Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. 2026/08/14 06:29:57 parsed 1 programs 2026/08/14 06:29:57 serving rpc on tcp://38987 [ 88.472476][ T5787] cgroup: Unknown subsys name 'net' [ 88.606780][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.424364][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.057521][ T23] cfg80211: failed to load regulatory.db [ 92.386495][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.405385][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.414760][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.423927][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.433965][ T5815] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.443358][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.674594][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.683280][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.724894][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.732881][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.634501][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 95.742552][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.750657][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.758027][ T5872] bridge_slave_0: entered allmulticast mode [ 95.765339][ T5872] bridge_slave_0: entered promiscuous mode [ 95.775561][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.783032][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.790296][ T5872] bridge_slave_1: entered allmulticast mode [ 95.797628][ T5872] bridge_slave_1: entered promiscuous mode [ 95.837608][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.850205][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.883781][ T5872] team0: Port device team_slave_0 added [ 95.893033][ T5872] team0: Port device team_slave_1 added [ 95.933971][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.941020][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.967417][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.981750][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.990088][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.017189][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.097387][ T5872] hsr_slave_0: entered promiscuous mode [ 96.107030][ T5872] hsr_slave_1: entered promiscuous mode [ 96.333551][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.349728][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.368997][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.384032][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.423482][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.430794][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.438897][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.446054][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.515679][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.543091][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.560235][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.601135][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.613462][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.620648][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.635636][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.642875][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.853677][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.913277][ T5872] veth0_vlan: entered promiscuous mode [ 96.925809][ T5872] veth1_vlan: entered promiscuous mode [ 96.973163][ T5872] veth0_macvtap: entered promiscuous mode [ 96.994563][ T5872] veth1_macvtap: entered promiscuous mode [ 97.014345][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.026919][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.052469][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.061889][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.071165][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.081491][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.514882][ T1328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/14 06:30:09 executed programs: 0 [ 97.761943][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.772389][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.781174][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.790320][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.798927][ T5815] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.806391][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.958176][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 98.033447][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.040958][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.048933][ T5891] bridge_slave_0: entered allmulticast mode [ 98.055930][ T5891] bridge_slave_0: entered promiscuous mode [ 98.071251][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.078578][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.085746][ T5891] bridge_slave_1: entered allmulticast mode [ 98.093191][ T5891] bridge_slave_1: entered promiscuous mode [ 98.123682][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.135994][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.171625][ T5891] team0: Port device team_slave_0 added [ 98.181173][ T5891] team0: Port device team_slave_1 added [ 98.217369][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.224523][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.251165][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.264292][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.271393][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.300045][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.348929][ T5891] hsr_slave_0: entered promiscuous mode [ 98.355349][ T5891] hsr_slave_1: entered promiscuous mode [ 98.361938][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.370505][ T5891] Cannot create hsr debugfs directory [ 99.888369][ T5086] Bluetooth: hci0: command tx timeout [ 100.080469][ T1328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.969955][ T5086] Bluetooth: hci0: command tx timeout [ 102.369918][ T1328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.443185][ T1328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.320594][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.331761][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.343619][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.355135][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.373737][ T1328] hsr_slave_0: left promiscuous mode [ 103.381390][ T1328] hsr_slave_1: left promiscuous mode [ 103.387642][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.395677][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.407465][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.416453][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.427044][ T1328] bridge_slave_1: left allmulticast mode [ 103.433068][ T1328] bridge_slave_1: left promiscuous mode [ 103.442451][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.457431][ T1328] bridge_slave_0: left allmulticast mode [ 103.466472][ T1328] bridge_slave_0: left promiscuous mode [ 103.473031][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.503922][ T1328] veth1_macvtap: left promiscuous mode [ 103.511300][ T1328] veth0_macvtap: left promiscuous mode [ 103.517018][ T1328] veth1_vlan: left promiscuous mode [ 103.523150][ T1328] veth0_vlan: left promiscuous mode [ 104.002026][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 104.031762][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 104.058421][ T5086] Bluetooth: hci0: command tx timeout [ 104.076342][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.112552][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.333420][ T1328] bond0 (unregistering): Released all slaves [ 104.484193][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.516636][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.540920][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.548241][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.558808][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.565967][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.817527][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.864703][ T5891] veth0_vlan: entered promiscuous mode [ 104.884669][ T5891] veth1_vlan: entered promiscuous mode [ 104.921690][ T5891] veth0_macvtap: entered promiscuous mode [ 104.931705][ T5891] veth1_macvtap: entered promiscuous mode [ 104.955577][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.972474][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.985288][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.996773][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.005571][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.014381][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.094753][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.107698][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/14 06:30:17 executed programs: 2 [ 105.137238][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.146331][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.203154][ T5933] syz.0.17[5933]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 105.226635][ T5933] loop0: detected capacity change from 0 to 128 [ 105.257496][ T5933] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.272093][ T5933] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.313345][ T5933] syz.0.17 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=1000 [ 105.325355][ T5933] CPU: 0 PID: 5933 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.332637][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.342754][ T5933] Call Trace: [ 105.346090][ T5933] [ 105.349063][ T5933] dump_stack_lvl+0x18c/0x250 [ 105.353809][ T5933] ? show_regs_print_info+0x20/0x20 [ 105.359060][ T5933] ? load_image+0x420/0x420 [ 105.363621][ T5933] ? ___ratelimit+0x478/0x610 [ 105.368357][ T5933] ? radix_tree_cpu_dead+0x160/0x160 [ 105.373741][ T5933] dump_header+0xd8/0x820 [ 105.378125][ T5933] oom_kill_process+0x390/0x580 [ 105.383030][ T5933] out_of_memory+0xe0e/0x1200 [ 105.387758][ T5933] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 105.393446][ T5933] ? mutex_lock_nested+0x20/0x20 [ 105.398431][ T5933] ? unregister_oom_notifier+0x20/0x20 [ 105.403921][ T5933] mem_cgroup_out_of_memory+0x2c2/0x390 [ 105.409512][ T5933] ? try_charge_memcg+0xc91/0x17c0 [ 105.414675][ T5933] ? drain_local_stock+0x630/0x630 [ 105.419830][ T5933] ? do_raw_spin_unlock+0x121/0x230 [ 105.425102][ T5933] try_charge_memcg+0xca1/0x17c0 [ 105.430068][ T5933] ? page_ext_get+0x1e2/0x2b0 [ 105.434788][ T5933] ? folio_flags+0x120/0x120 [ 105.439416][ T5933] ? get_page_from_freelist+0x2181/0x22a0 [ 105.445271][ T5933] ? percpu_ref_tryget+0x15/0x180 [ 105.450414][ T5933] ? get_mem_cgroup_from_mm+0x38/0x290 [ 105.455916][ T5933] charge_memcg+0x11b/0x3b0 [ 105.460458][ T5933] ? __mem_cgroup_charge+0x80/0x80 [ 105.465646][ T5933] ? get_mem_cgroup_from_mm+0x38/0x290 [ 105.471135][ T5933] ? get_mem_cgroup_from_mm+0x38/0x290 [ 105.476644][ T5933] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 105.482206][ T5933] __mem_cgroup_charge+0x25/0x80 [ 105.487184][ T5933] __filemap_add_folio+0xbbb/0x16d0 [ 105.492520][ T5933] ? alloc_pages+0x4e1/0x740 [ 105.497156][ T5933] ? folio_put+0xd0/0xd0 [ 105.501412][ T5933] ? filemap_alloc_folio+0xdf/0x490 [ 105.506658][ T5933] ? workingset_activation+0x860/0x860 [ 105.512317][ T5933] filemap_add_folio+0xac/0x3d0 [ 105.517185][ T5933] __filemap_get_folio+0x499/0xbe0 [ 105.522321][ T5933] ext4_mb_load_buddy_gfp+0x5c0/0x1760 [ 105.527819][ T5933] ext4_mb_regular_allocator+0x1205/0x36c0 [ 105.533696][ T5933] ? __kasan_slab_alloc+0x6c/0x80 [ 105.538781][ T5933] ext4_mb_new_blocks+0xc9c/0x42f0 [ 105.544200][ T5933] ? ext4_find_extent+0x1f5/0xcd0 [ 105.549245][ T5933] ? rcu_is_watching+0x15/0xb0 [ 105.554030][ T5933] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 105.559788][ T5933] ? ext4_inode_to_goal_block+0x317/0x450 [ 105.565559][ T5933] ext4_ext_map_blocks+0x1811/0x68c0 [ 105.570952][ T5933] ? __might_sleep+0xe0/0xe0 [ 105.575593][ T5933] ? ext4_ext_release+0x10/0x10 [ 105.580513][ T5933] ext4_map_blocks+0x9db/0x1a90 [ 105.585410][ T5933] ? ext4_reserve_inode_write+0x248/0x2a0 [ 105.591211][ T5933] ? ext4_issue_zeroout+0x250/0x250 [ 105.596556][ T5933] ext4_getblk+0x1c9/0x720 [ 105.601028][ T5933] ? ext4_get_block_unwritten+0x100/0x100 [ 105.606786][ T5933] ext4_bread+0x2a/0x170 [ 105.611050][ T5933] ext4_symlink+0x519/0x940 [ 105.615579][ T5933] ? ext4_unlink+0x500/0x500 [ 105.620193][ T5933] ? generic_permission+0x24d/0x590 [ 105.625416][ T5933] ? inode_permission+0xf3/0x480 [ 105.630380][ T5933] ? bpf_lsm_inode_symlink+0x9/0x10 [ 105.635631][ T5933] ? security_inode_symlink+0xb6/0x100 [ 105.641112][ T5933] vfs_symlink+0x138/0x2b0 [ 105.645547][ T5933] do_symlinkat+0x1ba/0x400 [ 105.650079][ T5933] ? vfs_symlink+0x2b0/0x2b0 [ 105.654729][ T5933] __x64_sys_symlinkat+0x99/0xb0 [ 105.659719][ T5933] do_syscall_64+0x55/0xb0 [ 105.664181][ T5933] ? clear_bhb_loop+0x40/0x90 [ 105.668883][ T5933] ? clear_bhb_loop+0x40/0x90 [ 105.673621][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.680494][ T5933] RIP: 0033:0x7f55d299e0d9 [ 105.684956][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.704573][ T5933] RSP: 002b:00007ffe25dabae8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 105.713000][ T5933] RAX: ffffffffffffffda RBX: 00007f55d2c25fa0 RCX: 00007f55d299e0d9 [ 105.721680][ T5933] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000700 [ 105.729678][ T5933] RBP: 00007f55d2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 105.737734][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.745741][ T5933] R13: 00007f55d2c25fac R14: 00007f55d2c25fa0 R15: 00007f55d2c25fa0 [ 105.753778][ T5933] [ 105.762385][ T5933] memory: usage 8kB, limit 8kB, failcnt 24 [ 105.768382][ T5933] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 105.775885][ T5933] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 105.782883][ T5933] Memory cgroup stats for /syz0/test: [ 105.783772][ T5933] cache 0 [ 105.793429][ T5933] rss 0 [ 105.796246][ T5933] rss_huge 0 [ 105.800725][ T5933] shmem 0 [ 105.809754][ T5933] mapped_file 0 [ 105.813871][ T5933] dirty 0 [ 105.816856][ T5933] writeback 0 [ 105.821647][ T5933] workingset_refault_anon 0 [ 105.826201][ T5933] workingset_refault_file 0 [ 105.831080][ T5933] swap 0 [ 105.834032][ T5933] pgpgin 1 [ 105.837105][ T5933] pgpgout 1 [ 105.841818][ T5933] pgfault 0 [ 105.845017][ T5933] pgmajfault 0 [ 105.849111][ T5933] inactive_anon 0 [ 105.852885][ T5933] active_anon 0 [ 105.856387][ T5933] inactive_file 0 [ 105.860269][ T5933] active_file 0 [ 105.864101][ T5933] unevictable 0 [ 105.867593][ T5933] hierarchical_memory_limit 8192 [ 105.872809][ T5933] hierarchical_memsw_limit 9223372036854771712 [ 105.879169][ T5933] total_cache 0 [ 105.882667][ T5933] total_rss 0 [ 105.885958][ T5933] total_rss_huge 0 [ 105.890713][ T5933] total_shmem 0 [ 105.894227][ T5933] total_mapped_file 0 [ 105.898538][ T5933] total_dirty 0 [ 105.903207][ T5933] total_writeback 0 [ 105.908605][ T5933] total_workingset_refault_anon 0 [ 105.913748][ T5933] total_workingset_refault_file 0 [ 105.919388][ T5933] total_swap 0 [ 105.922790][ T5933] total_pgpgin 1 [ 105.926364][ T5933] total_pgpgout 1 [ 105.930449][ T5933] total_pgfault 0 [ 105.934138][ T5933] total_pgmajfault 0 [ 105.938488][ T5933] total_inactive_anon 0 [ 105.942708][ T5933] total_active_anon 0 [ 105.946703][ T5933] total_inactive_file 0 [ 105.952056][ T5933] total_active_file 0 [ 105.956120][ T5933] total_unevictable 0 [ 105.960246][ T5933] anon_cost 0 [ 105.963602][ T5933] file_cost 0 [ 105.967159][ T5933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.17,pid=5933,uid=0 [ 105.983903][ T5933] Memory cgroup out of memory: Killed process 5933 (syz.0.17) total-vm:44920kB, anon-rss:1364kB, file-rss:1152kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 106.011888][ T5933] ================================================================== [ 106.020017][ T5933] BUG: KASAN: null-ptr-deref in ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.028122][ T5933] Read of size 4 at addr 0000000000000028 by task syz.0.17/5933 [ 106.035780][ T5933] [ 106.038130][ T5933] CPU: 1 PID: 5933 Comm: syz.0.17 Not tainted syzkaller #0 [ 106.045387][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.055452][ T5933] Call Trace: [ 106.058748][ T5933] [ 106.061687][ T5933] dump_stack_lvl+0x18c/0x250 [ 106.066402][ T5933] ? show_regs_print_info+0x20/0x20 [ 106.071624][ T5933] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 106.077146][ T5933] ? do_raw_spin_trylock+0xb2/0x190 [ 106.082389][ T5933] ? do_raw_spin_lock+0x2b0/0x2b0 [ 106.087434][ T5933] ? ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.093082][ T5933] kasan_report+0x117/0x150 [ 106.097602][ T5933] ? ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.103246][ T5933] kasan_check_range+0x241/0x290 [ 106.108230][ T5933] ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.113710][ T5933] ext4_mb_regular_allocator+0x1205/0x36c0 [ 106.119552][ T5933] ? __kasan_slab_alloc+0x6c/0x80 [ 106.124645][ T5933] ext4_mb_new_blocks+0xc9c/0x42f0 [ 106.129793][ T5933] ? ext4_find_extent+0x1f5/0xcd0 [ 106.134846][ T5933] ? rcu_is_watching+0x15/0xb0 [ 106.139671][ T5933] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 106.145419][ T5933] ? ext4_inode_to_goal_block+0x317/0x450 [ 106.151180][ T5933] ext4_ext_map_blocks+0x1811/0x68c0 [ 106.156497][ T5933] ? __might_sleep+0xe0/0xe0 [ 106.161124][ T5933] ? ext4_ext_release+0x10/0x10 [ 106.166003][ T5933] ext4_map_blocks+0x9db/0x1a90 [ 106.170883][ T5933] ? ext4_reserve_inode_write+0x248/0x2a0 [ 106.176643][ T5933] ? ext4_issue_zeroout+0x250/0x250 [ 106.181879][ T5933] ext4_getblk+0x1c9/0x720 [ 106.186325][ T5933] ? ext4_get_block_unwritten+0x100/0x100 [ 106.192080][ T5933] ext4_bread+0x2a/0x170 [ 106.196352][ T5933] ext4_symlink+0x519/0x940 [ 106.200889][ T5933] ? ext4_unlink+0x500/0x500 [ 106.205500][ T5933] ? generic_permission+0x24d/0x590 [ 106.211014][ T5933] ? inode_permission+0xf3/0x480 [ 106.215986][ T5933] ? bpf_lsm_inode_symlink+0x9/0x10 [ 106.221208][ T5933] ? security_inode_symlink+0xb6/0x100 [ 106.226697][ T5933] vfs_symlink+0x138/0x2b0 [ 106.231154][ T5933] do_symlinkat+0x1ba/0x400 [ 106.235685][ T5933] ? vfs_symlink+0x2b0/0x2b0 [ 106.240303][ T5933] __x64_sys_symlinkat+0x99/0xb0 [ 106.245265][ T5933] do_syscall_64+0x55/0xb0 [ 106.249795][ T5933] ? clear_bhb_loop+0x40/0x90 [ 106.254493][ T5933] ? clear_bhb_loop+0x40/0x90 [ 106.259205][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.265294][ T5933] RIP: 0033:0x7f55d299e0d9 [ 106.269756][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.289387][ T5933] RSP: 002b:00007ffe25dabae8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 106.297824][ T5933] RAX: ffffffffffffffda RBX: 00007f55d2c25fa0 RCX: 00007f55d299e0d9 [ 106.305816][ T5933] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000700 [ 106.313813][ T5933] RBP: 00007f55d2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 106.321817][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.329819][ T5933] R13: 00007f55d2c25fac R14: 00007f55d2c25fa0 R15: 00007f55d2c25fa0 [ 106.337819][ T5933] [ 106.340855][ T5933] ================================================================== [ 106.359979][ T5933] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.367241][ T5933] CPU: 0 PID: 5933 Comm: syz.0.17 Not tainted syzkaller #0 [ 106.374488][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.378219][ T5086] Bluetooth: hci0: command tx timeout [ 106.389964][ T5933] Call Trace: [ 106.393419][ T5933] [ 106.396423][ T5933] dump_stack_lvl+0x18c/0x250 [ 106.401153][ T5933] ? show_regs_print_info+0x20/0x20 [ 106.406405][ T5933] ? load_image+0x420/0x420 [ 106.410984][ T5933] panic+0x2ca/0x720 [ 106.414948][ T5933] ? bpf_jit_dump+0xd0/0xd0 [ 106.419485][ T5933] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.425699][ T5933] ? ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.431359][ T5933] ? check_panic_on_warn+0x70/0xa0 [ 106.436500][ T5933] ? ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.442163][ T5933] check_panic_on_warn+0x84/0xa0 [ 106.447246][ T5933] ? ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.452912][ T5933] end_report+0x6f/0x130 [ 106.457192][ T5933] kasan_report+0x128/0x150 [ 106.461724][ T5933] ? ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.467386][ T5933] kasan_check_range+0x241/0x290 [ 106.472351][ T5933] ext4_mb_load_buddy_gfp+0x603/0x1760 [ 106.477847][ T5933] ext4_mb_regular_allocator+0x1205/0x36c0 [ 106.483695][ T5933] ? __kasan_slab_alloc+0x6c/0x80 [ 106.488752][ T5933] ext4_mb_new_blocks+0xc9c/0x42f0 [ 106.493899][ T5933] ? ext4_find_extent+0x1f5/0xcd0 [ 106.498975][ T5933] ? rcu_is_watching+0x15/0xb0 [ 106.503771][ T5933] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 106.509514][ T5933] ? ext4_inode_to_goal_block+0x317/0x450 [ 106.515272][ T5933] ext4_ext_map_blocks+0x1811/0x68c0 [ 106.520595][ T5933] ? __might_sleep+0xe0/0xe0 [ 106.525213][ T5933] ? ext4_ext_release+0x10/0x10 [ 106.530102][ T5933] ext4_map_blocks+0x9db/0x1a90 [ 106.534988][ T5933] ? ext4_reserve_inode_write+0x248/0x2a0 [ 106.540747][ T5933] ? ext4_issue_zeroout+0x250/0x250 [ 106.545976][ T5933] ext4_getblk+0x1c9/0x720 [ 106.550701][ T5933] ? ext4_get_block_unwritten+0x100/0x100 [ 106.556456][ T5933] ext4_bread+0x2a/0x170 [ 106.560731][ T5933] ext4_symlink+0x519/0x940 [ 106.565274][ T5933] ? ext4_unlink+0x500/0x500 [ 106.569982][ T5933] ? generic_permission+0x24d/0x590 [ 106.575210][ T5933] ? inode_permission+0xf3/0x480 [ 106.580179][ T5933] ? bpf_lsm_inode_symlink+0x9/0x10 [ 106.585413][ T5933] ? security_inode_symlink+0xb6/0x100 [ 106.590933][ T5933] vfs_symlink+0x138/0x2b0 [ 106.595375][ T5933] do_symlinkat+0x1ba/0x400 [ 106.599906][ T5933] ? vfs_symlink+0x2b0/0x2b0 [ 106.604529][ T5933] __x64_sys_symlinkat+0x99/0xb0 [ 106.609493][ T5933] do_syscall_64+0x55/0xb0 [ 106.613940][ T5933] ? clear_bhb_loop+0x40/0x90 [ 106.618637][ T5933] ? clear_bhb_loop+0x40/0x90 [ 106.623334][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.629253][ T5933] RIP: 0033:0x7f55d299e0d9 [ 106.633686][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.653339][ T5933] RSP: 002b:00007ffe25dabae8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 106.661776][ T5933] RAX: ffffffffffffffda RBX: 00007f55d2c25fa0 RCX: 00007f55d299e0d9 [ 106.669771][ T5933] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000700 [ 106.677941][ T5933] RBP: 00007f55d2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 106.685931][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.693935][ T5933] R13: 00007f55d2c25fac R14: 00007f55d2c25fa0 R15: 00007f55d2c25fa0 [ 106.701939][ T5933] [ 106.705542][ T5933] Kernel Offset: disabled [ 106.709889][ T5933] Rebooting in 86400 seconds..