loop3: rw=0, sector=566, nr_sectors = 2 limit=0 ntfs3(loop3): failed to read volume at offset 0x46c00 syz.3.1703: attempt to access beyond end of device loop3: rw=0, sector=566, nr_sectors = 2 limit=0 ===================================================== BUG: KMSAN: uninit-value in ntfs_fix_post_read fs/ntfs3/fsntfs.c:180 [inline] BUG: KMSAN: uninit-value in ntfs_read_bh+0x238/0xc00 fs/ntfs3/fsntfs.c:1297 ntfs_fix_post_read fs/ntfs3/fsntfs.c:180 [inline] ntfs_read_bh+0x238/0xc00 fs/ntfs3/fsntfs.c:1297 mi_read+0x393/0xe10 fs/ntfs3/record.c:133 mi_get+0x181/0x560 fs/ntfs3/record.c:85 ni_load_mi_ex+0x23f/0x720 fs/ntfs3/frecord.c:150 ni_load_mi+0x122/0x170 fs/ntfs3/frecord.c:182 attr_set_size+0x3e42/0x6740 fs/ntfs3/attrib.c:786 ntfs_file_release+0x255/0x310 fs/ntfs3/file.c:1297 __fput+0x60b/0x1040 fs/file_table.c:468 ____fput+0x25/0x30 fs/file_table.c:496 task_work_run+0x206/0x2b0 kernel/task_work.c:227 get_signal+0x139/0x2a20 kernel/signal.c:2807 arch_do_signal_or_restart+0x53/0xbf0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0xec/0x330 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x1e3/0x210 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: ntfs_read_run_nb+0x7cf/0x1810 fs/ntfs3/fsntfs.c:1232 ntfs_read_bh+0x6a/0xc00 fs/ntfs3/fsntfs.c:1293 mi_read+0x393/0xe10 fs/ntfs3/record.c:133 mi_get+0x181/0x560 fs/ntfs3/record.c:85 ni_load_mi_ex+0x23f/0x720 fs/ntfs3/frecord.c:150 ni_load_mi+0x122/0x170 fs/ntfs3/frecord.c:182 attr_set_size+0x3e42/0x6740 fs/ntfs3/attrib.c:786 ntfs_file_release+0x255/0x310 fs/ntfs3/file.c:1297 __fput+0x60b/0x1040 fs/file_table.c:468 ____fput+0x25/0x30 fs/file_table.c:496 task_work_run+0x206/0x2b0 kernel/task_work.c:227 get_signal+0x139/0x2a20 kernel/signal.c:2807 arch_do_signal_or_restart+0x53/0xbf0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0xec/0x330 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x1e3/0x210 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: __alloc_frozen_pages_noprof+0x689/0xf00 mm/page_alloc.c:5171 alloc_pages_mpol+0x328/0x860 mm/mempolicy.c:2416 alloc_frozen_pages_noprof mm/mempolicy.c:2487 [inline] alloc_pages_noprof mm/mempolicy.c:2507 [inline] folio_alloc_noprof+0x109/0x360 mm/mempolicy.c:2517 filemap_alloc_folio_noprof+0x9d/0x420 mm/filemap.c:1007 __filemap_get_folio+0xb45/0x1930 mm/filemap.c:1981 grow_dev_folio fs/buffer.c:1050 [inline] grow_buffers fs/buffer.c:1116 [inline] __getblk_slow fs/buffer.c:1134 [inline] bdev_getblk+0x25a/0xad0 fs/buffer.c:1461 __bread_gfp+0x99/0x690 fs/buffer.c:1515 sb_bread_unmovable include/linux/buffer_head.h:352 [inline] ntfs_bread fs/ntfs3/fsntfs.c:1033 [inline] ntfs_read_run_nb+0x6d5/0x1810 fs/ntfs3/fsntfs.c:1225 ntfs_read_bh+0x6a/0xc00 fs/ntfs3/fsntfs.c:1293 mi_read+0x393/0xe10 fs/ntfs3/record.c:133 mi_format_new+0x21f/0x910 fs/ntfs3/record.c:434 ni_add_subrecord+0x15e/0x770 fs/ntfs3/frecord.c:321 ntfs_look_free_mft+0xca0/0x1850 fs/ntfs3/fsntfs.c:715 ni_ins_attr_ext+0xf7b/0x1480 fs/ntfs3/frecord.c:988 ni_insert_attr+0x299/0xfb0 fs/ntfs3/frecord.c:1091 ni_insert_nonresident+0x3bd/0x8d0 fs/ntfs3/frecord.c:1426 attr_punch_hole+0x1617/0x2420 fs/ntfs3/attrib.c:2255 ntfs_fallocate+0x1c02/0x2720 fs/ntfs3/file.c:592 vfs_fallocate+0x949/0xaa0 fs/open.c:342 ioctl_preallocate fs/ioctl.c:290 [inline] file_ioctl+0xb35/0xe00 fs/ioctl.c:-1 do_vfs_ioctl+0x124b/0x2900 fs/ioctl.c:577 __do_sys_ioctl fs/ioctl.c:596 [inline] __se_sys_ioctl+0x163/0x400 fs/ioctl.c:584 __x64_sys_ioctl+0x97/0xe0 fs/ioctl.c:584 x64_sys_call+0x1cbc/0x3e20 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 1 UID: 0 PID: 12448 Comm: syz.3.1703 Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 =====================================================