Warning: Permanently added '[localhost]:46870' (ED25519) to the list of known hosts. [ 49.732486][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 49.732499][ T42] audit: type=1400 audit(1785067343.179:138): avc: denied { execute } for pid=5728 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.742587][ T42] audit: type=1400 audit(1785067343.179:139): avc: denied { execute_no_trans } for pid=5728 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/07/26 12:02:24 parsed 1 programs 2026/07/26 12:02:24 serving rpc on tcp://40241 [ 50.795086][ T42] audit: type=1400 audit(1785067344.239:140): avc: denied { node_bind } for pid=5728 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.801863][ T42] audit: type=1400 audit(1785067344.249:141): avc: denied { node_bind } for pid=5728 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.922811][ T42] audit: type=1400 audit(1785067346.369:142): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.930887][ T42] audit: type=1400 audit(1785067346.379:143): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.933096][ T5740] cgroup: Unknown subsys name 'net' [ 52.941738][ T42] audit: type=1400 audit(1785067346.389:144): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.070543][ T5740] cgroup: Unknown subsys name 'cpuset' [ 53.074185][ T5740] cgroup: Unknown subsys name 'rlimit' [ 53.244517][ T42] audit: type=1400 audit(1785067346.689:145): avc: denied { setattr } for pid=5740 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.253711][ T42] audit: type=1400 audit(1785067346.689:146): avc: denied { create } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.261838][ T42] audit: type=1400 audit(1785067346.689:147): avc: denied { write } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.309403][ T5743] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.069946][ T5740] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.905095][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 55.905109][ T42] audit: type=1400 audit(1785067349.349:159): avc: denied { execmem } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.912949][ T42] audit: type=1400 audit(1785067349.349:160): avc: denied { read } for pid=5748 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.919319][ T42] audit: type=1400 audit(1785067349.349:161): avc: denied { open } for pid=5748 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.926178][ T42] audit: type=1400 audit(1785067349.349:162): avc: denied { mounton } for pid=5748 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.967263][ T42] audit: type=1400 audit(1785067349.409:163): avc: denied { mount } for pid=5748 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.974002][ T42] audit: type=1400 audit(1785067349.419:164): avc: denied { mounton } for pid=5748 comm="syz-executor" path="/syzkaller.MAWTv6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.981667][ T42] audit: type=1400 audit(1785067349.419:165): avc: denied { mount } for pid=5748 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.988435][ T42] audit: type=1400 audit(1785067349.419:166): avc: denied { mounton } for pid=5748 comm="syz-executor" path="/syzkaller.MAWTv6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.996196][ T42] audit: type=1400 audit(1785067349.419:167): avc: denied { mounton } for pid=5748 comm="syz-executor" path="/syzkaller.MAWTv6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.004221][ T42] audit: type=1400 audit(1785067349.419:168): avc: denied { unmount } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.013499][ T5748] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.728275][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.730786][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.746463][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.749191][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.520671][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.524412][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.527328][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.530922][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.533384][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.045110][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.048365][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.050605][ T5804] bridge_slave_0: entered allmulticast mode [ 58.053283][ T5804] bridge_slave_0: entered promiscuous mode [ 58.058119][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.060638][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.062966][ T5804] bridge_slave_1: entered allmulticast mode [ 58.065932][ T5804] bridge_slave_1: entered promiscuous mode [ 58.086984][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.092295][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.107034][ T5804] team0: Port device team_slave_0 added [ 58.110172][ T5804] team0: Port device team_slave_1 added [ 58.123279][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.125454][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.133306][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.138284][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.140476][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.148576][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.175626][ T5804] hsr_slave_0: entered promiscuous mode [ 58.178686][ T5804] hsr_slave_1: entered promiscuous mode [ 58.277141][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.284255][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.288527][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.292842][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.295987][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.301733][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.305393][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.311037][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.377684][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.394332][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.403715][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.406523][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.417312][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.420491][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.732548][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.766151][ T5804] veth0_vlan: entered promiscuous mode [ 58.775517][ T5804] veth1_vlan: entered promiscuous mode [ 58.802378][ T5804] veth0_macvtap: entered promiscuous mode [ 58.808224][ T5804] veth1_macvtap: entered promiscuous mode [ 58.823721][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.832496][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.840311][ T5755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.843313][ T5755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.846830][ T5755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.850619][ T5755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.962679][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.059567][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.208423][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.307933][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/26 12:02:33 executed programs: 0 [ 59.593401][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.596926][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.601262][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.605425][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.614091][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.049095][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.052126][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.055221][ T5862] bridge_slave_0: entered allmulticast mode [ 60.059570][ T5862] bridge_slave_0: entered promiscuous mode [ 60.064704][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.067874][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.070911][ T5862] bridge_slave_1: entered allmulticast mode [ 60.074671][ T5862] bridge_slave_1: entered promiscuous mode [ 60.106724][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.114027][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.146536][ T5862] team0: Port device team_slave_0 added [ 60.151214][ T5862] team0: Port device team_slave_1 added [ 60.176495][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.179795][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.190421][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.194937][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.197137][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.205559][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.230539][ T5862] hsr_slave_0: entered promiscuous mode [ 60.232717][ T5862] hsr_slave_1: entered promiscuous mode [ 60.235849][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 60.238159][ T5862] Cannot create hsr debugfs directory [ 61.698540][ T5094] Bluetooth: hci0: command tx timeout [ 62.108712][ T12] bridge_slave_1: left allmulticast mode [ 62.111446][ T12] bridge_slave_1: left promiscuous mode [ 62.114847][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.123525][ T12] bridge_slave_0: left allmulticast mode [ 62.125720][ T12] bridge_slave_0: left promiscuous mode [ 62.128308][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.166601][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 62.166619][ T42] audit: type=1400 audit(1785067355.609:189): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.180517][ T42] audit: type=1400 audit(1785067355.609:190): avc: denied { create } for pid=5888 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.189636][ T42] audit: type=1400 audit(1785067355.609:191): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.200426][ T42] audit: type=1400 audit(1785067355.609:192): avc: denied { append } for pid=5888 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.221210][ T42] audit: type=1400 audit(1785067355.669:193): avc: denied { write } for pid=5891 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.230167][ T42] audit: type=1400 audit(1785067355.669:194): avc: denied { unlink } for pid=5891 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.259179][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.264180][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.267767][ T12] bond0 (unregistering): Released all slaves [ 62.280121][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.368239][ T42] audit: type=1400 audit(1785067355.819:195): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.406925][ T12] hsr_slave_0: left promiscuous mode [ 62.409902][ T12] hsr_slave_1: left promiscuous mode [ 62.412640][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.415514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.419420][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.422377][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.427734][ T42] audit: type=1400 audit(1785067355.869:196): avc: denied { write } for pid=5897 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.435492][ T12] veth1_macvtap: left promiscuous mode [ 62.438412][ T12] veth0_macvtap: left promiscuous mode [ 62.440745][ T12] veth1_vlan: left promiscuous mode [ 62.442896][ T12] veth0_vlan: left promiscuous mode [ 62.581163][ T12] team0 (unregistering): Port device team_slave_1 removed [ 62.591320][ T12] team0 (unregistering): Port device team_slave_0 removed [ 62.657225][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.826571][ T42] audit: type=1400 audit(1785067356.269:197): avc: denied { write } for pid=5901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.900737][ T42] audit: type=1400 audit(1785067356.349:198): avc: denied { write } for pid=5904 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.084322][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.095853][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.098623][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.102522][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.105182][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.112582][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.116357][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.123339][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.176538][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.193328][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.334515][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.336853][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.343907][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.346058][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.633704][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.665443][ T5862] veth0_vlan: entered promiscuous mode [ 63.672632][ T5862] veth1_vlan: entered promiscuous mode [ 63.694414][ T5862] veth0_macvtap: entered promiscuous mode [ 63.698616][ T5862] veth1_macvtap: entered promiscuous mode [ 63.709835][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.716915][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.727149][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.731150][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.736439][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.740268][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.777467][ T5094] Bluetooth: hci0: command tx timeout [ 63.786889][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.790599][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.807893][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.810909][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.841538][ T5937] dummy_hcd dummy_hcd.0: remove, state 4 [ 63.843793][ T5937] usb usb5: USB disconnect, device number 1 [ 63.854279][ T5937] dummy_hcd dummy_hcd.0: stopped [ 63.855772][ T5937] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 63.862815][ T5937] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 63.866459][ T5937] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 63.868989][ T5937] CPU: 2 UID: 0 PID: 5937 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.871810][ T5937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.875287][ T5937] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 63.877502][ T5937] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 63.884308][ T5937] RSP: 0018:ffffc90004927b48 EFLAGS: 00010246 [ 63.886577][ T5937] RAX: dffffc0000000000 RBX: ffff88802bce0c00 RCX: ffffffff87d0b119 [ 63.889345][ T5937] RDX: 0000000000000000 RSI: ffffffff87d0b127 RDI: ffff88802bce1290 [ 63.892146][ T5937] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 63.895128][ T5937] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888038080050 [ 63.898186][ T5937] R13: 0000000000000000 R14: ffff88802c8c04f1 R15: ffff88802c8c0008 [ 63.900940][ T5937] FS: 000055558ac35500(0000) GS:ffff8880d5fde000(0000) knlGS:0000000000000000 [ 63.904027][ T5937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.906394][ T5937] CR2: 00007fab39f874c0 CR3: 0000000040b1e000 CR4: 0000000000352ef0 [ 63.909215][ T5937] Call Trace: [ 63.910577][ T5937] [ 63.911704][ T5937] gadget_bind_driver+0x4ac/0xbf0 [ 63.913559][ T5937] ? __pfx_gadget_bind_driver+0x10/0x10 [ 63.915690][ T5937] really_probe+0x241/0xa60 [ 63.917537][ T5937] __driver_probe_device+0x20e/0x450 [ 63.919594][ T5937] driver_probe_device+0x4a/0x140 [ 63.921654][ T5937] __driver_attach+0x21f/0x5b0 [ 63.923625][ T5937] ? __pfx___driver_attach+0x10/0x10 [ 63.925755][ T5937] bus_for_each_dev+0x13e/0x1d0 [ 63.927480][ T5937] ? __pfx_bus_for_each_dev+0x10/0x10 [ 63.929343][ T5937] ? bus_add_driver+0x2b5/0x5b0 [ 63.931303][ T5937] bus_add_driver+0x305/0x5b0 [ 63.933092][ T5937] driver_register+0x1e2/0x360 [ 63.934625][ T5937] ? rcu_is_watching+0x12/0xc0 [ 63.936110][ T5937] usb_gadget_register_driver_owner+0x132/0x210 [ 63.938046][ T5937] raw_ioctl+0x1a85/0x2b80 [ 63.939434][ T5937] ? __pfx_raw_ioctl+0x10/0x10 [ 63.940952][ T5937] ? selinux_file_ioctl+0x13b/0x290 [ 63.942863][ T5937] ? selinux_file_ioctl+0xb6/0x290 [ 63.944943][ T5937] ? __pfx_raw_ioctl+0x10/0x10 [ 63.946831][ T5937] __x64_sys_ioctl+0x18e/0x210 [ 63.948638][ T5937] do_syscall_64+0x115/0x870 [ 63.950508][ T5937] ? clear_bhb_loop+0x40/0x90 [ 63.952417][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.954381][ T5937] RIP: 0033:0x7fab39f9db2b [ 63.955735][ T5937] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 63.961281][ T5937] RSP: 002b:00007ffd1f901360 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.964093][ T5937] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fab39f9db2b [ 63.966500][ T5937] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 63.969286][ T5937] RBP: 00007ffd1f902430 R08: 0000000000000001 R09: 00000000ffffffff [ 63.971835][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.974293][ T5937] R13: 00002000000000c0 R14: 0000000000000002 R15: 0000000000000000 [ 63.976712][ T5937] [ 63.977673][ T5937] Modules linked in: [ 63.979053][ T5937] ---[ end trace 0000000000000000 ]--- [ 63.980875][ T5937] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 63.983099][ T5937] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 63.990719][ T5937] RSP: 0018:ffffc90004927b48 EFLAGS: 00010246 [ 63.992667][ T5937] RAX: dffffc0000000000 RBX: ffff88802bce0c00 RCX: ffffffff87d0b119 [ 63.995195][ T5937] RDX: 0000000000000000 RSI: ffffffff87d0b127 RDI: ffff88802bce1290 [ 63.997902][ T5937] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 64.000767][ T5937] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888038080050 [ 64.003669][ T5937] R13: 0000000000000000 R14: ffff88802c8c04f1 R15: ffff88802c8c0008 [ 64.006085][ T5937] FS: 000055558ac35500(0000) GS:ffff8880d5fde000(0000) knlGS:0000000000000000 [ 64.008827][ T5937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.010835][ T5937] CR2: 00007fab39f874c0 CR3: 0000000040b1e000 CR4: 0000000000352ef0 [ 64.013859][ T5937] Kernel panic - not syncing: Fatal exception [ 64.016989][ T5937] Kernel Offset: disabled [ 64.018764][ T5937] Rebooting in 86400 seconds..