Warning: Permanently added '[localhost]:37802' (ED25519) to the list of known hosts. 1970/01/01 00:04:11 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:04:11 ignoring optional flag "type"="qemu" 1970/01/01 00:04:22 parsed 1 programs [ 268.005319][ T31] audit: type=1400 audit(267.900:97): avc: denied { unlink } for pid=4224 comm="syz-executor" name="swap-file" dev="vda" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 276.944431][ T4224] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 289.506536][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.510628][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.310471][ T4336] hsr_slave_0: entered promiscuous mode [ 290.313429][ T4336] hsr_slave_1: entered promiscuous mode [ 291.010342][ T4336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.020656][ T4336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.040206][ T4336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.052877][ T4336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.376290][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.219069][ T4336] veth0_vlan: entered promiscuous mode [ 301.257257][ T4336] veth1_vlan: entered promiscuous mode [ 301.384176][ T4336] veth0_macvtap: entered promiscuous mode [ 301.396673][ T4336] veth1_macvtap: entered promiscuous mode [ 301.518943][ T4336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.519432][ T4336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.532228][ T4336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.532734][ T4336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.349008][ T1046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.419599][ T1046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.513959][ T1046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.618478][ T1046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.362658][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.378254][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.387502][ T1046] bond0 (unregistering): Released all slaves [ 303.508320][ T1046] hsr_slave_0: left promiscuous mode [ 303.543200][ T1046] hsr_slave_1: left promiscuous mode [ 303.554026][ T1046] veth1_macvtap: left promiscuous mode [ 303.554530][ T1046] veth0_macvtap: left promiscuous mode [ 303.554810][ T1046] veth1_vlan: left promiscuous mode [ 303.554971][ T1046] veth0_vlan: left promiscuous mode [ 306.688813][ T31] audit: type=1401 audit(306.580:98): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 1970/01/01 00:05:07 executed programs: 0 [ 314.225508][ T4860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.244479][ T4860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.334650][ T4860] hsr_slave_0: entered promiscuous mode [ 317.338069][ T4860] hsr_slave_1: entered promiscuous mode [ 318.328108][ T4860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.352246][ T4860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.398300][ T4860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.437999][ T4860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.823222][ T4860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.233557][ T4860] veth0_vlan: entered promiscuous mode [ 326.255089][ T4860] veth1_vlan: entered promiscuous mode [ 326.306955][ T4860] veth0_macvtap: entered promiscuous mode [ 326.319266][ T4860] veth1_macvtap: entered promiscuous mode [ 326.375033][ T4860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.377807][ T4860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.378938][ T4860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.382056][ T4860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:05:26 executed programs: 2 [ 326.904297][ T3238] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 327.084482][ T3238] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 327.084901][ T3238] usb 1-1: config 0 has no interface number 0 [ 327.085301][ T3238] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 327.085612][ T3238] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 327.085696][ T3238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.099671][ T3238] usb 1-1: config 0 descriptor?? [ 327.317936][ T5058] usb 1-1: USB disconnect, device number 2 [ 327.334775][ T5058] ------------[ cut here ]------------ [ 327.335466][ T5058] WARNING: CPU: 1 PID: 5058 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 327.336785][ T5058] refcount_t: underflow; use-after-free. [ 327.337012][ T5058] Modules linked in: [ 327.337698][ T5058] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.338689][ T5058] CPU: 1 UID: 0 PID: 5058 Comm: kworker/1:9 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 327.340739][ T5058] Hardware name: ARM-Versatile Express [ 327.342451][ T5058] Workqueue: usb_hub_wq hub_event [ 327.343482][ T5058] Call trace: [ 327.344001][ T5058] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 327.344783][ T5058] r7:00000000 r6:8282083c r5:00000000 r4:8225c0c4 [ 327.345387][ T5058] [<80201ae4>] (show_stack) from [<8021fd6c>] (dump_stack_lvl+0x54/0x7c) [ 327.345812][ T5058] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 327.346159][ T5058] r5:00000000 r4:82a6dd18 [ 327.346368][ T5058] [<8021fd94>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 327.346764][ T5058] [<802024f4>] (panic) from [<80258578>] (get_taint+0x0/0x1c) [ 327.347100][ T5058] r3:8280c684 r2:00000001 r1:82242c0c r0:8224a5a4 [ 327.347426][ T5058] r7:808bfc34 [ 327.347715][ T5058] [<80258504>] (check_panic_on_warn) from [<802586dc>] (__warn+0x80/0x188) [ 327.348156][ T5058] [<8025865c>] (__warn) from [<802589cc>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 327.348607][ T5058] r8:00000009 r7:822b42a0 r6:dfa81bfc r5:84ac5400 r4:00000000 [ 327.348948][ T5058] [<802587e8>] (warn_slowpath_fmt) from [<808bfc34>] (refcount_warn_saturate+0x13c/0x174) [ 327.349473][ T5058] r10:00000001 r9:829ca928 r8:85554c88 r7:85555074 r6:84d447b4 r5:85555000 [ 327.349884][ T5058] r4:84d44000 [ 327.350057][ T5058] [<808bfaf8>] (refcount_warn_saturate) from [<81a064e8>] (kobject_put+0x158/0x1f4) [ 327.350448][ T5058] [<81a06390>] (kobject_put) from [<80b30370>] (put_device+0x18/0x1c) [ 327.351029][ T5058] r7:85555074 r6:84d447b4 r5:85555000 r4:84d44000 [ 327.351345][ T5058] [<80b30358>] (put_device) from [<814223d4>] (hdm_disconnect+0x98/0x9c) [ 327.351735][ T5058] [<8142233c>] (hdm_disconnect) from [<80e8c948>] (usb_unbind_interface+0x84/0x2b4) [ 327.352234][ T5058] r7:85555074 r6:85555030 r5:00000000 r4:85554c00 [ 327.352556][ T5058] [<80e8c8c4>] (usb_unbind_interface) from [<80b383f8>] (device_remove+0x64/0x6c) [ 327.353077][ T5058] r10:00000001 r9:85554c88 r8:00000044 r7:85555074 r6:829ca928 r5:00000000 [ 327.353443][ T5058] r4:85555030 [ 327.353638][ T5058] [<80b38394>] (device_remove) from [<80b398e8>] (device_release_driver_internal+0x18c/0x200) [ 327.354102][ T5058] r5:00000000 r4:85555030 [ 327.354226][ T5058] [<80b3975c>] (device_release_driver_internal) from [<80b39974>] (device_release_driver+0x18/0x1c) [ 327.354621][ T5058] r9:85554c88 r8:8335cc40 r7:8335cc38 r6:8335cc0c r5:85555030 r4:8335cc30 [ 327.354891][ T5058] [<80b3995c>] (device_release_driver) from [<80b37a4c>] (bus_remove_device+0xcc/0x120) [ 327.355272][ T5058] [<80b37980>] (bus_remove_device) from [<80b31da8>] (device_del+0x148/0x38c) [ 327.355587][ T5058] r9:85554c88 r8:84ac5400 r7:04208060 r6:00000000 r5:85555030 r4:85555074 [ 327.355847][ T5058] [<80b31c60>] (device_del) from [<80e8a398>] (usb_disable_device+0xd4/0x1e8) [ 327.356186][ T5058] r10:00000001 r9:00000000 r8:00000000 r7:85555000 r6:85554c00 r5:84913b88 [ 327.356469][ T5058] r4:00000001 [ 327.356619][ T5058] [<80e8a2c4>] (usb_disable_device) from [<80e7f0ac>] (usb_disconnect+0xec/0x2ac) [ 327.356947][ T5058] r9:855ef600 r8:85554ccc r7:840b4c00 r6:85554c88 r5:85554c00 r4:60000013 [ 327.357211][ T5058] [<80e7efc0>] (usb_disconnect) from [<80e81d84>] (hub_event+0xe78/0x194c) [ 327.357536][ T5058] r10:00000001 r9:00000100 r8:83d41b2c r7:85554c00 r6:840b4400 r5:840b4e10 [ 327.357832][ T5058] r4:00000001 [ 327.357984][ T5058] [<80e80f0c>] (hub_event) from [<8027e2a8>] (process_one_work+0x1b4/0x4f4) [ 327.358565][ T5058] r10:8335ce70 r9:8326f605 r8:84ac5400 r7:ddde2d40 r6:8326f600 r5:83d41b2c [ 327.360299][ T5058] r4:84a4d200 [ 327.360591][ T5058] [<8027e0f4>] (process_one_work) from [<8027eef0>] (worker_thread+0x1fc/0x3d8) [ 327.361144][ T5058] r10:61c88647 r9:84ac5400 r8:84a4d22c r7:82804d40 r6:ddde2d40 r5:ddde2d60 [ 327.361756][ T5058] r4:84a4d200 [ 327.361929][ T5058] [<8027ecf4>] (worker_thread) from [<80285f1c>] (kthread+0x12c/0x280) [ 327.362483][ T5058] r10:00000000 r9:84a4d200 r8:8027ecf4 r7:dfc15e60 r6:84932100 r5:84ac5400 [ 327.364829][ T5058] r4:00000001 [ 327.365257][ T5058] [<80285df0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 327.365733][ T5058] Exception stack(0xdfa81fb0 to 0xdfa81ff8) [ 327.366315][ T5058] 1fa0: 00000000 00000000 00000000 00000000 [ 327.366695][ T5058] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 327.367078][ T5058] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 327.367431][ T5058] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285df0 [ 327.367792][ T5058] r4:854d6340 [ 327.371243][ T5058] Rebooting in 86400 seconds..