syzkaller login: [ 12.359283][ T939] udevd (939) used greatest stack depth: 24888 bytes left [ 45.510244][ T1068] cgroup: Unknown subsys name 'net' [ 45.511685][ T1068] cgroup: Unknown subsys name 'net_prio' [ 45.512957][ T1068] cgroup: Unknown subsys name 'devices' [ 45.514071][ T1068] cgroup: Unknown subsys name 'blkio' [ 45.635206][ T1068] cgroup: Unknown subsys name 'hugetlb' [ 45.640979][ T1068] cgroup: Unknown subsys name 'rlimit' [ 45.793684][ T1068] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.936635][ T1076] syz-executor.3 (1076) used greatest stack depth: 22808 bytes left Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. 2024/07/22 06:50:02 ignoring optional flag "sandboxArg"="0" 2024/07/22 06:50:03 parsed 1 programs 2024/07/22 06:50:03 executed programs: 0 [ 67.061506][ T1512] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.884470][ T3566] loop4: detected capacity change from 0 to 4096 2024/07/22 06:50:16 executed programs: 5 [ 80.116066][ T3598] loop3: detected capacity change from 0 to 4096 [ 80.194501][ T3608] loop1: detected capacity change from 0 to 4096 [ 80.215414][ T3612] loop4: detected capacity change from 0 to 4096 [ 80.247189][ T3617] loop0: detected capacity change from 0 to 4096 [ 80.385264][ T3621] loop3: detected capacity change from 0 to 4096 [ 80.425136][ T3625] loop1: detected capacity change from 0 to 4096 [ 80.480097][ T3628] loop4: detected capacity change from 0 to 4096 [ 80.574456][ T3635] loop2: detected capacity change from 0 to 4096 [ 80.611136][ T3633] loop0: detected capacity change from 0 to 4096 [ 80.626403][ T3637] loop3: detected capacity change from 0 to 4096 [ 80.810256][ T3643] loop1: detected capacity change from 0 to 4096 [ 80.849249][ T3644] loop4: detected capacity change from 0 to 4096 [ 80.856647][ T3646] loop0: detected capacity change from 0 to 4096 [ 80.864873][ T3650] loop3: detected capacity change from 0 to 4096 [ 80.871265][ T3648] loop2: detected capacity change from 0 to 4096 [ 81.078322][ T3658] loop4: detected capacity change from 0 to 4096 [ 81.106688][ T3657] loop2: detected capacity change from 0 to 4096 [ 81.110728][ T3662] loop3: detected capacity change from 0 to 4096 [ 81.130879][ T3660] loop0: detected capacity change from 0 to 4096 [ 81.131572][ T3654] loop1: detected capacity change from 0 to 4096 [ 81.356660][ T3668] loop3: detected capacity change from 0 to 4096 [ 81.363420][ T3665] loop4: detected capacity change from 0 to 4096 [ 81.373563][ T3672] loop0: detected capacity change from 0 to 4096 [ 81.383672][ T3671] loop2: detected capacity change from 0 to 4096 [ 81.386018][ T3673] loop1: detected capacity change from 0 to 4096 [ 81.580153][ T3678] loop4: detected capacity change from 0 to 4096 [ 81.600790][ T3681] loop1: detected capacity change from 0 to 4096 [ 81.601900][ T3677] loop0: detected capacity change from 0 to 4096 [ 81.623323][ T3679] loop2: detected capacity change from 0 to 4096 [ 81.635852][ T3683] loop3: detected capacity change from 0 to 4096 [ 81.756123][ T3685] loop2: detected capacity change from 0 to 4096 [ 81.841732][ T3690] loop4: detected capacity change from 0 to 4096 [ 81.845590][ T3687] loop0: detected capacity change from 0 to 4096 [ 81.864606][ T3691] loop1: detected capacity change from 0 to 4096 [ 81.932455][ T3693] loop3: detected capacity change from 0 to 4096 [ 81.975403][ T3695] loop2: detected capacity change from 0 to 4096 [ 82.090987][ T3697] loop3: detected capacity change from 0 to 4096 [ 82.129445][ T3702] loop4: detected capacity change from 0 to 4096 [ 82.136672][ T3703] loop1: detected capacity change from 0 to 4096 [ 82.150922][ T3701] loop0: detected capacity change from 0 to 4096 [ 82.165388][ T3705] loop2: detected capacity change from 0 to 4096 [ 82.350490][ T3709] loop4: detected capacity change from 0 to 4096 [ 82.356202][ T3713] loop1: detected capacity change from 0 to 4096 [ 82.358919][ T3707] loop3: detected capacity change from 0 to 4096 [ 82.376275][ T3711] loop0: detected capacity change from 0 to 4096 [ 82.390839][ T3715] loop2: detected capacity change from 0 to 4096 [ 82.631504][ T3721] loop1: detected capacity change from 0 to 4096 [ 82.671522][ T3723] loop0: detected capacity change from 0 to 4096 [ 82.674518][ T3720] loop3: detected capacity change from 0 to 4096 [ 82.689344][ T3725] loop2: detected capacity change from 0 to 4096 [ 82.691203][ T3717] loop4: detected capacity change from 0 to 4096 [ 82.736128][ C1] ================================================================== [ 82.744500][ C1] BUG: KASAN: out-of-bounds in end_buffer_read_sync+0x5c/0x90 [ 82.751980][ C1] Write of size 4 at addr ffffc90003547a60 by task ksoftirqd/1/19 [ 82.759774][ C1] [ 82.762225][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.15.163-syzkaller #0 [ 82.770273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 82.780323][ C1] Call Trace: [ 82.783704][ C1] [ 82.786621][ C1] dump_stack_lvl+0x57/0x7d [ 82.791109][ C1] print_address_description.constprop.0.cold+0xf/0x309 [ 82.798030][ C1] ? end_buffer_read_sync+0x5c/0x90 [ 82.803210][ C1] ? end_buffer_read_sync+0x5c/0x90 [ 82.808381][ C1] kasan_report.cold+0x83/0xdf [ 82.813119][ C1] ? __switch_to+0x551/0xfd0 [ 82.817689][ C1] ? end_buffer_read_sync+0x5c/0x90 [ 82.822865][ C1] kasan_check_range+0x13d/0x180 [ 82.827776][ C1] end_buffer_read_sync+0x5c/0x90 [ 82.832890][ C1] ? end_buffer_read_nobh+0x80/0x80 [ 82.838153][ C1] end_bio_bh_io_sync+0xb5/0x100 [ 82.843066][ C1] blk_update_request+0x76a/0x1080 [ 82.848154][ C1] blk_mq_end_request+0x46/0x480 [ 82.853076][ C1] blk_complete_reqs+0x90/0xc0 [ 82.857937][ C1] handle_softirqs+0x1b5/0x870 [ 82.863033][ C1] ? handle_softirqs+0x870/0x870 [ 82.867961][ C1] ? smpboot_thread_fn+0x66/0x800 [ 82.873076][ C1] run_ksoftirqd+0x26/0x50 [ 82.877576][ C1] smpboot_thread_fn+0x310/0x800 [ 82.882765][ C1] ? smpboot_register_percpu_thread+0x330/0x330 [ 82.889067][ C1] kthread+0x37c/0x460 [ 82.893224][ C1] ? set_kthread_struct+0x100/0x100 [ 82.898408][ C1] ret_from_fork+0x1f/0x30 [ 82.902827][ C1] [ 82.905819][ C1] [ 82.908115][ C1] [ 82.910407][ C1] Memory state around the buggy address: [ 82.916209][ C1] ffffc90003547900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.924442][ C1] ffffc90003547980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.932573][ C1] >ffffc90003547a00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.940693][ C1] ^ [ 82.947856][ C1] ffffc90003547a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.955997][ C1] ffffc90003547b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.964069][ C1] ================================================================== [ 82.972113][ C1] Disabling lock debugging due to kernel taint [ 82.978265][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.985545][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Tainted: G B 5.15.163-syzkaller #0 [ 82.995056][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 83.005180][ C1] Call Trace: [ 83.008458][ C1] [ 83.011388][ C1] dump_stack_lvl+0x57/0x7d [ 83.016016][ C1] panic+0x227/0x4b9 [ 83.019976][ C1] ? __warn_printk+0xee/0xee [ 83.024557][ C1] ? end_buffer_read_sync+0x5c/0x90 [ 83.029815][ C1] ? end_buffer_read_sync+0x5c/0x90 [ 83.035368][ C1] ? end_buffer_read_sync+0x5c/0x90 [ 83.040627][ C1] ? end_buffer_read_sync+0x5c/0x90 [ 83.045802][ C1] check_panic_on_warn.cold+0x14/0x2b [ 83.051157][ C1] end_report.cold+0x41/0x5c [ 83.055744][ C1] kasan_report.cold+0x71/0xdf [ 83.060490][ C1] ? __switch_to+0x551/0xfd0 [ 83.065245][ C1] ? end_buffer_read_sync+0x5c/0x90 [ 83.070409][ C1] kasan_check_range+0x13d/0x180 [ 83.075698][ C1] end_buffer_read_sync+0x5c/0x90 [ 83.080962][ C1] ? end_buffer_read_nobh+0x80/0x80 [ 83.086320][ C1] end_bio_bh_io_sync+0xb5/0x100 [ 83.091411][ C1] blk_update_request+0x76a/0x1080 [ 83.096524][ C1] blk_mq_end_request+0x46/0x480 [ 83.101454][ C1] blk_complete_reqs+0x90/0xc0 [ 83.106188][ C1] handle_softirqs+0x1b5/0x870 [ 83.110977][ C1] ? handle_softirqs+0x870/0x870 [ 83.115995][ C1] ? smpboot_thread_fn+0x66/0x800 [ 83.121179][ C1] run_ksoftirqd+0x26/0x50 [ 83.125647][ C1] smpboot_thread_fn+0x310/0x800 [ 83.130563][ C1] ? smpboot_register_percpu_thread+0x330/0x330 [ 83.136859][ C1] kthread+0x37c/0x460 [ 83.141221][ C1] ? set_kthread_struct+0x100/0x100 [ 83.146398][ C1] ret_from_fork+0x1f/0x30 [ 83.150796][ C1] [ 83.154038][ C1] Kernel Offset: disabled [ 83.158348][ C1] Rebooting in 86400 seconds..