ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. ================================================================================ UBSAN: shift-out-of-bounds in fs/ntfs/inode.c:1080:43 shift exponent 44 is too large for 32-bit type 'unsigned int' CPU: 1 PID: 4217 Comm: syz-executor874 Not tainted 6.1.31-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_shift_out_of_bounds+0x2f4/0x36c lib/ubsan.c:321 ntfs_read_locked_inode+0x35b4/0x38e0 fs/ntfs/inode.c:1080 ntfs_iget+0x110/0x19c fs/ntfs/inode.c:177 load_and_init_upcase fs/ntfs/super.c:1655 [inline] load_system_files+0x1728/0x4734 fs/ntfs/super.c:1810 ntfs_fill_super+0x14e0/0x2314 fs/ntfs/super.c:2892 mount_bdev+0x274/0x370 fs/super.c:1423 ntfs_mount+0x44/0x58 fs/ntfs/super.c:3049 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610 vfs_get_tree+0x90/0x274 fs/super.c:1553 do_new_mount+0x25c/0x8c4 fs/namespace.c:3040 path_mount+0x590/0xe58 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 ================================================================================ ================================================================================ UBSAN: shift-out-of-bounds in fs/ntfs/inode.c:1089:11 shift exponent 32 is too large for 32-bit type 'unsigned int' CPU: 1 PID: 4217 Comm: syz-executor874 Not tainted 6.1.31-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_shift_out_of_bounds+0x2f4/0x36c lib/ubsan.c:321 ntfs_read_locked_inode+0x35d0/0x38e0 fs/ntfs/inode.c:1089 ntfs_iget+0x110/0x19c fs/ntfs/inode.c:177 load_and_init_upcase fs/ntfs/super.c:1655 [inline] load_system_files+0x1728/0x4734 fs/ntfs/super.c:1810 ntfs_fill_super+0x14e0/0x2314 fs/ntfs/super.c:2892 mount_bdev+0x274/0x370 fs/super.c:1423 ntfs_mount+0x44/0x58 fs/ntfs/super.c:3049 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610 vfs_get_tree+0x90/0x274 fs/super.c:1553 do_new_mount+0x25c/0x8c4 fs/namespace.c:3040 path_mount+0x590/0xe58 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 ================================================================================ ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). ntfs: volume version 3.1.