------------[ cut here ]------------ kernel BUG at fs/ntfs/aops.c:207! loop4: rw=0, want=562, limit=207 loop2: rw=0, want=1098, limit=107 attempt to access beyond end of device invalid opcode: 0000 [#1] PREEMPT SMP KASAN attempt to access beyond end of device Modules linked in: CPU: 1 PID: 22146 Comm: syz-executor.3 Not tainted 4.14.256-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8880915c0680 task.stack: ffff8880af230000 loop4: rw=0, want=564, limit=207 RIP: 0010:ntfs_read_block fs/ntfs/aops.c:207 [inline] RIP: 0010:ntfs_readpage+0x14c7/0x1a70 fs/ntfs/aops.c:456 RSP: 0018:ffff8880af237778 EFLAGS: 00010212 loop2: rw=0, want=1100, limit=107 RAX: 0000000000040000 RBX: dffffc0000000000 RCX: ffffc900081ed000 RDX: 00000000000053f8 RSI: ffffffff820fc147 RDI: ffff88809484e0d0 RBP: ffff88809484e0c8 R08: 0000000000000000 R09: ffff88809484e558 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff88809484e080 R14: ffff88809484e348 R15: ffffea0001866ec0 FS: 00007efcca845700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556667808 CR3: 000000009b2aa000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 attempt to access beyond end of device Call Trace: loop4: rw=0, want=566, limit=207 attempt to access beyond end of device do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 loop2: rw=0, want=1102, limit=107 read_mapping_page include/linux/pagemap.h:398 [inline] ntfs_map_page fs/ntfs/aops.h:89 [inline] map_mft_record_page fs/ntfs/mft.c:85 [inline] map_mft_record+0x1ca/0xbe0 fs/ntfs/mft.c:168 ntfs_read_locked_inode+0x1bf/0x51b0 fs/ntfs/inode.c:582 ntfs_read_inode_mount+0xafb/0x2040 fs/ntfs/inode.c:2121 ntfs_fill_super+0x9a6/0x7170 fs/ntfs/super.c:2871 attempt to access beyond end of device loop2: rw=0, want=1104, limit=107 mount_bdev+0x2b3/0x360 fs/super.c:1134 attempt to access beyond end of device mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a10 fs/namespace.c:2902 loop2: rw=0, want=562, limit=107 attempt to access beyond end of device SYSC_mount fs/namespace.c:3118 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3095 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb loop2: rw=0, want=564, limit=107 RIP: 0033:0x7efccb8d101a RSP: 002b:00007efcca844fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007efccb8d101a attempt to access beyond end of device RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007efcca845000 RBP: 00007efcca845040 R08: 00007efcca845040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 R13: 0000000020000100 R14: 00007efcca845000 R15: 000000002007dc00 Code: loop2: rw=0, want=566, limit=107 89 04 00 00 49 83 be 88 fd ff ff 00 0f 85 3e f5 ff ff e8 cd 79 45 ff 49 8b 86 80 fd ff ff a8 08 0f 85 2a f5 ff ff e8 b9 79 45 ff <0f> 0b e8 b2 79 45 ff 48 8b 84 24 88 00 00 00 48 8d b8 c0 fd ff RIP: ntfs_read_block fs/ntfs/aops.c:207 [inline] RSP: ffff8880af237778 RIP: ntfs_readpage+0x14c7/0x1a70 fs/ntfs/aops.c:456 RSP: ffff8880af237778 ---[ end trace c9ce1d4018966e5c ]---