Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. executing program [ 40.601394][ T4027] loop0: detected capacity change from 0 to 4096 [ 40.676985][ T4027] ntfs: (device loop0): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 40.679733][ T4027] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 40.683488][ T4027] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 40.686768][ T4027] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 40.690169][ T4027] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 40.698185][ T4027] ntfs: volume version 3.1. [ 40.701206][ T4027] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 40.704630][ T4027] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 40.708346][ T4027] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 40.711173][ T4027] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 40.713717][ T4027] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 40.720067][ T4027] ================================================================== [ 40.722139][ T4027] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xb60/0x2748 [ 40.723911][ T4027] Read of size 1 at addr ffff0000cbae6771 by task syz-executor232/4027 [ 40.726009][ T4027] [ 40.726591][ T4027] CPU: 0 PID: 4027 Comm: syz-executor232 Not tainted 5.15.178-syzkaller #0 [ 40.728694][ T4027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 40.731217][ T4027] Call trace: [ 40.732022][ T4027] dump_backtrace+0x0/0x530 [ 40.733187][ T4027] show_stack+0x2c/0x3c [ 40.734248][ T4027] dump_stack_lvl+0x108/0x170 [ 40.735445][ T4027] print_address_description+0x7c/0x3f0 [ 40.736829][ T4027] kasan_report+0x174/0x1e4 [ 40.737946][ T4027] __asan_report_load1_noabort+0x44/0x50 [ 40.739302][ T4027] ntfs_readdir+0xb60/0x2748 [ 40.740497][ T4027] iterate_dir+0x1f4/0x4ec [ 40.741577][ T4027] __arm64_sys_getdents64+0x1c4/0x4c4 [ 40.742854][ T4027] invoke_syscall+0x98/0x2b8 [ 40.743924][ T4027] el0_svc_common+0x138/0x258 [ 40.744946][ T4027] do_el0_svc+0x58/0x14c [ 40.745992][ T4027] el0_svc+0x7c/0x1f0 [ 40.747028][ T4027] el0t_64_sync_handler+0x84/0xe4 [ 40.748255][ T4027] el0t_64_sync+0x1a0/0x1a4 [ 40.749360][ T4027] [ 40.749900][ T4027] Allocated by task 4027: [ 40.750944][ T4027] ____kasan_kmalloc+0xbc/0xfc [ 40.752203][ T4027] __kasan_kmalloc+0x10/0x1c [ 40.753513][ T4027] __kmalloc+0x29c/0x4c8 [ 40.754600][ T4027] ntfs_readdir+0x66c/0x2748 [ 40.755737][ T4027] iterate_dir+0x1f4/0x4ec [ 40.756851][ T4027] __arm64_sys_getdents64+0x1c4/0x4c4 [ 40.758267][ T4027] invoke_syscall+0x98/0x2b8 [ 40.759419][ T4027] el0_svc_common+0x138/0x258 [ 40.760689][ T4027] do_el0_svc+0x58/0x14c [ 40.761794][ T4027] el0_svc+0x7c/0x1f0 [ 40.762797][ T4027] el0t_64_sync_handler+0x84/0xe4 [ 40.764045][ T4027] el0t_64_sync+0x1a0/0x1a4 [ 40.765156][ T4027] [ 40.765723][ T4027] The buggy address belongs to the object at ffff0000cbae6700 [ 40.765723][ T4027] which belongs to the cache kmalloc-128 of size 128 [ 40.769413][ T4027] The buggy address is located 113 bytes inside of [ 40.769413][ T4027] 128-byte region [ffff0000cbae6700, ffff0000cbae6780) [ 40.772820][ T4027] The buggy address belongs to the page: [ 40.774286][ T4027] page:000000007e780cc7 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bae6 [ 40.776925][ T4027] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 40.778867][ T4027] raw: 05ffc00000000200 0000000000000000 0000000600000001 ffff0000c0002300 [ 40.780846][ T4027] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 40.782981][ T4027] page dumped because: kasan: bad access detected [ 40.784679][ T4027] [ 40.785259][ T4027] Memory state around the buggy address: [ 40.786713][ T4027] ffff0000cbae6600: 00 00 07 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.788712][ T4027] ffff0000cbae6680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.790829][ T4027] >ffff0000cbae6700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 40.793011][ T4027] ^ [ 40.795026][ T4027] ffff0000cbae6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.797236][ T4027] ffff0000cbae6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.799391][ T4027] ================================================================== [ 40.801417][ T4027] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program