no interfaces have a carrier [ 48.918807][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.952113][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. 2026/08/15 21:50:05 parsed 1 programs 2026/08/15 21:50:05 serving rpc on tcp://43207 syzkaller login: [ 73.586267][ T4285] cgroup: Unknown subsys name 'net' [ 73.745535][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.283001][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.842088][ T4300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.852296][ T4300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.862298][ T4300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.870752][ T4300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.878468][ T4300] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.886704][ T4300] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.512981][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 78.602143][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.610134][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.618130][ T4333] device bridge_slave_0 entered promiscuous mode [ 78.627554][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.634873][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.643246][ T4333] device bridge_slave_1 entered promiscuous mode [ 78.670323][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.682593][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.703847][ T4333] team0: Port device team_slave_0 added [ 78.712614][ T4333] team0: Port device team_slave_1 added [ 78.735137][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.742352][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.768757][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.788419][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.795650][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.823882][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.863386][ T4333] device hsr_slave_0 entered promiscuous mode [ 78.870484][ T4333] device hsr_slave_1 entered promiscuous mode [ 78.975851][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.986567][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.996027][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.013532][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.034801][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.042036][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.050305][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.057575][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.107413][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.122141][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.133783][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.142635][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.151666][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.167101][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.177864][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.186667][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.193892][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.208184][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.218190][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.225637][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.251861][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.261307][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.276098][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.288924][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.303252][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.317152][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.511350][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.518883][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.532654][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.549457][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.559029][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.578377][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.587895][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.597537][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.606898][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.621144][ T4333] device veth0_vlan entered promiscuous mode [ 79.632675][ T4333] device veth1_vlan entered promiscuous mode [ 79.652305][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.663134][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.671777][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.681708][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.692896][ T4333] device veth0_macvtap entered promiscuous mode [ 79.703823][ T4333] device veth1_macvtap entered promiscuous mode [ 79.718547][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.726870][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.736705][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.745527][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.754832][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.769206][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.777148][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.786588][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.798484][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.807586][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.816551][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.825506][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.969103][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.346774][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.356761][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.370391][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.392368][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.403520][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.412635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/08/15 21:50:14 executed programs: 0 [ 81.119010][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.128739][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.139585][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.147540][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.155105][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.163272][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.277493][ T4371] chnl_net:caif_netlink_parms(): no params data found [ 81.327672][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.334948][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.347612][ T4371] device bridge_slave_0 entered promiscuous mode [ 81.357694][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.366558][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.375214][ T4371] device bridge_slave_1 entered promiscuous mode [ 81.398584][ T4371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.409595][ T4371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.432968][ T4371] team0: Port device team_slave_0 added [ 81.441392][ T4371] team0: Port device team_slave_1 added [ 81.465616][ T4371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.472930][ T4371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.499895][ T4371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.511973][ T4371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.519454][ T4371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.546205][ T4371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.576705][ T4371] device hsr_slave_0 entered promiscuous mode [ 81.584217][ T4371] device hsr_slave_1 entered promiscuous mode [ 81.591217][ T4371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.599588][ T4371] Cannot create hsr debugfs directory [ 82.401283][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.200133][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 84.818664][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.892169][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.280870][ T4300] Bluetooth: hci0: command 0x041b tx timeout [ 85.782159][ T4371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.802708][ T41] device hsr_slave_0 left promiscuous mode [ 85.811112][ T41] device hsr_slave_1 left promiscuous mode [ 85.819402][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.833594][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.852812][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.864132][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.877190][ T41] device bridge_slave_1 left promiscuous mode [ 85.885611][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.902588][ T41] device bridge_slave_0 left promiscuous mode [ 85.908970][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.936893][ T41] device veth1_macvtap left promiscuous mode [ 85.944590][ T41] device veth0_macvtap left promiscuous mode [ 85.952421][ T41] device veth1_vlan left promiscuous mode [ 85.958956][ T41] device veth0_vlan left promiscuous mode [ 86.388719][ T41] team0 (unregistering): Port device team_slave_1 removed [ 86.418213][ T41] team0 (unregistering): Port device team_slave_0 removed [ 86.449020][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.482024][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.683668][ T41] bond0 (unregistering): Released all slaves [ 86.768453][ T4371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.778917][ T4371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.788689][ T4371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.804102][ T22] cfg80211: failed to load regulatory.db [ 86.964640][ T4371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.981802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.992420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.005216][ T4371] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.019259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.033110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.044619][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.052551][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.072757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.082450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.091755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.102791][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.111494][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.123902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.160627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.172672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.184558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.205172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.213712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.226537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.237988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.251896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.271700][ T4371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.286516][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.297522][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.309218][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.369828][ T4300] Bluetooth: hci0: command 0x040f tx timeout [ 87.604529][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.623822][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.641641][ T4371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.661097][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.672688][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.693819][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.703173][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.713355][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.721442][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.731704][ T4371] device veth0_vlan entered promiscuous mode [ 87.744589][ T4371] device veth1_vlan entered promiscuous mode [ 87.765644][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.775153][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.784656][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.795797][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.809467][ T4371] device veth0_macvtap entered promiscuous mode [ 87.823795][ T4371] device veth1_macvtap entered promiscuous mode [ 87.841594][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.849979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.864043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.893530][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.901766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.910861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.925597][ T4371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.937819][ T4371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.951968][ T4371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.965084][ T4371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.071172][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.088583][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.124602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.152038][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.163626][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/15 21:50:21 executed programs: 2 [ 88.202180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.279585][ T4428] using random self ethernet address [ 88.287452][ T4428] using random host ethernet address [ 88.345984][ T4428] syz.0.17 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 88.361043][ T4428] CPU: 1 PID: 4428 Comm: syz.0.17 Not tainted syzkaller #0 [ 88.371195][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.382823][ T4428] Call Trace: [ 88.386786][ T4428] [ 88.390487][ T4428] dump_stack_lvl+0x188/0x24e [ 88.397685][ T4428] ? ___ratelimit+0x14e/0x610 [ 88.403413][ T4428] ? show_regs_print_info+0x12/0x12 [ 88.411990][ T4428] ? load_image+0x410/0x410 [ 88.417709][ T4428] ? ___ratelimit+0x474/0x610 [ 88.423036][ T4428] ? radix_tree_cpu_dead+0x160/0x160 [ 88.428857][ T4428] dump_header+0xd8/0x820 [ 88.433536][ T4428] oom_kill_process+0x361/0x550 [ 88.441460][ T4428] out_of_memory+0xe25/0x1220 [ 88.451060][ T4428] ? mutex_lock_nested+0x10/0x10 [ 88.458061][ T4428] ? unregister_oom_notifier+0x20/0x20 [ 88.465702][ T4428] mem_cgroup_out_of_memory+0x2c0/0x390 [ 88.473044][ T4428] ? mem_cgroup_oom_trylock+0x210/0x210 [ 88.479590][ T4428] ? do_raw_spin_unlock+0x11d/0x230 [ 88.485760][ T4428] try_charge_memcg+0xc9d/0x17c0 [ 88.492125][ T4428] ? percpu_ref_put+0x180/0x180 [ 88.498129][ T4428] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 88.506829][ T4428] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.514021][ T4428] ? percpu_ref_tryget+0x15/0x180 [ 88.519435][ T4428] ? percpu_ref_tryget+0x15/0x180 [ 88.525143][ T4428] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 88.531500][ T4428] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 88.537571][ T4428] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 88.543685][ T4428] obj_cgroup_charge+0x36a/0x620 [ 88.549111][ T4428] ? obj_cgroup_charge+0xe9/0x620 [ 88.555580][ T4428] ? mod_objcg_mlstate+0x320/0x320 [ 88.561198][ T4428] ? percpu_ref_tryget+0x15/0x180 [ 88.566762][ T4428] ? percpu_ref_tryget+0x15/0x180 [ 88.572319][ T4428] ? get_obj_cgroup_from_current+0xd0/0x280 [ 88.579589][ T4428] slab_pre_alloc_hook+0x2e2/0x300 [ 88.587128][ T4428] ? neigh_sysctl_register+0xab/0xa80 [ 88.593121][ T4428] __kmem_cache_alloc_node+0x4f/0x270 [ 88.599176][ T4428] ? neigh_sysctl_register+0xab/0xa80 [ 88.604767][ T4428] __kmalloc_node_track_caller+0xa0/0x240 [ 88.611921][ T4428] kmemdup+0x27/0x60 [ 88.617785][ T4428] neigh_sysctl_register+0xab/0xa80 [ 88.624159][ T4428] ? neigh_proc_dointvec_ms_jiffies+0x50/0x50 [ 88.632828][ T4428] ? inetdev_init+0x20b/0x4e0 [ 88.639019][ T4428] ? inetdev_event+0x26f/0x13f0 [ 88.644535][ T4428] ? raw_notifier_call_chain+0xcb/0x160 [ 88.650215][ T4428] ? register_netdevice+0x16a8/0x1b80 [ 88.656759][ T4428] ? register_netdev+0x37/0x50 [ 88.662861][ T4428] ? gether_register_netdev+0x81/0x150 [ 88.669572][ T4428] ? ncm_bind+0x699/0xd90 [ 88.674540][ T4428] ? usb_add_function+0x2d9/0x980 [ 88.679903][ T4428] ? configfs_composite_bind+0xa02/0xf60 [ 88.690740][ T4428] ? gadget_bind_driver+0x2af/0x760 [ 88.696433][ T4428] ? really_probe+0x24a/0xb40 [ 88.704237][ T4428] ? __driver_probe_device+0x1f5/0x390 [ 88.711990][ T4428] ? __driver_attach+0x43d/0x6c0 [ 88.718802][ T4428] ? bus_for_each_dev+0x182/0x1f0 [ 88.725410][ T4428] ? bus_add_driver+0x324/0x5d0 [ 88.732486][ T4428] ? neigh_parms_alloc+0x406/0x500 [ 88.738428][ T4428] devinet_sysctl_register+0xa8/0x1f0 [ 88.744071][ T4428] inetdev_init+0x2ae/0x4e0 [ 88.748977][ T4428] inetdev_event+0x26f/0x13f0 [ 88.754182][ T4428] ? devinet_exit_net+0x220/0x220 [ 88.759960][ T4428] ? netdev_upper_walk+0x210/0x210 [ 88.765374][ T4428] ? add_default_gids+0xe0/0xe0 [ 88.770395][ T4428] ? enum_all_gids_of_dev_cb+0x290/0x290 [ 88.776165][ T4428] ? arp_netdev_event+0xd4/0x320 [ 88.781214][ T4428] raw_notifier_call_chain+0xcb/0x160 [ 88.786634][ T4428] register_netdevice+0x16a8/0x1b80 [ 88.792122][ T4428] ? netif_stacked_transfer_operstate+0x200/0x200 [ 88.799098][ T4428] ? do_syscall_64+0x4c/0xa0 [ 88.805123][ T4428] ? dev_addr_check+0x1c/0x1f0 [ 88.810235][ T4428] ? memset+0x1e/0x40 [ 88.814791][ T4428] ? dev_addr_mod+0x2c4/0x3b0 [ 88.820712][ T4428] register_netdev+0x37/0x50 [ 88.825431][ T4428] gether_register_netdev+0x81/0x150 [ 88.831733][ T4428] ncm_bind+0x699/0xd90 [ 88.838733][ T4428] usb_add_function+0x2d9/0x980 [ 88.843723][ T4428] ? check_remote_wakeup_config+0x54/0x1b0 [ 88.849816][ T4428] configfs_composite_bind+0xa02/0xf60 [ 88.855825][ T4428] ? os_desc_qw_sign_store+0x100/0x100 [ 88.863244][ T4428] gadget_bind_driver+0x2af/0x760 [ 88.869197][ T4428] ? gadget_match_driver+0x130/0x130 [ 88.875276][ T4428] really_probe+0x24a/0xb40 [ 88.880450][ T4428] ? pm_runtime_barrier+0x147/0x1c0 [ 88.886052][ T4428] __driver_probe_device+0x1f5/0x390 [ 88.892407][ T4428] driver_probe_device+0x4f/0x420 [ 88.898516][ T4428] __driver_attach+0x43d/0x6c0 [ 88.903392][ T4428] ? driver_attach+0x40/0x40 [ 88.909362][ T4428] bus_for_each_dev+0x182/0x1f0 [ 88.914872][ T4428] ? __lock_acquire+0x7c40/0x7c40 [ 88.920149][ T4428] ? bus_remove_file+0xd0/0xd0 [ 88.925528][ T4428] ? do_raw_spin_unlock+0x11d/0x230 [ 88.931482][ T4428] bus_add_driver+0x324/0x5d0 [ 88.936648][ T4428] driver_register+0x32d/0x430 [ 88.942601][ T4428] usb_gadget_register_driver_owner+0xf5/0x260 [ 88.949768][ T4428] gadget_dev_desc_UDC_store+0x1c3/0x2e0 [ 88.956681][ T4428] configfs_write_iter+0x30b/0x400 [ 88.964981][ T4428] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 88.971409][ T4428] vfs_write+0x482/0x9a0 [ 88.975897][ T4428] ? file_end_write+0x250/0x250 [ 88.981128][ T4428] ? __ia32_sys_get_robust_list+0x100/0x100 [ 88.987149][ T4428] ? __fdget_pos+0x2b5/0x360 [ 88.992571][ T4428] ksys_write+0x14d/0x260 [ 88.997913][ T4428] ? __ia32_sys_read+0x80/0x80 [ 89.003284][ T4428] ? lockdep_hardirqs_on+0x94/0x140 [ 89.009386][ T4428] do_syscall_64+0x4c/0xa0 [ 89.017747][ T4428] ? clear_bhb_loop+0x60/0xb0 [ 89.023427][ T4428] ? clear_bhb_loop+0x60/0xb0 [ 89.028923][ T4428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.035173][ T4428] RIP: 0033:0x7f589499e0d9 [ 89.040477][ T4428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.064062][ T4428] RSP: 002b:00007fff5f558088 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.076294][ T4428] RAX: ffffffffffffffda RBX: 00007f5894c25fa0 RCX: 00007f589499e0d9 [ 89.085291][ T4428] RDX: 000000000000000b RSI: 0000200000001400 RDI: 0000000000000003 [ 89.095104][ T4428] RBP: 00007f5894a35024 R08: 0000000000000000 R09: 0000000000000000 [ 89.103965][ T4428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.115006][ T4428] R13: 00007f5894c25fac R14: 00007f5894c25fa0 R15: 00007f5894c25fa0 [ 89.123755][ T4428] [ 89.135981][ T4428] memory: usage 0kB, limit 0kB, failcnt 19 [ 89.144574][ T4428] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 89.155235][ T4428] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 89.163698][ T4428] Memory cgroup stats for /syz0/test: [ 89.164247][ T4428] anon 0 [ 89.164247][ T4428] file 0 [ 89.164247][ T4428] kernel 0 [ 89.164247][ T4428] kernel_stack 0 [ 89.164247][ T4428] pagetables 0 [ 89.164247][ T4428] sec_pagetables 0 [ 89.164247][ T4428] percpu 0 [ 89.164247][ T4428] sock 0 [ 89.164247][ T4428] vmalloc 0 [ 89.164247][ T4428] shmem 0 [ 89.164247][ T4428] zswap 0 [ 89.164247][ T4428] zswapped 0 [ 89.164247][ T4428] file_mapped 0 [ 89.164247][ T4428] file_dirty 0 [ 89.164247][ T4428] file_writeback 0 [ 89.164247][ T4428] swapcached 0 [ 89.164247][ T4428] anon_thp 0 [ 89.164247][ T4428] file_thp 0 [ 89.164247][ T4428] shmem_thp 0 [ 89.164247][ T4428] inactive_anon 0 [ 89.164247][ T4428] active_anon 0 [ 89.164247][ T4428] inactive_file 0 [ 89.164247][ T4428] active_file 0 [ 89.164247][ T4428] unevictable 0 [ 89.164247][ T4428] slab_reclaimable 0 [ 89.164247][ T4428] slab_unreclaimable 0 [ 89.164247][ T4428] slab 0 [ 89.164247][ T4428] workingset_refault_anon 0 [ 89.280522][ T4428] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.17,pid=4428,uid=0 [ 89.302506][ T4428] Memory cgroup out of memory: Killed process 4428 (syz.0.17) total-vm:44920kB, anon-rss:1316kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 89.380752][ T4428] udc dummy_udc.0: failed to start g1: -105 [ 89.388979][ T4428] configfs-gadget.g1: probe of gadget.0 failed with error -105 [ 89.407146][ T4428] UDC core: g1: couldn't find an available UDC or it's busy [ 89.439782][ T4300] Bluetooth: hci0: command 0x0419 tx timeout [ 89.451138][ T4430] ------------[ cut here ]------------ [ 89.464774][ T4430] kernel BUG at net/core/dev.c:10148! [ 89.472087][ T4430] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 89.479872][ T4430] CPU: 0 PID: 4430 Comm: syz.0.18 Not tainted syzkaller #0 [ 89.487638][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.502497][ T4430] RIP: 0010:register_netdevice+0x1b58/0x1b80 [ 89.511460][ T4430] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 29 fc ff ff 4c 89 f7 e8 19 8b 9c f9 e9 1c fc ff ff e8 6f 5e 4b f9 0f 0b e8 68 5e 4b f9 <0f> 0b e8 61 5e 4b f9 0f 0b e8 5a 5e 4b f9 41 bd 42 00 00 00 e9 41 [ 89.534622][ T4430] RSP: 0018:ffffc900033875e0 EFLAGS: 00010293 [ 89.541451][ T4430] RAX: ffffffff8836cfb8 RBX: 1ffff92000670ecc RCX: ffff88802f708000 [ 89.549816][ T4430] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 89.558521][ T4430] RBP: ffffc90003387738 R08: ffffffff8dd5b907 R09: 1ffffffff1bab720 [ 89.569291][ T4430] R10: dffffc0000000000 R11: fffffbfff1bab721 R12: dffffc0000000000 [ 89.578997][ T4430] R13: ffffffff97033600 R14: 0000000000000003 R15: ffff888026ef4000 [ 89.589206][ T4430] FS: 000055557b73f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 89.599302][ T4430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.606340][ T4430] CR2: 0000200000001000 CR3: 000000002a03e000 CR4: 00000000003506f0 [ 89.616371][ T4430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.625150][ T4430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.633535][ T4430] Call Trace: [ 89.637279][ T4430] [ 89.640693][ T4430] ? rcu_is_watching+0x11/0xa0 [ 89.645727][ T4430] ? trace_contention_end+0x5f/0x170 [ 89.651111][ T4430] ? __mutex_lock+0x1ab/0xae0 [ 89.656733][ T4430] ? register_netdev+0xf/0x50 [ 89.661817][ T4430] ? netif_stacked_transfer_operstate+0x200/0x200 [ 89.670034][ T4430] ? dev_addr_check+0x1c/0x1f0 [ 89.675643][ T4430] ? memset+0x1e/0x40 [ 89.679895][ T4430] ? dev_addr_mod+0x2c4/0x3b0 [ 89.685812][ T4430] register_netdev+0x37/0x50 [ 89.692007][ T4430] gether_register_netdev+0x81/0x150 [ 89.698583][ T4430] ncm_bind+0x699/0xd90 [ 89.703682][ T4430] ? rcu_is_watching+0x11/0xa0 [ 89.709015][ T4430] usb_add_function+0x2d9/0x980 [ 89.714701][ T4430] ? check_remote_wakeup_config+0x54/0x1b0 [ 89.720964][ T4430] configfs_composite_bind+0xa02/0xf60 [ 89.726556][ T4430] ? os_desc_qw_sign_store+0x100/0x100 [ 89.732307][ T4430] gadget_bind_driver+0x2af/0x760 [ 89.737693][ T4430] ? gadget_match_driver+0x130/0x130 [ 89.743810][ T4430] really_probe+0x24a/0xb40 [ 89.748355][ T4430] ? pm_runtime_barrier+0x147/0x1c0 [ 89.754798][ T4430] __driver_probe_device+0x1f5/0x390 [ 89.761355][ T4430] driver_probe_device+0x4f/0x420 [ 89.767098][ T4430] __driver_attach+0x43d/0x6c0 [ 89.772317][ T4430] ? driver_attach+0x40/0x40 [ 89.777016][ T4430] bus_for_each_dev+0x182/0x1f0 [ 89.783578][ T4430] ? __lock_acquire+0x7c40/0x7c40 [ 89.789155][ T4430] ? bus_remove_file+0xd0/0xd0 [ 89.795149][ T4430] ? do_raw_spin_unlock+0x11d/0x230 [ 89.801276][ T4430] bus_add_driver+0x324/0x5d0 [ 89.806256][ T4430] driver_register+0x32d/0x430 [ 89.811813][ T4430] usb_gadget_register_driver_owner+0xf5/0x260 [ 89.818878][ T4430] gadget_dev_desc_UDC_store+0x1c3/0x2e0 [ 89.827780][ T4430] configfs_write_iter+0x30b/0x400 [ 89.833877][ T4430] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 89.841275][ T4430] vfs_write+0x482/0x9a0 [ 89.846840][ T4430] ? file_end_write+0x250/0x250 [ 89.853731][ T4430] ? __ia32_sys_get_robust_list+0x100/0x100 [ 89.862811][ T4430] ? __fdget_pos+0x2b5/0x360 [ 89.868243][ T4430] ksys_write+0x14d/0x260 [ 89.872874][ T4430] ? __ia32_sys_read+0x80/0x80 [ 89.879424][ T4430] ? lockdep_hardirqs_on+0x94/0x140 [ 89.885259][ T4430] do_syscall_64+0x4c/0xa0 [ 89.890766][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 89.896711][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 89.901858][ T4430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.909183][ T4430] RIP: 0033:0x7f589499e0d9 [ 89.913986][ T4430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.937153][ T4430] RSP: 002b:00007fff5f558088 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.947000][ T4430] RAX: ffffffffffffffda RBX: 00007f5894c25fa0 RCX: 00007f589499e0d9 [ 89.956911][ T4430] RDX: 000000000000000b RSI: 0000200000001400 RDI: 0000000000000003 [ 89.966651][ T4430] RBP: 00007f5894a35024 R08: 0000000000000000 R09: 0000000000000000 [ 89.975944][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.984832][ T4430] R13: 00007f5894c25fac R14: 00007f5894c25fa0 R15: 00007f5894c25fa0 [ 89.993616][ T4430] [ 89.997397][ T4430] Modules linked in: [ 90.005670][ T4430] ---[ end trace 0000000000000000 ]--- [ 90.011947][ T4430] RIP: 0010:register_netdevice+0x1b58/0x1b80 [ 90.018745][ T4430] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 29 fc ff ff 4c 89 f7 e8 19 8b 9c f9 e9 1c fc ff ff e8 6f 5e 4b f9 0f 0b e8 68 5e 4b f9 <0f> 0b e8 61 5e 4b f9 0f 0b e8 5a 5e 4b f9 41 bd 42 00 00 00 e9 41 [ 90.039493][ T4430] RSP: 0018:ffffc900033875e0 EFLAGS: 00010293 [ 90.045992][ T4430] RAX: ffffffff8836cfb8 RBX: 1ffff92000670ecc RCX: ffff88802f708000 [ 90.055360][ T4430] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 90.063843][ T4430] RBP: ffffc90003387738 R08: ffffffff8dd5b907 R09: 1ffffffff1bab720 [ 90.072217][ T4430] R10: dffffc0000000000 R11: fffffbfff1bab721 R12: dffffc0000000000 [ 90.080247][ T4430] R13: ffffffff97033600 R14: 0000000000000003 R15: ffff888026ef4000 [ 90.089706][ T4430] FS: 000055557b73f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 90.099797][ T4430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.108149][ T4430] CR2: 0000200000001000 CR3: 000000002a03e000 CR4: 00000000003506f0 [ 90.118108][ T4430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.126362][ T4430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.134679][ T4430] Kernel panic - not syncing: Fatal exception [ 90.141402][ T4430] Kernel Offset: disabled [ 90.145765][ T4430] Rebooting in 86400 seconds..