Warning: Permanently added '[localhost]:44485' (ED25519) to the list of known hosts. [ 49.967156][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 49.967171][ T42] audit: type=1400 audit(1787297286.419:138): avc: denied { execute } for pid=5722 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.976869][ T42] audit: type=1400 audit(1787297286.419:139): avc: denied { execute_no_trans } for pid=5722 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/21 07:28:07 parsed 1 programs 2026/08/21 07:28:07 serving rpc on tcp://44459 [ 51.160002][ T42] audit: type=1400 audit(1787297287.609:140): avc: denied { node_bind } for pid=5722 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.167484][ T42] audit: type=1400 audit(1787297287.609:141): avc: denied { node_bind } for pid=5722 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.837893][ T42] audit: type=1400 audit(1787297290.289:142): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.847886][ T42] audit: type=1400 audit(1787297290.299:143): avc: denied { mount } for pid=5730 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.851993][ T5730] cgroup: Unknown subsys name 'net' [ 53.865079][ T42] audit: type=1400 audit(1787297290.319:144): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.999253][ T5730] cgroup: Unknown subsys name 'cpuset' [ 54.005673][ T5730] cgroup: Unknown subsys name 'rlimit' [ 54.184699][ T42] audit: type=1400 audit(1787297290.629:145): avc: denied { setattr } for pid=5730 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.193460][ T42] audit: type=1400 audit(1787297290.639:146): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.202146][ T42] audit: type=1400 audit(1787297290.639:147): avc: denied { write } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.255412][ T5735] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 55.048626][ T5730] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.877832][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 56.877846][ T42] audit: type=1400 audit(1787297293.329:159): avc: denied { execmem } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.885768][ T42] audit: type=1400 audit(1787297293.329:160): avc: denied { read } for pid=5738 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.892328][ T42] audit: type=1400 audit(1787297293.329:161): avc: denied { open } for pid=5738 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.899729][ T42] audit: type=1400 audit(1787297293.329:162): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.939585][ T42] audit: type=1400 audit(1787297293.389:163): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.946775][ T42] audit: type=1400 audit(1787297293.389:164): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.953757][ T42] audit: type=1400 audit(1787297293.389:165): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 56.961190][ T42] audit: type=1400 audit(1787297293.389:166): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 57.109962][ T42] audit: type=1400 audit(1787297293.559:167): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.119175][ T42] audit: type=1400 audit(1787297293.559:168): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzkaller.vcdfn2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.153641][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.866743][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.870820][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.876071][ T5753] bridge_slave_0: entered allmulticast mode [ 57.880346][ T5753] bridge_slave_0: entered promiscuous mode [ 57.885796][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.888170][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.890539][ T5753] bridge_slave_1: entered allmulticast mode [ 57.893285][ T5753] bridge_slave_1: entered promiscuous mode [ 57.913632][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.918448][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.937240][ T5753] team0: Port device team_slave_0 added [ 57.940459][ T5753] team0: Port device team_slave_1 added [ 57.954308][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.957612][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.969075][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.975183][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.977590][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.986639][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.017603][ T5753] hsr_slave_0: entered promiscuous mode [ 58.019920][ T5753] hsr_slave_1: entered promiscuous mode [ 58.156457][ T5753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.166013][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.169998][ T5753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.174338][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.177177][ T5753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.181326][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.184026][ T5753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.188108][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.208111][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.211369][ T5753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.214176][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.216522][ T5753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.252347][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.263942][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.267444][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.277843][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.285594][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.287925][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.298798][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.301140][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.550929][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.579110][ T5753] veth0_vlan: entered promiscuous mode [ 58.589018][ T5753] veth1_vlan: entered promiscuous mode [ 58.614828][ T5753] veth0_macvtap: entered promiscuous mode [ 58.621710][ T5753] veth1_macvtap: entered promiscuous mode [ 58.638861][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.648877][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.676365][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.683067][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.686121][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.689787][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.750182][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.827310][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.847755][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.850362][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.872863][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.876176][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.918415][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.016026][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.162874][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.165985][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.169100][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.174127][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.179339][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/08/21 07:28:16 executed programs: 0 [ 60.531224][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.536218][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.539459][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.542684][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.546773][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.932152][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.935475][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.938254][ T5855] bridge_slave_0: entered allmulticast mode [ 60.941871][ T5855] bridge_slave_0: entered promiscuous mode [ 60.947578][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.950617][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.953461][ T5855] bridge_slave_1: entered allmulticast mode [ 60.957204][ T5855] bridge_slave_1: entered promiscuous mode [ 60.975879][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.980328][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.997178][ T5855] team0: Port device team_slave_0 added [ 61.000180][ T5855] team0: Port device team_slave_1 added [ 61.014067][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.016354][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.024295][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.028727][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.030943][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.038977][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.062725][ T5855] hsr_slave_0: entered promiscuous mode [ 61.065221][ T5855] hsr_slave_1: entered promiscuous mode [ 61.067312][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 61.069193][ T5855] Cannot create hsr debugfs directory [ 61.501557][ T13] bridge_slave_1: left allmulticast mode [ 61.504963][ T13] bridge_slave_1: left promiscuous mode [ 61.508129][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.513736][ T13] bridge_slave_0: left allmulticast mode [ 61.516788][ T13] bridge_slave_0: left promiscuous mode [ 61.518718][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.622418][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.627642][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.631907][ T13] bond0 (unregistering): Released all slaves [ 61.675216][ T5437] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.814188][ T13] hsr_slave_0: left promiscuous mode [ 61.816591][ T13] hsr_slave_1: left promiscuous mode [ 61.818812][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.821191][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.824167][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.826557][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.835169][ T13] veth1_macvtap: left promiscuous mode [ 61.837741][ T13] veth0_macvtap: left promiscuous mode [ 61.839549][ T13] veth1_vlan: left promiscuous mode [ 61.841263][ T13] veth0_vlan: left promiscuous mode [ 61.972536][ T13] team0 (unregistering): Port device team_slave_1 removed [ 61.980006][ T13] team0 (unregistering): Port device team_slave_0 removed [ 62.034188][ T5437] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.166896][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 62.166915][ T42] audit: type=1400 audit(1787297298.619:197): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.226335][ T42] audit: type=1400 audit(1787297298.679:198): avc: denied { write } for pid=5891 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.309703][ T42] audit: type=1400 audit(1787297298.759:199): avc: denied { write } for pid=5893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.353652][ T42] audit: type=1400 audit(1787297298.799:200): avc: denied { write } for pid=5896 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.400123][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.406536][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.409225][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.413682][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.416465][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.420417][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.423572][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.427582][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.447860][ T42] audit: type=1400 audit(1787297298.899:201): avc: denied { write } for pid=5898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.487000][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.498149][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.498559][ T42] audit: type=1400 audit(1787297298.949:202): avc: denied { write } for pid=5907 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.505546][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.512399][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.521131][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.523687][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.586081][ T64] Bluetooth: hci0: command tx timeout [ 63.140591][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.165689][ T5855] veth0_vlan: entered promiscuous mode [ 63.171568][ T5855] veth1_vlan: entered promiscuous mode [ 63.190122][ T5855] veth0_macvtap: entered promiscuous mode [ 63.194752][ T5855] veth1_macvtap: entered promiscuous mode [ 63.211432][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.238393][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.283618][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.286762][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.345922][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.348226][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.364719][ T5537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.368573][ T5537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.372195][ T5537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.377890][ T5537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.388342][ T42] audit: type=1400 audit(1787297299.839:203): avc: denied { mount } for pid=5920 comm="syz.0.17" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 63.389200][ T5920] dummy_hcd dummy_hcd.0: remove, state 4 [ 63.398320][ T5920] usb usb5: USB disconnect, device number 1 [ 63.421970][ T5920] dummy_hcd dummy_hcd.0: stopped [ 63.424339][ T5920] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 63.433931][ T42] audit: type=1400 audit(1787297299.879:204): avc: denied { read write } for pid=5920 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.435755][ T5920] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 63.444109][ T42] audit: type=1400 audit(1787297299.879:205): avc: denied { open } for pid=5920 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.448725][ T5920] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 63.448747][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.448769][ T5920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.448781][ T5920] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 63.448811][ T5920] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 63.448828][ T5920] RSP: 0018:ffffc90003737b48 EFLAGS: 00010246 [ 63.448845][ T5920] RAX: dffffc0000000000 RBX: ffff88802cc9cc00 RCX: 0000000000000000 [ 63.448858][ T5920] RDX: 0000000000000000 RSI: ffffffff87d3b6c7 RDI: ffff88802cc9d290 [ 63.448869][ T5920] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 63.448880][ T5920] R10: 0000000000000002 R11: 0000000000000001 R12: ffff88802a36a050 [ 63.448891][ T5920] R13: 0000000000000000 R14: ffff88802d98c4f1 R15: ffff88802d98c008 [ 63.448901][ T5920] FS: 0000555591494500(0000) GS:ffff8880d5cb6000(0000) knlGS:0000000000000000 [ 63.448933][ T5920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.461740][ T42] audit: type=1400 audit(1787297299.889:206): avc: denied { ioctl } for pid=5920 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.461923][ T5920] CR2: 00007f0f5db87700 CR3: 0000000047a3e000 CR4: 0000000000352ef0 [ 63.519081][ T5920] Call Trace: [ 63.520615][ T5920] [ 63.521932][ T5920] gadget_bind_driver+0x4ac/0xbf0 [ 63.524253][ T5920] ? __pfx_gadget_bind_driver+0x10/0x10 [ 63.526739][ T5920] really_probe+0x241/0xa60 [ 63.528743][ T5920] __driver_probe_device+0x210/0x460 [ 63.531149][ T5920] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.533843][ T5920] driver_probe_device+0x4a/0x140 [ 63.536203][ T5920] __driver_attach+0x21f/0x5b0 [ 63.538362][ T5920] ? __pfx___driver_attach+0x10/0x10 [ 63.540813][ T5920] bus_for_each_dev+0x13e/0x1d0 [ 63.543165][ T5920] ? __pfx_bus_for_each_dev+0x10/0x10 [ 63.545573][ T5920] ? bus_add_driver+0x2b5/0x5b0 [ 63.547887][ T5920] bus_add_driver+0x305/0x5b0 [ 63.550155][ T5920] driver_register+0x1e2/0x360 [ 63.552309][ T5920] ? rcu_is_watching+0x13/0xc0 [ 63.554593][ T5920] usb_gadget_register_driver_owner+0x132/0x210 [ 63.557446][ T5920] raw_ioctl+0x1a85/0x2b80 [ 63.559474][ T5920] ? __pfx_raw_ioctl+0x10/0x10 [ 63.561721][ T5920] ? selinux_file_ioctl+0x13b/0x290 [ 63.564153][ T5920] ? selinux_file_ioctl+0xb6/0x290 [ 63.566333][ T5920] ? __pfx_raw_ioctl+0x10/0x10 [ 63.568570][ T5920] __x64_sys_ioctl+0x18e/0x210 [ 63.570826][ T5920] do_syscall_64+0x123/0x790 [ 63.572808][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.575251][ T5920] RIP: 0033:0x7f0f5db9dd6b [ 63.577271][ T5920] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 63.585917][ T5920] RSP: 002b:00007fffc6c50a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.589738][ T5920] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0f5db9dd6b [ 63.593365][ T5920] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 63.596908][ T5920] RBP: 00007fffc6c51b60 R08: 0000000000000001 R09: 00000000ffffffff [ 63.600541][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.604183][ T5920] R13: 0000200000000000 R14: 0000000000000002 R15: 0000000000000000 [ 63.607689][ T5920] [ 63.609125][ T5920] Modules linked in: [ 63.611482][ T5920] ---[ end trace 0000000000000000 ]--- [ 63.614729][ T5920] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 63.617063][ T5920] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 63.625209][ T5920] RSP: 0018:ffffc90003737b48 EFLAGS: 00010246 [ 63.627851][ T5920] RAX: dffffc0000000000 RBX: ffff88802cc9cc00 RCX: 0000000000000000 [ 63.631170][ T5920] RDX: 0000000000000000 RSI: ffffffff87d3b6c7 RDI: ffff88802cc9d290 [ 63.634482][ T5920] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 63.638229][ T5920] R10: 0000000000000002 R11: 0000000000000001 R12: ffff88802a36a050 [ 63.641936][ T5920] R13: 0000000000000000 R14: ffff88802d98c4f1 R15: ffff88802d98c008 [ 63.646229][ T5920] FS: 0000555591494500(0000) GS:ffff8880d5cb6000(0000) knlGS:0000000000000000 [ 63.650395][ T5920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.653481][ T5920] CR2: 00007f0f5db87700 CR3: 0000000047a3e000 CR4: 0000000000352ef0 [ 63.657324][ T5920] Kernel panic - not syncing: Fatal exception [ 63.660810][ T5920] Kernel Offset: disabled [ 63.662855][ T5920] Rebooting in 86400 seconds..