Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts. executing program [ 57.896313][ T3543] loop0: detected capacity change from 0 to 4096 [ 57.926572][ T3543] ntfs: (device loop0): ntfs_is_extended_system_file(): Corrupt file name attribute. You should run chkdsk. [ 57.938224][ T3543] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 57.947120][ T3543] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 57.960132][ T3543] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 57.980227][ T3543] ntfs: volume version 3.1. [ 57.986638][ T3543] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 57.996883][ T3543] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 58.008456][ T3543] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 58.025545][ T3543] ================================================================== [ 58.033634][ T3543] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xe9d/0x2b70 [ 58.041137][ T3543] Read of size 1 at addr ffff8880183a0171 by task syz-executor227/3543 [ 58.049397][ T3543] [ 58.051749][ T3543] CPU: 1 PID: 3543 Comm: syz-executor227 Not tainted 6.1.32-syzkaller #0 [ 58.060183][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 58.070254][ T3543] Call Trace: [ 58.073542][ T3543] [ 58.076467][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 58.081154][ T3543] ? irq_work_queue+0xc6/0x150 [ 58.085921][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 58.091380][ T3543] ? panic+0x75d/0x75d [ 58.095453][ T3543] ? _printk+0xd1/0x111 [ 58.099610][ T3543] ? _raw_spin_lock_irqsave+0xac/0x120 [ 58.105063][ T3543] print_report+0x15f/0x4f0 [ 58.109569][ T3543] ? mutex_unlock+0x10/0x10 [ 58.114072][ T3543] ? __virt_addr_valid+0x22b/0x2e0 [ 58.119183][ T3543] ? __phys_addr+0xb6/0x170 [ 58.123683][ T3543] ? ntfs_readdir+0xe9d/0x2b70 [ 58.128447][ T3543] kasan_report+0x136/0x160 [ 58.132952][ T3543] ? ntfs_readdir+0xe9d/0x2b70 [ 58.137735][ T3543] ntfs_readdir+0xe9d/0x2b70 [ 58.142327][ T3543] ? read_lock_is_recursive+0x10/0x10 [ 58.147693][ T3543] ? rwsem_write_trylock+0x166/0x210 [ 58.153000][ T3543] ? clear_nonspinnable+0x60/0x60 [ 58.158053][ T3543] ? ntfs_unmap_page+0x250/0x250 [ 58.163087][ T3543] ? common_file_perm+0x17d/0x1d0 [ 58.168111][ T3543] ? iterate_dir+0x131/0x560 [ 58.172694][ T3543] iterate_dir+0x224/0x560 [ 58.177107][ T3543] __se_sys_getdents64+0x209/0x4f0 [ 58.182222][ T3543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 58.188192][ T3543] ? __x64_sys_getdents64+0x80/0x80 [ 58.193383][ T3543] ? filldir+0x6f0/0x6f0 [ 58.197624][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 58.203603][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 58.208800][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 58.214782][ T3543] do_syscall_64+0x3d/0xb0 [ 58.219195][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.225090][ T3543] RIP: 0033:0x7fee9e6a67b9 [ 58.229498][ T3543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.249097][ T3543] RSP: 002b:00007ffe6cf3ecd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 58.257502][ T3543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee9e6a67b9 [ 58.265466][ T3543] RDX: 00000000000000ab RSI: 0000000020000080 RDI: 0000000000000004 [ 58.273427][ T3543] RBP: 00007fee9e666050 R08: 0000000000000000 R09: 0000000000000000 [ 58.281386][ T3543] R10: 000000000001f1b8 R11: 0000000000000246 R12: 00007fee9e6660e0 [ 58.289348][ T3543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.297315][ T3543] [ 58.300330][ T3543] [ 58.302639][ T3543] Allocated by task 3543: [ 58.306951][ T3543] kasan_set_track+0x4b/0x70 [ 58.311539][ T3543] __kasan_kmalloc+0x97/0xb0 [ 58.316124][ T3543] __kmalloc+0xb2/0x230 [ 58.320268][ T3543] ntfs_readdir+0x825/0x2b70 [ 58.324853][ T3543] iterate_dir+0x224/0x560 [ 58.329255][ T3543] __se_sys_getdents64+0x209/0x4f0 [ 58.334369][ T3543] do_syscall_64+0x3d/0xb0 [ 58.338784][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.344676][ T3543] [ 58.346989][ T3543] The buggy address belongs to the object at ffff8880183a0100 [ 58.346989][ T3543] which belongs to the cache kmalloc-64 of size 64 [ 58.360856][ T3543] The buggy address is located 49 bytes to the right of [ 58.360856][ T3543] 64-byte region [ffff8880183a0100, ffff8880183a0140) [ 58.374465][ T3543] [ 58.376795][ T3543] The buggy address belongs to the physical page: [ 58.383191][ T3543] page:ffffea000060e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x183a0 [ 58.393328][ T3543] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 58.400864][ T3543] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888012441640 [ 58.409436][ T3543] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 58.418093][ T3543] page dumped because: kasan: bad access detected [ 58.424491][ T3543] page_owner tracks the page as allocated [ 58.430189][ T3543] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 2982, tgid 2982 (S02acpid), ts 17526653741, free_ts 17511386977 [ 58.447989][ T3543] post_alloc_hook+0x18d/0x1b0 [ 58.452757][ T3543] get_page_from_freelist+0x32ed/0x3480 [ 58.458316][ T3543] __alloc_pages+0x28d/0x770 [ 58.462895][ T3543] alloc_slab_page+0x6a/0x150 [ 58.467567][ T3543] new_slab+0x84/0x2d0 [ 58.471628][ T3543] ___slab_alloc+0xa71/0x1080 [ 58.476297][ T3543] __kmem_cache_alloc_node+0x19f/0x260 [ 58.481749][ T3543] __kmalloc+0xa1/0x230 [ 58.485893][ T3543] tomoyo_commit_ok+0x25/0x1d0 [ 58.490648][ T3543] tomoyo_update_domain+0x54d/0x890 [ 58.495841][ T3543] tomoyo_write_file+0x393/0xe50 [ 58.500813][ T3543] tomoyo_write_domain2+0x1d8/0x240 [ 58.506010][ T3543] tomoyo_supervisor+0xfe2/0x12d0 [ 58.511042][ T3543] tomoyo_path_permission+0x243/0x360 [ 58.516417][ T3543] tomoyo_check_open_permission+0x2e6/0x490 [ 58.522309][ T3543] security_file_open+0x5f/0xa0 [ 58.527159][ T3543] page last free stack trace: [ 58.531819][ T3543] free_unref_page_prepare+0xf63/0x1120 [ 58.537368][ T3543] free_unref_page_list+0x107/0x810 [ 58.542566][ T3543] release_pages+0x2836/0x2b40 [ 58.547329][ T3543] tlb_flush_mmu+0xfc/0x210 [ 58.551830][ T3543] tlb_finish_mmu+0xce/0x1f0 [ 58.556416][ T3543] exit_mmap+0x3c3/0x9f0 [ 58.560654][ T3543] __mmput+0x115/0x3c0 [ 58.564730][ T3543] exec_mmap+0x4fa/0x5b0 [ 58.568965][ T3543] begin_new_exec+0x7ac/0x1030 [ 58.573738][ T3543] load_elf_binary+0x945/0x2750 [ 58.578579][ T3543] bprm_execve+0x8ff/0x1820 [ 58.583071][ T3543] do_execveat_common+0x580/0x720 [ 58.588082][ T3543] __x64_sys_execve+0x8e/0xa0 [ 58.592764][ T3543] do_syscall_64+0x3d/0xb0 [ 58.597172][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.603076][ T3543] [ 58.605385][ T3543] Memory state around the buggy address: [ 58.610995][ T3543] ffff8880183a0000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 58.619043][ T3543] ffff8880183a0080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.627091][ T3543] >ffff8880183a0100: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 58.635138][ T3543] ^ [ 58.642834][ T3543] ffff8880183a0180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.650882][ T3543] ffff8880183a0200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.658929][ T3543] ================================================================== [ 58.667232][ T3543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.674431][ T3543] CPU: 1 PID: 3543 Comm: syz-executor227 Not tainted 6.1.32-syzkaller #0 [ 58.682842][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 58.692904][ T3543] Call Trace: [ 58.696190][ T3543] [ 58.699126][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 58.703814][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 58.709280][ T3543] ? panic+0x75d/0x75d [ 58.713356][ T3543] ? preempt_schedule_common+0xa6/0xd0 [ 58.718827][ T3543] ? vscnprintf+0x59/0x80 [ 58.723176][ T3543] panic+0x318/0x75d [ 58.727101][ T3543] ? check_panic_on_warn+0x1d/0xa0 [ 58.732224][ T3543] ? memcpy_page_flushcache+0xfc/0xfc [ 58.737607][ T3543] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 58.743591][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 58.748439][ T3543] ? print_report+0x4a3/0x4f0 [ 58.753129][ T3543] check_panic_on_warn+0x7e/0xa0 [ 58.758076][ T3543] ? ntfs_readdir+0xe9d/0x2b70 [ 58.762854][ T3543] end_report+0x66/0x110 [ 58.767112][ T3543] kasan_report+0x143/0x160 [ 58.771626][ T3543] ? ntfs_readdir+0xe9d/0x2b70 [ 58.776400][ T3543] ntfs_readdir+0xe9d/0x2b70 [ 58.780996][ T3543] ? read_lock_is_recursive+0x10/0x10 [ 58.786371][ T3543] ? rwsem_write_trylock+0x166/0x210 [ 58.791666][ T3543] ? clear_nonspinnable+0x60/0x60 [ 58.796742][ T3543] ? ntfs_unmap_page+0x250/0x250 [ 58.801718][ T3543] ? common_file_perm+0x17d/0x1d0 [ 58.806753][ T3543] ? iterate_dir+0x131/0x560 [ 58.811343][ T3543] iterate_dir+0x224/0x560 [ 58.815761][ T3543] __se_sys_getdents64+0x209/0x4f0 [ 58.820874][ T3543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 58.826865][ T3543] ? __x64_sys_getdents64+0x80/0x80 [ 58.832062][ T3543] ? filldir+0x6f0/0x6f0 [ 58.836305][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 58.842289][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 58.847522][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 58.853510][ T3543] do_syscall_64+0x3d/0xb0 [ 58.857930][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.863821][ T3543] RIP: 0033:0x7fee9e6a67b9 [ 58.868237][ T3543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.887841][ T3543] RSP: 002b:00007ffe6cf3ecd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 58.896256][ T3543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee9e6a67b9 [ 58.904227][ T3543] RDX: 00000000000000ab RSI: 0000000020000080 RDI: 0000000000000004 [ 58.912197][ T3543] RBP: 00007fee9e666050 R08: 0000000000000000 R09: 0000000000000000 [ 58.920181][ T3543] R10: 000000000001f1b8 R11: 0000000000000246 R12: 00007fee9e6660e0 [ 58.928148][ T3543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.936121][ T3543] [ 58.939392][ T3543] Kernel Offset: disabled [ 58.943721][ T3543] Rebooting in 86400 seconds..