loop0: rw=0, want=32776, limit=4096
ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4003.
ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr.
ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
==================================================================
BUG: KASAN: use-after-free in ntfs_attr_find+0x9a2/0xae0 fs/ntfs/attrib.c:623
Read of size 2 at addr ffff88808a95e152 by task syz-executor164/7970

CPU: 0 PID: 7970 Comm: syz-executor164 Not tainted 4.14.307-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 print_address_description.cold+0x54/0x1d3 mm/kasan/report.c:251
 kasan_report_error.cold+0x8a/0x191 mm/kasan/report.c:350
 kasan_report mm/kasan/report.c:408 [inline]
 __asan_report_load_n_noabort+0x6b/0x80 mm/kasan/report.c:439
 ntfs_attr_find+0x9a2/0xae0 fs/ntfs/attrib.c:623
 ntfs_attr_lookup+0xeca/0x1f30 fs/ntfs/attrib.c:1227
 ntfs_read_locked_attr_inode fs/ntfs/inode.c:1272 [inline]
 ntfs_attr_iget+0x641/0x2180 fs/ntfs/inode.c:251
 load_system_files fs/ntfs/super.c:1814 [inline]
 ntfs_fill_super+0x1b19/0x7180 fs/ntfs/super.c:2909
 mount_bdev+0x2b3/0x360 fs/super.c:1134
 mount_fs+0x92/0x2a0 fs/super.c:1237
 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
 vfs_kern_mount fs/namespace.c:1036 [inline]
 do_new_mount fs/namespace.c:2572 [inline]
 do_mount+0xe65/0x2a30 fs/namespace.c:2905
 SYSC_mount fs/namespace.c:3121 [inline]
 SyS_mount+0xa8/0x120 fs/namespace.c:3098
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x5e/0xd3
RIP: 0033:0x7f6ec456a64a
RSP: 002b:00007fff72dc1fb8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6ec456a64a
RDX: 000000002001f6c0 RSI: 000000002001f640 RDI: 00007fff72dc1fc0
RBP: 00007fff72dc1fc0 R08: 00007fff72dc2000 R09: 000000000001f61d
R10: 0000000000008703 R11: 0000000000000286 R12: 0000000000000004
R13: 000055555677a380 R14: 00007fff72dc2000 R15: 0000000000000000

The buggy address belongs to the page:
page:ffffea00022a5780 count:0 mapcount:-127 mapping:          (null) index:0x0
flags: 0xfff00000000000()
raw: 00fff00000000000 0000000000000000 0000000000000000 00000000ffffff80
raw: ffff88813fffb838 ffff88813fffb838 0000000000000001 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff88808a95e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88808a95e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
>ffff88808a95e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                                                 ^
 ffff88808a95e180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88808a95e200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================