Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. executing program [ 38.192491][ T4292] loop0: detected capacity change from 0 to 4096 [ 38.197787][ T4292] ntfs: (device loop0): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 38.201109][ T4292] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 38.205552][ T4292] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 38.207902][ T4292] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 38.211180][ T4292] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 38.214985][ T4292] ntfs: volume version 3.1. [ 38.217331][ T4292] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 38.220710][ T4292] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 38.224048][ T4292] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 38.226763][ T4292] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 38.229692][ T4292] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 38.234708][ T4292] ================================================================== [ 38.236537][ T4292] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xb00/0x2be8 [ 38.238293][ T4292] Read of size 1 at addr ffff0000d4b1de71 by task syz-executor455/4292 [ 38.240094][ T4292] [ 38.240667][ T4292] CPU: 0 PID: 4292 Comm: syz-executor455 Tainted: G W 6.1.122-syzkaller #0 [ 38.242927][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.245165][ T4292] Call trace: [ 38.245867][ T4292] dump_backtrace+0x1c8/0x1f4 [ 38.247004][ T4292] show_stack+0x2c/0x3c [ 38.247953][ T4292] dump_stack_lvl+0x108/0x170 [ 38.248999][ T4292] print_report+0x174/0x4c0 [ 38.249916][ T4292] kasan_report+0xd4/0x130 [ 38.250980][ T4292] __asan_report_load1_noabort+0x2c/0x38 [ 38.252147][ T4292] ntfs_readdir+0xb00/0x2be8 [ 38.253197][ T4292] iterate_dir+0x1f4/0x4ec [ 38.254132][ T4292] __arm64_sys_getdents64+0x1c4/0x4a0 [ 38.255372][ T4292] invoke_syscall+0x98/0x2bc [ 38.256407][ T4292] el0_svc_common+0x138/0x258 [ 38.257397][ T4292] do_el0_svc+0x58/0x13c [ 38.258436][ T4292] el0_svc+0x58/0x168 [ 38.259332][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 38.260457][ T4292] el0t_64_sync+0x18c/0x190 [ 38.261467][ T4292] [ 38.261953][ T4292] Allocated by task 4292: [ 38.262925][ T4292] kasan_set_track+0x4c/0x80 [ 38.263869][ T4292] kasan_save_alloc_info+0x24/0x30 [ 38.264961][ T4292] __kasan_kmalloc+0xac/0xc4 [ 38.265927][ T4292] __kmalloc+0xd8/0x1c4 [ 38.266984][ T4292] ntfs_readdir+0x65c/0x2be8 [ 38.267997][ T4292] iterate_dir+0x1f4/0x4ec [ 38.268986][ T4292] __arm64_sys_getdents64+0x1c4/0x4a0 [ 38.270305][ T4292] invoke_syscall+0x98/0x2bc [ 38.271330][ T4292] el0_svc_common+0x138/0x258 [ 38.272499][ T4292] do_el0_svc+0x58/0x13c [ 38.273424][ T4292] el0_svc+0x58/0x168 [ 38.274349][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 38.275435][ T4292] el0t_64_sync+0x18c/0x190 [ 38.276482][ T4292] [ 38.277004][ T4292] Last potentially related work creation: [ 38.278277][ T4292] kasan_save_stack+0x40/0x70 [ 38.279333][ T4292] __kasan_record_aux_stack+0xcc/0xe8 [ 38.280522][ T4292] kasan_record_aux_stack_noalloc+0x14/0x20 [ 38.281763][ T4292] kvfree_call_rcu+0xb4/0x714 [ 38.282865][ T4292] kernfs_unlink_open_file+0x398/0x448 [ 38.284091][ T4292] kernfs_fop_release+0x130/0x198 [ 38.285175][ T4292] __fput+0x1c8/0x7c8 [ 38.286100][ T4292] ____fput+0x20/0x30 [ 38.287051][ T4292] task_work_run+0x240/0x2f0 [ 38.288006][ T4292] do_notify_resume+0x2080/0x2cb8 [ 38.289140][ T4292] el0_svc+0x9c/0x168 [ 38.290011][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 38.291096][ T4292] el0t_64_sync+0x18c/0x190 [ 38.292115][ T4292] [ 38.292664][ T4292] The buggy address belongs to the object at ffff0000d4b1de00 [ 38.292664][ T4292] which belongs to the cache kmalloc-128 of size 128 [ 38.295609][ T4292] The buggy address is located 113 bytes inside of [ 38.295609][ T4292] 128-byte region [ffff0000d4b1de00, ffff0000d4b1de80) [ 38.298431][ T4292] [ 38.298931][ T4292] The buggy address belongs to the physical page: [ 38.300280][ T4292] page:00000000851a5dec refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114b1d [ 38.302744][ T4292] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 38.304359][ T4292] raw: 05ffc00000000200 fffffc00033f8700 dead000000000002 ffff0000c0002300 [ 38.306277][ T4292] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 38.308165][ T4292] page dumped because: kasan: bad access detected [ 38.309512][ T4292] [ 38.310028][ T4292] Memory state around the buggy address: [ 38.311293][ T4292] ffff0000d4b1dd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.313107][ T4292] ffff0000d4b1dd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.314931][ T4292] >ffff0000d4b1de00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 38.316678][ T4292] ^ [ 38.318327][ T4292] ffff0000d4b1de80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.320044][ T4292] ffff0000d4b1df00: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.321820][ T4292] ================================================================== [ 38.329180][ T4292] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program