Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://46443 [ 30.888712][ T4341] cgroup: Unknown subsys name 'net' [ 31.123069][ T4341] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.394822][ T4341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.608333][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.609927][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.613417][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.620738][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.622245][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.623764][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.945931][ T4377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.947453][ T4377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.949077][ T4377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.951173][ T4377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.952813][ T4377] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.954282][ T4377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.489454][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.494481][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.496136][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.514967][ T4419] infiniband rxe0: set active [ 37.516111][ T4406] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.517241][ T4419] infiniband rxe0: added rxe_eth0 [ 37.539588][ T4419] RDS/IB: rxe0: added [ 37.540708][ T4419] smc: adding ib device rxe0 with port count 1 [ 37.541955][ T4419] smc: ib device rxe0 port 1 has pnetid [ 37.543360][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.545030][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.564765][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.582215][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.599349][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.616289][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.633548][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.646270][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.654316][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.671490][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.688554][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.705553][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.722260][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.738846][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.755573][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.776900][ T4419] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.786594][ T3994] infiniband rxe0: set active [ 37.787747][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.827039][ T4419] chnl_net:caif_netlink_parms(): no params data found [ 37.844104][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.845606][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.847460][ T4419] device bridge_slave_0 entered promiscuous mode [ 37.849701][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.852684][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.854309][ T4419] device bridge_slave_1 entered promiscuous mode [ 37.860835][ T4419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.863408][ T4419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.869926][ T4419] team0: Port device team_slave_0 added [ 37.872267][ T4419] team0: Port device team_slave_1 added [ 37.887117][ T4419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.888429][ T4419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.893722][ T4419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.896713][ T4419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.898025][ T4419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.903593][ T4419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.951287][ T4419] device hsr_slave_0 entered promiscuous mode [ 37.990393][ T4419] device hsr_slave_1 entered promiscuous mode [ 38.091399][ T4419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.131510][ T4419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.161121][ T4419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.211534][ T4419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.264100][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.265402][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.267017][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.268297][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.284883][ T4419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.290732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.293375][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.295259][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.310564][ T4419] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.313817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.315691][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.316989][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.319787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.323235][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.324487][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.330544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.332269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.335532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.338494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.353993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.356643][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.411414][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.412927][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.416125][ T4419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.428803][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.434933][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.436769][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.438394][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.441779][ T4419] device veth0_vlan entered promiscuous mode [ 38.444893][ T4419] device veth1_vlan entered promiscuous mode [ 38.452114][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.453864][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.455507][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.458166][ T4419] device veth0_macvtap entered promiscuous mode [ 38.461687][ T4419] device veth1_macvtap entered promiscuous mode [ 38.466863][ T4419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.468484][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.471187][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.474147][ T4419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.475627][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.478529][ T4419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.480554][ T4419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.482065][ T4419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.483501][ T4419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.903394][ T4473] rxe_eth0 speed is unknown, defaulting to 1000 1970/01/01 00:00:39 executed programs: 0 [ 39.049640][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.051940][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.053606][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.055305][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.056971][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.058398][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.201471][ T4476] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.288429][ T4476] chnl_net:caif_netlink_parms(): no params data found [ 39.321980][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.323298][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.325920][ T4476] device bridge_slave_0 entered promiscuous mode [ 39.328319][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.329623][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.332959][ T4476] device bridge_slave_1 entered promiscuous mode [ 39.347027][ T4476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.349980][ T4476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.363724][ T4476] team0: Port device team_slave_0 added [ 39.365743][ T4476] team0: Port device team_slave_1 added [ 39.377350][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.378691][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.383995][ T4476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.386628][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.387892][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.393612][ T4476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.444309][ T4476] device hsr_slave_0 entered promiscuous mode [ 39.491197][ T4476] device hsr_slave_1 entered promiscuous mode [ 39.530260][ T4476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.531791][ T4476] Cannot create hsr debugfs directory [ 39.911798][ T4476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.120907][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 42.210964][ T4476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.200338][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 44.341352][ T4476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.422179][ T4476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.601637][ T4476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.641415][ T4476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.724188][ T4476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.761244][ T4476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.842304][ T4476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.845965][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.847643][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.851226][ T4476] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.853773][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.855755][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.857420][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.858868][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.861547][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.901653][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.903520][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.905282][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.906706][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.908363][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.910394][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.912314][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.914232][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.916076][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.917877][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.920384][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.923575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.925342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.927931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.929617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.975262][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.056351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.058028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.061501][ T4476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.067638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.069573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.075290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.077122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.078909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.081656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.084438][ T4476] device veth0_vlan entered promiscuous mode [ 45.087687][ T4476] device veth1_vlan entered promiscuous mode [ 45.094881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.096609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.098233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.100082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.104691][ T4476] device veth0_macvtap entered promiscuous mode [ 45.107005][ T4476] device veth1_macvtap entered promiscuous mode [ 45.112829][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.114912][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.117058][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.119218][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.122454][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.124776][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.126305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.127896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.129428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.133502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.135942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.137761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.140977][ T4476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.142604][ T4476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.144174][ T4476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.145797][ T4476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.170784][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.172367][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.174384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.179653][ T627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.181510][ T627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.182951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:45 executed programs: 2 [ 45.241192][ T4495] gadgetfs: bound to dummy_udc driver [ 45.268409][ T4496] gadgetfs: bound to dummy_udc driver [ 45.274926][ T39] device hsr_slave_0 left promiscuous mode [ 45.280329][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 45.290066][ T4497] syz.0.19 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 45.292691][ T39] device hsr_slave_1 left promiscuous mode [ 45.294054][ T4497] CPU: 1 PID: 4497 Comm: syz.0.19 Not tainted syzkaller #0 [ 45.295380][ T4497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.297249][ T4497] Call trace: [ 45.297898][ T4497] dump_backtrace+0x1c4/0x1f0 [ 45.298811][ T4497] show_stack+0x2c/0x3c [ 45.299527][ T4497] __dump_stack+0x30/0x40 [ 45.300309][ T4497] dump_stack_lvl+0xf4/0x15c [ 45.301181][ T4497] dump_stack+0x1c/0x5c [ 45.301996][ T4497] dump_header+0xc0/0x724 [ 45.302859][ T4497] oom_kill_process+0x35c/0x660 [ 45.303781][ T4497] out_of_memory+0xbf0/0xf70 [ 45.304690][ T4497] mem_cgroup_out_of_memory+0x228/0x2d0 [ 45.305801][ T4497] try_charge_memcg+0xa4c/0x1390 [ 45.306773][ T4497] obj_cgroup_charge+0x178/0x2e4 [ 45.307844][ T4497] slab_pre_alloc_hook+0x2fc/0x31c [ 45.308980][ T4497] kmem_cache_alloc_lru+0x60/0x284 [ 45.310071][ T4497] new_inode_pseudo+0xdc/0x1cc [ 45.311062][ T4497] new_inode+0x38/0x174 [ 45.311893][ T4497] gadgetfs_create_file+0x74/0x258 [ 45.312931][ T4497] gadgetfs_bind+0x3a8/0x7b0 [ 45.313863][ T4497] gadget_bind_driver+0x26c/0x684 [ 45.314895][ T4497] really_probe+0x3a0/0xac4 [ 45.315830][ T4497] __driver_probe_device+0x1c8/0x368 [ 45.316890][ T4497] driver_probe_device+0x78/0x324 [ 45.317916][ T4497] __driver_attach+0x3bc/0x614 [ 45.318758][ T4497] bus_for_each_dev+0x148/0x1d0 [ 45.319677][ T4497] driver_attach+0x50/0x60 [ 45.320542][ T4497] bus_add_driver+0x2c0/0x518 [ 45.321562][ T4497] driver_register+0x200/0x37c [ 45.322594][ T4497] usb_gadget_register_driver_owner+0xf0/0x25c [ 45.323907][ T4497] dev_config+0xba8/0xfec [ 45.324842][ T4497] vfs_write+0x2a8/0x7c8 [ 45.325761][ T4497] ksys_write+0x12c/0x228 [ 45.326646][ T4497] __arm64_sys_write+0x7c/0x90 [ 45.327576][ T4497] invoke_syscall+0x98/0x290 [ 45.328498][ T4497] el0_svc_common+0x13c/0x258 [ 45.329462][ T4497] do_el0_svc+0x5c/0x134 [ 45.330347][ T4497] el0_svc+0x58/0x12c [ 45.331173][ T4497] el0t_64_sync_handler+0x84/0xf0 [ 45.332190][ T4497] el0t_64_sync+0x18c/0x190 [ 45.335147][ T4497] memory: usage 60kB, limit 96kB, failcnt 51 [ 45.336420][ T4497] memory+swap: usage 60kB, limit 9007199254740988kB, failcnt 0 [ 45.337962][ T4497] kmem: usage 44kB, limit 9007199254740988kB, failcnt 0 [ 45.339193][ T4497] Memory cgroup stats for /syz0/test: [ 45.339386][ T4497] anon 0 [ 45.339386][ T4497] file 0 [ 45.339386][ T4497] kernel 45056 [ 45.339386][ T4497] kernel_stack 0 [ 45.339386][ T4497] pagetables 0 [ 45.339386][ T4497] sec_pagetables 0 [ 45.339386][ T4497] percpu 0 [ 45.339386][ T4497] sock 0 [ 45.339386][ T4497] vmalloc 0 [ 45.339386][ T4497] shmem 0 [ 45.339386][ T4497] zswap 0 [ 45.339386][ T4497] zswapped 0 [ 45.339386][ T4497] file_mapped 0 [ 45.339386][ T4497] file_dirty 0 [ 45.339386][ T4497] file_writeback 0 [ 45.339386][ T4497] swapcached 0 [ 45.339386][ T4497] anon_thp 0 [ 45.339386][ T4497] file_thp 0 [ 45.339386][ T4497] shmem_thp 0 [ 45.339386][ T4497] inactive_anon 0 [ 45.339386][ T4497] active_anon 0 [ 45.339386][ T4497] inactive_file 0 [ 45.339386][ T4497] active_file 0 [ 45.339386][ T4497] unevictable 0 [ 45.339386][ T4497] slab_reclaimable 41128 [ 45.339386][ T4497] slab_unreclaimable 2664 [ 45.339386][ T4497] slab 43792 [ 45.339386][ T4497] workingset_refault_anon 0 [ 45.357393][ T4497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.19,pid=4497,uid=0 [ 45.360584][ T4497] Memory cgroup out of memory: Killed process 4497 (syz.0.19) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 45.364899][ T4497] gadgetfs: bound to dummy_udc driver [ 45.400382][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.401768][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.404670][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.406031][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.407663][ T39] device bridge_slave_1 left promiscuous mode [ 45.409170][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.412607][ T4500] gadgetfs: bound to dummy_udc driver [ 45.423294][ T4501] gadgetfs: bound to dummy_udc driver [ 45.437340][ T4502] syz.0.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 45.439227][ T4502] CPU: 1 PID: 4502 Comm: syz.0.22 Not tainted syzkaller #0 [ 45.440583][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.442708][ T4502] Call trace: [ 45.443404][ T4502] dump_backtrace+0x1c4/0x1f0 [ 45.444408][ T4502] show_stack+0x2c/0x3c [ 45.445318][ T4502] __dump_stack+0x30/0x40 [ 45.446258][ T4502] dump_stack_lvl+0xf4/0x15c [ 45.447267][ T4502] dump_stack+0x1c/0x5c [ 45.448195][ T4502] dump_header+0xc0/0x724 [ 45.449162][ T4502] oom_kill_process+0x35c/0x660 [ 45.450245][ T4502] out_of_memory+0xbf0/0xf70 [ 45.451225][ T4502] mem_cgroup_out_of_memory+0x228/0x2d0 [ 45.452389][ T4502] try_charge_memcg+0xa4c/0x1390 [ 45.453374][ T4502] obj_cgroup_charge+0x178/0x2e4 [ 45.454354][ T4502] slab_pre_alloc_hook+0x2fc/0x31c [ 45.455372][ T4502] kmem_cache_alloc_lru+0x60/0x284 [ 45.456415][ T4502] __d_alloc+0x40/0x68c [ 45.457212][ T4502] d_alloc+0x54/0x208 [ 45.457996][ T4502] lookup_one_qstr_excl+0xbc/0x230 [ 45.458990][ T4502] filename_create+0x1d0/0x3a8 [ 45.459914][ T4502] do_mkdirat+0xac/0x3ec [ 45.460731][ T4502] __arm64_sys_mkdirat+0x90/0xa8 [ 45.461733][ T4502] invoke_syscall+0x98/0x290 [ 45.462763][ T4502] el0_svc_common+0x13c/0x258 [ 45.463697][ T4502] do_el0_svc+0x5c/0x134 [ 45.464552][ T4502] el0_svc+0x58/0x12c [ 45.465416][ T4502] el0t_64_sync_handler+0x84/0xf0 [ 45.466434][ T4502] el0t_64_sync+0x18c/0x190 [ 45.467939][ T4502] memory: usage 96kB, limit 96kB, failcnt 83 [ 45.468988][ T4502] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 45.471116][ T4502] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 45.472451][ T4502] Memory cgroup stats for /syz0/test: [ 45.472560][ T4502] anon 0 [ 45.472560][ T4502] file 0 [ 45.472560][ T4502] kernel 94208 [ 45.472560][ T4502] kernel_stack 0 [ 45.472560][ T4502] pagetables 0 [ 45.472560][ T4502] sec_pagetables 0 [ 45.472560][ T4502] percpu 0 [ 45.472560][ T4502] sock 0 [ 45.472560][ T4502] vmalloc 0 [ 45.472560][ T4502] shmem 0 [ 45.472560][ T4502] zswap 0 [ 45.472560][ T4502] zswapped 0 [ 45.472560][ T4502] file_mapped 0 [ 45.472560][ T4502] file_dirty 0 [ 45.472560][ T4502] file_writeback 0 [ 45.472560][ T4502] swapcached 0 [ 45.472560][ T4502] anon_thp 0 [ 45.472560][ T4502] file_thp 0 [ 45.472560][ T4502] shmem_thp 0 [ 45.472560][ T4502] inactive_anon 0 [ 45.472560][ T4502] active_anon 0 [ 45.472560][ T4502] inactive_file 0 [ 45.472560][ T4502] active_file 0 [ 45.472560][ T4502] unevictable 0 [ 45.472560][ T4502] slab_reclaimable 90624 [ 45.472560][ T4502] slab_unreclaimable 3312 [ 45.472560][ T4502] slab 93936 [ 45.472560][ T4502] workingset_refault_anon 0 [ 45.492588][ T39] device bridge_slave_0 left promiscuous mode [ 45.493756][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.493975][ T4502] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.22,pid=4502,uid=0 [ 45.497731][ T4502] Memory cgroup out of memory: Killed process 4502 (syz.0.22) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 45.511196][ T4503] gadgetfs: bound to dummy_udc driver [ 45.521824][ T4504] gadgetfs: bound to dummy_udc driver [ 45.565581][ T4505] gadgetfs: bound to dummy_udc driver [ 45.579223][ T4506] syz.0.26 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 45.582247][ T4506] CPU: 1 PID: 4506 Comm: syz.0.26 Not tainted syzkaller #0 [ 45.583581][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.585390][ T4506] Call trace: [ 45.585937][ T4506] dump_backtrace+0x1c4/0x1f0 [ 45.586759][ T4506] show_stack+0x2c/0x3c [ 45.587519][ T4506] __dump_stack+0x30/0x40 [ 45.588288][ T4506] dump_stack_lvl+0xf4/0x15c [ 45.589078][ T4506] dump_stack+0x1c/0x5c [ 45.589800][ T4506] dump_header+0xc0/0x724 [ 45.590611][ T4506] oom_kill_process+0x35c/0x660 [ 45.591528][ T4506] out_of_memory+0xbf0/0xf70 [ 45.592437][ T4506] mem_cgroup_out_of_memory+0x228/0x2d0 [ 45.593502][ T4506] try_charge_memcg+0xa4c/0x1390 [ 45.594483][ T4506] obj_cgroup_charge+0x178/0x2e4 [ 45.595458][ T4506] slab_pre_alloc_hook+0x2fc/0x31c [ 45.596462][ T4506] kmem_cache_alloc_lru+0x60/0x284 [ 45.597439][ T4506] __d_alloc+0x40/0x68c [ 45.598236][ T4506] d_alloc+0x54/0x208 [ 45.599006][ T4506] lookup_one_qstr_excl+0xbc/0x230 [ 45.599969][ T4506] filename_create+0x1d0/0x3a8 [ 45.600893][ T4506] do_mkdirat+0xac/0x3ec [ 45.601743][ T4506] __arm64_sys_mkdirat+0x90/0xa8 [ 45.602718][ T4506] invoke_syscall+0x98/0x290 [ 45.603659][ T4506] el0_svc_common+0x13c/0x258 [ 45.604600][ T4506] do_el0_svc+0x5c/0x134 [ 45.605350][ T4506] el0_svc+0x58/0x12c [ 45.606104][ T4506] el0t_64_sync_handler+0x84/0xf0 [ 45.607059][ T4506] el0t_64_sync+0x18c/0x190 [ 45.609884][ T4506] memory: usage 32kB, limit 96kB, failcnt 134 [ 45.611929][ T39] device veth1_macvtap left promiscuous mode [ 45.613150][ T39] device veth0_macvtap left promiscuous mode [ 45.614291][ T39] device veth1_vlan left promiscuous mode [ 45.615396][ T39] device veth0_vlan left promiscuous mode [ 45.620855][ T4506] memory+swap: usage 28kB, limit 9007199254740988kB, failcnt 0 [ 45.622211][ T4506] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 45.623449][ T4506] Memory cgroup stats for /syz0/test: [ 45.623540][ T4506] anon 0 [ 45.623540][ T4506] file 0 [ 45.623540][ T4506] kernel 0 [ 45.623540][ T4506] kernel_stack 0 [ 45.623540][ T4506] pagetables 0 [ 45.623540][ T4506] sec_pagetables 0 [ 45.623540][ T4506] percpu 0 [ 45.623540][ T4506] sock 0 [ 45.623540][ T4506] vmalloc 0 [ 45.623540][ T4506] shmem 0 [ 45.623540][ T4506] zswap 0 [ 45.623540][ T4506] zswapped 0 [ 45.623540][ T4506] file_mapped 0 [ 45.623540][ T4506] file_dirty 0 [ 45.623540][ T4506] file_writeback 0 [ 45.623540][ T4506] swapcached 0 [ 45.623540][ T4506] anon_thp 0 [ 45.623540][ T4506] file_thp 0 [ 45.623540][ T4506] shmem_thp 0 [ 45.623540][ T4506] inactive_anon 0 [ 45.623540][ T4506] active_anon 0 [ 45.623540][ T4506] inactive_file 0 [ 45.623540][ T4506] active_file 0 [ 45.623540][ T4506] unevictable 0 [ 45.623540][ T4506] slab_reclaimable 0 [ 45.623540][ T4506] slab_unreclaimable 0 [ 45.623540][ T4506] slab 0 [ 45.623540][ T4506] workingset_refault_anon 0 [ 45.643394][ T4506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.26,pid=4506,uid=0 [ 45.646244][ T4506] Memory cgroup out of memory: Killed process 4506 (syz.0.26) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 45.703884][ T4507] gadgetfs: bound to dummy_udc driver [ 45.717544][ T4508] gadgetfs: bound to dummy_udc driver [ 45.730443][ T4509] syz.0.29 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 45.732226][ T4509] CPU: 0 PID: 4509 Comm: syz.0.29 Not tainted syzkaller #0 [ 45.733780][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.735940][ T4509] Call trace: [ 45.736558][ T4509] dump_backtrace+0x1c4/0x1f0 [ 45.737434][ T4509] show_stack+0x2c/0x3c [ 45.738260][ T4509] __dump_stack+0x30/0x40 [ 45.739030][ T4509] dump_stack_lvl+0xf4/0x15c [ 45.739896][ T4509] dump_stack+0x1c/0x5c [ 45.740734][ T4509] dump_header+0xc0/0x724 [ 45.741631][ T4509] oom_kill_process+0x35c/0x660 [ 45.742632][ T4509] out_of_memory+0xbf0/0xf70 [ 45.743559][ T4509] mem_cgroup_out_of_memory+0x228/0x2d0 [ 45.744662][ T4509] try_charge_memcg+0xa4c/0x1390 [ 45.745640][ T4509] obj_cgroup_charge+0x178/0x2e4 [ 45.746642][ T4509] slab_pre_alloc_hook+0x2fc/0x31c [ 45.747656][ T4509] kmem_cache_alloc_lru+0x60/0x284 [ 45.748717][ T4509] new_inode_pseudo+0xdc/0x1cc [ 45.749725][ T4509] new_inode+0x38/0x174 [ 45.750518][ T4509] gadgetfs_create_file+0x74/0x258 [ 45.751559][ T4509] gadgetfs_bind+0x3a8/0x7b0 [ 45.752484][ T4509] gadget_bind_driver+0x26c/0x684 [ 45.753456][ T4509] really_probe+0x3a0/0xac4 [ 45.754255][ T4509] __driver_probe_device+0x1c8/0x368 [ 45.755270][ T4509] driver_probe_device+0x78/0x324 [ 45.756262][ T4509] __driver_attach+0x3bc/0x614 [ 45.757188][ T4509] bus_for_each_dev+0x148/0x1d0 [ 45.758130][ T4509] driver_attach+0x50/0x60 [ 45.758963][ T4509] bus_add_driver+0x2c0/0x518 [ 45.759842][ T4509] driver_register+0x200/0x37c [ 45.760654][ T4509] usb_gadget_register_driver_owner+0xf0/0x25c [ 45.761791][ T4509] dev_config+0xba8/0xfec [ 45.762649][ T4509] vfs_write+0x2a8/0x7c8 [ 45.763498][ T4509] ksys_write+0x12c/0x228 [ 45.764359][ T4509] __arm64_sys_write+0x7c/0x90 [ 45.765275][ T4509] invoke_syscall+0x98/0x290 [ 45.766139][ T4509] el0_svc_common+0x13c/0x258 [ 45.767014][ T4509] do_el0_svc+0x5c/0x134 [ 45.767803][ T4509] el0_svc+0x58/0x12c [ 45.768586][ T4509] el0t_64_sync_handler+0x84/0xf0 [ 45.769566][ T4509] el0t_64_sync+0x18c/0x190 [ 45.770930][ T4509] memory: usage 64kB, limit 96kB, failcnt 177 [ 45.771967][ T4509] memory+swap: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 45.773288][ T4509] kmem: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 45.774524][ T4509] Memory cgroup stats for /syz0/test: [ 45.774601][ T4509] anon 0 [ 45.774601][ T4509] file 0 [ 45.774601][ T4509] kernel 65536 [ 45.774601][ T4509] kernel_stack 0 [ 45.774601][ T4509] pagetables 0 [ 45.774601][ T4509] sec_pagetables 0 [ 45.774601][ T4509] percpu 0 [ 45.774601][ T4509] sock 0 [ 45.774601][ T4509] vmalloc 0 [ 45.774601][ T4509] shmem 0 [ 45.774601][ T4509] zswap 0 [ 45.774601][ T4509] zswapped 0 [ 45.774601][ T4509] file_mapped 0 [ 45.774601][ T4509] file_dirty 0 [ 45.774601][ T4509] file_writeback 0 [ 45.774601][ T4509] swapcached 0 [ 45.774601][ T4509] anon_thp 0 [ 45.774601][ T4509] file_thp 0 [ 45.774601][ T4509] shmem_thp 0 [ 45.774601][ T4509] inactive_anon 0 [ 45.774601][ T4509] active_anon 0 [ 45.774601][ T4509] inactive_file 0 [ 45.774601][ T4509] active_file 0 [ 45.774601][ T4509] unevictable 0 [ 45.774601][ T4509] slab_reclaimable 58016 [ 45.774601][ T4509] slab_unreclaimable 7344 [ 45.774601][ T4509] slab 65360 [ 45.774601][ T4509] workingset_refault_anon 0 [ 45.791689][ T4509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.29,pid=4509,uid=0 [ 45.794628][ T4509] Memory cgroup out of memory: Killed process 4509 (syz.0.29) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 45.802410][ T4509] gadgetfs: bound to dummy_udc driver [ 45.853199][ T4510] gadgetfs: bound to dummy_udc driver [ 45.866861][ T4511] gadgetfs: bound to dummy_udc driver [ 45.880072][ T4512] syz.0.32 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 45.882293][ T4512] CPU: 1 PID: 4512 Comm: syz.0.32 Not tainted syzkaller #0 [ 45.883694][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.885722][ T4512] Call trace: [ 45.886422][ T4512] dump_backtrace+0x1c4/0x1f0 [ 45.887436][ T4512] show_stack+0x2c/0x3c [ 45.888339][ T4512] __dump_stack+0x30/0x40 [ 45.889277][ T4512] dump_stack_lvl+0xf4/0x15c [ 45.890286][ T4512] dump_stack+0x1c/0x5c [ 45.891144][ T4512] dump_header+0xc0/0x724 [ 45.892038][ T4512] oom_kill_process+0x35c/0x660 [ 45.893021][ T4512] out_of_memory+0xbf0/0xf70 [ 45.893927][ T4512] mem_cgroup_out_of_memory+0x228/0x2d0 [ 45.894881][ T4512] try_charge_memcg+0xa4c/0x1390 [ 45.895807][ T4512] obj_cgroup_charge+0x178/0x2e4 [ 45.896747][ T4512] slab_pre_alloc_hook+0x2fc/0x31c [ 45.897722][ T4512] kmem_cache_alloc_lru+0x60/0x284 [ 45.898697][ T4512] __d_alloc+0x40/0x68c [ 45.899463][ T4512] d_alloc+0x54/0x208 [ 45.900253][ T4512] lookup_one_qstr_excl+0xbc/0x230 [ 45.901101][ T4512] filename_create+0x1d0/0x3a8 [ 45.901956][ T4512] do_mkdirat+0xac/0x3ec [ 45.902715][ T4512] __arm64_sys_mkdirat+0x90/0xa8 [ 45.903622][ T4512] invoke_syscall+0x98/0x290 [ 45.904465][ T4512] el0_svc_common+0x13c/0x258 [ 45.905364][ T4512] do_el0_svc+0x5c/0x134 [ 45.906119][ T4512] el0_svc+0x58/0x12c [ 45.906835][ T4512] el0t_64_sync_handler+0x84/0xf0 [ 45.907779][ T4512] el0t_64_sync+0x18c/0x190 [ 45.910504][ T4512] memory: usage 32kB, limit 96kB, failcnt 244 [ 45.911651][ T4512] memory+swap: usage 32kB, limit 9007199254740988kB, failcnt 0 [ 45.913112][ T4512] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 45.914413][ T4512] Memory cgroup stats for /syz0/test: [ 45.914511][ T4512] anon 0 [ 45.914511][ T4512] file 0 [ 45.914511][ T4512] kernel 4096 [ 45.914511][ T4512] kernel_stack 0 [ 45.914511][ T4512] pagetables 0 [ 45.914511][ T4512] sec_pagetables 0 [ 45.914511][ T4512] percpu 0 [ 45.914511][ T4512] sock 0 [ 45.914511][ T4512] vmalloc 0 [ 45.914511][ T4512] shmem 0 [ 45.914511][ T4512] zswap 0 [ 45.914511][ T4512] zswapped 0 [ 45.914511][ T4512] file_mapped 0 [ 45.914511][ T4512] file_dirty 0 [ 45.914511][ T4512] file_writeback 0 [ 45.914511][ T4512] swapcached 0 [ 45.914511][ T4512] anon_thp 0 [ 45.914511][ T4512] file_thp 0 [ 45.914511][ T4512] shmem_thp 0 [ 45.914511][ T4512] inactive_anon 0 [ 45.914511][ T4512] active_anon 0 [ 45.914511][ T4512] inactive_file 0 [ 45.914511][ T4512] active_file 0 [ 45.914511][ T4512] unevictable 0 [ 45.914511][ T4512] slab_reclaimable 2304 [ 45.914511][ T4512] slab_unreclaimable 0 [ 45.914511][ T4512] slab 2304 [ 45.914511][ T4512] workingset_refault_anon 0 [ 45.931894][ T4512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.32,pid=4512,uid=0 [ 45.934905][ T4512] Memory cgroup out of memory: Killed process 4512 (syz.0.32) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 45.991340][ T4513] gadgetfs: bound to dummy_udc driver [ 46.003942][ T4514] gadgetfs: bound to dummy_udc driver [ 46.017551][ T4515] syz.0.35 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.019546][ T4515] CPU: 0 PID: 4515 Comm: syz.0.35 Not tainted syzkaller #0 [ 46.020945][ T4515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.022709][ T4515] Call trace: [ 46.023343][ T4515] dump_backtrace+0x1c4/0x1f0 [ 46.024210][ T4515] show_stack+0x2c/0x3c [ 46.024973][ T4515] __dump_stack+0x30/0x40 [ 46.025795][ T4515] dump_stack_lvl+0xf4/0x15c [ 46.026675][ T4515] dump_stack+0x1c/0x5c [ 46.027482][ T4515] dump_header+0xc0/0x724 [ 46.028326][ T4515] oom_kill_process+0x35c/0x660 [ 46.029276][ T4515] out_of_memory+0xbf0/0xf70 [ 46.030171][ T4515] mem_cgroup_out_of_memory+0x228/0x2d0 [ 46.031160][ T4515] try_charge_memcg+0xa4c/0x1390 [ 46.032112][ T4515] obj_cgroup_charge+0x178/0x2e4 [ 46.033099][ T4515] slab_pre_alloc_hook+0x2fc/0x31c [ 46.034133][ T4515] kmem_cache_alloc_lru+0x60/0x284 [ 46.035050][ T4515] new_inode_pseudo+0xdc/0x1cc [ 46.036175][ T4515] new_inode+0x38/0x174 [ 46.037160][ T4515] gadgetfs_create_file+0x74/0x258 [ 46.038395][ T4515] gadgetfs_bind+0x3a8/0x7b0 [ 46.039463][ T4515] gadget_bind_driver+0x26c/0x684 [ 46.040567][ T4515] really_probe+0x3a0/0xac4 [ 46.041519][ T4515] __driver_probe_device+0x1c8/0x368 [ 46.042637][ T4515] driver_probe_device+0x78/0x324 [ 46.043735][ T4515] __driver_attach+0x3bc/0x614 [ 46.044763][ T4515] bus_for_each_dev+0x148/0x1d0 [ 46.045689][ T4515] driver_attach+0x50/0x60 [ 46.046581][ T4515] bus_add_driver+0x2c0/0x518 [ 46.047457][ T4515] driver_register+0x200/0x37c [ 46.048319][ T4515] usb_gadget_register_driver_owner+0xf0/0x25c [ 46.049426][ T4515] dev_config+0xba8/0xfec [ 46.050221][ T4515] vfs_write+0x2a8/0x7c8 [ 46.050992][ T4515] ksys_write+0x12c/0x228 [ 46.051782][ T4515] __arm64_sys_write+0x7c/0x90 [ 46.052661][ T4515] invoke_syscall+0x98/0x290 [ 46.053561][ T4515] el0_svc_common+0x13c/0x258 [ 46.054463][ T4515] do_el0_svc+0x5c/0x134 [ 46.055263][ T4515] el0_svc+0x58/0x12c [ 46.056016][ T4515] el0t_64_sync_handler+0x84/0xf0 [ 46.056971][ T4515] el0t_64_sync+0x18c/0x190 [ 46.059122][ T4515] memory: usage 96kB, limit 96kB, failcnt 287 [ 46.060847][ T4515] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 46.062043][ T4515] kmem: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 46.063507][ T4515] Memory cgroup stats for /syz0/test: [ 46.063599][ T4515] anon 0 [ 46.063599][ T4515] file 0 [ 46.063599][ T4515] kernel 65536 [ 46.063599][ T4515] kernel_stack 0 [ 46.063599][ T4515] pagetables 0 [ 46.063599][ T4515] sec_pagetables 0 [ 46.063599][ T4515] percpu 0 [ 46.063599][ T4515] sock 0 [ 46.063599][ T4515] vmalloc 0 [ 46.063599][ T4515] shmem 0 [ 46.063599][ T4515] zswap 0 [ 46.063599][ T4515] zswapped 0 [ 46.063599][ T4515] file_mapped 0 [ 46.063599][ T4515] file_dirty 0 [ 46.063599][ T4515] file_writeback 0 [ 46.063599][ T4515] swapcached 0 [ 46.063599][ T4515] anon_thp 0 [ 46.063599][ T4515] file_thp 0 [ 46.063599][ T4515] shmem_thp 0 [ 46.063599][ T4515] inactive_anon 0 [ 46.063599][ T4515] active_anon 0 [ 46.063599][ T4515] inactive_file 0 [ 46.063599][ T4515] active_file 0 [ 46.063599][ T4515] unevictable 0 [ 46.063599][ T4515] slab_reclaimable 57632 [ 46.063599][ T4515] slab_unreclaimable 5328 [ 46.063599][ T4515] slab 62960 [ 46.063599][ T4515] workingset_refault_anon 0 [ 46.083037][ T4515] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.35,pid=4515,uid=0 [ 46.085681][ T4515] Memory cgroup out of memory: Killed process 4515 (syz.0.35) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 46.089169][ T4515] gadgetfs: bound to dummy_udc driver [ 46.141900][ T4516] gadgetfs: bound to dummy_udc driver [ 46.155779][ T4517] gadgetfs: bound to dummy_udc driver [ 46.173314][ T4518] syz.0.38 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.175112][ T4518] CPU: 1 PID: 4518 Comm: syz.0.38 Not tainted syzkaller #0 [ 46.176491][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.178391][ T4518] Call trace: [ 46.179024][ T4518] dump_backtrace+0x1c4/0x1f0 [ 46.179995][ T4518] show_stack+0x2c/0x3c [ 46.180844][ T4518] __dump_stack+0x30/0x40 [ 46.181704][ T4518] dump_stack_lvl+0xf4/0x15c [ 46.182712][ T4518] dump_stack+0x1c/0x5c [ 46.183633][ T4518] dump_header+0xc0/0x724 [ 46.184596][ T4518] oom_kill_process+0x35c/0x660 [ 46.185668][ T4518] out_of_memory+0xbf0/0xf70 [ 46.186688][ T4518] mem_cgroup_out_of_memory+0x228/0x2d0 [ 46.187843][ T4518] try_charge_memcg+0xa4c/0x1390 [ 46.188887][ T4518] obj_cgroup_charge+0x178/0x2e4 [ 46.189976][ T4518] slab_pre_alloc_hook+0x2fc/0x31c [ 46.191047][ T4518] kmem_cache_alloc_lru+0x60/0x284 [ 46.192146][ T4518] __d_alloc+0x40/0x68c [ 46.193039][ T4518] d_alloc+0x54/0x208 [ 46.193885][ T4518] lookup_one_qstr_excl+0xbc/0x230 [ 46.194954][ T4518] filename_create+0x1d0/0x3a8 [ 46.195949][ T4518] do_mkdirat+0xac/0x3ec [ 46.196825][ T4518] __arm64_sys_mkdirat+0x90/0xa8 [ 46.197906][ T4518] invoke_syscall+0x98/0x290 [ 46.198902][ T4518] el0_svc_common+0x13c/0x258 [ 46.199925][ T4518] do_el0_svc+0x5c/0x134 [ 46.200852][ T4518] el0_svc+0x58/0x12c [ 46.201678][ T4518] el0t_64_sync_handler+0x84/0xf0 [ 46.202721][ T4518] el0t_64_sync+0x18c/0x190 [ 46.206439][ T4518] memory: usage 64kB, limit 96kB, failcnt 327 [ 46.207601][ T4518] memory+swap: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 46.209041][ T4518] kmem: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 46.211158][ T4518] Memory cgroup stats for /syz0/test: [ 46.211223][ T4518] anon 0 [ 46.211223][ T4518] file 0 [ 46.211223][ T4518] kernel 32768 [ 46.211223][ T4518] kernel_stack 0 [ 46.211223][ T4518] pagetables 0 [ 46.211223][ T4518] sec_pagetables 0 [ 46.211223][ T4518] percpu 0 [ 46.211223][ T4518] sock 0 [ 46.211223][ T4518] vmalloc 0 [ 46.211223][ T4518] shmem 0 [ 46.211223][ T4518] zswap 0 [ 46.211223][ T4518] zswapped 0 [ 46.211223][ T4518] file_mapped 0 [ 46.211223][ T4518] file_dirty 0 [ 46.211223][ T4518] file_writeback 0 [ 46.211223][ T4518] swapcached 0 [ 46.211223][ T4518] anon_thp 0 [ 46.211223][ T4518] file_thp 0 [ 46.211223][ T4518] shmem_thp 0 [ 46.211223][ T4518] inactive_anon 0 [ 46.211223][ T4518] active_anon 0 [ 46.211223][ T4518] inactive_file 0 [ 46.211223][ T4518] active_file 0 [ 46.211223][ T4518] unevictable 0 [ 46.211223][ T4518] slab_reclaimable 27648 [ 46.211223][ T4518] slab_unreclaimable 0 [ 46.211223][ T4518] slab 27648 [ 46.211223][ T4518] workingset_refault_anon 0 [ 46.231038][ T4518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.38,pid=4518,uid=0 [ 46.234258][ T4518] Memory cgroup out of memory: Killed process 4518 (syz.0.38) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 46.281949][ T4519] gadgetfs: bound to dummy_udc driver [ 46.294306][ T4520] gadgetfs: bound to dummy_udc driver [ 46.306447][ T4521] syz.0.41 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.308147][ T4521] CPU: 0 PID: 4521 Comm: syz.0.41 Not tainted syzkaller #0 [ 46.309400][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.311337][ T4521] Call trace: [ 46.312018][ T4521] dump_backtrace+0x1c4/0x1f0 [ 46.312927][ T4521] show_stack+0x2c/0x3c [ 46.313753][ T4521] __dump_stack+0x30/0x40 [ 46.314582][ T4521] dump_stack_lvl+0xf4/0x15c [ 46.315494][ T4521] dump_stack+0x1c/0x5c [ 46.316325][ T4521] dump_header+0xc0/0x724 [ 46.317146][ T4521] oom_kill_process+0x35c/0x660 [ 46.318056][ T4521] out_of_memory+0xbf0/0xf70 [ 46.318920][ T4521] mem_cgroup_out_of_memory+0x228/0x2d0 [ 46.320005][ T4521] try_charge_memcg+0xa4c/0x1390 [ 46.320948][ T4521] obj_cgroup_charge+0x178/0x2e4 [ 46.321908][ T4521] slab_pre_alloc_hook+0x2fc/0x31c [ 46.322855][ T4521] kmem_cache_alloc_lru+0x60/0x284 [ 46.323852][ T4521] new_inode_pseudo+0xdc/0x1cc [ 46.324739][ T4521] new_inode+0x38/0x174 [ 46.325532][ T4521] gadgetfs_create_file+0x74/0x258 [ 46.326526][ T4521] gadgetfs_bind+0x3a8/0x7b0 [ 46.327462][ T4521] gadget_bind_driver+0x26c/0x684 [ 46.328447][ T4521] really_probe+0x3a0/0xac4 [ 46.329323][ T4521] __driver_probe_device+0x1c8/0x368 [ 46.330318][ T4521] driver_probe_device+0x78/0x324 [ 46.331242][ T4521] __driver_attach+0x3bc/0x614 [ 46.332183][ T4521] bus_for_each_dev+0x148/0x1d0 [ 46.333099][ T4521] driver_attach+0x50/0x60 [ 46.333922][ T4521] bus_add_driver+0x2c0/0x518 [ 46.334774][ T4521] driver_register+0x200/0x37c [ 46.335734][ T4521] usb_gadget_register_driver_owner+0xf0/0x25c [ 46.336950][ T4521] dev_config+0xba8/0xfec [ 46.337784][ T4521] vfs_write+0x2a8/0x7c8 [ 46.338636][ T4521] ksys_write+0x12c/0x228 [ 46.339503][ T4521] __arm64_sys_write+0x7c/0x90 [ 46.340467][ T4521] invoke_syscall+0x98/0x290 [ 46.341433][ T4521] el0_svc_common+0x13c/0x258 [ 46.342358][ T4521] do_el0_svc+0x5c/0x134 [ 46.343222][ T4521] el0_svc+0x58/0x12c [ 46.344119][ T4521] el0t_64_sync_handler+0x84/0xf0 [ 46.345127][ T4521] el0t_64_sync+0x18c/0x190 [ 46.352586][ T4521] memory: usage 64kB, limit 96kB, failcnt 370 [ 46.353842][ T4521] memory+swap: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 46.355237][ T4521] kmem: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 46.356521][ T4521] Memory cgroup stats for /syz0/test: [ 46.356615][ T4521] anon 0 [ 46.356615][ T4521] file 0 [ 46.356615][ T4521] kernel 65536 [ 46.356615][ T4521] kernel_stack 0 [ 46.356615][ T4521] pagetables 0 [ 46.356615][ T4521] sec_pagetables 0 [ 46.356615][ T4521] percpu 0 [ 46.356615][ T4521] sock 0 [ 46.356615][ T4521] vmalloc 0 [ 46.356615][ T4521] shmem 0 [ 46.356615][ T4521] zswap 0 [ 46.356615][ T4521] zswapped 0 [ 46.356615][ T4521] file_mapped 0 [ 46.356615][ T4521] file_dirty 0 [ 46.356615][ T4521] file_writeback 0 [ 46.356615][ T4521] swapcached 0 [ 46.356615][ T4521] anon_thp 0 [ 46.356615][ T4521] file_thp 0 [ 46.356615][ T4521] shmem_thp 0 [ 46.356615][ T4521] inactive_anon 0 [ 46.356615][ T4521] active_anon 0 [ 46.356615][ T4521] inactive_file 0 [ 46.356615][ T4521] active_file 0 [ 46.356615][ T4521] unevictable 0 [ 46.356615][ T4521] slab_reclaimable 57632 [ 46.356615][ T4521] slab_unreclaimable 5328 [ 46.356615][ T4521] slab 62960 [ 46.356615][ T4521] workingset_refault_anon 0 [ 46.375471][ T4521] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.41,pid=4521,uid=0 [ 46.378595][ T4521] Memory cgroup out of memory: Killed process 4521 (syz.0.41) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 46.382181][ T4521] gadgetfs: bound to dummy_udc driver [ 46.442915][ T4522] gadgetfs: bound to dummy_udc driver [ 46.456027][ T4523] gadgetfs: bound to dummy_udc driver [ 46.469107][ T4524] syz.0.44 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.471198][ T4524] CPU: 1 PID: 4524 Comm: syz.0.44 Not tainted syzkaller #0 [ 46.472637][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.474389][ T4524] Call trace: [ 46.474947][ T4524] dump_backtrace+0x1c4/0x1f0 [ 46.475783][ T4524] show_stack+0x2c/0x3c [ 46.476870][ T4524] __dump_stack+0x30/0x40 [ 46.477641][ T4524] dump_stack_lvl+0xf4/0x15c [ 46.478473][ T4524] dump_stack+0x1c/0x5c [ 46.479216][ T4524] dump_header+0xc0/0x724 [ 46.479960][ T4524] oom_kill_process+0x35c/0x660 [ 46.480882][ T4524] out_of_memory+0xbf0/0xf70 [ 46.481809][ T4524] mem_cgroup_out_of_memory+0x228/0x2d0 [ 46.483025][ T4524] try_charge_memcg+0xa4c/0x1390 [ 46.484093][ T4524] obj_cgroup_charge+0x178/0x2e4 [ 46.485214][ T4524] slab_pre_alloc_hook+0x2fc/0x31c [ 46.486309][ T4524] kmem_cache_alloc_lru+0x60/0x284 [ 46.487394][ T4524] __d_alloc+0x40/0x68c [ 46.488253][ T4524] d_alloc+0x54/0x208 [ 46.489032][ T4524] lookup_one_qstr_excl+0xbc/0x230 [ 46.490037][ T4524] filename_create+0x1d0/0x3a8 [ 46.490907][ T4524] do_mkdirat+0xac/0x3ec [ 46.491726][ T4524] __arm64_sys_mkdirat+0x90/0xa8 [ 46.492662][ T4524] invoke_syscall+0x98/0x290 [ 46.493501][ T4524] el0_svc_common+0x13c/0x258 [ 46.494362][ T4524] do_el0_svc+0x5c/0x134 [ 46.495157][ T4524] el0_svc+0x58/0x12c [ 46.495915][ T4524] el0t_64_sync_handler+0x84/0xf0 [ 46.496960][ T4524] el0t_64_sync+0x18c/0x190 [ 46.498204][ T4524] memory: usage 96kB, limit 96kB, failcnt 418 [ 46.499575][ T4524] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 46.502989][ T4524] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 46.504124][ T4524] Memory cgroup stats for /syz0/test: [ 46.504205][ T4524] anon 0 [ 46.504205][ T4524] file 0 [ 46.504205][ T4524] kernel 4096 [ 46.504205][ T4524] kernel_stack 0 [ 46.504205][ T4524] pagetables 0 [ 46.504205][ T4524] sec_pagetables 0 [ 46.504205][ T4524] percpu 0 [ 46.504205][ T4524] sock 0 [ 46.504205][ T4524] vmalloc 0 [ 46.504205][ T4524] shmem 0 [ 46.504205][ T4524] zswap 0 [ 46.504205][ T4524] zswapped 0 [ 46.504205][ T4524] file_mapped 0 [ 46.504205][ T4524] file_dirty 0 [ 46.504205][ T4524] file_writeback 0 [ 46.504205][ T4524] swapcached 0 [ 46.504205][ T4524] anon_thp 0 [ 46.504205][ T4524] file_thp 0 [ 46.504205][ T4524] shmem_thp 0 [ 46.504205][ T4524] inactive_anon 0 [ 46.504205][ T4524] active_anon 0 [ 46.504205][ T4524] inactive_file 0 [ 46.504205][ T4524] active_file 0 [ 46.504205][ T4524] unevictable 0 [ 46.504205][ T4524] slab_reclaimable 2688 [ 46.504205][ T4524] slab_unreclaimable 2016 [ 46.504205][ T4524] slab 4704 [ 46.504205][ T4524] workingset_refault_anon 0 [ 46.521266][ T4524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.44,pid=4524,uid=0 [ 46.524267][ T4524] Memory cgroup out of memory: Killed process 4524 (syz.0.44) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 46.581170][ T4525] gadgetfs: bound to dummy_udc driver [ 46.593572][ T4526] gadgetfs: bound to dummy_udc driver [ 46.606747][ T4527] syz.0.47 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.608750][ T4527] CPU: 1 PID: 4527 Comm: syz.0.47 Not tainted syzkaller #0 [ 46.610108][ T4527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.612033][ T4527] Call trace: [ 46.612566][ T4527] dump_backtrace+0x1c4/0x1f0 [ 46.613347][ T4527] show_stack+0x2c/0x3c [ 46.614123][ T4527] __dump_stack+0x30/0x40 [ 46.614973][ T4527] dump_stack_lvl+0xf4/0x15c [ 46.615815][ T4527] dump_stack+0x1c/0x5c [ 46.616539][ T4527] dump_header+0xc0/0x724 [ 46.617384][ T4527] oom_kill_process+0x35c/0x660 [ 46.618352][ T4527] out_of_memory+0xbf0/0xf70 [ 46.619140][ T4527] mem_cgroup_out_of_memory+0x228/0x2d0 [ 46.620167][ T4527] try_charge_memcg+0xa4c/0x1390 [ 46.621098][ T4527] obj_cgroup_charge+0x178/0x2e4 [ 46.622089][ T4527] slab_pre_alloc_hook+0x2fc/0x31c [ 46.623181][ T4527] kmem_cache_alloc_lru+0x60/0x284 [ 46.624295][ T4527] new_inode_pseudo+0xdc/0x1cc [ 46.625205][ T4527] new_inode+0x38/0x174 [ 46.626033][ T4527] gadgetfs_create_file+0x74/0x258 [ 46.627155][ T4527] gadgetfs_bind+0x3a8/0x7b0 [ 46.628150][ T4527] gadget_bind_driver+0x26c/0x684 [ 46.629194][ T4527] really_probe+0x3a0/0xac4 [ 46.630129][ T4527] __driver_probe_device+0x1c8/0x368 [ 46.631166][ T4527] driver_probe_device+0x78/0x324 [ 46.632179][ T4527] __driver_attach+0x3bc/0x614 [ 46.633165][ T4527] bus_for_each_dev+0x148/0x1d0 [ 46.634175][ T4527] driver_attach+0x50/0x60 [ 46.635147][ T4527] bus_add_driver+0x2c0/0x518 [ 46.636147][ T4527] driver_register+0x200/0x37c [ 46.637204][ T4527] usb_gadget_register_driver_owner+0xf0/0x25c [ 46.638529][ T4527] dev_config+0xba8/0xfec [ 46.639393][ T4527] vfs_write+0x2a8/0x7c8 [ 46.640213][ T4527] ksys_write+0x12c/0x228 [ 46.641028][ T4527] __arm64_sys_write+0x7c/0x90 [ 46.641928][ T4527] invoke_syscall+0x98/0x290 [ 46.642833][ T4527] el0_svc_common+0x13c/0x258 [ 46.643714][ T4527] do_el0_svc+0x5c/0x134 [ 46.644591][ T4527] el0_svc+0x58/0x12c [ 46.645393][ T4527] el0t_64_sync_handler+0x84/0xf0 [ 46.646346][ T4527] el0t_64_sync+0x18c/0x190 [ 46.647837][ T4527] memory: usage 96kB, limit 96kB, failcnt 461 [ 46.649599][ T4527] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 46.652514][ T4527] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 46.653913][ T4527] Memory cgroup stats for /syz0/test: [ 46.653997][ T4527] anon 0 [ 46.653997][ T4527] file 0 [ 46.653997][ T4527] kernel 94208 [ 46.653997][ T4527] kernel_stack 0 [ 46.653997][ T4527] pagetables 0 [ 46.653997][ T4527] sec_pagetables 0 [ 46.653997][ T4527] percpu 0 [ 46.653997][ T4527] sock 0 [ 46.653997][ T4527] vmalloc 0 [ 46.653997][ T4527] shmem 0 [ 46.653997][ T4527] zswap 0 [ 46.653997][ T4527] zswapped 0 [ 46.653997][ T4527] file_mapped 0 [ 46.653997][ T4527] file_dirty 0 [ 46.653997][ T4527] file_writeback 0 [ 46.653997][ T4527] swapcached 0 [ 46.653997][ T4527] anon_thp 0 [ 46.653997][ T4527] file_thp 0 [ 46.653997][ T4527] shmem_thp 0 [ 46.653997][ T4527] inactive_anon 0 [ 46.653997][ T4527] active_anon 0 [ 46.653997][ T4527] inactive_file 0 [ 46.653997][ T4527] active_file 0 [ 46.653997][ T4527] unevictable 0 [ 46.653997][ T4527] slab_reclaimable 88544 [ 46.653997][ T4527] slab_unreclaimable 3960 [ 46.653997][ T4527] slab 92504 [ 46.653997][ T4527] workingset_refault_anon 0 [ 46.672182][ T4527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.47,pid=4527,uid=0 [ 46.674860][ T4527] Memory cgroup out of memory: Killed process 4527 (syz.0.47) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 46.678759][ T4527] gadgetfs: bound to dummy_udc driver [ 46.689817][ T4528] gadgetfs: bound to dummy_udc driver [ 46.704164][ T4529] Memory cgroup out of memory: Killed process 4529 (syz.0.49) total-vm:44896kB, anon-rss:1304kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 46.709699][ T4529] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 46.711457][ T4529] gadgetfs: probe of gadget.0 failed with error -12 [ 46.712998][ T4529] gadgetfs expected dummy_udc controller not usbip-vudc [ 46.714378][ T4529] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 46.716082][ T4529] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 46.735522][ T4530] ================================================================== [ 46.736995][ T4530] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x7280 [ 46.738577][ T4530] Read of size 8 at addr ffff0000d3b03018 by task syz.0.50/4530 [ 46.740115][ T4530] [ 46.740633][ T4530] CPU: 1 PID: 4530 Comm: syz.0.50 Not tainted syzkaller #0 [ 46.742303][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.744698][ T4530] Call trace: [ 46.745484][ T4530] dump_backtrace+0x1c4/0x1f0 [ 46.746590][ T4530] show_stack+0x2c/0x3c [ 46.747463][ T4530] __dump_stack+0x30/0x40 [ 46.748443][ T4530] dump_stack_lvl+0xf4/0x15c [ 46.749522][ T4530] print_address_description+0x88/0x218 [ 46.750783][ T4530] print_report+0x50/0x68 [ 46.751681][ T4530] kasan_report+0xa8/0xfc [ 46.752572][ T4530] __asan_report_load8_noabort+0x2c/0x38 [ 46.753730][ T4530] __lock_acquire+0x104/0x7280 [ 46.754745][ T4530] lock_acquire+0x210/0x63c [ 46.755632][ T4530] _raw_spin_lock_irq+0x70/0x98 [ 46.756662][ T4530] gadget_dev_open+0x50/0x1c4 [ 46.757724][ T4530] do_dentry_open+0x738/0xf8c [ 46.758654][ T4530] vfs_open+0x7c/0x90 [ 46.759428][ T4530] path_openat+0x1fc0/0x27a0 [ 46.760347][ T4530] do_filp_open+0x198/0x38c [ 46.761238][ T4530] do_sys_openat2+0x134/0x3fc [ 46.762163][ T4530] __arm64_sys_openat+0x11c/0x150 [ 46.763101][ T4530] invoke_syscall+0x98/0x290 [ 46.764073][ T4530] el0_svc_common+0x13c/0x258 [ 46.764973][ T4530] do_el0_svc+0x5c/0x134 [ 46.765800][ T4530] el0_svc+0x58/0x12c [ 46.766580][ T4530] el0t_64_sync_handler+0x84/0xf0 [ 46.767602][ T4530] el0t_64_sync+0x18c/0x190 [ 46.768546][ T4530] [ 46.768977][ T4530] Allocated by task 4476: [ 46.769783][ T4530] kasan_set_track+0x4c/0x80 [ 46.770643][ T4530] kasan_save_alloc_info+0x24/0x30 [ 46.771623][ T4530] __kasan_kmalloc+0xa0/0xb8 [ 46.772419][ T4530] kmalloc_trace+0x7c/0x94 [ 46.773290][ T4530] gadgetfs_fill_super+0x2c0/0x5c0 [ 46.774292][ T4530] get_tree_single+0xb8/0x170 [ 46.775231][ T4530] gadgetfs_get_tree+0x28/0x38 [ 46.776161][ T4530] vfs_get_tree+0x90/0x278 [ 46.777052][ T4530] do_new_mount+0x228/0x804 [ 46.777967][ T4530] path_mount+0x5ac/0xe6c [ 46.778811][ T4530] __arm64_sys_mount+0x4a0/0x5a0 [ 46.779791][ T4530] invoke_syscall+0x98/0x290 [ 46.780748][ T4530] el0_svc_common+0x13c/0x258 [ 46.781654][ T4530] do_el0_svc+0x5c/0x134 [ 46.782501][ T4530] el0_svc+0x58/0x12c [ 46.783314][ T4530] el0t_64_sync_handler+0x84/0xf0 [ 46.784300][ T4530] el0t_64_sync+0x18c/0x190 [ 46.785194][ T4530] [ 46.785677][ T4530] Freed by task 4529: [ 46.786470][ T4530] kasan_set_track+0x4c/0x80 [ 46.787226][ T4530] kasan_save_free_info+0x38/0x5c [ 46.788212][ T4530] ____kasan_slab_free+0x148/0x1b0 [ 46.789257][ T4530] __kasan_slab_free+0x18/0x28 [ 46.790185][ T4530] slab_free_freelist_hook+0x16c/0x1e8 [ 46.791303][ T4530] __kmem_cache_free+0xbc/0x21c [ 46.792249][ T4530] kfree+0xd0/0x1a8 [ 46.793018][ T4530] dev_release+0x160/0x214 [ 46.793912][ T4530] __fput+0x1b4/0x7b0 [ 46.794692][ T4530] ____fput+0x20/0x30 [ 46.795441][ T4530] task_work_run+0x1f4/0x280 [ 46.796312][ T4530] do_exit+0x54c/0x19ac [ 46.797076][ T4530] do_group_exit+0x198/0x238 [ 46.797947][ T4530] get_signal+0x11f4/0x133c [ 46.798819][ T4530] do_notify_resume+0x364/0x2c84 [ 46.799831][ T4530] el0_svc+0x9c/0x12c [ 46.800604][ T4530] el0t_64_sync_handler+0x84/0xf0 [ 46.801582][ T4530] el0t_64_sync+0x18c/0x190 [ 46.802486][ T4530] [ 46.802960][ T4530] The buggy address belongs to the object at ffff0000d3b03000 [ 46.802960][ T4530] which belongs to the cache kmalloc-1k of size 1024 [ 46.805482][ T4530] The buggy address is located 24 bytes inside of [ 46.805482][ T4530] 1024-byte region [ffff0000d3b03000, ffff0000d3b03400) [ 46.807953][ T4530] [ 46.808412][ T4530] The buggy address belongs to the physical page: [ 46.809683][ T4530] page:00000000f1c896b8 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113b00 [ 46.811736][ T4530] head:00000000f1c896b8 order:3 compound_mapcount:0 compound_pincount:0 [ 46.813349][ T4530] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 46.814874][ T4530] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002780 [ 46.816611][ T4530] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 46.818326][ T4530] page dumped because: kasan: bad access detected [ 46.819491][ T4530] [ 46.819922][ T4530] Memory state around the buggy address: [ 46.821031][ T4530] ffff0000d3b02f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.822462][ T4530] ffff0000d3b02f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.823961][ T4530] >ffff0000d3b03000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.825544][ T4530] ^ [ 46.826506][ T4530] ffff0000d3b03080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.828133][ T4530] ffff0000d3b03100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.829905][ T4530] ================================================================== [ 46.831697][ T4530] Disabling lock debugging due to kernel taint [ 46.832971][ T4530] ================================================================================ [ 46.834967][ T4530] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 46.836640][ T4530] index 13013 is out of range for type 'unsigned long[8]' [ 46.838161][ T4530] CPU: 1 PID: 4530 Comm: syz.0.50 Tainted: G B syzkaller #0 [ 46.839813][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.841809][ T4530] Call trace: [ 46.842482][ T4530] dump_backtrace+0x1c4/0x1f0 [ 46.843436][ T4530] show_stack+0x2c/0x3c [ 46.844281][ T4530] __dump_stack+0x30/0x40 [ 46.845155][ T4530] dump_stack_lvl+0xf4/0x15c [ 46.846088][ T4530] dump_stack+0x1c/0x5c [ 46.846897][ T4530] ubsan_epilogue+0x14/0x48 [ 46.847783][ T4530] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 46.848883][ T4530] queued_spin_lock_slowpath+0x8a8/0xc14 [ 46.849953][ T4530] do_raw_spin_lock+0x2f4/0x2f8 [ 46.850887][ T4530] _raw_spin_lock_irq+0x78/0x98 [ 46.851825][ T4530] gadget_dev_open+0x50/0x1c4 [ 46.852740][ T4530] do_dentry_open+0x738/0xf8c [ 46.853659][ T4530] vfs_open+0x7c/0x90 [ 46.854415][ T4530] path_openat+0x1fc0/0x27a0 [ 46.855293][ T4530] do_filp_open+0x198/0x38c [ 46.856151][ T4530] do_sys_openat2+0x134/0x3fc [ 46.857135][ T4530] __arm64_sys_openat+0x11c/0x150 [ 46.858156][ T4530] invoke_syscall+0x98/0x290 [ 46.859043][ T4530] el0_svc_common+0x13c/0x258 [ 46.860012][ T4530] do_el0_svc+0x5c/0x134 [ 46.860878][ T4530] el0_svc+0x58/0x12c [ 46.861691][ T4530] el0t_64_sync_handler+0x84/0xf0 [ 46.862587][ T4530] el0t_64_sync+0x18c/0x190 [ 46.863436][ T4530] ================================================================================ [ 46.865183][ T4530] Unable to handle kernel paging request at virtual address ffff80001638b190 [ 46.866838][ T4530] KASAN: probably user-memory-access in range [0x00000000b1c58c80-0x00000000b1c58c87] [ 46.868678][ T4530] Mem abort info: [ 46.869388][ T4530] ESR = 0x0000000096000047 [ 46.870315][ T4530] EC = 0x25: DABT (current EL), IL = 32 bits [ 46.871598][ T4530] SET = 0, FnV = 0 [ 46.872355][ T4530] EA = 0, S1PTW = 0 [ 46.873112][ T4530] FSC = 0x07: level 3 translation fault [ 46.874256][ T4530] Data abort info: [ 46.875057][ T4530] ISV = 0, ISS = 0x00000047 [ 46.876018][ T4530] CM = 0, WnR = 1 [ 46.876745][ T4530] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020bbcc000 [ 46.878117][ T4530] [ffff80001638b190] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fffa003, pte=0000000000000000 [ 46.880676][ T4530] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 46.882096][ T4530] Modules linked in: [ 46.882856][ T4530] CPU: 1 PID: 4530 Comm: syz.0.50 Tainted: G B syzkaller #0 [ 46.884435][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.886288][ T4530] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.887776][ T4530] pc : queued_spin_lock_slowpath+0x598/0xc14 [ 46.888892][ T4530] lr : queued_spin_lock_slowpath+0x8a8/0xc14 [ 46.890010][ T4530] sp : ffff800022007520 [ 46.890764][ T4530] x29: ffff8000220075c0 x28: 1fffe00033c1f230 x27: ffff80001638b190 [ 46.892269][ T4530] x26: ffff00019e0f9188 x25: ffff800022007540 x24: 1fffe0001a760600 [ 46.893804][ T4530] x23: dfff800000000000 x22: ffff700004400ea8 x21: ffff80001638b190 [ 46.895585][ T4530] x20: ffff00019e0f9180 x19: ffff0000d3b03000 x18: 0000000000000000 [ 46.897238][ T4530] x17: 3d3d3d3d3d3d3d3d x16: ffff800008195558 x15: 3d3d3d3d3d3d3d3d [ 46.898892][ T4530] x14: ffff700003203abc x13: 1ffff00003203abc x12: 0000000000000004 [ 46.900585][ T4530] x11: ff008000081955dc x10: ffff80001638b180 x9 : 0000000000000001 [ 46.902293][ T4530] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001 [ 46.904141][ T4530] x5 : ffff800022006f78 x4 : ffff800016504f40 x3 : ffff8000081955a4 [ 46.905926][ T4530] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff00019e0f9188 [ 46.907436][ T4530] Call trace: [ 46.908063][ T4530] queued_spin_lock_slowpath+0x598/0xc14 [ 46.909278][ T4530] do_raw_spin_lock+0x2f4/0x2f8 [ 46.910323][ T4530] _raw_spin_lock_irq+0x78/0x98 [ 46.911364][ T4530] gadget_dev_open+0x50/0x1c4 [ 46.912353][ T4530] do_dentry_open+0x738/0xf8c [ 46.913308][ T4530] vfs_open+0x7c/0x90 [ 46.914135][ T4530] path_openat+0x1fc0/0x27a0 [ 46.915036][ T4530] do_filp_open+0x198/0x38c [ 46.916019][ T4530] do_sys_openat2+0x134/0x3fc [ 46.917095][ T4530] __arm64_sys_openat+0x11c/0x150 [ 46.918223][ T4530] invoke_syscall+0x98/0x290 [ 46.919244][ T4530] el0_svc_common+0x13c/0x258 [ 46.920303][ T4530] do_el0_svc+0x5c/0x134 [ 46.921248][ T4530] el0_svc+0x58/0x12c [ 46.922102][ T4530] el0t_64_sync_handler+0x84/0xf0 [ 46.923152][ T4530] el0t_64_sync+0x18c/0x190 [ 46.924146][ T4530] Code: aa1503e0 978cfdf8 91002280 52800081 (f90002b4) [ 46.925682][ T4530] ---[ end trace 0000000000000000 ]--- [ 51.318397][ T4530] Kernel panic - not syncing: Oops: Fatal exception [ 51.319693][ T4530] SMP: stopping secondary CPUs [ 51.320730][ T4530] Kernel Offset: disabled [ 51.321587][ T4530] CPU features: 0x0a0000,000f0097,a65bfea7 [ 51.322781][ T4530] Memory Limit: none [ 55.295137][ T4530] Rebooting in 86400 seconds..