[ 242.350307][ C1] sched: DL replenish lagged too much Warning: Permanently added '[localhost]:54984' (ED25519) to the list of known hosts. 1970/01/01 00:05:19 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:06:09 parsed 1 programs [ 372.604120][ T31] audit: type=1400 audit(372.510:100): avc: denied { unlink } for pid=4237 comm="syz-executor" name="swap-file" dev="vda" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 381.401693][ T4237] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 393.388187][ T31] audit: type=1401 audit(393.290:101): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 397.663579][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.675620][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.811282][ T4341] hsr_slave_0: entered promiscuous mode [ 398.815060][ T4341] hsr_slave_1: entered promiscuous mode [ 399.195999][ T4341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 399.227039][ T4341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 399.234418][ T4341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 399.241030][ T4341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 400.142658][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.317254][ T4341] veth0_vlan: entered promiscuous mode [ 403.346140][ T4341] veth1_vlan: entered promiscuous mode [ 403.406624][ T4341] veth0_macvtap: entered promiscuous mode [ 403.417312][ T4341] veth1_macvtap: entered promiscuous mode [ 403.515478][ T3163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.515880][ T3163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.516820][ T3163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.553911][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.841433][ T1057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.035234][ T1057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.107753][ T1057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.165825][ T1057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.563238][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.571817][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.575231][ T1057] bond0 (unregistering): Released all slaves [ 404.660778][ T1057] hsr_slave_0: left promiscuous mode [ 404.662763][ T1057] hsr_slave_1: left promiscuous mode [ 404.671650][ T1057] veth1_macvtap: left promiscuous mode [ 404.671974][ T1057] veth0_macvtap: left promiscuous mode [ 404.672323][ T1057] veth1_vlan: left promiscuous mode [ 404.672601][ T1057] veth0_vlan: left promiscuous mode 1970/01/01 00:06:50 executed programs: 0 [ 412.374175][ T4859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.381171][ T4859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.213355][ T4859] hsr_slave_0: entered promiscuous mode [ 413.215216][ T4859] hsr_slave_1: entered promiscuous mode [ 413.910843][ T4859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.917753][ T4859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.925936][ T4859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.933990][ T4859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 414.613108][ T4859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.176282][ T4859] veth0_vlan: entered promiscuous mode [ 423.216144][ T4859] veth1_vlan: entered promiscuous mode [ 423.315672][ T4859] veth0_macvtap: entered promiscuous mode [ 423.331555][ T4859] veth1_macvtap: entered promiscuous mode [ 423.572397][ T1057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.572821][ T1057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.573134][ T1057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.573229][ T1057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:07:03 executed programs: 2 [ 424.673249][ T5253] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 424.879968][ T5253] usb 2-1: Using ep0 maxpacket: 16 [ 424.896590][ T5253] usb 2-1: unable to get BOS descriptor or descriptor too short [ 424.903905][ T5253] usb 2-1: config 4 has an invalid interface number: 22 but max is 0 [ 424.904159][ T5253] usb 2-1: config 4 has no interface number 0 [ 424.904482][ T5253] usb 2-1: config 4 interface 22 has no altsetting 0 [ 424.916201][ T5253] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=6a.13 [ 424.916396][ T5253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.916593][ T5253] usb 2-1: Product: syz [ 424.916738][ T5253] usb 2-1: Manufacturer: syz [ 424.916781][ T5253] usb 2-1: SerialNumber: syz [ 425.177677][ T5253] usb 2-1: USB disconnect, device number 2 [ 425.191676][ T5253] ------------[ cut here ]------------ [ 425. ** replaying previous printk message ** [ 425.192086][ T5253] WARNING: CPU: 0 PID: 5253 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 425.194962][ T5253] refcount_t: underflow; use-after-free. [ 425.195202][ T5253] Modules linked in: [ 425.196162][ T5253] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 425.197231][ T5253] CPU: 0 UID: 0 PID: 5253 Comm: kworker/0:5 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 425.199056][ T5253] Hardware name: ARM-Versatile Express [ 425.199760][ T5253] Workqueue: usb_hub_wq hub_event [ 425.200320][ T5253] Call trace: [ 425.200786][ T5253] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 425.201422][ T5253] r7:00000000 r6:8281f77c r5:00000000 r4:822602a4 [ 425.201837][ T5253] [<80201b08>] (show_stack) from [<8021fb74>] (dump_stack_lvl+0x54/0x7c) [ 425.202318][ T5253] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 425.202807][ T5253] r5:00000000 r4:82a77d18 [ 425.203042][ T5253] [<8021fb9c>] (dump_stack) from [<80202624>] (vpanic+0x10c/0x30c) [ 425.203665][ T5253] [<80202518>] (vpanic) from [<80202858>] (trace_suspend_resume+0x0/0xd8) [ 425.204083][ T5253] r7:808bb408 [ 425.204234][ T5253] [<80202824>] (panic) from [<80254960>] (get_taint+0x0/0x1c) [ 425.204644][ T5253] r3:8280c684 r2:00000001 r1:82246cb4 r0:8224e730 [ 425.204914][ T5253] [<802548e8>] (check_panic_on_warn) from [<80254ac4>] (__warn+0x80/0x188) [ 425.205298][ T5253] [<80254a44>] (__warn) from [<80254db4>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 425.205706][ T5253] r8:00000009 r7:822b8d84 r6:e03d1bfc r5:85694800 r4:00000000 [ 425.206036][ T5253] [<80254bd0>] (warn_slowpath_fmt) from [<808bb408>] (refcount_warn_saturate+0x13c/0x174) [ 425.206572][ T5253] r10:00000100 r9:829d55bc r8:8501a888 r7:85018074 r6:853e7fb4 r5:85018000 [ 425.206941][ T5253] r4:856cae00 [ 425.207189][ T5253] [<808bb2cc>] (refcount_warn_saturate) from [<81a11ca8>] (kobject_put+0x158/0x1f4) [ 425.207704][ T5253] [<81a11b50>] (kobject_put) from [<80b3cf80>] (put_device+0x18/0x1c) [ 425.208174][ T5253] r7:85018074 r6:853e7fb4 r5:85018000 r4:853e7800 [ 425.208428][ T5253] [<80b3cf68>] (put_device) from [<814356e8>] (hdm_disconnect+0x90/0x9c) [ 425.208773][ T5253] [<81435658>] (hdm_disconnect) from [<80e9c02c>] (usb_unbind_interface+0x84/0x2bc) [ 425.209372][ T5253] r7:85018074 r6:85018030 r5:00000000 r4:8501a800 [ 425.209833][ T5253] [<80e9bfa8>] (usb_unbind_interface) from [<80b450f8>] (device_remove+0x64/0x6c) [ 425.210227][ T5253] r10:00000100 r9:8501a888 r8:00000044 r7:85018074 r6:829d55bc r5:00000000 [ 425.210592][ T5253] r4:85018030 [ 425.210836][ T5253] [<80b45094>] (device_remove) from [<80b465e8>] (device_release_driver_internal+0x18c/0x200) [ 425.211364][ T5253] r5:00000000 r4:85018030 [ 425.211621][ T5253] [<80b4645c>] (device_release_driver_internal) from [<80b46674>] (device_release_driver+0x18/0x1c) [ 425.212140][ T5253] r9:8501a888 r8:8335cd40 r7:8335cd38 r6:8335cd0c r5:85018030 r4:8335cd30 [ 425.212470][ T5253] [<80b4665c>] (device_release_driver) from [<80b4473c>] (bus_remove_device+0xcc/0x120) [ 425.212860][ T5253] [<80b44670>] (bus_remove_device) from [<80b3e9d4>] (device_del+0x148/0x38c) [ 425.213242][ T5253] r9:8501a888 r8:85694800 r7:04208060 r6:00000000 r5:85018030 r4:85018074 [ 425.213767][ T5253] [<80b3e88c>] (device_del) from [<80e99a68>] (usb_disable_device+0xd4/0x1e8) [ 425.214170][ T5253] r10:00000100 r9:00000000 r8:00000000 r7:85018000 r6:8501a800 r5:8578ae08 [ 425.214511][ T5253] r4:60000113 [ 425.214677][ T5253] [<80e99994>] (usb_disable_device) from [<80e8e830>] (usb_disconnect+0xec/0x2ac) [ 425.215081][ T5253] r9:856cb000 r8:8501a8cc r7:83cb7c00 r6:8501a888 r5:8501a800 r4:60000113 [ 425.215501][ T5253] [<80e8e744>] (usb_disconnect) from [<80e9182c>] (hub_event+0x1194/0x1950) [ 425.216058][ T5253] r10:00000100 r9:83e3632c r8:83cb7400 r7:8501a800 r6:83e31c00 r5:00000001 [ 425.216484][ T5253] r4:00000001 [ 425.216624][ T5253] [<80e90698>] (hub_event) from [<8027a3bc>] (process_one_work+0x1b4/0x4f4) [ 425.217027][ T5253] r10:8335cf70 r9:8326fe05 r8:85694800 r7:dddced40 r6:8326fe00 r5:83e3632c [ 425.217463][ T5253] r4:851e1980 [ 425.217619][ T5253] [<8027a208>] (process_one_work) from [<8027b004>] (worker_thread+0x1fc/0x3d8) [ 425.217993][ T5253] r10:61c88647 r9:85694800 r8:851e19ac r7:82804d40 r6:dddced40 r5:dddced60 [ 425.218343][ T5253] r4:851e1980 [ 425.218505][ T5253] [<8027ae08>] (worker_thread) from [<80281fec>] (kthread+0x12c/0x280) [ 425.219072][ T5253] r10:00000000 r9:851e1980 r8:8027ae08 r7:eb675e60 r6:8505e180 r5:85694800 [ 425.219811][ T5253] r4:00000001 [ 425.220025][ T5253] [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 425.220478][ T5253] Exception stack(0xe03d1fb0 to 0xe03d1ff8) [ 425.221024][ T5253] 1fa0: 00000000 00000000 00000000 00000000 [ 425.221454][ T5253] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 425.221794][ T5253] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 425.222146][ T5253] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 [ 425.222506][ T5253] r4:8578a580 [ 425.224759][ T5253] Rebooting in 86400 seconds..