[ 15.371222][ T3966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.379423][ T3966] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.416864][ T246] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.419954][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. executing program syzkaller login: [ 37.312793][ T4292] loop0: detected capacity change from 0 to 4096 [ 37.318736][ T4292] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 37.321124][ T4292] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 37.324370][ T4292] ntfs: (device loop0): ntfs_read_locked_inode(): Found unknown compression method or corrupt file. [ 37.326887][ T4292] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 37.329681][ T4292] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 37.332809][ T4292] ntfs: volume version 3.1. [ 37.335772][ T4292] ================================================================== [ 37.337425][ T4292] BUG: KASAN: use-after-free in ntfs_lookup_inode_by_name+0xb28/0x2824 [ 37.339280][ T4292] Read of size 8 at addr ffff0000dfad8962 by task syz-executor129/4292 [ 37.340882][ T4292] [ 37.341396][ T4292] CPU: 0 PID: 4292 Comm: syz-executor129 Not tainted 6.1.119-syzkaller #0 [ 37.343078][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.345233][ T4292] Call trace: [ 37.345933][ T4292] dump_backtrace+0x1c8/0x1f4 [ 37.346857][ T4292] show_stack+0x2c/0x3c [ 37.347773][ T4292] dump_stack_lvl+0x108/0x170 [ 37.348867][ T4292] print_report+0x174/0x4c0 [ 37.349801][ T4292] kasan_report+0xd4/0x130 [ 37.350738][ T4292] __asan_report_load8_noabort+0x2c/0x38 [ 37.351909][ T4292] ntfs_lookup_inode_by_name+0xb28/0x2824 [ 37.353100][ T4292] check_windows_hibernation_status+0xe4/0x630 [ 37.354521][ T4292] load_system_files+0x3494/0x4734 [ 37.355689][ T4292] ntfs_fill_super+0x14e0/0x2314 [ 37.356832][ T4292] mount_bdev+0x274/0x370 [ 37.357759][ T4292] ntfs_mount+0x44/0x58 [ 37.358629][ T4292] legacy_get_tree+0xd4/0x16c [ 37.359663][ T4292] vfs_get_tree+0x90/0x274 [ 37.360665][ T4292] do_new_mount+0x278/0x8fc [ 37.361572][ T4292] path_mount+0x590/0xe5c [ 37.362607][ T4292] __arm64_sys_mount+0x45c/0x594 [ 37.363794][ T4292] invoke_syscall+0x98/0x2bc [ 37.364762][ T4292] el0_svc_common+0x138/0x258 [ 37.365742][ T4292] do_el0_svc+0x58/0x13c [ 37.366633][ T4292] el0_svc+0x58/0x168 [ 37.367486][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 37.368549][ T4292] el0t_64_sync+0x18c/0x190 [ 37.369541][ T4292] [ 37.370060][ T4292] The buggy address belongs to the physical page: [ 37.371451][ T4292] page:00000000d1c0e007 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x11fad8 [ 37.373741][ T4292] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 37.375272][ T4292] raw: 05ffc00000000000 fffffc00037e7508 fffffc00037e6e88 0000000000000000 [ 37.377185][ T4292] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 37.379068][ T4292] page dumped because: kasan: bad access detected [ 37.380558][ T4292] [ 37.381098][ T4292] Memory state around the buggy address: [ 37.382344][ T4292] ffff0000dfad8800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.384001][ T4292] ffff0000dfad8880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.385752][ T4292] >ffff0000dfad8900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.387395][ T4292] ^ [ 37.388979][ T4292] ffff0000dfad8980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.390755][ T4292] ffff0000dfad8a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.392487][ T4292] ================================================================== [ 37.394489][ T4292] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program