Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts. executing program [ 45.339655][ T3499] loop0: detected capacity change from 0 to 4096 [ 45.350325][ T3499] ntfs: (device loop0): ntfs_is_extended_system_file(): Corrupt file name attribute. You should run chkdsk. [ 45.361947][ T3499] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 45.371277][ T3499] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 45.384595][ T3499] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 45.405629][ T3499] ntfs: volume version 3.1. [ 45.412218][ T3499] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 45.422243][ T3499] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 45.434152][ T3499] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 45.455693][ T3499] ================================================================== [ 45.463971][ T3499] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xed5/0x36f0 [ 45.471462][ T3499] Read of size 1 at addr ffff8881481466f1 by task syz-executor201/3499 [ 45.480449][ T3499] [ 45.483410][ T3499] CPU: 1 PID: 3499 Comm: syz-executor201 Not tainted 5.15.118-syzkaller #0 [ 45.494370][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 45.505216][ T3499] Call Trace: [ 45.508588][ T3499] [ 45.511724][ T3499] dump_stack_lvl+0x1e3/0x2cb [ 45.516582][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 45.522259][ T3499] ? _printk+0xd1/0x111 [ 45.526711][ T3499] ? __wake_up_klogd+0xcc/0x100 [ 45.531925][ T3499] ? panic+0x84d/0x84d [ 45.536612][ T3499] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 45.542218][ T3499] print_address_description+0x63/0x3b0 [ 45.547858][ T3499] ? ntfs_readdir+0xed5/0x36f0 [ 45.552654][ T3499] kasan_report+0x16b/0x1c0 [ 45.557263][ T3499] ? ntfs_readdir+0xed5/0x36f0 [ 45.562028][ T3499] ntfs_readdir+0xed5/0x36f0 [ 45.566659][ T3499] ? ntfs_unmap_page+0x1e0/0x1e0 [ 45.571698][ T3499] ? down_write+0x170/0x170 [ 45.576199][ T3499] ? common_file_perm+0x17d/0x1d0 [ 45.581391][ T3499] ? fsnotify_perm+0x438/0x5a0 [ 45.586282][ T3499] iterate_dir+0x224/0x570 [ 45.590715][ T3499] __se_sys_getdents64+0x209/0x4f0 [ 45.596167][ T3499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 45.602443][ T3499] ? __x64_sys_getdents64+0x80/0x80 [ 45.607968][ T3499] ? filldir+0x720/0x720 [ 45.612320][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 45.618299][ T3499] ? lockdep_hardirqs_on+0x94/0x130 [ 45.623575][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 45.629543][ T3499] do_syscall_64+0x3d/0xb0 [ 45.633948][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.639847][ T3499] RIP: 0033:0x7f0208a327b9 [ 45.644267][ T3499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.663949][ T3499] RSP: 002b:00007ffd50755428 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 45.672349][ T3499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0208a327b9 [ 45.680306][ T3499] RDX: 00000000000000ab RSI: 0000000020000080 RDI: 0000000000000004 [ 45.688275][ T3499] RBP: 00007f02089f2050 R08: 0000000000000000 R09: 0000000000000000 [ 45.696242][ T3499] R10: 000000000001f1b8 R11: 0000000000000246 R12: 00007f02089f20e0 [ 45.704200][ T3499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.712164][ T3499] [ 45.715323][ T3499] [ 45.717638][ T3499] Allocated by task 3499: [ 45.721950][ T3499] ____kasan_kmalloc+0xba/0xf0 [ 45.726704][ T3499] __kmalloc+0x168/0x300 [ 45.730943][ T3499] ntfs_readdir+0x823/0x36f0 [ 45.735536][ T3499] iterate_dir+0x224/0x570 [ 45.739938][ T3499] __se_sys_getdents64+0x209/0x4f0 [ 45.745052][ T3499] do_syscall_64+0x3d/0xb0 [ 45.749467][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.755339][ T3499] [ 45.757640][ T3499] The buggy address belongs to the object at ffff888148146680 [ 45.757640][ T3499] which belongs to the cache kmalloc-64 of size 64 [ 45.771494][ T3499] The buggy address is located 49 bytes to the right of [ 45.771494][ T3499] 64-byte region [ffff888148146680, ffff8881481466c0) [ 45.785102][ T3499] The buggy address belongs to the page: [ 45.790887][ T3499] page:ffffea0005205180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148146 [ 45.801194][ T3499] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 45.808900][ T3499] raw: 057ff00000000200 ffffea00006dc9c0 0000000700000007 ffff888011c41640 [ 45.817557][ T3499] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 45.826135][ T3499] page dumped because: kasan: bad access detected [ 45.832547][ T3499] page_owner tracks the page as allocated [ 45.838250][ T3499] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 6790493730, free_ts 0 [ 45.853485][ T3499] get_page_from_freelist+0x322a/0x33c0 [ 45.859295][ T3499] __alloc_pages+0x272/0x700 [ 45.863888][ T3499] alloc_page_interleave+0x22/0x1c0 [ 45.869079][ T3499] new_slab+0xbb/0x4b0 [ 45.873129][ T3499] ___slab_alloc+0x6f6/0xe10 [ 45.878069][ T3499] __kmalloc+0x1c9/0x300 [ 45.882292][ T3499] kobject_get_path+0xb4/0x220 [ 45.887037][ T3499] kobject_uevent_env+0x298/0x8d0 [ 45.892427][ T3499] device_add+0xa4f/0xfd0 [ 45.896753][ T3499] wiphy_register+0x1d30/0x2bb0 [ 45.901591][ T3499] ieee80211_register_hw+0x2986/0x39d0 [ 45.907032][ T3499] mac80211_hwsim_new_radio+0x223d/0x4200 [ 45.912737][ T3499] init_mac80211_hwsim+0x775/0x9aa [ 45.917830][ T3499] do_one_initcall+0x22b/0x7a0 [ 45.922578][ T3499] do_initcall_level+0x157/0x207 [ 45.927496][ T3499] do_initcalls+0x49/0x86 [ 45.931805][ T3499] page_owner free stack trace missing [ 45.937153][ T3499] [ 45.939462][ T3499] Memory state around the buggy address: [ 45.945213][ T3499] ffff888148146580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 45.953348][ T3499] ffff888148146600: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 45.961404][ T3499] >ffff888148146680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 45.969453][ T3499] ^ [ 45.977169][ T3499] ffff888148146700: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 45.985228][ T3499] ffff888148146780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 45.993536][ T3499] ================================================================== [ 46.001591][ T3499] Disabling lock debugging due to kernel taint [ 46.008025][ T3499] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 46.015225][ T3499] CPU: 0 PID: 3499 Comm: syz-executor201 Tainted: G B 5.15.118-syzkaller #0 [ 46.025182][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 46.035218][ T3499] Call Trace: [ 46.038477][ T3499] [ 46.041387][ T3499] dump_stack_lvl+0x1e3/0x2cb [ 46.046044][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 46.052015][ T3499] ? panic+0x84d/0x84d [ 46.056080][ T3499] ? rcu_is_watching+0x11/0xa0 [ 46.060834][ T3499] ? preempt_schedule_common+0xa6/0xd0 [ 46.066357][ T3499] panic+0x318/0x84d [ 46.070319][ T3499] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 46.076537][ T3499] ? check_panic_on_warn+0x1d/0xa0 [ 46.081755][ T3499] ? fb_is_primary_device+0xcc/0xcc [ 46.086944][ T3499] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 46.092912][ T3499] ? _raw_spin_unlock+0x40/0x40 [ 46.098259][ T3499] check_panic_on_warn+0x7e/0xa0 [ 46.103786][ T3499] ? ntfs_readdir+0xed5/0x36f0 [ 46.108527][ T3499] end_report+0x6d/0xf0 [ 46.112684][ T3499] kasan_report+0x18e/0x1c0 [ 46.117165][ T3499] ? ntfs_readdir+0xed5/0x36f0 [ 46.121913][ T3499] ntfs_readdir+0xed5/0x36f0 [ 46.126484][ T3499] ? ntfs_unmap_page+0x1e0/0x1e0 [ 46.131402][ T3499] ? down_write+0x170/0x170 [ 46.135882][ T3499] ? common_file_perm+0x17d/0x1d0 [ 46.140888][ T3499] ? fsnotify_perm+0x438/0x5a0 [ 46.145632][ T3499] iterate_dir+0x224/0x570 [ 46.150027][ T3499] __se_sys_getdents64+0x209/0x4f0 [ 46.155121][ T3499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 46.161276][ T3499] ? __x64_sys_getdents64+0x80/0x80 [ 46.166468][ T3499] ? filldir+0x720/0x720 [ 46.170700][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 46.176673][ T3499] ? lockdep_hardirqs_on+0x94/0x130 [ 46.181852][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 46.187816][ T3499] do_syscall_64+0x3d/0xb0 [ 46.192214][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.198092][ T3499] RIP: 0033:0x7f0208a327b9 [ 46.202497][ T3499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 46.222099][ T3499] RSP: 002b:00007ffd50755428 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 46.230494][ T3499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0208a327b9 [ 46.238445][ T3499] RDX: 00000000000000ab RSI: 0000000020000080 RDI: 0000000000000004 [ 46.246498][ T3499] RBP: 00007f02089f2050 R08: 0000000000000000 R09: 0000000000000000 [ 46.254468][ T3499] R10: 000000000001f1b8 R11: 0000000000000246 R12: 00007f02089f20e0 [ 46.262519][ T3499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.270489][ T3499] [ 46.273683][ T3499] Kernel Offset: disabled [ 46.277991][ T3499] Rebooting in 86400 seconds..