./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor865038486

<...>
Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts.
execve("./syz-executor865038486", ["./syz-executor865038486"], 0x7ffedfe09680 /* 10 vars */) = 0
brk(NULL)                               = 0x55555642f000
brk(0x55555642fd00)                     = 0x55555642fd00
arch_prctl(ARCH_SET_FS, 0x55555642f380) = 0
set_tid_address(0x55555642f650)         = 5025
set_robust_list(0x55555642f660, 24)     = 0
rseq(0x55555642fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor865038486", 4096) = 27
getrandom("\xaf\x96\x3c\xf7\x28\x7c\x11\x5d", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55555642fd00
brk(0x555556450d00)                     = 0x555556450d00
brk(0x555556451000)                     = 0x555556451000
mprotect(0x7f9e01dd3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0)            = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9df9904000
write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x20\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152
munmap(0x7f9df9904000, 138412032)       = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 4
ioctl(4, LOOP_SET_FD, 3)                = 0
close(3)                                = 0
mkdir("./file0", 0777)                  = 0
[   61.186642][ T5025] syz-executor865[5025]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   61.224359][ T5025] loop0: detected capacity change from 0 to 4096
[   61.236094][ T5025] ntfs: (device loop0): ntfs_is_extended_system_file(): Corrupt file name attribute. You should run chkdsk.
[   61.247638][ T5025] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[   61.256508][ T5025] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[   61.269479][ T5025] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
mount("/dev/loop0", "./file0", "ntfs", MS_NOSUID, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0")                        = 0
ioctl(4, LOOP_CLR_FD)                   = 0
close(4)                                = 0
openat(AT_FDCWD, ".", O_RDONLY)         = 4
[   61.289275][ T5025] ntfs: volume version 3.1.
[   61.295626][ T5025] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[   61.305580][ T5025] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   61.317323][ T5025] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[   61.339729][ T5025] ==================================================================
[   61.347808][ T5025] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xeaa/0x2b80
[   61.355289][ T5025] Read of size 1 at addr ffff88801fc1b471 by task syz-executor865/5025
[   61.363531][ T5025] 
[   61.365851][ T5025] CPU: 0 PID: 5025 Comm: syz-executor865 Not tainted 6.6.0-syzkaller-00207-g14ab6d425e80 #0
[   61.375929][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[   61.385966][ T5025] Call Trace:
[   61.389222][ T5025]  <TASK>
[   61.392149][ T5025]  dump_stack_lvl+0x1e7/0x2d0
[   61.396819][ T5025]  ? nf_tcp_handle_invalid+0x650/0x650
[   61.402260][ T5025]  ? panic+0x770/0x770
[   61.406312][ T5025]  ? _printk+0xd5/0x120
[   61.410443][ T5025]  print_report+0x163/0x540
[   61.414928][ T5025]  ? mutex_unlock+0x10/0x10
[   61.419415][ T5025]  ? __virt_addr_valid+0x22f/0x2e0
[   61.424504][ T5025]  ? __phys_addr+0xba/0x170
[   61.428985][ T5025]  ? ntfs_readdir+0xeaa/0x2b80
[   61.433726][ T5025]  kasan_report+0x175/0x1b0
[   61.438209][ T5025]  ? ntfs_readdir+0xeaa/0x2b80
[   61.442954][ T5025]  ntfs_readdir+0xeaa/0x2b80
[   61.447524][ T5025]  ? __mutex_trylock_common+0x182/0x2e0
[   61.453071][ T5025]  ? read_lock_is_recursive+0x20/0x20
[   61.458434][ T5025]  ? ntfs_dir_fsync+0x470/0x470
[   61.463270][ T5025]  ? clear_nonspinnable+0x60/0x60
[   61.468275][ T5025]  ? mutex_lock_nested+0x20/0x20
[   61.473202][ T5025]  ? ntfs_dir_fsync+0x470/0x470
[   61.478046][ T5025]  wrap_directory_iterator+0x91/0xd0
[   61.483323][ T5025]  iterate_dir+0x1cd/0x540
[   61.487741][ T5025]  __se_sys_getdents64+0x20d/0x4f0
[   61.493364][ T5025]  ? _raw_spin_unlock_irq+0x2e/0x50
[   61.498555][ T5025]  ? __x64_sys_getdents64+0x80/0x80
[   61.503740][ T5025]  ? filldir+0x6a0/0x6a0
[   61.507966][ T5025]  ? syscall_enter_from_user_mode+0x32/0x230
[   61.513939][ T5025]  ? syscall_enter_from_user_mode+0x8c/0x230
[   61.519900][ T5025]  do_syscall_64+0x41/0xc0
[   61.524304][ T5025]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   61.530186][ T5025] RIP: 0033:0x7f9e01d415f9
[   61.534584][ T5025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   61.554434][ T5025] RSP: 002b:00007fffb18f3438 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[   61.562833][ T5025] RAX: ffffffffffffffda RBX: 00007fffb18f3608 RCX: 00007f9e01d415f9
[   61.570788][ T5025] RDX: 00000000000000ab RSI: 0000000020000080 RDI: 0000000000000004
[   61.578829][ T5025] RBP: 00007f9e01dd3610 R08: 0000000000000000 R09: 00007fffb18f3608
[   61.586782][ T5025] R10: 000000000001f1b8 R11: 0000000000000246 R12: 0000000000000001
[   61.594734][ T5025] R13: 00007fffb18f35f8 R14: 0000000000000001 R15: 0000000000000001
[   61.602706][ T5025]  </TASK>
[   61.605711][ T5025] 
[   61.608017][ T5025] Allocated by task 5025:
[   61.612324][ T5025]  kasan_set_track+0x4f/0x70
[   61.616904][ T5025]  __kasan_kmalloc+0x98/0xb0
[   61.621477][ T5025]  __kmalloc+0xb9/0x230
[   61.625615][ T5025]  ntfs_readdir+0x832/0x2b80
[   61.630184][ T5025]  wrap_directory_iterator+0x91/0xd0
[   61.635452][ T5025]  iterate_dir+0x1cd/0x540
[   61.639853][ T5025]  __se_sys_getdents64+0x20d/0x4f0
[   61.644952][ T5025]  do_syscall_64+0x41/0xc0
[   61.649359][ T5025]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   61.655247][ T5025] 
[   61.657571][ T5025] The buggy address belongs to the object at ffff88801fc1b400
[   61.657571][ T5025]  which belongs to the cache kmalloc-64 of size 64
[   61.671446][ T5025] The buggy address is located 57 bytes to the right of
[   61.671446][ T5025]  allocated 56-byte region [ffff88801fc1b400, ffff88801fc1b438)
[   61.685927][ T5025] 
[   61.688236][ T5025] The buggy address belongs to the physical page:
[   61.694628][ T5025] page:ffffea00007f06c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fc1b
[   61.704771][ T5025] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[   61.712741][ T5025] page_type: 0xffffffff()
[   61.717091][ T5025] raw: 00fff00000000800 ffff888012841640 ffffea00006eb940 0000000000000005
[   61.725655][ T5025] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
[   61.734215][ T5025] page dumped because: kasan: bad access detected
[   61.740603][ T5025] page_owner tracks the page as allocated
[   61.746294][ T5025] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 4480, tgid 4480 (udevd), ts 19274242242, free_ts 13437306306
[   61.763810][ T5025]  post_alloc_hook+0x1e6/0x210
[   61.768560][ T5025]  get_page_from_freelist+0x31db/0x3360
[   61.774090][ T5025]  __alloc_pages+0x255/0x670
[   61.778665][ T5025]  alloc_slab_page+0x6a/0x160
[   61.783327][ T5025]  new_slab+0x84/0x2f0
[   61.787377][ T5025]  ___slab_alloc+0xc85/0x1310
[   61.792034][ T5025]  __kmem_cache_alloc_node+0x1af/0x270
[   61.797482][ T5025]  __kmalloc+0xa8/0x230
[   61.801626][ T5025]  tomoyo_encode+0x26f/0x530
[   61.806204][ T5025]  tomoyo_realpath_from_path+0x598/0x5e0
[   61.811822][ T5025]  tomoyo_check_open_permission+0x255/0x500
[   61.817702][ T5025]  security_file_open+0x63/0xa0
[   61.822538][ T5025]  do_dentry_open+0x327/0x1590
[   61.827286][ T5025]  path_openat+0x2845/0x3280
[   61.831858][ T5025]  do_filp_open+0x234/0x490
[   61.836342][ T5025]  do_sys_openat2+0x13e/0x1d0
[   61.841002][ T5025] page last free stack trace:
[   61.845667][ T5025]  free_unref_page_prepare+0x8c3/0x9f0
[   61.851123][ T5025]  free_unref_page+0x37/0x3f0
[   61.855791][ T5025]  kasan_depopulate_vmalloc_pte+0x74/0x90
[   61.861502][ T5025]  __apply_to_page_range+0x8e2/0xe00
[   61.866779][ T5025]  kasan_release_vmalloc+0x9a/0xb0
[   61.871875][ T5025]  __purge_vmap_area_lazy+0xc0f/0x19c0
[   61.877321][ T5025]  drain_vmap_area_work+0x40/0xd0
[   61.882333][ T5025]  process_scheduled_works+0x90f/0x1400
[   61.887887][ T5025]  worker_thread+0xa5f/0xff0
[   61.892456][ T5025]  kthread+0x2d3/0x370
[   61.896508][ T5025]  ret_from_fork+0x48/0x80
[   61.900911][ T5025]  ret_from_fork_asm+0x11/0x20
[   61.905670][ T5025] 
[   61.907983][ T5025] Memory state around the buggy address:
[   61.913616][ T5025]  ffff88801fc1b300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   61.921681][ T5025]  ffff88801fc1b380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[   61.929727][ T5025] >ffff88801fc1b400: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[   61.937776][ T5025]                                                              ^
[   61.945474][ T5025]  ffff88801fc1b480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[   61.953523][ T5025]  ffff88801fc1b500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   61.961567][ T5025] ==================================================================
[   61.970114][ T5025] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   61.977397][ T5025] CPU: 1 PID: 5025 Comm: syz-executor865 Not tainted 6.6.0-syzkaller-00207-g14ab6d425e80 #0
[   61.987449][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[   61.997495][ T5025] Call Trace:
[   62.000764][ T5025]  <TASK>
[   62.003681][ T5025]  dump_stack_lvl+0x1e7/0x2d0
[   62.008352][ T5025]  ? nf_tcp_handle_invalid+0x650/0x650
[   62.013803][ T5025]  ? panic+0x770/0x770
[   62.017874][ T5025]  ? preempt_schedule_common+0x83/0xc0
[   62.023322][ T5025]  ? vscnprintf+0x5d/0x80
[   62.027635][ T5025]  panic+0x30f/0x770
[   62.031520][ T5025]  ? check_panic_on_warn+0x21/0xa0
[   62.036626][ T5025]  ? __memcpy_flushcache+0x2b0/0x2b0
[   62.041897][ T5025]  ? _raw_spin_unlock_irqrestore+0x12c/0x140
[   62.047862][ T5025]  ? _raw_spin_unlock+0x40/0x40
[   62.052713][ T5025]  ? print_report+0x4fb/0x540
[   62.057380][ T5025]  check_panic_on_warn+0x82/0xa0
[   62.062304][ T5025]  ? ntfs_readdir+0xeaa/0x2b80
[   62.067052][ T5025]  end_report+0x6e/0x130
[   62.071283][ T5025]  kasan_report+0x186/0x1b0
[   62.075780][ T5025]  ? ntfs_readdir+0xeaa/0x2b80
[   62.080534][ T5025]  ntfs_readdir+0xeaa/0x2b80
[   62.085108][ T5025]  ? __mutex_trylock_common+0x182/0x2e0
[   62.090649][ T5025]  ? read_lock_is_recursive+0x20/0x20
[   62.096010][ T5025]  ? ntfs_dir_fsync+0x470/0x470
[   62.100846][ T5025]  ? clear_nonspinnable+0x60/0x60
[   62.105854][ T5025]  ? mutex_lock_nested+0x20/0x20
[   62.110787][ T5025]  ? ntfs_dir_fsync+0x470/0x470
[   62.115623][ T5025]  wrap_directory_iterator+0x91/0xd0
[   62.120902][ T5025]  iterate_dir+0x1cd/0x540
[   62.125310][ T5025]  __se_sys_getdents64+0x20d/0x4f0
[   62.130411][ T5025]  ? _raw_spin_unlock_irq+0x2e/0x50
[   62.135597][ T5025]  ? __x64_sys_getdents64+0x80/0x80
[   62.140785][ T5025]  ? filldir+0x6a0/0x6a0
[   62.145015][ T5025]  ? syscall_enter_from_user_mode+0x32/0x230
[   62.150982][ T5025]  ? syscall_enter_from_user_mode+0x8c/0x230
[   62.156947][ T5025]  do_syscall_64+0x41/0xc0
[   62.161354][ T5025]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   62.167233][ T5025] RIP: 0033:0x7f9e01d415f9
[   62.171634][ T5025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   62.191225][ T5025] RSP: 002b:00007fffb18f3438 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[   62.199626][ T5025] RAX: ffffffffffffffda RBX: 00007fffb18f3608 RCX: 00007f9e01d415f9
[   62.207584][ T5025] RDX: 00000000000000ab RSI: 0000000020000080 RDI: 0000000000000004
[   62.215540][ T5025] RBP: 00007f9e01dd3610 R08: 0000000000000000 R09: 00007fffb18f3608
[   62.223496][ T5025] R10: 000000000001f1b8 R11: 0000000000000246 R12: 0000000000000001
[   62.231451][ T5025] R13: 00007fffb18f35f8 R14: 0000000000000001 R15: 0000000000000001
[   62.239416][ T5025]  </TASK>
[   62.242608][ T5025] Kernel Offset: disabled
[   62.246921][ T5025] Rebooting in 86400 seconds..