ci-upstream-rust-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-rust-kasan-gce/syz-executor253184551 <...> Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. execve("ci-upstream-rust-kasan-gce/syz-executor253184551", ["ci-upstream-rust-kasan-gce/syz-executor253184551"], 0x7ffd87a7ca80 /* 10 vars */) = 0 brk(NULL) = 0x555561ad4000 brk(0x555561ad4d80) = 0x555561ad4d80 arch_prctl(ARCH_SET_FS, 0x555561ad4400) = 0 set_tid_address(0x555561ad46d0) = 5631 set_robust_list(0x555561ad46e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-rust-kasan-gce/syz-executor253184551", 4096) = 54 getrandom("\x5c\x90\x7a\xcd\x01\x35\xee\x2b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555561ad4d80 brk(0x555561af5d80) = 0x555561af5d80 brk(0x555561af6000) = 0x555561af6000 mprotect(0x7f202ac53000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 82.876656][ T5631] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 83.012666][ T5631] cgroup: Unknown subsys name 'cpuset' [ 83.022337][ T5631] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) getrandom("\x58\xb7\x70\x60\x09\xc7\x08\x9d", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.Yh5mhq", 0700) = 0 chmod("./syzkaller.Yh5mhq", 0777) = 0 chdir("./syzkaller.Yh5mhq") = 0 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5632 attached , child_tidptr=0x555561ad46d0) = 5632 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5632] set_robust_list(0x555561ad46e0, 24) = 0 [pid 5632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5632] getppid() = 0 [pid 5632] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5632] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5632] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5632] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5632] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5632] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5632] unshare(CLONE_NEWNS) = 0 [pid 5632] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5632] unshare(CLONE_NEWIPC) = 0 [pid 5632] unshare(CLONE_NEWCGROUP) = 0 [pid 5632] unshare(CLONE_NEWUTS) = 0 [pid 5632] unshare(CLONE_SYSVSEM) = 0 [pid 5632] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "16777216", 8) = 8 [pid 5632] close(3) = 0 [pid 5632] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "536870912", 9) = 9 [pid 5632] close(3) = 0 [pid 5632] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1024", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "8192", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1024", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1024", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5632] close(3) = 0 [pid 5632] getpid() = 1 [pid 5632] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5635] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 83.382106][ T5632] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [pid 5635] chdir("./0") = 0 [pid 5635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5635] setpgid(0, 0) = 0 [pid 5635] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5635] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5635] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5635] write(3, "1000", 4) = 4 [pid 5635] close(3) = 0 [pid 5635] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5635] write(1, "executing program\n", 18) = 18 [pid 5635] mkdir("./config", 0777) = 0 [pid 5635] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 5635] mkdir("./config/usb_gadget/g1", 0777) = 0 [pid 5635] mkdirat(AT_FDCWD, "./config/usb_gadget/g1/configs/c.1", 0777) = 0 [pid 5635] mkdir("./config/usb_gadget/g1/functions/ncm.usb0", 0777) = 0 [pid 5635] symlink("./config/usb_gadget/g1/functions/ncm.usb0", "./config/usb_gadget/g1/configs/c.1/ncm.usb0") = 0 [pid 5635] openat(AT_FDCWD, "./config/usb_gadget/g1/UDC", O_WRONLY) = 3 [pid 5635] mkdirat(AT_FDCWD, "./cgroup.cpu/test", 03746) = 0 [pid 5635] openat(AT_FDCWD, "./cgroup.cpu/test/memory.limit_in_bytes", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_NOFOLLOW|O_NOATIME|FASYNC, 010) = 4 [pid 5635] write(4, "10", 2) = 2 [pid 5635] openat(AT_FDCWD, "./cgroup.cpu/test/cgroup.procs", O_RDWR) = 5 [pid 5635] write(5, "0", 1) = 1 [ 83.544157][ T5635] syz-executor253 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 83.544195][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz-executor253 Not tainted syzkaller #0 PREEMPT(full) [ 83.544207][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.544219][ T5635] Call Trace: [ 83.544227][ T5635] [ 83.544232][ T5635] dump_stack_lvl+0xe8/0x150 [ 83.544251][ T5635] dump_header+0xd3/0x4b0 [ 83.544268][ T5635] oom_kill_process+0x3ab/0x9e0 [ 83.544287][ T5635] out_of_memory+0xfb1/0x13b0 [ 83.544301][ T5635] ? try_charge_memcg+0xc16/0x15f0 [ 83.544320][ T5635] ? __pfx_out_of_memory+0x10/0x10 [ 83.544334][ T5635] ? do_raw_spin_unlock+0xf5/0x200 [ 83.544354][ T5635] try_charge_memcg+0xccc/0x15f0 [ 83.544377][ T5635] ? __pfx_try_charge_memcg+0x10/0x10 [ 83.544399][ T5635] ? percpu_ref_tryget+0x15/0x180 [ 83.544418][ T5635] ? __obj_cgroup_charge+0x36/0x2d0 [ 83.544437][ T5635] __obj_cgroup_charge+0x20a/0x2d0 [ 83.544452][ T5635] ? __obj_cgroup_charge+0x36/0x2d0 [ 83.544469][ T5635] __memcg_slab_post_alloc_hook+0x772/0xdb0 [ 83.544501][ T5635] __kmalloc_node_track_caller_noprof+0x515/0x720 [ 83.544517][ T5635] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 83.544531][ T5635] ? neigh_sysctl_register+0xae/0xa90 [ 83.544545][ T5635] ? neigh_sysctl_register+0xae/0xa90 [ 83.544564][ T5635] kmemdup_noprof+0x2b/0x70 [ 83.544579][ T5635] neigh_sysctl_register+0xae/0xa90 [ 83.544596][ T5635] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 83.544610][ T5635] ? inetdev_init+0x22d/0x4f0 [ 83.544620][ T5635] ? inetdev_event+0x11c4/0x1610 [ 83.544631][ T5635] ? notifier_call_chain+0x1a5/0x3d0 [ 83.544646][ T5635] ? register_netdevice+0x1bfe/0x2280 [ 83.544655][ T5635] ? register_netdev+0x40/0x60 [ 83.544664][ T5635] ? gether_register_netdev+0x84/0x180 [ 83.544675][ T5635] ? ncm_bind+0x717/0xdc0 [ 83.544686][ T5635] ? usb_add_function+0x2e1/0x9f0 [ 83.544698][ T5635] ? configfs_composite_bind+0xde0/0x1410 [ 83.544711][ T5635] ? gadget_bind_driver+0x2ca/0x9e0 [pid 5635] write(3, "dummy_udc.0", 11) = ? [pid 5635] +++ killed by SIGKILL +++ [pid 5632] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 83.544720][ T5635] ? really_probe+0x254/0xae0 [ 83.544735][ T5635] ? __driver_probe_device+0x1e8/0x360 [ 83.544749][ T5635] ? __driver_attach+0x339/0x600 [ 83.544768][ T5635] ? bus_for_each_dev+0x23b/0x2c0 [ 83.544785][ T5635] ? bus_add_driver+0x38f/0x6e0 [ 83.544803][ T5635] ? neigh_parms_alloc+0x404/0x500 [ 83.544830][ T5635] devinet_sysctl_register+0xad/0x200 [ 83.544857][ T5635] inetdev_init+0x2c8/0x4f0 [ 83.544876][ T5635] inetdev_event+0x11c4/0x1610 [pid 5632] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5632] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5632] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5632] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5632] getdents64(3, 0x555561ad57a0 /* 7 entries */, 32768) = 208 [pid 5632] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5632] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5632] newfstatat(AT_FDCWD, "./0/config", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 83.544891][ T5635] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 83.544907][ T5635] ? __pfx_inetdev_event+0x10/0x10 [ 83.544918][ T5635] ? preempt_schedule_notrace+0x56/0x90 [ 83.544931][ T5635] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 83.544948][ T5635] notifier_call_chain+0x1a5/0x3d0 [ 83.544968][ T5635] register_netdevice+0x1bfe/0x2280 [ 83.544988][ T5635] ? __pfx_register_netdevice+0x10/0x10 [ 83.545006][ T5635] ? dev_addr_mod+0x1ba/0x350 [ 83.545024][ T5635] register_netdev+0x40/0x60 [pid 5632] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5632] openat(AT_FDCWD, "./0/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5632] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5632] getdents64(4, 0x555561add7e0 /* 2 entries */, 32768) = 48 [pid 5632] getdents64(4, 0x555561add7e0 /* 0 entries */, 32768) = 0 [pid 5632] close(4) = 0 [pid 5632] rmdir("./0/config") = 0 [pid 5632] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5632] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5632] unlink("./0/binderfs") = 0 [pid 5632] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5632] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5632] unlink("./0/cgroup.net") = 0 [pid 5632] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5632] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5632] unlink("./0/cgroup.cpu") = 0 [pid 5632] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 83.545034][ T5635] gether_register_netdev+0x84/0x180 [ 83.545048][ T5635] ncm_bind+0x717/0xdc0 [ 83.545062][ T5635] ? trace_kmalloc+0x2a/0xf0 [ 83.545081][ T5635] usb_add_function+0x2e1/0x9f0 [ 83.545094][ T5635] ? check_remote_wakeup_config+0x58/0x1c0 [ 83.545110][ T5635] configfs_composite_bind+0xde0/0x1410 [ 83.545131][ T5635] ? __pfx_configfs_composite_bind+0x10/0x10 [ 83.545144][ T5635] gadget_bind_driver+0x2ca/0x9e0 [ 83.545162][ T5635] ? __pfx_gadget_bind_driver+0x10/0x10 [ 83.545171][ T5635] really_probe+0x254/0xae0 [pid 5632] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5632] unlink("./0/cgroup") = 0 [pid 5632] getdents64(3, 0x555561ad57a0 /* 0 entries */, 32768) = 0 [pid 5632] close(3) = 0 [pid 5632] rmdir("./0") = 0 [pid 5632] mkdir("./1", 0777) = 0 [pid 5632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 83.545190][ T5635] __driver_probe_device+0x1e8/0x360 [ 83.545207][ T5635] driver_probe_device+0x4f/0x240 [ 83.545224][ T5635] __driver_attach+0x339/0x600 [ 83.545241][ T5635] bus_for_each_dev+0x23b/0x2c0 [ 83.545254][ T5635] ? __pfx___driver_attach+0x10/0x10 [ 83.545269][ T5635] ? __pfx_bus_for_each_dev+0x10/0x10 [ 83.545282][ T5635] ? do_raw_spin_unlock+0xf5/0x200 [ 83.545299][ T5635] bus_add_driver+0x38f/0x6e0 [ 83.545317][ T5635] driver_register+0x23a/0x320 [ 83.545329][ T5635] usb_gadget_register_driver_owner+0xf9/0x270 [pid 5632] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5636 attached , child_tidptr=0x555561ad46d0) = 3 [pid 5636] set_robust_list(0x555561ad46e0, 24 [pid 5632] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... set_robust_list resumed>) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5632] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5636] chdir("./1") = 0 [pid 5636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5636] setpgid(0, 0) = 0 [pid 5636] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5636] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5636] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [ 83.545348][ T5635] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 83.545360][ T5635] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 83.545372][ T5635] configfs_write_iter+0x337/0x430 [ 83.545394][ T5635] vfs_write+0x612/0xba0 [ 83.545415][ T5635] ? __pfx_vfs_write+0x10/0x10 [ 83.545438][ T5635] ? fdget+0x16b/0x250 [ 83.545457][ T5635] ksys_write+0x150/0x270 [ 83.545474][ T5635] ? __pfx_ksys_write+0x10/0x10 [ 83.545496][ T5635] do_syscall_64+0x166/0x520 [ 83.545508][ T5635] ? trace_irq_disable+0x3b/0x140 [pid 5636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1000", 4) = 4 [pid 5636] close(3) = 0 [pid 5636] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5636] write(1, "executing program\n", 18) = 18 [pid 5636] mkdir("./config", 0777) = 0 [pid 5636] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 5636] mkdir("./config/usb_gadget/g1", 0777) = -1 EEXIST (File exists) [pid 5636] mkdirat(AT_FDCWD, "./config/usb_gadget/g1/configs/c.1", 0777) = -1 EEXIST (File exists) [pid 5636] mkdir("./config/usb_gadget/g1/functions/ncm.usb0", 0777) = -1 EEXIST (File exists) [pid 5636] symlink("./config/usb_gadget/g1/functions/ncm.usb0", "./config/usb_gadget/g1/configs/c.1/ncm.usb0") = -1 EEXIST (File exists) [pid 5636] openat(AT_FDCWD, "./config/usb_gadget/g1/UDC", O_WRONLY) = 3 [pid 5636] mkdirat(AT_FDCWD, "./cgroup.cpu/test", 03746) = -1 EEXIST (File exists) [pid 5636] openat(AT_FDCWD, "./cgroup.cpu/test/memory.limit_in_bytes", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_NOFOLLOW|O_NOATIME|FASYNC, 010) = 4 [pid 5636] write(4, "10", 2) = 2 [pid 5636] openat(AT_FDCWD, "./cgroup.cpu/test/cgroup.procs", O_RDWR) = 5 [pid 5636] write(5, "0", 1) = 1 [ 83.545519][ T5635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.545529][ T5635] ? clear_bhb_loop+0x70/0xc0 [ 83.545542][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.545552][ T5635] RIP: 0033:0x7f202abbf9e9 [ 83.545568][ T5635] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 83.545576][ T5635] RSP: 002b:00007ffcdcb15db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.545590][ T5635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f202abbf9e9 [ 83.545599][ T5635] RDX: 000000000000000b RSI: 0000200000001400 RDI: 0000000000000003 ** replaying previous printk message ** [ 83.545605][ T5635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.545611][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f202ac27042 [ 83.545617][ T5635] R13: 00007ffcdcb15df0 R14: 00007ffcdcb15e30 R15: 0000000000000000 [ 83.545635][ T5635] [ 83.554100][ T5635] memory: usage 0kB, limit 0kB, failcnt 19 [ 83.554116][ T5635] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 83.554128][ T5635] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 83.554140][ T5635] Memory cgroup stats for /syz0/test: [ 83.554346][ T5635] cache 0 [ 83.554354][ T5635] rss 0 [ 83.554360][ T5635] rss_huge 0 [ 83.554366][ T5635] shmem 0 [ 83.554373][ T5635] mapped_file 0 [ 83.554387][ T5635] dirty 0 [ 83.554393][ T5635] writeback 0 [ 83.554399][ T5635] workingset_refault_anon 0 [ 83.554406][ T5635] workingset_refault_file 0 [ 83.554413][ T5635] swap 0 [ 83.554419][ T5635] swapcached 0 [ 83.554426][ T5635] pgpgin 0 [ 83.554432][ T5635] pgpgout 0 [ 83.554438][ T5635] pgfault 0 [ 83.554445][ T5635] pgmajfault 0 [ 83.554451][ T5635] inactive_anon 0 [ 83.554457][ T5635] active_anon 0 [ 83.554464][ T5635] inactive_file 0 [ 83.554470][ T5635] active_file 0 [ 83.554477][ T5635] unevictable 0 [ 83.554483][ T5635] hierarchical_memory_limit 0 [ 83.554491][ T5635] hierarchical_memsw_limit 9223372036854771712 [ 83.554498][ T5635] total_cache 0 [ 83.554504][ T5635] total_rss 0 [ 83.554511][ T5635] total_rss_huge 0 [ 83.554517][ T5635] total_shmem 0 [ 83.554524][ T5635] total_mapped_file 0 [ 83.554530][ T5635] total_dirty 0 [ 83.554537][ T5635] total_writeback 0 [ 83.554544][ T5635] total_workingset_refault_anon 0 [ 83.554551][ T5635] total_workingset_refault_file 0 [ 83.554558][ T5635] total_swap 0 [ 83.554564][ T5635] total_swapcached 0 [ 83.554571][ T5635] total_pgpgin 0 [ 83.554577][ T5635] total_pgpgout 0 [ 83.554584][ T5635] total_pgfault 0 [ 83.554591][ T5635] total_pgmajfault 0 [ 83.554597][ T5635] total_inactive_anon 0 [ 83.554604][ T5635] total_active_anon 0 [ 83.554610][ T5635] total_inactive_file 0 [ 83.554617][ T5635] total_active_file 0 [ 83.554623][ T5635] total_unevictable 0 [ 83.554630][ T5635] anon_cost 0 [ 83.554637][ T5635] file_cost 0 [ 83.554644][ T5635] Tasks state (memory values in pages): [ 83.554650][ T5635] [ pid ] uid tgid total_vm rss rss_anon rss_file rss_shmem pgtables_bytes swapents oom_score_adj name [ 83.554677][ T5635] [ 5635] 0 5635 4361 118 17 101 0 53248 0 1000 syz-executor253 [ 83.554710][ T5635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz-executor253,pid=5635,uid=0 [ 83.556216][ T5635] Memory cgroup out of memory: Killed process 5635 (syz-executor253) total-vm:17444kB, anon-rss:68kB, file-rss:404kB, shmem-rss:0kB, UID:0 pgtables:52kB oom_score_adj:1000 [ 83.756483][ T5635] udc dummy_udc.0: failed to start g1: -105 [ 83.756508][ T5635] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -105 [ 83.764969][ T5635] UDC core: g1: couldn't find an available UDC or it's busy [ 84.057914][ T5636] ------------[ cut here ]------------ [ 84.057928][ T5636] kernel BUG at net/core/dev.c:11506! [ 84.058954][ T5636] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 84.378173][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: syz-executor253 Not tainted syzkaller #0 PREEMPT(full) [ 84.387882][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.397921][ T5636] RIP: 0010:register_netdevice+0x2225/0x2280 [ 84.403887][ T5636] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 4e 30 6a f8 e9 16 fb ff ff e8 d4 76 f4 f7 90 0f 0b e8 cc 76 f4 f7 90 <0f> 0b e8 c4 76 f4 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 84.423473][ T5636] RSP: 0018:ffffc90003ad7560 EFLAGS: 00010293 [ 84.429518][ T5636] RAX: ffffffff89d44a44 RBX: 1ffff9200075aec0 RCX: ffff888035b08000 [ 84.437479][ T5636] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 84.445438][ T5636] RBP: ffffc90003ad76e0 R08: ffffffff91687907 R09: 1ffffffff22d0f20 [ 84.453383][ T5636] R10: dffffc0000000000 R11: fffffbfff22d0f21 R12: ffff888036d6c788 [ 84.461341][ T5636] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888036d6c000 [ 84.469283][ T5636] FS: 0000555561ad4400(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 84.478182][ T5636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.484736][ T5636] CR2: 0000200000001000 CR3: 000000007384a000 CR4: 00000000003526f0 [ 84.492684][ T5636] Call Trace: [ 84.495939][ T5636] [ 84.498846][ T5636] ? trace_contention_end+0x3d/0x140 [ 84.504108][ T5636] ? __mutex_lock+0x305/0x15a0 [ 84.508847][ T5636] ? up_write+0x19d/0x4a0 [ 84.513148][ T5636] ? __pfx___mutex_lock+0x10/0x10 [ 84.518147][ T5636] ? __pfx_register_netdevice+0x10/0x10 [ 84.523673][ T5636] ? __hw_addr_insert+0x1f8/0x220 [ 84.528705][ T5636] ? dev_addr_mod+0x174/0x350 [ 84.533389][ T5636] ? dev_addr_mod+0x1ba/0x350 [ 84.538067][ T5636] register_netdev+0x40/0x60 [ 84.542661][ T5636] gether_register_netdev+0x84/0x180 [ 84.547961][ T5636] ncm_bind+0x717/0xdc0 [ 84.552221][ T5636] ? rcu_is_watching+0x16/0xb0 [ 84.556997][ T5636] usb_add_function+0x2e1/0x9f0 [ 84.561848][ T5636] ? check_remote_wakeup_config+0x58/0x1c0 [ 84.567641][ T5636] configfs_composite_bind+0xde0/0x1410 [ 84.573203][ T5636] ? __pfx_configfs_composite_bind+0x10/0x10 [ 84.579186][ T5636] gadget_bind_driver+0x2ca/0x9e0 [ 84.584238][ T5636] ? __pfx_gadget_bind_driver+0x10/0x10 [ 84.589783][ T5636] really_probe+0x254/0xae0 [ 84.594313][ T5636] __driver_probe_device+0x1e8/0x360 [ 84.599600][ T5636] driver_probe_device+0x4f/0x240 [ 84.604620][ T5636] __driver_attach+0x339/0x600 [ 84.609373][ T5636] bus_for_each_dev+0x23b/0x2c0 [ 84.614205][ T5636] ? __pfx___driver_attach+0x10/0x10 [ 84.619476][ T5636] ? __pfx_bus_for_each_dev+0x10/0x10 [ 84.624836][ T5636] ? do_raw_spin_unlock+0xf5/0x200 [ 84.629926][ T5636] bus_add_driver+0x38f/0x6e0 [ 84.634578][ T5636] driver_register+0x23a/0x320 [ 84.639319][ T5636] usb_gadget_register_driver_owner+0xf9/0x270 [ 84.645452][ T5636] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 84.651056][ T5636] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 84.657183][ T5636] configfs_write_iter+0x337/0x430 [ 84.662270][ T5636] vfs_write+0x612/0xba0 [ 84.666493][ T5636] ? __pfx_vfs_write+0x10/0x10 [ 84.671236][ T5636] ? fdget+0x16b/0x250 [ 84.675284][ T5636] ksys_write+0x150/0x270 [ 84.679592][ T5636] ? __pfx_ksys_write+0x10/0x10 [ 84.684421][ T5636] do_syscall_64+0x166/0x520 [ 84.688985][ T5636] ? trace_irq_disable+0x3b/0x140 [ 84.693984][ T5636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.700022][ T5636] ? clear_bhb_loop+0x70/0xc0 [ 84.704672][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.710541][ T5636] RIP: 0033:0x7f202abbf9e9 [ 84.714933][ T5636] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 84.734529][ T5636] RSP: 002b:00007ffcdcb15db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.742913][ T5636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f202abbf9e9 [ 84.750857][ T5636] RDX: 000000000000000b RSI: 0000200000001400 RDI: 0000000000000003 [ 84.758804][ T5636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.766754][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdcb15ddc [ 84.774697][ T5636] R13: 00007ffcdcb15df0 R14: 00007ffcdcb15e30 R15: 0000000000000001 [ 84.782648][ T5636] [ 84.785641][ T5636] Modules linked in: [ 84.789781][ T5636] ---[ end trace 0000000000000000 ]--- [ 84.795360][ T5636] RIP: 0010:register_netdevice+0x2225/0x2280 [ 84.795394][ T5636] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 4e 30 6a f8 e9 16 fb ff ff e8 d4 76 f4 f7 90 0f 0b e8 cc 76 f4 f7 90 <0f> 0b e8 c4 76 f4 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 84.795407][ T5636] RSP: 0018:ffffc90003ad7560 EFLAGS: 00010293 [ 84.795422][ T5636] RAX: ffffffff89d44a44 RBX: 1ffff9200075aec0 RCX: ffff888035b08000 [ 84.795433][ T5636] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 84.795443][ T5636] RBP: ffffc90003ad76e0 R08: ffffffff91687907 R09: 1ffffffff22d0f20 [ 84.795465][ T5636] R10: dffffc0000000000 R11: fffffbfff22d0f21 R12: ffff888036d6c788 [ 84.795478][ T5636] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888036d6c000 [ 84.795490][ T5636] FS: 0000555561ad4400(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 84.795505][ T5636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.795518][ T5636] CR2: 0000200000001000 CR3: 000000007384a000 CR4: 00000000003526f0 [ 84.795538][ T5636] Kernel panic - not syncing: Fatal exception [ 84.896571][ T5636] Kernel Offset: disabled [ 84.900879][ T5636] Rebooting in 86400 seconds..