[v6.1] INFO: trying to register non-static key in ntfs_set_size

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 50cbba13faa2 Linux 6.1.159
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13d79b0a580000
kernel config: https://syzkaller.appspot.com/x/.config?x=31ea1cecaf34f0db
dashboard link: https://syzkaller.appspot.com/bug?extid=e3c6a20fde2a56b180df
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/7ad0bd66715a/disk-50cbba13.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/3284d626258e/vmlinux-50cbba13.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a1f92ca7bbfc/Image-50cbba13.gz.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e3c6a2...@syzkaller.appspotmail.com

INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 0 PID: 5405 Comm: syz.6.198 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack+0x30/0x40 lib/dump_stack.c:88
dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106
dump_stack+0x1c/0x5c lib/dump_stack.c:113
assign_lock_key+0x224/0x258 kernel/locking/lockdep.c:974
register_lock_class+0x1ac/0x694 kernel/locking/lockdep.c:1287
__lock_acquire+0x150/0x6544 kernel/locking/lockdep.c:4928
lock_acquire+0x20c/0x644 kernel/locking/lockdep.c:5662
down_write+0x5c/0x88 kernel/locking/rwsem.c:1573
ntfs_set_size+0x130/0x200 fs/ntfs3/inode.c:845
ntfs_extend+0x130/0x444 fs/ntfs3/file.c:353
ntfs3_setattr+0x248/0x924 fs/ntfs3/file.c:712
notify_change+0xb0c/0xdcc fs/attr.c:499
do_truncate+0x178/0x1f0 fs/open.c:65
vfs_truncate+0x23c/0x2b0 fs/open.c:111
do_sys_truncate+0xe8/0x1b0 fs/open.c:134
__do_sys_truncate fs/open.c:146 [inline]
__se_sys_truncate fs/open.c:144 [inline]
__arm64_sys_truncate+0x5c/0x70 fs/open.c:144
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
ntfs3: loop6: ino=19, "file1" attr_set_size
------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x1, magic = 0x0, owner = 0xffff00010e04d340, curr 0xffff00010e04d340, list not empty
WARNING: CPU: 0 PID: 5405 at kernel/locking/rwsem.c:1366 __up_write kernel/locking/rwsem.c:1366 [inline]
WARNING: CPU: 0 PID: 5405 at kernel/locking/rwsem.c:1366 up_write+0x3b8/0x5c0 kernel/locking/rwsem.c:1626
Modules linked in:
CPU: 0 PID: 5405 Comm: syz.6.198 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __up_write kernel/locking/rwsem.c:1366 [inline]
pc : up_write+0x3b8/0x5c0 kernel/locking/rwsem.c:1626
lr : __up_write kernel/locking/rwsem.c:1366 [inline]
lr : up_write+0x3b8/0x5c0 kernel/locking/rwsem.c:1626
sp : ffff800021987830
x29: ffff800021987840 x28: 1fffe0001f33ad3c x27: dfff800000000000
x26: dfff800000000000 x25: 0000000000000001 x24: ffff00010e04d340
x23: ffff00010e04d340 x22: 0000000000000000 x21: ffff0000f99d68d8
x20: ffff0000f99d68e8 x19: ffff0000f99d6880 x18: ffff800011a5bd40
x17: 1fffe00033ee7b7e x16: ffff800008042d90 x15: ffff80001504d000
x14: 0000000000000100 x13: 0000000000000120 x12: 0000000000000001
x11: 1fffe0001b112a90 x10: 0000000000000000 x9 : 9d718ce51d214e00
x8 : 9d718ce51d214e00 x7 : 0000000000000004 x6 : ffff8000082532dc
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008242238
x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001
Call trace:
__up_write kernel/locking/rwsem.c:1366 [inline]
up_write+0x3b8/0x5c0 kernel/locking/rwsem.c:1626
ntfs_set_size+0x164/0x200 fs/ntfs3/inode.c:850
ntfs_extend+0x130/0x444 fs/ntfs3/file.c:353
ntfs3_setattr+0x248/0x924 fs/ntfs3/file.c:712
notify_change+0xb0c/0xdcc fs/attr.c:499
do_truncate+0x178/0x1f0 fs/open.c:65
vfs_truncate+0x23c/0x2b0 fs/open.c:111
do_sys_truncate+0xe8/0x1b0 fs/open.c:134
__do_sys_truncate fs/open.c:146 [inline]
__se_sys_truncate fs/open.c:144 [inline]
__arm64_sys_truncate+0x5c/0x70 fs/open.c:144
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 15997
hardirqs last enabled at (15997): [<ffff8000083c0b24>] seqcount_lockdep_reader_access include/linux/seqlock.h:104 [inline]
hardirqs last enabled at (15997): [<ffff8000083c0b24>] ktime_get_coarse_real_ts64+0x114/0x244 kernel/time/timekeeping.c:2261
hardirqs last disabled at (15996): [<ffff8000083c0aac>] seqcount_lockdep_reader_access include/linux/seqlock.h:101 [inline]
hardirqs last disabled at (15996): [<ffff8000083c0aac>] ktime_get_coarse_real_ts64+0x9c/0x244 kernel/time/timekeeping.c:2261
softirqs last enabled at (15894): [<ffff8000080309e0>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (15892): [<ffff8000080309ac>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit: 50cbba13faa2 Linux 6.1.159
git tree: linux-6.1.y

console output: https://syzkaller.appspot.com/x/log.txt?x=1458cf14580000

kernel config: https://syzkaller.appspot.com/x/.config?x=31ea1cecaf34f0db
dashboard link: https://syzkaller.appspot.com/bug?extid=e3c6a20fde2a56b180df
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=160c931a580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=169384b2580000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/7ad0bd66715a/disk-50cbba13.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/3284d626258e/vmlinux-50cbba13.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a1f92ca7bbfc/Image-50cbba13.gz.xz

mounted in repro: https://storage.googleapis.com/syzbot-assets/0574712f6aef/mount_0.gz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e3c6a2...@syzkaller.appspotmail.com

=======================================================
ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
ntfs3: loop0: Failed to load $Extend.
ntfs3: loop0: failed to convert "076c" to iso8859-1

INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.

CPU: 0 PID: 4504 Comm: syz.0.17 Not tainted syzkaller #0

ntfs3: loop0: ino=19, "file1" attr_set_size
------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x1, magic = 0x0, owner = 0xffff0000e0630000, curr 0xffff0000e0630000, list not empty
WARNING: CPU: 0 PID: 4504 at kernel/locking/rwsem.c:1366 __up_write kernel/locking/rwsem.c:1366 [inline]
WARNING: CPU: 0 PID: 4504 at kernel/locking/rwsem.c:1366 up_write+0x3b8/0x5c0 kernel/locking/rwsem.c:1626
Modules linked in:
CPU: 0 PID: 4504 Comm: syz.0.17 Not tainted syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __up_write kernel/locking/rwsem.c:1366 [inline]
pc : up_write+0x3b8/0x5c0 kernel/locking/rwsem.c:1626
lr : __up_write kernel/locking/rwsem.c:1366 [inline]
lr : up_write+0x3b8/0x5c0 kernel/locking/rwsem.c:1626

sp : ffff800020d27830
x29: ffff800020d27840 x28: 1fffe0001d4e8d3c x27: dfff800000000000
x26: dfff800000000000 x25: 0000000000000001 x24: ffff0000e0630000
x23: ffff0000e0630000 x22: 0000000000000000 x21: ffff0000ea7468d8
x20: ffff0000ea7468e8 x19: ffff0000ea746880 x18: ffff800011a5bd40
x17: 1fffe00033ee7b7e x16: ffff800008042d90 x15: 0000000040000000
x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff0080000804801c x10: 0000000040000000 x9 : b681517948aec900
x8 : b681517948aec900 x7 : 0000000000000004 x6 : ffff8000082532dc
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : ffff800020d273c0 x1 : 0000000000000000 x0 : ffff800008253370

Call trace:
__up_write kernel/locking/rwsem.c:1366 [inline]
up_write+0x3b8/0x5c0 kernel/locking/rwsem.c:1626
ntfs_set_size+0x164/0x200 fs/ntfs3/inode.c:850
ntfs_extend+0x130/0x444 fs/ntfs3/file.c:353
ntfs3_setattr+0x248/0x924 fs/ntfs3/file.c:712
notify_change+0xb0c/0xdcc fs/attr.c:499
do_truncate+0x178/0x1f0 fs/open.c:65
vfs_truncate+0x23c/0x2b0 fs/open.c:111
do_sys_truncate+0xe8/0x1b0 fs/open.c:134
__do_sys_truncate fs/open.c:146 [inline]
__se_sys_truncate fs/open.c:144 [inline]
__arm64_sys_truncate+0x5c/0x70 fs/open.c:144
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585

irq event stamp: 17161
hardirqs last enabled at (17161): [<ffff8000083c0b24>] seqcount_lockdep_reader_access include/linux/seqlock.h:104 [inline]
hardirqs last enabled at (17161): [<ffff8000083c0b24>] ktime_get_coarse_real_ts64+0x114/0x244 kernel/time/timekeeping.c:2261
hardirqs last disabled at (17160): [<ffff8000083c0aac>] seqcount_lockdep_reader_access include/linux/seqlock.h:101 [inline]
hardirqs last disabled at (17160): [<ffff8000083c0aac>] ktime_get_coarse_real_ts64+0x9c/0x244 kernel/time/timekeeping.c:2261
softirqs last enabled at (17046): [<ffff8000080309e0>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (17044): [<ffff8000080309ac>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19

---[ end trace 0000000000000000 ]---


---

If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 68efe5a6c16a Linux 5.15.197
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1468351a580000
kernel config: https://syzkaller.appspot.com/x/.config?x=7e6ed99963d6ee1d
dashboard link: https://syzkaller.appspot.com/bug?extid=72512dec2c8a45e1d53e

compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/900f9b9bd850/disk-68efe5a6.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1e089a5019a6/vmlinux-68efe5a6.xz
kernel image: https://storage.googleapis.com/syzbot-assets/b319f477b907/bzImage-68efe5a6.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by: syzbot+72512d...@syzkaller.appspotmail.com

ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)

INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.

CPU: 1 PID: 7262 Comm: syz.5.455 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
<TASK>
dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106
assign_lock_key+0x1e0/0x1f0 kernel/locking/lockdep.c:937
register_lock_class+0x20e/0x880 kernel/locking/lockdep.c:1250
__lock_acquire+0x160/0x7c60 kernel/locking/lockdep.c:4891
lock_acquire+0x197/0x3f0 kernel/locking/lockdep.c:5623
down_write+0x38/0x60 kernel/locking/rwsem.c:1551
ntfs_set_size+0x13c/0x1f0 fs/ntfs3/inode.c:845
ntfs_extend+0x15c/0x510 fs/ntfs3/file.c:434
ntfs3_setattr+0x2fa/0xc00 fs/ntfs3/file.c:774
notify_change+0xbcd/0xee0 fs/attr.c:505
do_truncate+0x197/0x220 fs/open.c:65
vfs_truncate+0x262/0x2f0 fs/open.c:111
do_sys_truncate+0xdc/0x190 fs/open.c:134
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fc18db99749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc18be00038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007fc18ddeffa0 RCX: 00007fc18db99749
RDX: 0000000000000000 RSI: 0000000000000f62 RDI: 0000200000000080
RBP: 00007fc18dc1df91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc18ddf0038 R14: 00007fc18ddeffa0 R15: 00007fff138845e8
</TASK>
------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x1, magic = 0x0, owner = 0xffff88805fe03b80, curr 0xffff88805fe03b80, list not empty
WARNING: CPU: 0 PID: 7262 at kernel/locking/rwsem.c:1344 __up_write kernel/locking/rwsem.c:1344 [inline]
WARNING: CPU: 0 PID: 7262 at kernel/locking/rwsem.c:1344 up_write+0x2d6/0x420 kernel/locking/rwsem.c:1604
Modules linked in:
CPU: 0 PID: 7262 Comm: syz.5.455 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__up_write kernel/locking/rwsem.c:1344 [inline]
RIP: 0010:up_write+0x2d6/0x420 kernel/locking/rwsem.c:1604
Code: 48 c7 c7 60 0f 0b 8a 48 c7 c6 80 10 0b 8a 48 8b 54 24 08 48 8b 0c 24 4c 8b 44 24 10 4d 89 e1 41 52 e8 8e d1 3b 08 48 83 c4 08 <0f> 0b e9 9d fd ff ff 0f 0b e9 86 fe ff ff c6 05 52 39 fa 0b 01 48
RSP: 0018:ffffc90004737a80 EFLAGS: 00010292
RAX: d121cb7684935700 RBX: ffff88805eb734e0 RCX: 0000000000080000
RDX: ffffc90010b33000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10172067b0
R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff88805fe03b80
R13: ffff88805eb73548 R14: 1ffff1100bd6e6a9 R15: ffff88805eb73538
FS: 00007fc18be006c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c302084 CR3: 000000007b208000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
ntfs_set_size+0x16e/0x1f0 fs/ntfs3/inode.c:850
ntfs_extend+0x15c/0x510 fs/ntfs3/file.c:434
ntfs3_setattr+0x2fa/0xc00 fs/ntfs3/file.c:774
notify_change+0xbcd/0xee0 fs/attr.c:505
do_truncate+0x197/0x220 fs/open.c:65
vfs_truncate+0x262/0x2f0 fs/open.c:111
do_sys_truncate+0xdc/0x190 fs/open.c:134
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fc18db99749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc18be00038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007fc18ddeffa0 RCX: 00007fc18db99749
RDX: 0000000000000000 RSI: 0000000000000f62 RDI: 0000200000000080
RBP: 00007fc18dc1df91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc18ddf0038 R14: 00007fc18ddeffa0 R15: 00007fff138845e8
</TASK>

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit: 68efe5a6c16a Linux 5.15.197
git tree: linux-5.15.y

console output: https://syzkaller.appspot.com/x/log.txt?x=102359b4580000

kernel config: https://syzkaller.appspot.com/x/.config?x=7e6ed99963d6ee1d
dashboard link: https://syzkaller.appspot.com/bug?extid=72512dec2c8a45e1d53e
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1430922a580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10301d92580000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/900f9b9bd850/disk-68efe5a6.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1e089a5019a6/vmlinux-68efe5a6.xz
kernel image: https://storage.googleapis.com/syzbot-assets/b319f477b907/bzImage-68efe5a6.xz

mounted in repro: https://storage.googleapis.com/syzbot-assets/e35bbad950be/mount_0.gz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+72512d...@syzkaller.appspotmail.com

loop0: detected capacity change from 0 to 4096
ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)

INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.

CPU: 1 PID: 4344 Comm: syz.0.17 Not tainted syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
<TASK>
dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106
assign_lock_key+0x1e0/0x1f0 kernel/locking/lockdep.c:937
register_lock_class+0x20e/0x880 kernel/locking/lockdep.c:1250
__lock_acquire+0x160/0x7c60 kernel/locking/lockdep.c:4891
lock_acquire+0x197/0x3f0 kernel/locking/lockdep.c:5623
down_write+0x38/0x60 kernel/locking/rwsem.c:1551
ntfs_set_size+0x13c/0x1f0 fs/ntfs3/inode.c:845
ntfs_extend+0x15c/0x510 fs/ntfs3/file.c:434
ntfs3_setattr+0x2fa/0xc00 fs/ntfs3/file.c:774
notify_change+0xbcd/0xee0 fs/attr.c:505
do_truncate+0x197/0x220 fs/open.c:65
vfs_truncate+0x262/0x2f0 fs/open.c:111
do_sys_truncate+0xdc/0x190 fs/open.c:134
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0

RIP: 0033:0x7f582dae5749

Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48

RSP: 002b:00007ffe35f32788 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007f582dd3bfa0 RCX: 00007f582dae5749

RDX: 0000000000000000 RSI: 0000000000000f62 RDI: 0000200000000080

RBP: 00007f582db69f91 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000

R13: 00007f582dd3bfa0 R14: 00007f582dd3bfa0 R15: 0000000000000002

</TASK>
------------[ cut here ]------------

DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x1, magic = 0x0, owner = 0xffff88802c273b80, curr 0xffff88802c273b80, list not empty
WARNING: CPU: 1 PID: 4344 at kernel/locking/rwsem.c:1344 __up_write kernel/locking/rwsem.c:1344 [inline]
WARNING: CPU: 1 PID: 4344 at kernel/locking/rwsem.c:1344 up_write+0x2d6/0x420 kernel/locking/rwsem.c:1604
Modules linked in:
CPU: 1 PID: 4344 Comm: syz.0.17 Not tainted syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__up_write kernel/locking/rwsem.c:1344 [inline]
RIP: 0010:up_write+0x2d6/0x420 kernel/locking/rwsem.c:1604
Code: 48 c7 c7 60 0f 0b 8a 48 c7 c6 80 10 0b 8a 48 8b 54 24 08 48 8b 0c 24 4c 8b 44 24 10 4d 89 e1 41 52 e8 8e d1 3b 08 48 83 c4 08 <0f> 0b e9 9d fd ff ff 0f 0b e9 86 fe ff ff c6 05 52 39 fa 0b 01 48

RSP: 0018:ffffc900030efa80 EFLAGS: 00010292
RAX: 0050a5acd91e5300 RBX: ffff88805c96d260 RCX: ffff88802c273b80
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10172267b0
R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff88802c273b80
R13: ffff88805c96d2c8 R14: 1ffff1100b92da59 R15: ffff88805c96d2b8
FS: 00005555904ea500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000

CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033

CR2: 00007f7a6a730000 CR3: 0000000020f4a000 CR4: 00000000003506e0

DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
ntfs_set_size+0x16e/0x1f0 fs/ntfs3/inode.c:850
ntfs_extend+0x15c/0x510 fs/ntfs3/file.c:434
ntfs3_setattr+0x2fa/0xc00 fs/ntfs3/file.c:774
notify_change+0xbcd/0xee0 fs/attr.c:505
do_truncate+0x197/0x220 fs/open.c:65
vfs_truncate+0x262/0x2f0 fs/open.c:111
do_sys_truncate+0xdc/0x190 fs/open.c:134
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0

RIP: 0033:0x7f582dae5749

Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48

RSP: 002b:00007ffe35f32788 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007f582dd3bfa0 RCX: 00007f582dae5749

RDX: 0000000000000000 RSI: 0000000000000f62 RDI: 0000200000000080

RBP: 00007f582db69f91 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000

R13: 00007f582dd3bfa0 R14: 00007f582dd3bfa0 R15: 0000000000000002
</TASK>

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 5fa4793a2d2d Linux 6.6.119
git tree: linux-6.6.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1226ddc2580000
kernel config: https://syzkaller.appspot.com/x/.config?x=691a6769a86ac817
dashboard link: https://syzkaller.appspot.com/bug?extid=1a5c47cea0dcce729502

compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/63699875f1dd/disk-5fa4793a.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/8506652fcb6f/vmlinux-5fa4793a.xz
kernel image: https://storage.googleapis.com/syzbot-assets/1b30ceed1710/bzImage-5fa4793a.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by: syzbot+1a5c47...@syzkaller.appspotmail.com

INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.

CPU: 0 PID: 6000 Comm: syz.0.35 Not tainted syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
<TASK>

dump_stack_lvl+0x16c/0x230 lib/dump_stack.c:106
assign_lock_key+0x1f9/0x230 kernel/locking/lockdep.c:976
register_lock_class+0x212/0x890 kernel/locking/lockdep.c:1289
__lock_acquire+0x17a/0x7c80 kernel/locking/lockdep.c:5014
lock_acquire+0x197/0x410 kernel/locking/lockdep.c:5754
down_write+0x97/0x1f0 kernel/locking/rwsem.c:1573
ntfs_set_size+0x140/0x200 fs/ntfs3/inode.c:848
ntfs_extend+0x157/0x4d0 fs/ntfs3/file.c:335
ntfs3_setattr+0x2ad/0xb60 fs/ntfs3/file.c:708
notify_change+0xb0d/0xe10 fs/attr.c:499
do_truncate+0x19b/0x220 fs/open.c:66
vfs_truncate+0x266/0x300 fs/open.c:112
do_sys_truncate+0xe0/0x1a0 fs/open.c:135
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f30fef8f749

Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48

RSP: 002b:00007f30ffde5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007f30ff1e6180 RCX: 00007f30fef8f749
RDX: 0000000000000000 RSI: 0000000000001bfc RDI: 0000200000000040
RBP: 00007f30ff013f91 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000

R13: 00007f30ff1e6218 R14: 00007f30ff1e6180 R15: 00007fffed1faf28
</TASK>

ntfs3: loop0: ino=19, "file1" attr_set_size

------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x1, magic = 0x0, owner = 0xffff888029b18000, curr 0xffff888029b18000, list not empty
WARNING: CPU: 0 PID: 6000 at kernel/locking/rwsem.c:1364 __up_write kernel/locking/rwsem.c:1364 [inline]
WARNING: CPU: 0 PID: 6000 at kernel/locking/rwsem.c:1364 up_write+0x2c8/0x410 kernel/locking/rwsem.c:1626
Modules linked in:
CPU: 0 PID: 6000 Comm: syz.0.35 Not tainted syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025

RIP: 0010:__up_write kernel/locking/rwsem.c:1364 [inline]
RIP: 0010:up_write+0x2c8/0x410 kernel/locking/rwsem.c:1626
Code: 48 c7 c7 80 b0 aa 8a 48 c7 c6 20 b2 aa 8a 48 8b 54 24 08 48 8b 0c 24 4c 8b 44 24 10 4d 89 e1 41 52 e8 2c a1 e9 ff 48 83 c4 08 <0f> 0b e9 af fd ff ff 0f 0b e9 98 fe ff ff c6 05 61 5a ce 0c 01 48
RSP: 0018:ffffc9000503fa88 EFLAGS: 00010286
RAX: 82567df143180500 RBX: ffff88805e4b4b00 RCX: 0000000000080000
RDX: ffffc90010191000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: dffffc0000000000 R08: ffffc9000503f687 R09: 1ffff92000a07ed0
R10: dffffc0000000000 R11: fffff52000a07ed1 R12: ffff888029b18000
R13: ffff88805e4b4b68 R14: 1ffff1100bc9696d R15: ffff88805e4b4b58
FS: 00007f30ffde56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000

CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033

CR2: 00007f30f4dfe000 CR3: 0000000030b8b000 CR4: 00000000003506f0
Call Trace:
<TASK>
ntfs_set_size+0x172/0x200 fs/ntfs3/inode.c:853
ntfs_extend+0x157/0x4d0 fs/ntfs3/file.c:335
ntfs3_setattr+0x2ad/0xb60 fs/ntfs3/file.c:708
notify_change+0xb0d/0xe10 fs/attr.c:499
do_truncate+0x19b/0x220 fs/open.c:66
vfs_truncate+0x266/0x300 fs/open.c:112
do_sys_truncate+0xe0/0x1a0 fs/open.c:135
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f30fef8f749

Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48

RSP: 002b:00007f30ffde5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007f30ff1e6180 RCX: 00007f30fef8f749
RDX: 0000000000000000 RSI: 0000000000001bfc RDI: 0000200000000040
RBP: 00007f30ff013f91 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000

R13: 00007f30ff1e6218 R14: 00007f30ff1e6180 R15: 00007fffed1faf28

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit: 5fa4793a2d2d Linux 6.6.119
git tree: linux-6.6.y

console output: https://syzkaller.appspot.com/x/log.txt?x=158b351a580000

kernel config: https://syzkaller.appspot.com/x/.config?x=691a6769a86ac817
dashboard link: https://syzkaller.appspot.com/bug?extid=1a5c47cea0dcce729502
compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10bc177c580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15adf558580000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/63699875f1dd/disk-5fa4793a.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/8506652fcb6f/vmlinux-5fa4793a.xz
kernel image: https://storage.googleapis.com/syzbot-assets/1b30ceed1710/bzImage-5fa4793a.xz

mounted in repro: https://storage.googleapis.com/syzbot-assets/bbd3ddd0c541/mount_0.gz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1a5c47...@syzkaller.appspotmail.com

syz.0.17[5921]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set

loop0: detected capacity change from 0 to 4096

ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).

INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.

CPU: 1 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
<TASK>
dump_stack_lvl+0x16c/0x230 lib/dump_stack.c:106
assign_lock_key+0x1f9/0x230 kernel/locking/lockdep.c:976
register_lock_class+0x212/0x890 kernel/locking/lockdep.c:1289
__lock_acquire+0x17a/0x7c80 kernel/locking/lockdep.c:5014
lock_acquire+0x197/0x410 kernel/locking/lockdep.c:5754
down_write+0x97/0x1f0 kernel/locking/rwsem.c:1573
ntfs_set_size+0x140/0x200 fs/ntfs3/inode.c:848
ntfs_extend+0x157/0x4d0 fs/ntfs3/file.c:335
ntfs3_setattr+0x2ad/0xb60 fs/ntfs3/file.c:708
notify_change+0xb0d/0xe10 fs/attr.c:499
do_truncate+0x19b/0x220 fs/open.c:66
vfs_truncate+0x266/0x300 fs/open.c:112
do_sys_truncate+0xe0/0x1a0 fs/open.c:135
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2

RIP: 0033:0x7f246c98f749

Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48

RSP: 002b:00007ffc4dd76e98 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007f246cbe5fa0 RCX: 00007f246c98f749

RDX: 0000000000000000 RSI: 0000000000001bfc RDI: 0000200000000040

RBP: 00007f246ca13f91 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000

R13: 00007f246cbe5fa0 R14: 00007f246cbe5fa0 R15: 0000000000000002

</TASK>
ntfs3: loop0: ino=19, "file1" attr_set_size
------------[ cut here ]------------

DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x1, magic = 0x0, owner = 0xffff8880765c5a00, curr 0xffff8880765c5a00, list not empty
WARNING: CPU: 1 PID: 5921 at kernel/locking/rwsem.c:1364 __up_write kernel/locking/rwsem.c:1364 [inline]
WARNING: CPU: 1 PID: 5921 at kernel/locking/rwsem.c:1364 up_write+0x2c8/0x410 kernel/locking/rwsem.c:1626
Modules linked in:
CPU: 1 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__up_write kernel/locking/rwsem.c:1364 [inline]
RIP: 0010:up_write+0x2c8/0x410 kernel/locking/rwsem.c:1626
Code: 48 c7 c7 80 b0 aa 8a 48 c7 c6 20 b2 aa 8a 48 8b 54 24 08 48 8b 0c 24 4c 8b 44 24 10 4d 89 e1 41 52 e8 2c a1 e9 ff 48 83 c4 08 <0f> 0b e9 af fd ff ff 0f 0b e9 98 fe ff ff c6 05 61 5a ce 0c 01 48

RSP: 0018:ffffc900032c7a88 EFLAGS: 00010286
RAX: 256f409c2579af00 RBX: ffff888072bfad80 RCX: ffff8880765c5a00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: dffffc0000000000 R08: ffffc900032c7787 R09: 1ffff92000658ef0
R10: dffffc0000000000 R11: fffff52000658ef1 R12: ffff8880765c5a00
R13: ffff888072bfade8 R14: 1ffff1100e57f5bd R15: ffff888072bfadd8
FS: 0000555574e80500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000

CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033

CR2: 0000001b33d63fff CR3: 00000000780be000 CR4: 00000000003506e0

Call Trace:
<TASK>
ntfs_set_size+0x172/0x200 fs/ntfs3/inode.c:853
ntfs_extend+0x157/0x4d0 fs/ntfs3/file.c:335
ntfs3_setattr+0x2ad/0xb60 fs/ntfs3/file.c:708
notify_change+0xb0d/0xe10 fs/attr.c:499
do_truncate+0x19b/0x220 fs/open.c:66
vfs_truncate+0x266/0x300 fs/open.c:112
do_sys_truncate+0xe0/0x1a0 fs/open.c:135
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2

RIP: 0033:0x7f246c98f749

Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48

RSP: 002b:00007ffc4dd76e98 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007f246cbe5fa0 RCX: 00007f246c98f749

RDX: 0000000000000000 RSI: 0000000000001bfc RDI: 0000200000000040

RBP: 00007f246ca13f91 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000

R13: 00007f246cbe5fa0 R14: 00007f246cbe5fa0 R15: 0000000000000002