Warning: Permanently added '[localhost]:1801' (ED25519) to the list of known hosts. [ 50.120391][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 50.120408][ T42] audit: type=1400 audit(1785250672.426:138): avc: denied { execute } for pid=5733 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.133071][ T42] audit: type=1400 audit(1785250672.436:139): avc: denied { execute_no_trans } for pid=5733 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/07/28 14:57:53 parsed 1 programs 2026/07/28 14:57:53 serving rpc on tcp://36905 [ 51.528572][ T42] audit: type=1400 audit(1785250673.836:140): avc: denied { node_bind } for pid=5733 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.536122][ T42] audit: type=1400 audit(1785250673.836:141): avc: denied { node_bind } for pid=5733 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.327400][ T42] audit: type=1400 audit(1785250676.636:142): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.336859][ T42] audit: type=1400 audit(1785250676.646:143): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.339101][ T5743] cgroup: Unknown subsys name 'net' [ 54.348855][ T42] audit: type=1400 audit(1785250676.656:144): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.508888][ T5743] cgroup: Unknown subsys name 'cpuset' [ 54.513467][ T5743] cgroup: Unknown subsys name 'rlimit' [ 54.698384][ T42] audit: type=1400 audit(1785250677.006:145): avc: denied { setattr } for pid=5743 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.707928][ T42] audit: type=1400 audit(1785250677.006:146): avc: denied { create } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.715612][ T42] audit: type=1400 audit(1785250677.006:147): avc: denied { write } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.770334][ T5746] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 55.594718][ T5743] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.539529][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 57.539543][ T42] audit: type=1400 audit(1785250679.846:159): avc: denied { execmem } for pid=5750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 57.548997][ T42] audit: type=1400 audit(1785250679.846:160): avc: denied { read } for pid=5751 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.557838][ T42] audit: type=1400 audit(1785250679.846:161): avc: denied { open } for pid=5751 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.565255][ T42] audit: type=1400 audit(1785250679.846:162): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.625010][ T42] audit: type=1400 audit(1785250679.926:163): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.632329][ T42] audit: type=1400 audit(1785250679.936:164): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.icZbeV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.640997][ T42] audit: type=1400 audit(1785250679.936:165): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.648041][ T42] audit: type=1400 audit(1785250679.936:166): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.icZbeV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.655643][ T42] audit: type=1400 audit(1785250679.936:167): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.icZbeV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.664667][ T42] audit: type=1400 audit(1785250679.936:168): avc: denied { unmount } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.675265][ T5751] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.237052][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.242231][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.246758][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.250809][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.254281][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.802370][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.805940][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.808492][ T5776] bridge_slave_0: entered allmulticast mode [ 58.811413][ T5776] bridge_slave_0: entered promiscuous mode [ 58.815631][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.818036][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.820349][ T5776] bridge_slave_1: entered allmulticast mode [ 58.822999][ T5776] bridge_slave_1: entered promiscuous mode [ 58.849158][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.855461][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.881715][ T5776] team0: Port device team_slave_0 added [ 58.886443][ T5776] team0: Port device team_slave_1 added [ 58.908642][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.911546][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.921889][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.928428][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.931211][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.941351][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.979537][ T5776] hsr_slave_0: entered promiscuous mode [ 58.983628][ T5776] hsr_slave_1: entered promiscuous mode [ 59.148596][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.158344][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.161279][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.166454][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.170139][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.174787][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.178229][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.182586][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.230124][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.249568][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.262139][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.264712][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.269814][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.272302][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.525545][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.561791][ T5776] veth0_vlan: entered promiscuous mode [ 59.571572][ T5776] veth1_vlan: entered promiscuous mode [ 59.599927][ T5776] veth0_macvtap: entered promiscuous mode [ 59.604780][ T5776] veth1_macvtap: entered promiscuous mode [ 59.616921][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.626794][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.634010][ T5753] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.638747][ T5753] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.643014][ T5753] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.647112][ T5753] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.778058][ T5812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.884861][ T5812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.994347][ T5812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.097326][ T5812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.861798][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.864479][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.883803][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.887477][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/28 14:58:03 executed programs: 0 [ 61.467965][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.472114][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.474809][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.478327][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.480904][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.904354][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.907662][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.910939][ T5866] bridge_slave_0: entered allmulticast mode [ 61.914992][ T5866] bridge_slave_0: entered promiscuous mode [ 61.920099][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.922905][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.926707][ T5866] bridge_slave_1: entered allmulticast mode [ 61.930028][ T5866] bridge_slave_1: entered promiscuous mode [ 61.959132][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.966152][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.991424][ T5866] team0: Port device team_slave_0 added [ 61.996293][ T5866] team0: Port device team_slave_1 added [ 62.020194][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.022455][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.032124][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.037506][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.040162][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.051082][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.077989][ T5866] hsr_slave_0: entered promiscuous mode [ 62.080276][ T5866] hsr_slave_1: entered promiscuous mode [ 62.082619][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 62.084576][ T5866] Cannot create hsr debugfs directory [ 62.540300][ T5812] bridge_slave_1: left allmulticast mode [ 62.542696][ T5812] bridge_slave_1: left promiscuous mode [ 62.546622][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.554292][ T5812] bridge_slave_0: left allmulticast mode [ 62.557400][ T5812] bridge_slave_0: left promiscuous mode [ 62.560575][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.584978][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 62.584996][ T42] audit: type=1400 audit(1785250684.886:189): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.596598][ T42] audit: type=1400 audit(1785250684.906:190): avc: denied { create } for pid=5888 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.604051][ T42] audit: type=1400 audit(1785250684.906:191): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2022 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.614356][ T42] audit: type=1400 audit(1785250684.906:192): avc: denied { append } for pid=5888 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2022 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.663742][ T42] audit: type=1400 audit(1785250684.966:193): avc: denied { write } for pid=5891 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.672519][ T42] audit: type=1400 audit(1785250684.966:194): avc: denied { unlink } for pid=5891 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2022 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.711882][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.720055][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.725296][ T5812] bond0 (unregistering): Released all slaves [ 62.747830][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.828274][ T42] audit: type=1400 audit(1785250685.126:195): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.882933][ T42] audit: type=1400 audit(1785250685.186:196): avc: denied { write } for pid=5897 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.894242][ T5812] hsr_slave_0: left promiscuous mode [ 62.897861][ T5812] hsr_slave_1: left promiscuous mode [ 62.900885][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.904189][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.908583][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.912008][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.921355][ T5812] veth1_macvtap: left promiscuous mode [ 62.924162][ T5812] veth0_macvtap: left promiscuous mode [ 62.927054][ T5812] veth1_vlan: left promiscuous mode [ 62.929672][ T5812] veth0_vlan: left promiscuous mode [ 63.109996][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 63.122656][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 63.227583][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 63.402811][ T42] audit: type=1400 audit(1785250685.706:197): avc: denied { write } for pid=5902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.477146][ T42] audit: type=1400 audit(1785250685.786:198): avc: denied { write } for pid=5905 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.527252][ T5771] Bluetooth: hci0: command tx timeout [ 63.689237][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.699130][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.703621][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.710652][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.714615][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.722683][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.726567][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.733957][ T5866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.804731][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.819644][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.825549][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.829008][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.839787][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.842562][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.494501][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.534367][ T5866] veth0_vlan: entered promiscuous mode [ 64.544707][ T5866] veth1_vlan: entered promiscuous mode [ 64.563534][ T5866] veth0_macvtap: entered promiscuous mode [ 64.568787][ T5866] veth1_macvtap: entered promiscuous mode [ 64.593506][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.618260][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.627895][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.632819][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.637218][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.643445][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.729796][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.733057][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.751796][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.755159][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.794581][ T5931] dummy_hcd dummy_hcd.0: remove, state 4 [ 64.802716][ T5931] usb usb5: USB disconnect, device number 1 [ 64.821398][ T5931] dummy_hcd dummy_hcd.0: stopped [ 64.823538][ T5931] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 64.834852][ T5931] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 64.840154][ T5931] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 64.843857][ T5931] CPU: 3 UID: 0 PID: 5931 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 64.847750][ T5931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.851217][ T5931] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 64.853343][ T5931] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 64.861213][ T5931] RSP: 0018:ffffc90003877b48 EFLAGS: 00010246 [ 64.863600][ T5931] RAX: dffffc0000000000 RBX: ffff88802c288c00 RCX: ffffffff87d0c8f9 [ 64.866769][ T5931] RDX: 0000000000000000 RSI: ffffffff87d0c907 RDI: ffff88802c289290 [ 64.870386][ T5931] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 64.873827][ T5931] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802c5d2050 [ 64.877157][ T5931] R13: 0000000000000000 R14: ffff88802cfa54f1 R15: ffff88802cfa5008 [ 64.880460][ T5931] FS: 000055557abf2500(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 64.884585][ T5931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.887714][ T5931] CR2: 00007f42597874c0 CR3: 000000002e3c1000 CR4: 0000000000352ef0 [ 64.891350][ T5931] Call Trace: [ 64.892774][ T5931] [ 64.894120][ T5931] gadget_bind_driver+0x4ac/0xbf0 [ 64.896233][ T5931] ? __pfx_gadget_bind_driver+0x10/0x10 [ 64.898477][ T5931] really_probe+0x241/0xa60 [ 64.900364][ T5931] __driver_probe_device+0x20e/0x450 [ 64.902592][ T5931] driver_probe_device+0x4a/0x140 [ 64.904858][ T5931] __driver_attach+0x21f/0x5b0 [ 64.907257][ T5931] ? __pfx___driver_attach+0x10/0x10 [ 64.909698][ T5931] bus_for_each_dev+0x13e/0x1d0 [ 64.911938][ T5931] ? __pfx_bus_for_each_dev+0x10/0x10 [ 64.914751][ T5931] ? bus_add_driver+0x2b5/0x5b0 [ 64.916750][ T5931] bus_add_driver+0x305/0x5b0 [ 64.918824][ T5931] driver_register+0x1e2/0x360 [ 64.920821][ T5931] ? rcu_is_watching+0x12/0xc0 [ 64.923185][ T5931] usb_gadget_register_driver_owner+0x132/0x210 [ 64.926503][ T5931] raw_ioctl+0x1a85/0x2b80 [ 64.928592][ T5931] ? __pfx_raw_ioctl+0x10/0x10 [ 64.930482][ T5931] ? selinux_file_ioctl+0x13b/0x290 [ 64.932521][ T5931] ? selinux_file_ioctl+0xb6/0x290 [ 64.934589][ T5931] ? __pfx_raw_ioctl+0x10/0x10 [ 64.936575][ T5931] __x64_sys_ioctl+0x18e/0x210 [ 64.938649][ T5931] do_syscall_64+0x115/0x870 [ 64.940711][ T5931] ? clear_bhb_loop+0x40/0x90 [ 64.942707][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.945508][ T5931] RIP: 0033:0x7f425979db2b [ 64.947804][ T5931] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 64.955958][ T5931] RSP: 002b:00007ffcb2b401f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.959102][ T5931] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f425979db2b [ 64.962236][ T5931] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 64.965293][ T5931] RBP: 00007ffcb2b412c0 R08: 0000000000000001 R09: 00000000ffffffff [ 64.968170][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.971617][ T5931] R13: 0000200000000280 R14: 0000000000000000 R15: 0000000000000000 [ 64.975021][ T5931] [ 64.976367][ T5931] Modules linked in: [ 64.978032][ T5931] ---[ end trace 0000000000000000 ]--- [ 64.980450][ T5931] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 64.982727][ T5931] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 64.991444][ T5931] RSP: 0018:ffffc90003877b48 EFLAGS: 00010246 [ 64.993851][ T5931] RAX: dffffc0000000000 RBX: ffff88802c288c00 RCX: ffffffff87d0c8f9 [ 64.997204][ T5931] RDX: 0000000000000000 RSI: ffffffff87d0c907 RDI: ffff88802c289290 [ 64.999901][ T5931] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 65.003132][ T5931] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802c5d2050 [ 65.006777][ T5931] R13: 0000000000000000 R14: ffff88802cfa54f1 R15: ffff88802cfa5008 [ 65.010380][ T5931] FS: 000055557abf2500(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 65.014161][ T5931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.016930][ T5931] CR2: 00007f42597874c0 CR3: 000000002e3c1000 CR4: 0000000000352ef0 [ 65.019761][ T5931] Kernel panic - not syncing: Fatal exception [ 65.023173][ T5931] Kernel Offset: disabled [ 65.025279][ T5931] Rebooting in 86400 seconds..