a817a2000 CR3: 00000000584a4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
_raw_spin_unlock_irq+0x1f/0x40 kernel/locking/spinlock.c:202
spin_unlock_irq include/linux/spinlock.h:413 [inline]
truncate_inode_pages_final+0x67/0x90 mm/truncate.c:457
ntfs_evict_inode+0x18/0xb0 fs/ntfs3/inode.c:1781
evict+0x529/0x930 fs/inode.c:622
ntfs_fill_super+0x3b43/0x4340 fs/ntfs3/super.c:1185
get_tree_bdev+0x3fe/0x620 fs/super.c:1325
vfs_get_tree+0x88/0x270 fs/super.c:1530
do_new_mount+0x2ba/0xb40 fs/namespace.c:3012
do_mount fs/namespace.c:3355 [inline]
__do_sys_mount fs/namespace.c:3563 [inline]
__se_sys_mount+0x2d5/0x3c0 fs/namespace.c:3540
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f6de49bd90a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6de2824e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f6de2824ef0 RCX: 00007f6de49bd90a
RDX: 0000400000000140 RSI: 0000400000000980 RDI: 00007f6de2824eb0
RBP: 0000400000000140 R08: 00007f6de2824ef0 R09: 0000000002004404
R10: 0000000002004404 R11: 0000000000000246 R12: 0000400000000980
R13: 00007f6de2824eb0 R14: 000000000001f883 R15: 0000400000000780
</TASK>
Modules linked in:
---[ end trace e6dbdd4c68204eed ]---
RIP: 0010:trace_hardirqs_on+0x66/0x80 kernel/trace/trace_preemptirq.c:49
Code: ff eb 18 e8 5c 81 f9 ff eb 1c e8 55 81 f9 ff 48 8b 7c 24 08 31 f6 e8 29 00 00 00 65 c7 05 66 2e 7c 7e 00 00 00 00 e8 e9 90 db <ff> 48 8b 7c 24 08 5b e9 1e 4b b8 08 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc9000326f928 EFLAGS: 00010046
RAX: fde2ce42d6a4fb00 RBX: 0000000000000000 RCX: ffffffff81633dd8
RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0
RBP: ffffc9000326fab0 R08: dffffc0000000000 R09: fffffbfff2131846
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805fdad538
R13: dffffc0000000000 R14: ffff88805fdad598 R15: ffff88805fdad370
FS: 00007f6de28256c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2a817a2000 CR3: 00000000584a4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: c16c81c81336 Linux 5.15.178
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13080254580000
kernel config: https://syzkaller.appspot.com/x/.config?x=d302c69e93fb6774
dashboard link: https://syzkaller.appspot.com/bug?extid=709226ed7064f9149174
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/267e46ee7273/disk-c16c81c8.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/944e289206cf/vmlinux-c16c81c8.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f8cadf62458e/bzImage-c16c81c8.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+709226...@syzkaller.appspotmail.com
ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
general protection fault, probably for non-canonical address 0xfde2ce42d6a4fa8b: 0000 [#1] PREEMPT SMP KASAN
KASAN: maybe wild-memory-access in range [0xef169216b527d458-0xef169216b527d45f]
CPU: 0 PID: 9292 Comm: syz.4.751 Not tainted 5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:trace_hardirqs_on+0x66/0x80 kernel/trace/trace_preemptirq.c:49
Code: ff eb 18 e8 5c 81 f9 ff eb 1c e8 55 81 f9 ff 48 8b 7c 24 08 31 f6 e8 29 00 00 00 65 c7 05 66 2e 7c 7e 00 00 00 00 e8 e9 90 db <ff> 48 8b 7c 24 08 5b e9 1e 4b b8 08 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc9000326f928 EFLAGS: 00010046
RAX: fde2ce42d6a4fb00 RBX: 0000000000000000 RCX: ffffffff81633dd8
RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0
RBP: ffffc9000326fab0 R08: dffffc0000000000 R09: fffffbfff2131846
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805fdad538
R13: dffffc0000000000 R14: ffff88805fdad598 R15: ffff88805fdad370
FS: 00007f6de28256c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2a817a2000 CR3: 00000000584a4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
_raw_spin_unlock_irq+0x1f/0x40 kernel/locking/spinlock.c:202
spin_unlock_irq include/linux/spinlock.h:413 [inline]
truncate_inode_pages_final+0x67/0x90 mm/truncate.c:457
ntfs_evict_inode+0x18/0xb0 fs/ntfs3/inode.c:1781
evict+0x529/0x930 fs/inode.c:622
ntfs_fill_super+0x3b43/0x4340 fs/ntfs3/super.c:1185
get_tree_bdev+0x3fe/0x620 fs/super.c:1325
vfs_get_tree+0x88/0x270 fs/super.c:1530
do_new_mount+0x2ba/0xb40 fs/namespace.c:3012
do_mount fs/namespace.c:3355 [inline]
__do_sys_mount fs/namespace.c:3563 [inline]
__se_sys_mount+0x2d5/0x3c0 fs/namespace.c:3540
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f6de49bd90a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6de2824e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f6de2824ef0 RCX: 00007f6de49bd90a
RDX: 0000400000000140 RSI: 0000400000000980 RDI: 00007f6de2824eb0
RBP: 0000400000000140 R08: 00007f6de2824ef0 R09: 0000000002004404
R10: 0000000002004404 R11: 0000000000000246 R12: 0000400000000980
R13: 00007f6de2824eb0 R14: 000000000001f883 R15: 0000400000000780
</TASK>
Modules linked in:
---[ end trace e6dbdd4c68204eed ]---
RIP: 0010:trace_hardirqs_on+0x66/0x80 kernel/trace/trace_preemptirq.c:49
Code: ff eb 18 e8 5c 81 f9 ff eb 1c e8 55 81 f9 ff 48 8b 7c 24 08 31 f6 e8 29 00 00 00 65 c7 05 66 2e 7c 7e 00 00 00 00 e8 e9 90 db <ff> 48 8b 7c 24 08 5b e9 1e 4b b8 08 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc9000326f928 EFLAGS: 00010046
RAX: fde2ce42d6a4fb00 RBX: 0000000000000000 RCX: ffffffff81633dd8
RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0
RBP: ffffc9000326fab0 R08: dffffc0000000000 R09: fffffbfff2131846
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805fdad538
R13: dffffc0000000000 R14: ffff88805fdad598 R15: ffff88805fdad370
FS: 00007f6de28256c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2a817a2000 CR3: 00000000584a4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
May 10, 2025, 3:23:32 PM5/10/25
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 3b8db0e4f263 Linux 5.15.182
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17155768580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f93aaf95aed43225
dashboard link: https://syzkaller.appspot.com/bug?extid=709226ed7064f9149174
compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10955768580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/4b5fc99635e8/disk-3b8db0e4.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/5351a5e4c264/vmlinux-3b8db0e4.xz
kernel image: https://storage.googleapis.com/syzbot-assets/e022b133e1a6/bzImage-3b8db0e4.xz
mounted in repro #1: https://storage.googleapis.com/syzbot-assets/bbddf6b9bf62/mount_0.gz
mounted in repro #2: https://storage.googleapis.com/syzbot-assets/ecb60b11669e/mount_7.gz
fsck result: failed (log: https://syzkaller.appspot.com/x/fsck.log?x=16e54cf4580000)
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+709226...@syzkaller.appspotmail.com
loop3: detected capacity change from 0 to 4096
ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
general protection fault, probably for non-canonical address 0x5d4a98208199608b: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4903 Comm: syz.3.253 Not tainted 5.15.182-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RSP: 0018:ffffc9000bfdf9c8 EFLAGS: 00010046
RAX: 5d4a982081996100 RBX: 0000000000000000 RCX: 5d4a982081996100
RDX: dffffc0000000000 RSI: ffffffff8a0b2260 RDI: ffffffff8a59a2c0
RBP: ffffc9000bfdfb50 R08: dffffc0000000000 R09: fffffbfff1ff343e
R10: fffffbfff1ff343e R11: 1ffffffff1ff343d R12: dffffc0000000000
R13: ffff88805bdf62b8 R14: ffff88805bdf6460 R15: ffff88805bdf6400
FS: 00007fb6028f76c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
ntfs_evict_inode+0x18/0xb0 fs/ntfs3/inode.c:1781
evict+0x485/0x870 fs/inode.c:647
ntfs_fill_super+0x355c/0x3c10 fs/ntfs3/super.c:1185
get_tree_bdev+0x3f1/0x610 fs/super.c:1325
vfs_get_tree+0x88/0x270 fs/super.c:1530
do_new_mount+0x24a/0xa40 fs/namespace.c:3013
do_mount fs/namespace.c:3356 [inline]
__do_sys_mount fs/namespace.c:3564 [inline]
__se_sys_mount+0x2d6/0x3c0 fs/namespace.c:3541
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fb60368910a
RAX: ffffffffffffffda RBX: 00007fb6028f6ef0 RCX: 00007fb60368910a
RDX: 000020000001f340 RSI: 0000200000000040 RDI: 00007fb6028f6eb0
RBP: 000020000001f340 R08: 00007fb6028f6ef0 R09: 0000000000000890
R10: 0000000000000890 R11: 0000000000000246 R12: 0000200000000040
R13: 00007fb6028f6eb0 R14: 000000000001f331 R15: 0000200000000000
</TASK>
Modules linked in:
---[ end trace b414d9f09ade5191 ]---
RSP: 0018:ffffc9000bfdf9c8 EFLAGS: 00010046
RAX: 5d4a982081996100 RBX: 0000000000000000 RCX: 5d4a982081996100
RDX: dffffc0000000000 RSI: ffffffff8a0b2260 RDI: ffffffff8a59a2c0
RBP: ffffc9000bfdfb50 R08: dffffc0000000000 R09: fffffbfff1ff343e
R10: fffffbfff1ff343e R11: 1ffffffff1ff343d R12: dffffc0000000000
R13: ffff88805bdf62b8 R14: ffff88805bdf6460 R15: ffff88805bdf6400
FS: 00007fb6028f76c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
HEAD commit: 3b8db0e4f263 Linux 5.15.182
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17155768580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f93aaf95aed43225
dashboard link: https://syzkaller.appspot.com/bug?extid=709226ed7064f9149174
compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10955768580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/4b5fc99635e8/disk-3b8db0e4.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/5351a5e4c264/vmlinux-3b8db0e4.xz
kernel image: https://storage.googleapis.com/syzbot-assets/e022b133e1a6/bzImage-3b8db0e4.xz
mounted in repro #1: https://storage.googleapis.com/syzbot-assets/bbddf6b9bf62/mount_0.gz
mounted in repro #2: https://storage.googleapis.com/syzbot-assets/ecb60b11669e/mount_7.gz
fsck result: failed (log: https://syzkaller.appspot.com/x/fsck.log?x=16e54cf4580000)
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+709226...@syzkaller.appspotmail.com
ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
general protection fault, probably for non-canonical address 0x5d4a98208199608b: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4903 Comm: syz.3.253 Not tainted 5.15.182-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RIP: 0010:trace_hardirqs_on+0x66/0x80 kernel/trace/trace_preemptirq.c:49
Code: ff eb 18 e8 ac e1 f9 ff eb 1c e8 a5 e1 f9 ff 48 8b 7c 24 08 31 f6 e8 29 00 00 00 65 c7 05 36 56 85 7e 00 00 00 00 e8 d9 d0 dd <ff> 48 8b 7c 24 08 5b e9 9e 50 23 08 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc9000bfdf9c8 EFLAGS: 00010046
RAX: 5d4a982081996100 RBX: 0000000000000000 RCX: 5d4a982081996100
RDX: dffffc0000000000 RSI: ffffffff8a0b2260 RDI: ffffffff8a59a2c0
RBP: ffffc9000bfdfb50 R08: dffffc0000000000 R09: fffffbfff1ff343e
R10: fffffbfff1ff343e R11: 1ffffffff1ff343d R12: dffffc0000000000
R13: ffff88805bdf62b8 R14: ffff88805bdf6460 R15: ffff88805bdf6400
FS: 00007fb6028f76c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f50fdf55000 CR3: 000000001fbcf000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
_raw_spin_unlock_irq+0x1f/0x40 kernel/locking/spinlock.c:202
spin_unlock_irq include/linux/spinlock.h:413 [inline]
truncate_inode_pages_final+0x66/0x90 mm/truncate.c:457
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
_raw_spin_unlock_irq+0x1f/0x40 kernel/locking/spinlock.c:202
spin_unlock_irq include/linux/spinlock.h:413 [inline]
ntfs_evict_inode+0x18/0xb0 fs/ntfs3/inode.c:1781
evict+0x485/0x870 fs/inode.c:647
ntfs_fill_super+0x355c/0x3c10 fs/ntfs3/super.c:1185
get_tree_bdev+0x3f1/0x610 fs/super.c:1325
vfs_get_tree+0x88/0x270 fs/super.c:1530
do_new_mount+0x24a/0xa40 fs/namespace.c:3013
do_mount fs/namespace.c:3356 [inline]
__do_sys_mount fs/namespace.c:3564 [inline]
__se_sys_mount+0x2d6/0x3c0 fs/namespace.c:3541
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fb60368910a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb6028f6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fb6028f6ef0 RCX: 00007fb60368910a
RDX: 000020000001f340 RSI: 0000200000000040 RDI: 00007fb6028f6eb0
RBP: 000020000001f340 R08: 00007fb6028f6ef0 R09: 0000000000000890
R10: 0000000000000890 R11: 0000000000000246 R12: 0000200000000040
R13: 00007fb6028f6eb0 R14: 000000000001f331 R15: 0000200000000000
</TASK>
Modules linked in:
---[ end trace b414d9f09ade5191 ]---
RIP: 0010:trace_hardirqs_on+0x66/0x80 kernel/trace/trace_preemptirq.c:49
Code: ff eb 18 e8 ac e1 f9 ff eb 1c e8 a5 e1 f9 ff 48 8b 7c 24 08 31 f6 e8 29 00 00 00 65 c7 05 36 56 85 7e 00 00 00 00 e8 d9 d0 dd <ff> 48 8b 7c 24 08 5b e9 9e 50 23 08 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc9000bfdf9c8 EFLAGS: 00010046
RAX: 5d4a982081996100 RBX: 0000000000000000 RCX: 5d4a982081996100
RDX: dffffc0000000000 RSI: ffffffff8a0b2260 RDI: ffffffff8a59a2c0
RBP: ffffc9000bfdfb50 R08: dffffc0000000000 R09: fffffbfff1ff343e
R10: fffffbfff1ff343e R11: 1ffffffff1ff343d R12: dffffc0000000000
R13: ffff88805bdf62b8 R14: ffff88805bdf6460 R15: ffff88805bdf6400
FS: 00007fb6028f76c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f50fdf55000 CR3: 000000001fbcf000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
If you want syzbot to run the reproducer, reply with:
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
syzbot
Aug 18, 2025, 3:23:21 PM8/18/25
to syzkaller...@googlegroups.com
Auto-closing this bug as obsolete.
No recent activity, existing reproducers are no longer triggering the issue.
No recent activity, existing reproducers are no longer triggering the issue.
Reply all
Reply to author
Forward
0 new messages