Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. executing program [ 39.528669][ T5926] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5926 'syz-executor186' [ 39.555269][ T5926] loop0: detected capacity change from 0 to 4096 [ 39.582310][ T5926] ntfs: volume version 3.1. [ 39.587729][ T5926] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x3c0f940e763b000 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 39.590806][ T5926] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 39.593042][ T5926] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. executing program [ 39.643447][ T5928] loop0: detected capacity change from 0 to 4096 [ 39.657910][ T5928] ntfs: volume version 3.1. [ 39.661271][ T5928] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Actual VCN (0x0) of index buffer is different from expected VCN (0x40000000000000). Directory inode 0x5 is corrupt or driver bug. [ 39.665092][ T5928] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 39.667594][ T5928] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. executing program [ 39.708010][ T5929] loop0: detected capacity change from 0 to 4096 [ 39.723047][ T5929] ntfs: volume version 3.1. [ 39.726065][ T5929] ================================================================== [ 39.727722][ T5929] BUG: KASAN: use-after-free in ntfs_lookup_inode_by_name+0xb28/0x2824 [ 39.729429][ T5929] Read of size 8 at addr ffff0000e256255a by task syz-executor186/5929 [ 39.731121][ T5929] [ 39.731603][ T5929] CPU: 1 PID: 5929 Comm: syz-executor186 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 [ 39.733802][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 39.736013][ T5929] Call trace: [ 39.736777][ T5929] dump_backtrace+0x1b8/0x1e4 [ 39.737766][ T5929] show_stack+0x2c/0x44 [ 39.738652][ T5929] dump_stack_lvl+0xd0/0x124 [ 39.739678][ T5929] print_report+0x174/0x514 [ 39.740649][ T5929] kasan_report+0xd4/0x130 [ 39.741506][ T5929] __asan_report_load8_noabort+0x20/0x2c [ 39.742757][ T5929] ntfs_lookup_inode_by_name+0xb28/0x2824 [ 39.744035][ T5929] check_windows_hibernation_status+0xe4/0x630 [ 39.745289][ T5929] load_system_files+0x3494/0x4734 [ 39.746364][ T5929] ntfs_fill_super+0x14e0/0x2314 [ 39.747438][ T5929] mount_bdev+0x26c/0x368 [ 39.748369][ T5929] ntfs_mount+0x44/0x58 [ 39.749250][ T5929] legacy_get_tree+0xd4/0x16c [ 39.750234][ T5929] vfs_get_tree+0x90/0x274 [ 39.751176][ T5929] do_new_mount+0x25c/0x8c8 [ 39.752102][ T5929] path_mount+0x590/0xe04 [ 39.753043][ T5929] __arm64_sys_mount+0x45c/0x594 [ 39.754087][ T5929] invoke_syscall+0x98/0x2c0 [ 39.755038][ T5929] el0_svc_common+0x138/0x258 [ 39.755980][ T5929] do_el0_svc+0x64/0x198 [ 39.756894][ T5929] el0_svc+0x4c/0x15c [ 39.757716][ T5929] el0t_64_sync_handler+0x84/0xf0 [ 39.758843][ T5929] el0t_64_sync+0x190/0x194 [ 39.759872][ T5929] [ 39.760360][ T5929] The buggy address belongs to the physical page: [ 39.761748][ T5929] page:00000000646b67e3 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x122562 [ 39.763975][ T5929] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 39.765508][ T5929] raw: 05ffc00000000000 fffffc00038958c8 fffffc0003895848 0000000000000000 [ 39.767384][ T5929] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 39.769196][ T5929] page dumped because: kasan: bad access detected [ 39.770506][ T5929] [ 39.770979][ T5929] Memory state around the buggy address: [ 39.772143][ T5929] ffff0000e2562400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.773875][ T5929] ffff0000e2562480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.775676][ T5929] >ffff0000e2562500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.777291][ T5929] ^ [ 39.778689][ T5929] ffff0000e2562580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.780270][ T5929] ffff0000e2562600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 39.781887][ T5929] ================================================================== [ 39.783707][ T5929] Disabling lock debugging due to kernel taint executing program [ 39.811627][ T5930] loop0: detected capacity change from 0 to 4096 [ 39.822980][ T5930] ntfs: volume version 3.1. [ 39.825622][ T5930] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x1f8000000000 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 39.829257][ T5930] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 39.831542][ T5930] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. executing program [ 39.858692][ T5931] loop0: detected capacity change from 0 to 4096 [ 39.870534][ T5931] ntfs: volume version 3.1. [ 39.873270][ T5931] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x2bfea90473fba903 is corrupt. Corrupt inode 0x5. Run chkdsk. executing program [ 39.900823][ T5932] loop0: detected capacity change from 0 to 4096 [ 39.912613][ T5932] ntfs: volume version 3.1. executing program [ 39.939712][ T5933] loop0: detected capacity change from 0 to 4096 [ 39.951876][ T5933] ntfs: volume version 3.1. executing program [ 39.979900][ T5934] loop0: detected capacity change from 0 to 4096 [ 40.000297][ T5934] ntfs: volume version 3.1. executing program [ 40.030407][ T5935] loop0: detected capacity change from 0 to 4096 [ 40.049492][ T5935] ntfs: volume version 3.1. executing program [ 40.080233][ T5936] loop0: detected capacity change from 0 to 4096 [ 40.092350][ T5936] ntfs: volume version 3.1. executing program [ 40.119390][ T5937] loop0: detected capacity change from 0 to 4096 [ 40.130467][ T5937] ntfs: volume version 3.1. executing program [ 40.158015][ T5938] loop0: detected capacity change from 0 to 4096 [ 40.177623][ T5938] ntfs: volume version 3.1. executing program [ 40.207677][ T5939] loop0: detected capacity change from 0 to 4096 [ 40.219040][ T5939] ntfs: volume version 3.1. [ 40.224293][ T5925] ------------[ cut here ]------------ [ 40.225534][ T5925] kernel BUG at fs/inode.c:612! [ 40.226627][ T5925] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 40.228239][ T5925] Modules linked in: [ 40.229049][ T5925] CPU: 1 PID: 5925 Comm: syz-executor186 Tainted: G B 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 [ 40.231462][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 40.233524][ T5925] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 40.235236][ T5925] pc : clear_inode+0x124/0x148 [ 40.236267][ T5925] lr : clear_inode+0x124/0x148 [ 40.237341][ T5925] sp : ffff80001e5d75f0 [ 40.238263][ T5925] x29: ffff80001e5d75f0 x28: 1fffe0001c35bf0d x27: dfff800000000000 [ 40.240023][ T5925] x26: 1fffe0001c35bf0b x25: 1fffe0001c35bed9 x24: dfff800000000000 [ 40.241723][ T5925] x23: ffff800009628014 x22: dfff800000000000 x21: 0000000000000001 [ 40.243409][ T5925] x20: ffff0000e1adf8d0 x19: ffff0000e1adf6a0 x18: ffff0001b428ec98 [ 40.245103][ T5925] x17: ffff800015d6d000 x16: ffff80000831ae40 x15: 0000000000000000 [ 40.246784][ T5925] x14: 0000000000000000 x13: 0000000000000000 x12: ffff700003cbaea4 [ 40.248451][ T5925] x11: 0000000000000001 x10: 0000000000000000 x9 : 0000000000000000 [ 40.250150][ T5925] x8 : ffff0000de5f8000 x7 : 0000000000000000 x6 : ffff800008aa2bc4 [ 40.251889][ T5925] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000831af70 [ 40.253575][ T5925] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 40.255371][ T5925] Call trace: [ 40.256096][ T5925] clear_inode+0x124/0x148 [ 40.257045][ T5925] ntfs_evict_big_inode+0x44/0x41c [ 40.258167][ T5925] evict+0x260/0x68c [ 40.258986][ T5925] iput+0x734/0x818 [ 40.259844][ T5925] ntfs_put_super+0x82c/0xe28 [ 40.260821][ T5925] generic_shutdown_super+0x130/0x328 [ 40.261910][ T5925] kill_block_super+0x70/0xdc [ 40.262870][ T5925] deactivate_locked_super+0xac/0x124 [ 40.264014][ T5925] deactivate_super+0xe0/0x100 [ 40.265049][ T5925] cleanup_mnt+0x34c/0x3dc [ 40.265956][ T5925] __cleanup_mnt+0x20/0x30 [ 40.266864][ T5925] task_work_run+0x230/0x2e0 [ 40.267839][ T5925] do_notify_resume+0x2180/0x3c90 [ 40.268943][ T5925] el0_svc+0x90/0x15c [ 40.269737][ T5925] el0t_64_sync_handler+0x84/0xf0 [ 40.270836][ T5925] el0t_64_sync+0x190/0x194 [ 40.271853][ T5925] Code: a8c47bfd d50323bf d65f03c0 97e95d1d (d4210000) [ 40.273393][ T5925] ---[ end trace 0000000000000000 ]--- [ 40.573483][ T5925] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 40.575133][ T5925] SMP: stopping secondary CPUs [ 40.576177][ T5925] Kernel Offset: disabled [ 40.577137][ T5925] CPU features: 0x000000,20700402,32017203 [ 40.578471][ T5925] Memory Limit: none [ 40.894496][ T5925] Rebooting in 86400 seconds..