Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 36.096409][ T6004] syz-executor373[6004]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set executing program [ 36.125690][ T6004] loop0: detected capacity change from 0 to 4096 [ 36.129821][ T6004] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 36.133149][ T6004] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 36.135408][ T6004] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 36.138035][ T6004] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 36.141717][ T6004] ntfs: (device loop0): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net [ 36.147103][ T6004] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. executing program [ 36.215210][ T6006] loop0: detected capacity change from 0 to 4096 [ 36.218312][ T6006] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 36.221807][ T6006] ================================================================== [ 36.223922][ T6006] BUG: KASAN: use-after-free in ntfs_attr_find+0x5a0/0x9d0 [ 36.225743][ T6006] Read of size 2 at addr ffff0000dee94042 by task syz-executor373/6006 [ 36.227784][ T6006] [ 36.228358][ T6006] CPU: 0 PID: 6006 Comm: syz-executor373 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 36.230871][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 36.233528][ T6006] Call trace: [ 36.234428][ T6006] dump_backtrace+0x1b8/0x1e4 [ 36.235648][ T6006] show_stack+0x2c/0x44 [ 36.236773][ T6006] dump_stack_lvl+0xd0/0x124 [ 36.238007][ T6006] print_report+0x174/0x514 [ 36.239234][ T6006] kasan_report+0xd8/0x138 [ 36.240449][ T6006] __asan_report_load_n_noabort+0x1c/0x28 [ 36.241982][ T6006] ntfs_attr_find+0x5a0/0x9d0 [ 36.243323][ T6006] ntfs_attr_lookup+0x3dc/0x1cd8 [ 36.244684][ T6006] ntfs_read_locked_inode+0x88c/0x3920 [ 36.246146][ T6006] ntfs_read_inode_mount+0xbb0/0x2044 [ 36.247623][ T6006] ntfs_fill_super+0x13b4/0x2314 [ 36.248988][ T6006] mount_bdev+0x1e8/0x2b4 [ 36.250148][ T6006] ntfs_mount+0x44/0x58 [ 36.251288][ T6006] legacy_get_tree+0xd4/0x16c [ 36.252542][ T6006] vfs_get_tree+0x90/0x288 [ 36.253765][ T6006] do_new_mount+0x25c/0x8c8 [ 36.255032][ T6006] path_mount+0x590/0xe04 [ 36.256179][ T6006] __arm64_sys_mount+0x45c/0x594 [ 36.257541][ T6006] invoke_syscall+0x98/0x2b8 [ 36.258764][ T6006] el0_svc_common+0x130/0x23c [ 36.260013][ T6006] do_el0_svc+0x48/0x58 [ 36.261146][ T6006] el0_svc+0x58/0x16c [ 36.262236][ T6006] el0t_64_sync_handler+0x84/0xfc [ 36.263598][ T6006] el0t_64_sync+0x190/0x194 [ 36.264784][ T6006] [ 36.265413][ T6006] The buggy address belongs to the physical page: [ 36.267176][ T6006] page:00000000995b299a refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x11ee94 [ 36.269940][ T6006] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 36.271922][ T6006] page_type: 0xffffffff() [ 36.273171][ T6006] raw: 05ffc00000000000 fffffc00037ba548 ffff0001b41d6b60 0000000000000000 [ 36.275462][ T6006] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 36.277812][ T6006] page dumped because: kasan: bad access detected [ 36.279533][ T6006] [ 36.280161][ T6006] Memory state around the buggy address: [ 36.281626][ T6006] ffff0000dee93f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.283819][ T6006] ffff0000dee93f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.286046][ T6006] >ffff0000dee94000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.288260][ T6006] ^ [ 36.289876][ T6006] ffff0000dee94080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.292072][ T6006] ffff0000dee94100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.294193][ T6006] ================================================================== [ 36.296527][ T6006] Disabling lock debugging due to kernel taint [ 36.298197][ T6006] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 36.301994][ T6006] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 36.304363][ T6006] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x0 as bad. Run chkdsk. executing program [ 36.362817][ T6007] loop0: detected capacity change from 0 to 4096 executing program [ 36.425863][ T6008] loop0: detected capacity change from 0 to 4096 executing program [ 36.475742][ T6009] loop0: detected capacity change from 0 to 4096 executing program [ 36.585432][ T6010] loop0: detected capacity change from 0 to 4096 executing program [ 36.652994][ T6011] loop0: detected capacity change from 0 to 4096 executing program [ 36.722732][ T6012] loop0: detected capacity change from 0 to 4096 executing program [ 36.743416][ T6013] loop0: detected capacity change from 0 to 4096 executing program [ 36.772910][ T6014] loop0: detected capacity change from 0 to 4096 executing program [ 36.856652][ T6015] loop0: detected capacity change from 0 to 4096 executing program [ 36.915381][ T6016] loop0: detected capacity change from 0 to 4096 executing program [ 36.985869][ T6017] loop0: detected capacity change from 0 to 4096 executing program [ 37.023340][ T6018] loop0: detected capacity change from 0 to 4096 executing program [ 37.063261][ T6019] loop0: detected capacity change from 0 to 4096 executing program [ 37.145508][ T6020] loop0: detected capacity change from 0 to 4096 executing program [ 37.183523][ T6021] loop0: detected capacity change from 0 to 4096 executing program [ 37.243116][ T6022] loop0: detected capacity change from 0 to 4096 executing program [ 37.303844][ T6023] loop0: detected capacity change from 0 to 4096 executing program [ 37.363381][ T6024] loop0: detected capacity change from 0 to 4096 executing program [ 37.432752][ T6025] loop0: detected capacity change from 0 to 4096 executing program [ 37.476152][ T6026] loop0: detected capacity change from 0 to 4096 executing program [ 37.563464][ T6027] loop0: detected capacity change from 0 to 4096 executing program [ 37.633194][ T6028] loop0: detected capacity change from 0 to 4096 executing program [ 37.692053][ T6029] loop0: detected capacity change from 0 to 4096 executing program [ 37.763279][ T6030] loop0: detected capacity change from 0 to 4096 executing program [ 37.846026][ T6031] loop0: detected capacity change from 0 to 4096 executing program [ 37.942762][ T6032] loop0: detected capacity change from 0 to 4096 executing program [ 38.012974][ T6033] loop0: detected capacity change from 0 to 4096 executing program [ 38.093474][ T6034] loop0: detected capacity change from 0 to 4096 executing program [ 38.153362][ T6035] loop0: detected capacity change from 0 to 4096 executing program [ 38.223467][ T6036] loop0: detected capacity change from 0 to 4096 executing program [ 38.302300][ T6037] loop0: detected capacity change from 0 to 4096 executing program [ 38.388426][ T6038] loop0: detected capacity change from 0 to 4096 executing program [ 38.452426][ T6039] loop0: detected capacity change from 0 to 4096 executing program [ 38.523512][ T6040] loop0: detected capacity change from 0 to 4096 executing program [ 38.575864][ T6041] loop0: detected capacity change from 0 to 4096 executing program [ 38.614460][ T6042] loop0: detected capacity change from 0 to 4096 executing program [ 38.664840][ T6043] loop0: detected capacity change from 0 to 4096 executing program [ 38.727120][ T6044] loop0: detected capacity change from 0 to 4096 executing program [ 38.782253][ T6045] loop0: detected capacity change from 0 to 4096 executing program [ 38.852787][ T6046] loop0: detected capacity change from 0 to 4096 executing program [ 38.922906][ T6047] loop0: detected capacity change from 0 to 4096 executing program [ 38.996626][ T6048] loop0: detected capacity change from 0 to 4096 executing program [ 39.064997][ T6049] loop0: detected capacity change from 0 to 4096 executing program [ 39.172187][ T6050] loop0: detected capacity change from 0 to 4096 executing program [ 39.273740][ T6051] loop0: detected capacity change from 0 to 4096 executing program [ 39.313271][ T6052] loop0: detected capacity change from 0 to 4096 executing program [ 39.374279][ T6053] loop0: detected capacity change from 0 to 4096 executing program [ 39.432824][ T6054] loop0: detected capacity change from 0 to 4096 executing program [ 39.503757][ T6055] loop0: detected capacity change from 0 to 4096 executing program [ 39.563443][ T6056] loop0: detected capacity change from 0 to 4096 executing program [ 39.627144][ T6057] loop0: detected capacity change from 0 to 4096 executing program [ 39.683504][ T6058] loop0: detected capacity change from 0 to 4096 executing program [ 39.775091][ T6059] loop0: detected capacity change from 0 to 4096 executing program [ 39.875599][ T6060] loop0: detected capacity change from 0 to 4096 executing program [ 39.925536][ T6061] loop0: detected capacity change from 0 to 4096 executing program [ 40.032801][ T6062] loop0: detected capacity change from 0 to 4096 executing program [ 40.072944][ T6063] loop0: detected capacity change from 0 to 4096 executing program [ 40.132847][ T6064] loop0: detected capacity change from 0 to 4096 executing program [ 40.194944][ T6065] loop0: detected capacity change from 0 to 4096 executing program [ 40.254160][ T6066] loop0: detected capacity change from 0 to 4096 executing program [ 40.302160][ T6067] loop0: detected capacity change from 0 to 4096 executing program [ 40.354211][ T6068] loop0: detected capacity change from 0 to 4096 executing program [ 40.440717][ T6069] loop0: detected capacity change from 0 to 4096 executing program [ 40.484020][ T6070] loop0: detected capacity change from 0 to 4096 executing program [ 40.546914][ T6071] loop0: detected capacity change from 0 to 4096 executing program [ 40.622051][ T6072] loop0: detected capacity change from 0 to 4096 executing program [ 40.676959][ T6073] loop0: detected capacity change from 0 to 4096 executing program [ 40.743172][ T6074] loop0: detected capacity change from 0 to 4096 executing program [ 40.815229][ T6075] loop0: detected capacity change from 0 to 4096 executing program [ 40.885574][ T6076] loop0: detected capacity change from 0 to 4096 executing program [ 40.954369][ T6077] loop0: detected capacity change from 0 to 4096 executing program [ 41.003105][ T6078] loop0: detected capacity change from 0 to 4096 executing program [ 41.134994][ T6079] loop0: detected capacity change from 0 to 4096 [ 41.136995][ T6079] __ntfs_warning: 434 callbacks suppressed [ 41.137005][ T6079] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 41.141859][ T6079] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 41.145673][ T6079] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 41.147981][ T6079] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 41.151852][ T6079] ntfs: (device loop0): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net [ 41.157164][ T6079] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. executing program [ 41.213389][ T6080] loop0: detected capacity change from 0 to 4096 [ 41.215416][ T6080] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 41.218294][ T6080] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 41.222266][ T6080] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 41.224546][ T6080] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x0 as bad. Run chkdsk. executing program [ 41.305562][ T6081] loop0: detected capacity change from 0 to 4096 executing program [ 41.372464][ T6082] loop0: detected capacity change from 0 to 4096 executing program [ 41.432766][ T6083] loop0: detected capacity change from 0 to 4096 executing program [ 41.494596][ T6084] loop0: detected capacity change from 0 to 4096 executing program [ 41.593542][ T6085] loop0: detected capacity change from 0 to 4096 executing program [ 41.663390][ T6086] loop0: detected capacity change from 0 to 4096 executing program executing program [ 41.732213][ T6087] loop0: detected capacity change from 0 to 4096 [ 41.735733][ T6087] ntfs: volume version 128.84. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program