[   45.004549] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.0.86' (ECDSA) to the list of known hosts.
2020/03/16 23:09:29 parsed 1 programs
2020/03/16 23:09:29 executed programs: 0
[   50.225105] IPVS: ftp: loaded support on port[0] = 21
[   50.232839] IPVS: ftp: loaded support on port[0] = 21
[   50.240351] IPVS: ftp: loaded support on port[0] = 21
[   50.252040] IPVS: ftp: loaded support on port[0] = 21
[   50.259631] IPVS: ftp: loaded support on port[0] = 21
[   50.275778] IPVS: ftp: loaded support on port[0] = 21
[   50.338331] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker.
[   50.351664] ntfs: (device loop0): ntfs_read_inode_mount(): $MFT/$DATA attribute not found. $MFT is corrupt. Run chkdsk.
[   50.362761] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[   50.371032] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata.
[   50.380151] ntfs: (device loop5): is_boot_sector_ntfs(): Invalid end of sector marker.
[   50.389992] ==================================================================
[   50.397387] BUG: KASAN: use-after-free in ntfs_attr_find+0x9df/0xb00
[   50.403874] Read of size 4 at addr ffff8881c612ad35 by task syz-executor5/4459
[   50.411226] 
[   50.412858] CPU: 0 PID: 4459 Comm: syz-executor5 Not tainted 5.6.0-rc6-syzkaller #0
[   50.421080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   50.430593] Call Trace:
[   50.433168]  dump_stack+0x12f/0x187
[   50.437036]  ? ntfs_attr_find+0x9df/0xb00
[   50.441176]  print_address_description.constprop.8+0x3b/0x60
[   50.446967]  ? ntfs_attr_find+0x9df/0xb00
[   50.451100]  ? ntfs_attr_find+0x9df/0xb00
[   50.455224]  __kasan_report.cold.11+0x1b/0x32
[   50.459695]  ? __schedule+0x7a0/0x1900
[   50.463558]  ? ntfs_attr_find+0x9df/0xb00
[   50.467683]  kasan_report+0x12/0x20
[   50.471294]  __asan_report_load_n_noabort+0xf/0x20
[   50.476306]  ntfs_attr_find+0x9df/0xb00
[   50.481238]  ? prepare_to_wait+0x136/0x350
[   50.485469]  ntfs_attr_lookup+0x10c9/0x23c0
[   50.489863]  ? kasan_unpoison_shadow+0x35/0x50
[   50.494428]  ? __kasan_kmalloc.constprop.7+0xc1/0xd0
[   50.499695]  ? kmem_cache_alloc+0x30b/0x740
[   50.503994]  ? ntfs_attr_reinit_search_ctx+0x3a0/0x3a0
[   50.509254]  ? var_wake_function+0x150/0x150
[   50.514003]  ntfs_read_inode_mount+0x6bf/0x20c0
[   50.518920]  ntfs_fill_super+0x1217/0x2d40
[   50.523794]  ? snprintf+0x91/0xc0
[   50.527403]  ? vsprintf+0x20/0x20
[   50.530838]  mount_bdev+0x27b/0x340
[   50.534446]  ? load_system_files+0x6530/0x6530
[   50.539006]  ? ntfs_rl_punch_nolock+0x1ec0/0x1ec0
[   50.543835]  ntfs_mount+0x10/0x20
[   50.548771]  legacy_get_tree+0x103/0x1f0
[   50.552904]  vfs_get_tree+0x8b/0x2d0
[   50.556703]  ? capable+0x14/0x20
[   50.560409]  do_mount+0x1285/0x1b70
[   50.564046]  ? lock_downgrade+0x900/0x900
[   50.568192]  ? copy_mount_string+0x20/0x20
[   50.572427]  ? __kasan_check_write+0x14/0x20
[   50.576996]  ? _copy_from_user+0xd6/0x110
[   50.581124]  __x64_sys_mount+0x169/0x1c0
[   50.585175]  do_syscall_64+0xd0/0x630
[   50.589044]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   50.594384] RIP: 0033:0x457dea
[   50.597641] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00
[   50.618796] RSP: 002b:00007f8157c1dbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   50.626765] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000457dea
[   50.634100] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8157c1dc00
[   50.641519] RBP: 0000000000000002 R08: 000000002007e200 R09: 0000000020000000
[   50.649115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[   50.657242] R13: 000000000000066c R14: 00000000006fbac0 R15: 0000000000000000
[   50.665377] 
[   50.667001] Allocated by task 4424:
[   50.670711]  save_stack+0x21/0x90
[   50.674240]  __kasan_kmalloc.constprop.7+0xc1/0xd0
[   50.679159]  kasan_kmalloc+0x9/0x10
[   50.682896]  __kmalloc_node_track_caller+0x4d/0x70
[   50.687814]  __kmalloc_reserve.isra.49+0x2c/0xc0
[   50.692565]  __alloc_skb+0xd7/0x570
[   50.696169]  netlink_dump+0x694/0x1270
[   50.700176]  __netlink_dump_start+0x589/0x8c0
[   50.704715]  rtnetlink_rcv_msg+0x583/0x8b0
[   50.709106]  netlink_rcv_skb+0x13a/0x3d0
[   50.713145]  rtnetlink_rcv+0x10/0x20
[   50.716837]  netlink_unicast+0x471/0x6c0
[   50.720876]  netlink_sendmsg+0x7b2/0xca0
[   50.724917]  sock_sendmsg+0xe6/0x110
[   50.728881]  __sys_sendto+0x200/0x320
[   50.732930]  __x64_sys_sendto+0xdc/0x1a0
[   50.737101]  do_syscall_64+0xd0/0x630
[   50.740994]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   50.746174] 
[   50.747808] Freed by task 4424:
[   50.751071]  save_stack+0x21/0x90
[   50.754508]  __kasan_slab_free+0x11a/0x170
[   50.758793]  kasan_slab_free+0xe/0x10
[   50.762790]  kfree+0xfa/0x290
[   50.765879]  skb_free_head+0x6e/0x90
[   50.769569]  skb_release_data+0x36d/0x6a0
[   50.773694]  skb_release_all+0x3d/0x50
[   50.777560]  consume_skb+0xa3/0x290
[   50.781177]  skb_free_datagram+0x12/0xc0
[   50.785416]  netlink_recvmsg+0x5f3/0x1110
[   50.790705]  sock_recvmsg+0xf4/0x130
[   50.795105]  ____sys_recvmsg+0x1ba/0x6f0
[   50.799150]  ___sys_recvmsg+0xd7/0x140
[   50.803036]  __sys_recvmsg+0xd6/0x180
[   50.807615]  __x64_sys_recvmsg+0x73/0xb0
[   50.811654]  do_syscall_64+0xd0/0x630
[   50.815438]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   50.821137] 
[   50.822747] The buggy address belongs to the object at ffff8881c612a000
[   50.822747]  which belongs to the cache kmalloc-4k of size 4096
[   50.835968] The buggy address is located 3381 bytes inside of
[   50.835968]  4096-byte region [ffff8881c612a000, ffff8881c612b000)
[   50.848141] The buggy address belongs to the page:
[   50.853057] page:ffffea0007184a80 refcount:1 mapcount:0 mapping:ffff8881da002000 index:0x0 compound_mapcount: 0
[   50.863261] flags: 0x2fffc0000010200(slab|head)
[   50.868698] raw: 02fffc0000010200 ffffea0007184988 ffffea0007184e88 ffff8881da002000
[   50.876555] raw: 0000000000000000 ffff8881c612a000 0000000100000001 0000000000000000
[   50.884418] page dumped because: kasan: bad access detected
[   50.890117] 
[   50.891740] Memory state around the buggy address:
[   50.896644]  ffff8881c612ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.904126]  ffff8881c612ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.911661] >ffff8881c612ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.919035]                                      ^
[   50.924135]  ffff8881c612ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.931759]  ffff8881c612ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.939661] ==================================================================
[   50.947099] Disabling lock debugging due to kernel taint
[   50.952622] Kernel panic - not syncing: panic_on_warn set ...
[   50.958525] CPU: 0 PID: 4459 Comm: syz-executor5 Tainted: G    B             5.6.0-rc6-syzkaller #0
[   50.968122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   50.977467] Call Trace:
[   50.980062]  dump_stack+0x12f/0x187
[   50.983692]  ? ntfs_attr_find+0x8e0/0xb00
[   50.987826]  panic+0x22a/0x4f5
[   50.991001]  ? add_taint.cold.7+0x11/0x11
[   50.995226]  ? do_raw_spin_unlock+0x54/0x260
[   50.999740]  ? do_raw_spin_unlock+0x54/0x260
[   51.004252]  ? ntfs_attr_find+0x9df/0xb00
[   51.008655]  ? ntfs_attr_find+0x9df/0xb00
[   51.012864]  end_report+0x47/0x4f
[   51.016311]  __kasan_report.cold.11+0xe/0x32
[   51.020709]  ? __schedule+0x7a0/0x1900
[   51.024600]  ? ntfs_attr_find+0x9df/0xb00
[   51.028755]  kasan_report+0x12/0x20
[   51.032371]  __asan_report_load_n_noabort+0xf/0x20
[   51.037295]  ntfs_attr_find+0x9df/0xb00
[   51.041353]  ? prepare_to_wait+0x136/0x350
[   51.045572]  ntfs_attr_lookup+0x10c9/0x23c0
[   51.049898]  ? kasan_unpoison_shadow+0x35/0x50
[   51.054482]  ? __kasan_kmalloc.constprop.7+0xc1/0xd0
[   51.059592]  ? kmem_cache_alloc+0x30b/0x740
[   51.063916]  ? ntfs_attr_reinit_search_ctx+0x3a0/0x3a0
[   51.069303]  ? var_wake_function+0x150/0x150
[   51.073715]  ntfs_read_inode_mount+0x6bf/0x20c0
[   51.078382]  ntfs_fill_super+0x1217/0x2d40
[   51.082609]  ? snprintf+0x91/0xc0
[   51.086044]  ? vsprintf+0x20/0x20
[   51.089476]  mount_bdev+0x27b/0x340
[   51.093097]  ? load_system_files+0x6530/0x6530
[   51.097668]  ? ntfs_rl_punch_nolock+0x1ec0/0x1ec0
[   51.102490]  ntfs_mount+0x10/0x20
[   51.105925]  legacy_get_tree+0x103/0x1f0
[   51.110029]  vfs_get_tree+0x8b/0x2d0
[   51.113998]  ? capable+0x14/0x20
[   51.117477]  do_mount+0x1285/0x1b70
[   51.121360]  ? lock_downgrade+0x900/0x900
[   51.125588]  ? copy_mount_string+0x20/0x20
[   51.130037]  ? __kasan_check_write+0x14/0x20
[   51.134580]  ? _copy_from_user+0xd6/0x110
[   51.138809]  __x64_sys_mount+0x169/0x1c0
[   51.142922]  do_syscall_64+0xd0/0x630
[   51.146767]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   51.152030] RIP: 0033:0x457dea
[   51.155253] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00
[   51.174151] RSP: 002b:00007f8157c1dbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   51.181837] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000457dea
[   51.189090] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8157c1dc00
[   51.196624] RBP: 0000000000000002 R08: 000000002007e200 R09: 0000000020000000
[   51.204054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[   51.211409] R13: 000000000000066c R14: 00000000006fbac0 R15: 0000000000000000
[   51.219437] Kernel Offset: disabled
[   51.223068] Rebooting in 86400 seconds..