Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts.
Setting up swapspace version 1, size = 127995904 bytes
[ 59.223756][ T5042] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
executing program
[ 59.333961][ T5044] loop0: detected capacity change from 0 to 4096
[ 59.348929][ T5044] ==================================================================
[ 59.357038][ T5044] BUG: KASAN: use-after-free in ntfs_attr_find+0x7d6/0xd50
[ 59.364278][ T5044] Read of size 2 at addr ffff888076e8a442 by task syz-executor604/5044
[ 59.372516][ T5044]
[ 59.374867][ T5044] CPU: 0 PID: 5044 Comm: syz-executor604 Not tainted 6.7.0-syzkaller-12824-g9d64bf433c53 #0
[ 59.384948][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 59.395027][ T5044] Call Trace:
[ 59.398293][ T5044]
[ 59.401204][ T5044] dump_stack_lvl+0x1e7/0x2d0
[ 59.405896][ T5044] ? tcp_gro_dev_warn+0x260/0x260
[ 59.410940][ T5044] ? panic+0x850/0x850
[ 59.415013][ T5044] ? _printk+0xd5/0x120
[ 59.419151][ T5044] ? __virt_addr_valid+0x17e/0x480
[ 59.424268][ T5044] print_report+0x163/0x540
[ 59.428773][ T5044] ? __virt_addr_valid+0x17e/0x480
[ 59.433864][ T5044] ? __virt_addr_valid+0x3d1/0x480
[ 59.438953][ T5044] ? __phys_addr+0xba/0x170
[ 59.443437][ T5044] ? ntfs_attr_find+0x7d6/0xd50
[ 59.448314][ T5044] kasan_report+0x142/0x170
[ 59.452829][ T5044] ? ntfs_attr_find+0x7d6/0xd50
[ 59.457677][ T5044] ntfs_attr_find+0x7d6/0xd50
[ 59.462358][ T5044] ntfs_attr_lookup+0x4e4/0x2390
[ 59.467296][ T5044] ? ntfs_attr_get_search_ctx+0x51/0x180
[ 59.472918][ T5044] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0
[ 59.478893][ T5044] ? trace_kmem_cache_alloc+0x1f/0x90
[ 59.484264][ T5044] ? kmem_cache_alloc+0x1bf/0x340
[ 59.489278][ T5044] ? ntfs_attr_get_search_ctx+0x51/0x180
[ 59.494897][ T5044] ? __asan_memset+0x23/0x40
[ 59.499588][ T5044] ? ntfs_attr_reinit_search_ctx+0x4f/0x2e0
[ 59.505468][ T5044] ntfs_read_locked_inode+0xa32/0x4940
[ 59.510910][ T5044] ? inode_insert5+0x3f4/0x500
[ 59.515659][ T5044] ? _compound_head+0x120/0x120
[ 59.520483][ T5044] ? ntfs_iget+0x190/0x190
[ 59.524874][ T5044] ? iget5_locked+0x137/0x270
[ 59.529539][ T5044] ? ntfs_iget+0x190/0x190
[ 59.533932][ T5044] ntfs_iget+0x113/0x190
[ 59.538168][ T5044] ? ntfs_test_inode+0x2e0/0x2e0
[ 59.543101][ T5044] ? __lock_acquire+0x1fd0/0x1fd0
[ 59.548230][ T5044] load_system_files+0x100/0x4840
[ 59.553345][ T5044] ? __mutex_unlock_slowpath+0x21c/0x750
[ 59.559010][ T5044] ? free_vm_area+0x60/0x60
[ 59.563619][ T5044] ? ntfs_setup_allocators+0x2d0/0x2d0
[ 59.569066][ T5044] ? mutex_unlock+0x10/0x10
[ 59.573557][ T5044] ? __asan_memset+0x23/0x40
[ 59.578124][ T5044] ? generate_default_upcase+0x8ed/0x940
[ 59.583740][ T5044] ntfs_fill_super+0x19b3/0x2bd0
[ 59.588664][ T5044] mount_bdev+0x206/0x2d0
[ 59.592975][ T5044] ? ntfs_mount+0x40/0x40
[ 59.597283][ T5044] ? get_tree_bdev+0x560/0x560
[ 59.602060][ T5044] ? vfs_parse_fs_string+0x190/0x230
[ 59.607436][ T5044] ? vfs_parse_fs_param+0x410/0x410
[ 59.612625][ T5044] ? cap_capable+0x1b4/0x240
[ 59.617202][ T5044] legacy_get_tree+0xef/0x190
[ 59.621900][ T5044] ? ntfs_rl_punch_nolock+0x15c0/0x15c0
[ 59.627454][ T5044] vfs_get_tree+0x8c/0x2a0
[ 59.631869][ T5044] do_new_mount+0x2be/0xb40
[ 59.636362][ T5044] ? ns_capable+0x89/0xe0
[ 59.640679][ T5044] ? do_move_mount_old+0x170/0x170
[ 59.645776][ T5044] __se_sys_mount+0x2d9/0x3c0
[ 59.650455][ T5044] ? __x64_sys_mount+0xc0/0xc0
[ 59.655213][ T5044] ? do_syscall_64+0x102/0x230
[ 59.659961][ T5044] ? __x64_sys_mount+0x20/0xc0
[ 59.664728][ T5044] do_syscall_64+0xf5/0x230
[ 59.669222][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 59.675125][ T5044] RIP: 0033:0x7fa1caa446ca
[ 59.679539][ T5044] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 3e 06 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 59.699158][ T5044] RSP: 002b:00007fff8ac67208 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 59.707556][ T5044] RAX: ffffffffffffffda RBX: 00007fff8ac67210 RCX: 00007fa1caa446ca
[ 59.715583][ T5044] RDX: 000000002001f6c0 RSI: 0000000020000080 RDI: 00007fff8ac67210
[ 59.723582][ T5044] RBP: 0000000000000004 R08: 00007fff8ac67250 R09: 000000000001f66a
[ 59.731537][ T5044] R10: 000000000000c70b R11: 0000000000000286 R12: 00007fff8ac67250
[ 59.739506][ T5044] R13: 0000000000000003 R14: 0000000000200000 R15: 00007fa1caa8e04b
[ 59.747465][ T5044]
[ 59.750468][ T5044]
[ 59.752779][ T5044] The buggy address belongs to the physical page:
[ 59.759171][ T5044] page:ffffea0001dba280 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x76e8a
[ 59.769319][ T5044] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 59.776625][ T5044] page_type: 0xffffffff()
[ 59.780959][ T5044] raw: 00fff00000000000 ffffea0001dba2c8 ffff8880b9842830 0000000000000000
[ 59.789532][ T5044] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 59.798105][ T5044] page dumped because: kasan: bad access detected
[ 59.804674][ T5044] page_owner tracks the page as freed
[ 59.810031][ T5044] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 15230632161, free_ts 17116424573
[ 59.824941][ T5044] post_alloc_hook+0x1e6/0x210
[ 59.829722][ T5044] split_map_pages+0x24a/0x510
[ 59.834464][ T5044] isolate_freepages_range+0x476/0x4d0
[ 59.839904][ T5044] alloc_contig_range+0x62e/0x9a0
[ 59.845312][ T5044] alloc_contig_pages+0x3f4/0x4f0
[ 59.850351][ T5044] debug_vm_pgtable_alloc_huge_page+0xb9/0x110
[ 59.856495][ T5044] init_args+0x837/0xb10
[ 59.860726][ T5044] debug_vm_pgtable+0xe0/0x540
[ 59.865482][ T5044] do_one_initcall+0x234/0x810
[ 59.870255][ T5044] do_initcall_level+0x157/0x210
[ 59.875183][ T5044] do_initcalls+0x3f/0x80
[ 59.879507][ T5044] kernel_init_freeable+0x429/0x5c0
[ 59.884698][ T5044] kernel_init+0x1d/0x2a0
[ 59.889014][ T5044] ret_from_fork+0x48/0x80
[ 59.893413][ T5044] ret_from_fork_asm+0x11/0x20
[ 59.898155][ T5044] page last free pid 1 tgid 1 stack trace:
[ 59.903939][ T5044] free_unref_page_prepare+0x959/0xa80
[ 59.909377][ T5044] free_unref_page+0x37/0x3f0
[ 59.914044][ T5044] free_contig_range+0x9e/0x160
[ 59.918891][ T5044] destroy_args+0x8a/0x890
[ 59.923299][ T5044] debug_vm_pgtable+0x4ba/0x540
[ 59.928133][ T5044] do_one_initcall+0x234/0x810
[ 59.932897][ T5044] do_initcall_level+0x157/0x210
[ 59.937815][ T5044] do_initcalls+0x3f/0x80
[ 59.942121][ T5044] kernel_init_freeable+0x429/0x5c0
[ 59.947313][ T5044] kernel_init+0x1d/0x2a0
[ 59.951630][ T5044] ret_from_fork+0x48/0x80
[ 59.956038][ T5044] ret_from_fork_asm+0x11/0x20
[ 59.960788][ T5044]
[ 59.963089][ T5044] Memory state around the buggy address:
[ 59.968692][ T5044] ffff888076e8a300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 59.976731][ T5044] ffff888076e8a380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 59.984775][ T5044] >ffff888076e8a400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 59.992818][ T5044] ^
[ 59.998945][ T5044] ffff888076e8a480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 60.007158][ T5044] ffff888076e8a500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 60.015208][ T5044] ==================================================================
[ 60.023789][ T5044] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 60.030995][ T5044] CPU: 1 PID: 5044 Comm: syz-executor604 Not tainted 6.7.0-syzkaller-12824-g9d64bf433c53 #0
[ 60.041062][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 60.051196][ T5044] Call Trace:
[ 60.054503][ T5044]
[ 60.057429][ T5044] dump_stack_lvl+0x1e7/0x2d0
[ 60.062109][ T5044] ? tcp_gro_dev_warn+0x260/0x260
[ 60.067128][ T5044] ? panic+0x850/0x850
[ 60.071193][ T5044] ? vscnprintf+0x5d/0x80
[ 60.075525][ T5044] panic+0x349/0x850
[ 60.079406][ T5044] ? check_panic_on_warn+0x21/0xa0
[ 60.084504][ T5044] ? __memcpy_flushcache+0x2b0/0x2b0
[ 60.089775][ T5044] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 60.095743][ T5044] ? _raw_spin_unlock+0x40/0x40
[ 60.100578][ T5044] ? print_report+0x4fb/0x540
[ 60.105246][ T5044] check_panic_on_warn+0x82/0xa0
[ 60.110173][ T5044] ? ntfs_attr_find+0x7d6/0xd50
[ 60.115018][ T5044] end_report+0x6e/0x140
[ 60.119261][ T5044] kasan_report+0x153/0x170
[ 60.123756][ T5044] ? ntfs_attr_find+0x7d6/0xd50
[ 60.128615][ T5044] ntfs_attr_find+0x7d6/0xd50
[ 60.133398][ T5044] ntfs_attr_lookup+0x4e4/0x2390
[ 60.138349][ T5044] ? ntfs_attr_get_search_ctx+0x51/0x180
[ 60.143976][ T5044] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0
[ 60.149950][ T5044] ? trace_kmem_cache_alloc+0x1f/0x90
[ 60.155313][ T5044] ? kmem_cache_alloc+0x1bf/0x340
[ 60.160327][ T5044] ? ntfs_attr_get_search_ctx+0x51/0x180
[ 60.165984][ T5044] ? __asan_memset+0x23/0x40
[ 60.170560][ T5044] ? ntfs_attr_reinit_search_ctx+0x4f/0x2e0
[ 60.176444][ T5044] ntfs_read_locked_inode+0xa32/0x4940
[ 60.181977][ T5044] ? inode_insert5+0x3f4/0x500
[ 60.186735][ T5044] ? _compound_head+0x120/0x120
[ 60.191569][ T5044] ? ntfs_iget+0x190/0x190
[ 60.195968][ T5044] ? iget5_locked+0x137/0x270
[ 60.200651][ T5044] ? ntfs_iget+0x190/0x190
[ 60.205053][ T5044] ntfs_iget+0x113/0x190
[ 60.209283][ T5044] ? ntfs_test_inode+0x2e0/0x2e0
[ 60.214205][ T5044] ? __lock_acquire+0x1fd0/0x1fd0
[ 60.219218][ T5044] load_system_files+0x100/0x4840
[ 60.224287][ T5044] ? __mutex_unlock_slowpath+0x21c/0x750
[ 60.229906][ T5044] ? free_vm_area+0x60/0x60
[ 60.234398][ T5044] ? ntfs_setup_allocators+0x2d0/0x2d0
[ 60.239843][ T5044] ? mutex_unlock+0x10/0x10
[ 60.244333][ T5044] ? __asan_memset+0x23/0x40
[ 60.248908][ T5044] ? generate_default_upcase+0x8ed/0x940
[ 60.254533][ T5044] ntfs_fill_super+0x19b3/0x2bd0
[ 60.259464][ T5044] mount_bdev+0x206/0x2d0
[ 60.263783][ T5044] ? ntfs_mount+0x40/0x40
[ 60.268134][ T5044] ? get_tree_bdev+0x560/0x560
[ 60.273411][ T5044] ? vfs_parse_fs_string+0x190/0x230
[ 60.278682][ T5044] ? vfs_parse_fs_param+0x410/0x410
[ 60.283868][ T5044] ? cap_capable+0x1b4/0x240
[ 60.288449][ T5044] legacy_get_tree+0xef/0x190
[ 60.293110][ T5044] ? ntfs_rl_punch_nolock+0x15c0/0x15c0
[ 60.298646][ T5044] vfs_get_tree+0x8c/0x2a0
[ 60.303051][ T5044] do_new_mount+0x2be/0xb40
[ 60.307557][ T5044] ? ns_capable+0x89/0xe0
[ 60.311877][ T5044] ? do_move_mount_old+0x170/0x170
[ 60.316981][ T5044] __se_sys_mount+0x2d9/0x3c0
[ 60.321665][ T5044] ? __x64_sys_mount+0xc0/0xc0
[ 60.326418][ T5044] ? do_syscall_64+0x102/0x230
[ 60.331256][ T5044] ? __x64_sys_mount+0x20/0xc0
[ 60.336011][ T5044] do_syscall_64+0xf5/0x230
[ 60.340510][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 60.346390][ T5044] RIP: 0033:0x7fa1caa446ca
[ 60.350791][ T5044] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 3e 06 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 60.370388][ T5044] RSP: 002b:00007fff8ac67208 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 60.378790][ T5044] RAX: ffffffffffffffda RBX: 00007fff8ac67210 RCX: 00007fa1caa446ca
[ 60.386747][ T5044] RDX: 000000002001f6c0 RSI: 0000000020000080 RDI: 00007fff8ac67210
[ 60.394707][ T5044] RBP: 0000000000000004 R08: 00007fff8ac67250 R09: 000000000001f66a
[ 60.402679][ T5044] R10: 000000000000c70b R11: 0000000000000286 R12: 00007fff8ac67250
[ 60.410723][ T5044] R13: 0000000000000003 R14: 0000000000200000 R15: 00007fa1caa8e04b
[ 60.418689][ T5044]
[ 60.421933][ T5044] Kernel Offset: disabled
[ 60.426349][ T5044] Rebooting in 86400 seconds..