[ 85.846283][ T31] audit: type=1400 audit(85.750:56): avc: denied { read write } for pid=3084 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.847128][ T31] audit: type=1400 audit(85.750:57): avc: denied { open } for pid=3084 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:56568' (ED25519) to the list of known hosts. [ 134.344140][ T31] audit: type=1400 audit(134.240:58): avc: denied { execute } for pid=3096 comm="sh" name="syz-executor4121924158" dev="vda" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 134.388716][ T31] audit: type=1400 audit(134.290:59): avc: denied { execute_no_trans } for pid=3096 comm="sh" path="/syz-executor4121924158" dev="vda" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 135.056928][ T31] audit: type=1400 audit(134.960:60): avc: denied { execmem } for pid=3096 comm="syz-executor412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 executing program [ 135.144039][ T31] audit: type=1400 audit(135.050:61): avc: denied { ioctl } for pid=3097 comm="syz-executor412" path="/dev/raw-gadget" dev="devtmpfs" ino=694 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.379291][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.539227][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 135.547311][ T43] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 135.547754][ T43] usb 1-1: config 0 has no interface number 0 [ 135.548067][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=b7.8b [ 135.548149][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.556129][ T43] usb 1-1: config 0 descriptor?? [ 135.783127][ T97] usb 1-1: USB disconnect, device number 2 [ 135.793220][ T97] ------------[ cut here ]------------ [ 135.793928][ T97] WARNING: CPU: 0 PID: 97 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 135.795868][ T97] refcount_t: underflow; use-after-free. [ 135.796226][ T97] Modules linked in: [ 135.797183][ T97] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.799038][ T97] CPU: 0 UID: 0 PID: 97 Comm: kworker/0:2 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT [ 135.799962][ T97] Hardware name: ARM-Versatile Express [ 135.800430][ T97] Workqueue: usb_hub_wq hub_event [ 135.801079][ T97] Call trace: [ 135.801595][ T97] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 135.802188][ T97] r7:00000000 r6:8282083c r5:00000000 r4:82259bd0 [ 135.802526][ T97] [<80201ae4>] (show_stack) from [<8021fd94>] (dump_stack_lvl+0x54/0x7c) [ 135.803096][ T97] [<8021fd40>] (dump_stack_lvl) from [<8021fdd4>] (dump_stack+0x18/0x1c) [ 135.803579][ T97] r5:00000000 r4:82a6dd18 [ 135.803805][ T97] [<8021fdbc>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 135.804153][ T97] [<802024f4>] (panic) from [<802585b8>] (get_taint+0x0/0x1c) [ 135.804616][ T97] r3:8280c684 r2:00000001 r1:822406fc r0:822480ac [ 135.804883][ T97] r7:808c00f4 [ 135.805105][ T97] [<80258544>] (check_panic_on_warn) from [<8025871c>] (__warn+0x80/0x188) [ 135.805797][ T97] [<8025869c>] (__warn) from [<80258a0c>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 135.806268][ T97] r8:00000009 r7:822b1be4 r6:df9b5bfc r5:833a1800 r4:00000000 [ 135.806697][ T97] [<80258828>] (warn_slowpath_fmt) from [<808c00f4>] (refcount_warn_saturate+0x13c/0x174) [ 135.807285][ T97] r10:00000001 r9:829ca3e8 r8:844d4c88 r7:844d6474 r6:8419ffb4 r5:844d6400 [ 135.807829][ T97] r4:84571800 [ 135.807995][ T97] [<808bffb8>] (refcount_warn_saturate) from [<819fce88>] (kobject_put+0x158/0x1f4) [ 135.808651][ T97] [<819fcd30>] (kobject_put) from [<80b307e8>] (put_device+0x18/0x1c) [ 135.809144][ T97] r7:844d6474 r6:8419ffb4 r5:844d6400 r4:8419f800 [ 135.809572][ T97] [<80b307d0>] (put_device) from [<81418e74>] (hdm_disconnect+0x90/0x9c) [ 135.809913][ T97] [<81418de4>] (hdm_disconnect) from [<80e8cd04>] (usb_unbind_interface+0x84/0x2b4) [ 135.810285][ T97] r7:844d6474 r6:844d6430 r5:00000000 r4:844d4c00 [ 135.810558][ T97] [<80e8cc80>] (usb_unbind_interface) from [<80b38870>] (device_remove+0x64/0x6c) [ 135.810952][ T97] r10:00000001 r9:844d4c88 r8:00000044 r7:844d6474 r6:829ca3e8 r5:00000000 [ 135.811347][ T97] r4:844d6430 [ 135.811562][ T97] [<80b3880c>] (device_remove) from [<80b39d60>] (device_release_driver_internal+0x18c/0x200) [ 135.811951][ T97] r5:00000000 r4:844d6430 [ 135.812126][ T97] [<80b39bd4>] (device_release_driver_internal) from [<80b39dec>] (device_release_driver+0x18/0x1c) [ 135.812595][ T97] r9:844d4c88 r8:832d5d40 r7:832d5d38 r6:832d5d0c r5:844d6430 r4:832d5d30 [ 135.812863][ T97] [<80b39dd4>] (device_release_driver) from [<80b37ec4>] (bus_remove_device+0xcc/0x120) [ 135.813336][ T97] [<80b37df8>] (bus_remove_device) from [<80b32220>] (device_del+0x148/0x38c) [ 135.813765][ T97] r9:844d4c88 r8:833a1800 r7:04208060 r6:00000000 r5:844d6430 r4:844d6474 [ 135.814055][ T97] [<80b320d8>] (device_del) from [<80e8a754>] (usb_disable_device+0xd4/0x1e8) [ 135.814402][ T97] r10:00000001 r9:00000000 r8:00000000 r7:844d6400 r6:844d4c00 r5:84791288 [ 135.814804][ T97] r4:60000013 [ 135.814951][ T97] [<80e8a680>] (usb_disable_device) from [<80e7f4d0>] (usb_disconnect+0xec/0x29c) [ 135.815293][ T97] r9:84571c00 r8:844d4ccc r7:83b56400 r6:844d4c88 r5:844d4c00 r4:60000013 [ 135.815690][ T97] [<80e7f3e4>] (usb_disconnect) from [<80e82190>] (hub_event+0xe78/0x194c) [ 135.816240][ T97] r10:00000001 r9:00000100 r8:83caed00 r7:844d4c00 r6:83b55c00 r5:83b56610 [ 135.816660][ T97] r4:00000001 [ 135.816801][ T97] [<80e81318>] (hub_event) from [<8027e2e8>] (process_one_work+0x1b4/0x4f4) [ 135.817214][ T97] r10:832d5f70 r9:8380e205 r8:833a1800 r7:dddced40 r6:8380e200 r5:83caed00 [ 135.817514][ T97] r4:83338e80 [ 135.817659][ T97] [<8027e134>] (process_one_work) from [<8027ef30>] (worker_thread+0x1fc/0x3d8) [ 135.818000][ T97] r10:61c88647 r9:833a1800 r8:83338eac r7:82804d40 r6:dddced40 r5:dddced60 [ 135.818390][ T97] r4:83338e80 [ 135.818719][ T97] [<8027ed34>] (worker_thread) from [<80285f5c>] (kthread+0x12c/0x280) [ 135.819253][ T97] r10:00000000 r9:83338e80 r8:8027ed34 r7:df841e60 r6:83338f00 r5:833a1800 [ 135.819612][ T97] r4:00000001 [ 135.819853][ T97] [<80285e30>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 135.820253][ T97] Exception stack(0xdf9b5fb0 to 0xdf9b5ff8) [ 135.820678][ T97] 5fa0: 00000000 00000000 00000000 00000000 [ 135.821011][ T97] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 135.821349][ T97] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 135.821697][ T97] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285e30 [ 135.821975][ T97] r4:83335080 [ 135.825566][ T97] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:41:17 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=822481a4 R02=00000000 R03=000000a0 R04=00000000 R05=82259bd0 R06=82a6dd18 R07=00000000 R08=822480ac R09=00000061 R10=00000000 R11=df9b5ad4 R12=00000014 R13=df9b5a90 R14=00646574 R15=80258b18 PSR=200f0093 --C- A S svc32 s00=69766564 s01=6e206563 d00=6e20656369766564 s02=20205b5d s03=33345420 d01=3334542020205b5d s04=7375205d s05=2d312062 d02=2d3120627375205d s06=4e203a31 s07=55207765 d03=552077654e203a31 s08=64204253 s09=63697665 d04=6369766564204253 s10=74732065 s11=676e6972 d05=676e697274732065 s12=4d203a73 s13=303d7266 d06=303d72664d203a73 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=8309b418 R01=ddde6800 R02=000870b4 R03=df80a000 R04=8309b418 R05=0000001b R06=81d0fedc R07=0000001c R08=00000001 R09=83a64800 R10=849f5b80 R11=df805f64 R12=df805f68 R13=df805f50 R14=802f1894 R15=8097730c PSR=20000193 --C- A S svc32 s00=6e72656b s01=203a6c65 d00=203a6c656e72656b s02=3120205b s03=372e3533 d01=372e35333120205b s04=32313338 s05=205b5d37 d02=205b5d3732313338 s06=39542020 s07=75205d37 d03=75205d3739542020 s08=31206273 s09=203a312d d04=203a312d31206273 s10=20425355 s11=63736964 d05=6373696420425355 s12=656e6e6f s13=202c7463 d06=202c7463656e6e6f s14=69766564 s15=6e206563 d07=6e20656369766564 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000