Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 58.420974][ T4248] cgroup: Unknown subsys name 'net' [ 58.556605][ T4248] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.762714][ T4248] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.786272][ T4252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.794711][ T4252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.802276][ T4252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.810079][ T4252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.818466][ T4252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.825763][ T4252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 59.934722][ T4258] loop0: detected capacity change from 0 to 4096 [ 59.945572][ T4258] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 60.375242][ T4261] loop0: detected capacity change from 0 to 4096 [ 60.388055][ T4261] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 60.540985][ T4264] loop0: detected capacity change from 0 to 4096 [ 60.552448][ T4264] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program executing program [ 60.818272][ T4268] loop0: detected capacity change from 0 to 4096 [ 60.830374][ T4268] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 61.253838][ T4271] loop0: detected capacity change from 0 to 4096 [ 61.265285][ T4271] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 61.673593][ T4274] loop0: detected capacity change from 0 to 4096 [ 61.685987][ T4274] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 61.825564][ T4276] loop0: detected capacity change from 0 to 4096 [ 61.837868][ T4276] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 61.902639][ T48] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 62.270440][ T4279] loop0: detected capacity change from 0 to 4096 [ 62.277976][ T4279] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 62.701161][ T4282] loop0: detected capacity change from 0 to 4096 [ 62.712383][ T4282] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 62.853623][ T4284] loop0: detected capacity change from 0 to 4096 [ 62.868486][ T4284] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 63.278840][ T4287] loop0: detected capacity change from 0 to 4096 [ 63.292001][ T4287] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 63.705002][ T4290] loop0: detected capacity change from 0 to 4096 [ 63.713004][ T4290] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 63.856047][ T4292] loop0: detected capacity change from 0 to 4096 [ 63.863961][ T4292] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 63.981507][ T48] Bluetooth: hci0: command 0x041b tx timeout executing program [ 64.294800][ T4295] loop0: detected capacity change from 0 to 4096 [ 64.302382][ T4295] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 64.447080][ T4297] loop0: detected capacity change from 0 to 4096 [ 64.455010][ T4297] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 64.609320][ T4301] loop0: detected capacity change from 0 to 4096 [ 64.620215][ T4301] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 65.048164][ T4304] loop0: detected capacity change from 0 to 4096 [ 65.058988][ T4304] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 65.480822][ T4309] loop0: detected capacity change from 0 to 4096 [ 65.495109][ T4309] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 65.919724][ T4315] loop0: detected capacity change from 0 to 4096 [ 65.936221][ T4315] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 66.061450][ T48] Bluetooth: hci0: command 0x040f tx timeout executing program [ 66.491825][ T4320] loop0: detected capacity change from 0 to 4096 [ 66.506851][ T4320] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 66.926949][ T4323] loop0: detected capacity change from 0 to 4096 [ 66.935012][ T4323] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 67.079377][ T4325] loop0: detected capacity change from 0 to 4096 [ 67.086855][ T4325] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 67.231501][ T4327] loop0: detected capacity change from 0 to 4096 [ 67.241543][ T4327] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 67.651444][ T4330] loop0: detected capacity change from 0 to 4096 [ 67.662238][ T4330] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 68.079058][ T4333] loop0: detected capacity change from 0 to 4096 [ 68.086712][ T4333] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 68.141371][ T48] Bluetooth: hci0: command 0x0419 tx timeout executing program [ 68.498499][ T4336] loop0: detected capacity change from 0 to 4096 [ 68.515867][ T4336] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) executing program [ 68.938062][ T4339] loop0: detected capacity change from 0 to 4096 [ 68.946477][ T4339] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 69.049686][ C0] ================================================================== [ 69.057804][ C0] BUG: KASAN: out-of-bounds in end_buffer_read_sync+0xbf/0xd0 [ 69.065310][ C0] Write of size 4 at addr ffffc90003eb6640 by task ksoftirqd/0/15 [ 69.073126][ C0] [ 69.075489][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.1.141-syzkaller #0 [ 69.083482][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.093570][ C0] Call Trace: [ 69.096879][ C0] [ 69.099826][ C0] dump_stack_lvl+0x168/0x22e [ 69.104535][ C0] ? end_buffer_read_sync+0xbf/0xd0 [ 69.109757][ C0] ? show_regs_print_info+0x12/0x12 [ 69.114980][ C0] ? load_image+0x3b0/0x3b0 [ 69.119504][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 69.124899][ C0] ? __virt_addr_valid+0xbf/0x540 [ 69.129974][ C0] ? end_buffer_read_sync+0xbf/0xd0 [ 69.135199][ C0] print_report+0xa8/0x220 [ 69.139639][ C0] kasan_report+0x10b/0x140 [ 69.144165][ C0] ? end_buffer_read_sync+0xbf/0xd0 [ 69.149394][ C0] kasan_check_range+0x27b/0x290 [ 69.154357][ C0] ? __wait_on_buffer+0x80/0x80 [ 69.159237][ C0] end_buffer_read_sync+0xbf/0xd0 [ 69.164285][ C0] end_bio_bh_io_sync+0xb3/0x110 [ 69.169246][ C0] blk_update_request+0x593/0xe30 [ 69.174288][ C0] blk_mq_end_request+0x3a/0x70 [ 69.179133][ C0] blk_done_softirq+0x100/0x150 [ 69.183966][ C0] handle_softirqs+0x2a1/0x920 [ 69.188718][ C0] ? run_ksoftirqd+0x98/0xf0 [ 69.193284][ C0] ? do_softirq+0x200/0x200 [ 69.197768][ C0] run_ksoftirqd+0x98/0xf0 [ 69.202162][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 69.207342][ C0] ? takeover_tasklets+0x800/0x800 [ 69.212430][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 69.217605][ C0] smpboot_thread_fn+0x64a/0xa40 [ 69.222528][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 69.227535][ C0] kthread+0x29d/0x330 [ 69.231593][ C0] ? cpu_report_death+0x230/0x230 [ 69.236596][ C0] ? kthread_blkcg+0xd0/0xd0 [ 69.241174][ C0] ret_from_fork+0x1f/0x30 [ 69.245573][ C0] [ 69.248570][ C0] [ 69.250877][ C0] The buggy address belongs to the virtual mapping at [ 69.250877][ C0] [ffffc90003eb0000, ffffc90003eb9000) created by: [ 69.250877][ C0] copy_process+0x5bd/0x4020 [ 69.268474][ C0] [ 69.270778][ C0] The buggy address belongs to the physical page: [ 69.277179][ C0] page:ffffea0001d736c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75cdb [ 69.287314][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.294415][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 69.302995][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 69.311560][ C0] page dumped because: kasan: bad access detected [ 69.317960][ C0] page_owner tracks the page as allocated [ 69.323653][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 4250, tgid 4250 (syz-executor189), ts 68039180029, free_ts 68028084074 [ 69.342557][ C0] post_alloc_hook+0x173/0x1a0 [ 69.347311][ C0] get_page_from_freelist+0x1a26/0x1ac0 [ 69.352851][ C0] __alloc_pages+0x1df/0x4e0 [ 69.357453][ C0] __vmalloc_node_range+0x959/0x1390 [ 69.362735][ C0] dup_task_struct+0x3d3/0x6b0 [ 69.367479][ C0] copy_process+0x5bd/0x4020 [ 69.372047][ C0] kernel_clone+0x225/0x8b0 [ 69.376560][ C0] __x64_sys_clone+0x17c/0x1d0 [ 69.381305][ C0] do_syscall_64+0x4c/0xa0 [ 69.385709][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.391587][ C0] page last free stack trace: [ 69.396233][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 69.401674][ C0] free_unref_page_list+0xbb/0x8e0 [ 69.406778][ C0] release_pages+0x1f92/0x2200 [ 69.411531][ C0] __pagevec_release+0x6d/0xe0 [ 69.416279][ C0] truncate_inode_pages_range+0x2f6/0xff0 [ 69.421980][ C0] blkdev_flush_mapping+0x12c/0x290 [ 69.427162][ C0] blkdev_put+0x47f/0x710 [ 69.431473][ C0] deactivate_locked_super+0x93/0xf0 [ 69.436736][ C0] cleanup_mnt+0x463/0x4f0 [ 69.441129][ C0] task_work_run+0x1ca/0x250 [ 69.445695][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 69.450960][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 69.456488][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 69.461936][ C0] do_syscall_64+0x58/0xa0 [ 69.466333][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.472210][ C0] [ 69.474514][ C0] Memory state around the buggy address: [ 69.480119][ C0] ffffc90003eb6500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.488158][ C0] ffffc90003eb6580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.496194][ C0] >ffffc90003eb6600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.504231][ C0] ^ [ 69.510747][ C0] ffffc90003eb6680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.518973][ C0] ffffc90003eb6700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.527010][ C0] ================================================================== [ 69.535225][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.542425][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.1.141-syzkaller #0 [ 69.550387][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.560440][ C0] Call Trace: [ 69.563731][ C0] [ 69.566650][ C0] dump_stack_lvl+0x168/0x22e [ 69.571320][ C0] ? memcpy+0x3c/0x60 [ 69.575282][ C0] ? show_regs_print_info+0x12/0x12 [ 69.580458][ C0] ? load_image+0x3b0/0x3b0 [ 69.584946][ C0] panic+0x2c9/0x710 [ 69.588828][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 69.595006][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 69.599489][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 69.605362][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 69.611234][ C0] ? _raw_spin_unlock+0x40/0x40 [ 69.616072][ C0] check_panic_on_warn+0x80/0xa0 [ 69.620997][ C0] ? end_buffer_read_sync+0xbf/0xd0 [ 69.626174][ C0] end_report+0x66/0x110 [ 69.630398][ C0] kasan_report+0x118/0x140 [ 69.634885][ C0] ? end_buffer_read_sync+0xbf/0xd0 [ 69.640062][ C0] kasan_check_range+0x27b/0x290 [ 69.644986][ C0] ? __wait_on_buffer+0x80/0x80 [ 69.649837][ C0] end_buffer_read_sync+0xbf/0xd0 [ 69.654876][ C0] end_bio_bh_io_sync+0xb3/0x110 [ 69.659806][ C0] blk_update_request+0x593/0xe30 [ 69.664829][ C0] blk_mq_end_request+0x3a/0x70 [ 69.669751][ C0] blk_done_softirq+0x100/0x150 [ 69.674592][ C0] handle_softirqs+0x2a1/0x920 [ 69.679355][ C0] ? run_ksoftirqd+0x98/0xf0 [ 69.683934][ C0] ? do_softirq+0x200/0x200 [ 69.688427][ C0] run_ksoftirqd+0x98/0xf0 [ 69.692834][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 69.698024][ C0] ? takeover_tasklets+0x800/0x800 [ 69.703116][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 69.708298][ C0] smpboot_thread_fn+0x64a/0xa40 [ 69.713222][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 69.718234][ C0] kthread+0x29d/0x330 [ 69.722634][ C0] ? cpu_report_death+0x230/0x230 [ 69.727650][ C0] ? kthread_blkcg+0xd0/0xd0 [ 69.732234][ C0] ret_from_fork+0x1f/0x30 [ 69.736642][ C0] [ 69.739899][ C0] Kernel Offset: disabled [ 69.744213][ C0] Rebooting in 86400 seconds..