Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. executing program [ 40.190192][ T3960] loop0: detected capacity change from 0 to 4096 [ 40.281959][ T3960] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 40.285107][ T3960] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 40.289251][ T3960] ntfs: (device loop0): ntfs_read_locked_inode(): Found unknown compression method or corrupt file. [ 40.292079][ T3960] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 40.295274][ T3960] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 40.299674][ T3960] ntfs: volume version 3.1. [ 40.302837][ T3960] ================================================================== [ 40.304891][ T3960] BUG: KASAN: use-after-free in ntfs_lookup_inode_by_name+0xb90/0x2694 [ 40.306859][ T3960] Read of size 8 at addr ffff0000dd695962 by task syz-executor346/3960 [ 40.308969][ T3960] [ 40.309556][ T3960] CPU: 0 PID: 3960 Comm: syz-executor346 Not tainted 5.15.150-syzkaller #0 [ 40.311884][ T3960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 40.314512][ T3960] Call trace: [ 40.315331][ T3960] dump_backtrace+0x0/0x530 [ 40.316458][ T3960] show_stack+0x2c/0x3c [ 40.317456][ T3960] dump_stack_lvl+0x108/0x170 [ 40.318615][ T3960] print_address_description+0x7c/0x3f0 [ 40.320033][ T3960] kasan_report+0x174/0x1e4 [ 40.321045][ T3960] __asan_report_load8_noabort+0x44/0x50 [ 40.322512][ T3960] ntfs_lookup_inode_by_name+0xb90/0x2694 [ 40.323899][ T3960] check_windows_hibernation_status+0xe8/0x5e4 [ 40.325470][ T3960] load_system_files+0x31ec/0x4228 [ 40.326803][ T3960] ntfs_fill_super+0x1670/0x24e8 [ 40.328096][ T3960] mount_bdev+0x274/0x370 [ 40.329161][ T3960] ntfs_mount+0x44/0x58 [ 40.330243][ T3960] legacy_get_tree+0xd4/0x16c [ 40.331454][ T3960] vfs_get_tree+0x90/0x274 [ 40.332608][ T3960] do_new_mount+0x278/0x8fc [ 40.333701][ T3960] path_mount+0x594/0x101c [ 40.334824][ T3960] __arm64_sys_mount+0x510/0x5e0 [ 40.336055][ T3960] invoke_syscall+0x98/0x2b8 [ 40.337229][ T3960] el0_svc_common+0x138/0x258 [ 40.338377][ T3960] do_el0_svc+0x58/0x14c [ 40.339433][ T3960] el0_svc+0x7c/0x1f0 [ 40.340454][ T3960] el0t_64_sync_handler+0x84/0xe4 [ 40.341662][ T3960] el0t_64_sync+0x1a0/0x1a4 [ 40.342783][ T3960] [ 40.343296][ T3960] The buggy address belongs to the page: [ 40.344665][ T3960] page:00000000ad4b0225 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x11d695 [ 40.347474][ T3960] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 40.349368][ T3960] raw: 05ffc00000000000 fffffc000374c8c8 fffffc000375a508 0000000000000000 [ 40.351611][ T3960] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 40.353884][ T3960] page dumped because: kasan: bad access detected [ 40.355589][ T3960] [ 40.356222][ T3960] Memory state around the buggy address: [ 40.357605][ T3960] ffff0000dd695800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.359623][ T3960] ffff0000dd695880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.361691][ T3960] >ffff0000dd695900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.363742][ T3960] ^ [ 40.365515][ T3960] ffff0000dd695980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.367555][ T3960] ffff0000dd695a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.369542][ T3960] ================================================================== [ 40.371659][ T3960] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program