last executing test programs: 31.061414524s ago: executing program 0 (id=22): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) bind$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x7f, 0x0, 0xd4, 0xed, @remote}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) prlimit64(0x0, 0x7, &(0x7f0000000380)={0xe, 0x5ac}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x0) 21.177955965s ago: executing program 0 (id=24): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000240), 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001000000018000180140002006e657464657673428c872ed31284b2000000"], 0x34}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 14.628662965s ago: executing program 1 (id=25): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_DO_IT(r0, 0xab03) 14.339629893s ago: executing program 1 (id=26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x0, 0x0, 0xffff, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb49fdffffff7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fd178428de9441031348589b763d46d14810acc5f700"}, 0xd8) 14.269383415s ago: executing program 1 (id=27): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e7f00000000000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x18000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa2aaabb000c040000e00005000033eae23d0cb02c"], &(0x7f00000000c0)={0x1, 0x1, [0x948, 0x9b7, 0x97, 0xc39]}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0xffffffffffffffc0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffecd) socket$inet(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12.970216385s ago: executing program 0 (id=28): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) 12.845254109s ago: executing program 0 (id=29): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1000000b}, {0x0, 0x2}]}]}}, 0x0, 0x36, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) 12.689045024s ago: executing program 0 (id=30): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 10.038034614s ago: executing program 0 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) semget(0x3, 0x6, 0x41) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x801) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 566.610723ms ago: executing program 1 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 179.812994ms ago: executing program 1 (id=33): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) 0s ago: executing program 1 (id=34): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)="7c617461f09d13d3b3", 0x9}}, 0x4041) sendmsg$can_j1939(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)='_YN', 0x3}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) kernel console output (not intermixed with test programs): syzkaller login: [ 49.062372][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 49.062503][ T31] audit: type=1400 audit(48.980:68): avc: denied { read write } for pid=3079 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.064259][ T31] audit: type=1400 audit(48.980:69): avc: denied { open } for pid=3079 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:33086' (ED25519) to the list of known hosts. [ 59.807538][ T31] audit: type=1400 audit(59.720:70): avc: denied { name_bind } for pid=3080 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.834418][ T31] audit: type=1400 audit(60.750:71): avc: denied { execute } for pid=3082 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.838052][ T31] audit: type=1400 audit(60.760:72): avc: denied { execute_no_trans } for pid=3082 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.602726][ T31] audit: type=1400 audit(65.520:73): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.610487][ T31] audit: type=1400 audit(65.520:74): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.621359][ T3082] cgroup: Unknown subsys name 'net' [ 65.629536][ T31] audit: type=1400 audit(65.550:75): avc: denied { unmount } for pid=3082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.840311][ T3082] cgroup: Unknown subsys name 'cpuset' [ 65.845669][ T3082] cgroup: Unknown subsys name 'hugetlb' [ 65.848453][ T3082] cgroup: Unknown subsys name 'rlimit' [ 66.124839][ T31] audit: type=1400 audit(66.040:76): avc: denied { setattr } for pid=3082 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.125818][ T31] audit: type=1400 audit(66.040:77): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.129798][ T31] audit: type=1400 audit(66.040:78): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.379514][ T3084] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.381066][ T31] audit: type=1400 audit(66.300:79): avc: denied { relabelto } for pid=3084 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.385753][ T31] audit: type=1400 audit(66.300:80): avc: denied { write } for pid=3084 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.424776][ T31] audit: type=1400 audit(66.340:81): avc: denied { read } for pid=3082 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.426048][ T31] audit: type=1400 audit(66.340:82): avc: denied { open } for pid=3082 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 73.708171][ T3082] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.853700][ T31] audit: type=1400 audit(75.770:83): avc: denied { execmem } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.916232][ T31] audit: type=1400 audit(75.830:84): avc: denied { read } for pid=3087 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.921623][ T31] audit: type=1400 audit(75.830:85): avc: denied { open } for pid=3087 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.928714][ T31] audit: type=1400 audit(75.850:86): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.950421][ T31] audit: type=1400 audit(75.870:87): avc: denied { module_request } for pid=3087 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.951147][ T31] audit: type=1400 audit(75.870:88): avc: denied { module_request } for pid=3088 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.003181][ T31] audit: type=1400 audit(75.920:89): avc: denied { sys_module } for pid=3087 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.873793][ T31] audit: type=1400 audit(76.790:90): avc: denied { ioctl } for pid=3088 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.360249][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.365202][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.369969][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.380548][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.572691][ T3087] hsr_slave_0: entered promiscuous mode [ 79.579199][ T3087] hsr_slave_1: entered promiscuous mode [ 79.662609][ T3088] hsr_slave_0: entered promiscuous mode [ 79.664468][ T3088] hsr_slave_1: entered promiscuous mode [ 79.665655][ T3088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.666042][ T3088] Cannot create hsr debugfs directory [ 80.175460][ T31] audit: type=1400 audit(80.090:91): avc: denied { create } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.184373][ T3087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.187541][ T31] audit: type=1400 audit(80.090:92): avc: denied { write } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.209228][ T3087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.231513][ T3087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.261308][ T3087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.323513][ T3088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.343025][ T3088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.358563][ T3088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.372133][ T3088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.085740][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.205856][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.916179][ T3087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.789818][ T3088] veth0_vlan: entered promiscuous mode [ 83.814548][ T3088] veth1_vlan: entered promiscuous mode [ 83.890370][ T3088] veth0_macvtap: entered promiscuous mode [ 83.902397][ T3088] veth1_macvtap: entered promiscuous mode [ 83.962244][ T3088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.963053][ T3088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.963402][ T3088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.963976][ T3088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.127283][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 84.127378][ T31] audit: type=1400 audit(84.040:94): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.132911][ T31] audit: type=1400 audit(84.050:95): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/syzkaller.wUICdJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.141277][ T31] audit: type=1400 audit(84.060:96): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.150674][ T31] audit: type=1400 audit(84.070:97): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/syzkaller.wUICdJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.153978][ T31] audit: type=1400 audit(84.070:98): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/syzkaller.wUICdJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.169813][ T31] audit: type=1400 audit(84.090:99): avc: denied { unmount } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.173129][ T31] audit: type=1400 audit(84.090:100): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.180547][ T31] audit: type=1400 audit(84.100:101): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.181419][ T31] audit: type=1400 audit(84.100:102): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.182277][ T31] audit: type=1400 audit(84.100:103): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.235940][ T3088] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.586011][ T3087] veth0_vlan: entered promiscuous mode [ 84.608290][ T3087] veth1_vlan: entered promiscuous mode [ 84.668113][ T3087] veth0_macvtap: entered promiscuous mode [ 84.677512][ T3087] veth1_macvtap: entered promiscuous mode [ 84.734325][ T3087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.735222][ T3087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.735739][ T3087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.736178][ T3087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.994686][ T3772] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 88.987727][ T50] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.188628][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 89.263368][ T50] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 89.265161][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.285355][ T50] usb 1-1: config 0 descriptor?? [ 93.211730][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 93.211838][ T31] audit: type=1400 audit(93.130:113): avc: denied { prog_load } for pid=3788 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.217121][ T31] audit: type=1400 audit(93.130:114): avc: denied { bpf } for pid=3788 comm="syz.1.8" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.567587][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.735865][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 98.791331][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.810886][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.811347][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.811607][ T8] usb 2-1: Product: syz [ 98.811779][ T8] usb 2-1: Manufacturer: syz [ 98.811950][ T8] usb 2-1: SerialNumber: syz [ 98.826401][ T8] usb 2-1: config 0 descriptor?? [ 99.531116][ T50] usb 1-1: USB disconnect, device number 2 [ 100.764508][ T31] audit: type=1400 audit(100.680:115): avc: denied { create } for pid=3823 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.787104][ T31] audit: type=1400 audit(100.700:116): avc: denied { connect } for pid=3823 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.291385][ T31] audit: type=1400 audit(101.210:117): avc: denied { name_bind } for pid=3825 comm="syz.0.15" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 101.292894][ T31] audit: type=1400 audit(101.210:118): avc: denied { node_bind } for pid=3825 comm="syz.0.15" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.093624][ T31] audit: type=1400 audit(106.010:119): avc: denied { create } for pid=3825 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.103210][ T31] audit: type=1400 audit(106.020:120): avc: denied { setopt } for pid=3825 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.110062][ T31] audit: type=1400 audit(106.030:121): avc: denied { write } for pid=3825 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.112891][ T31] audit: type=1400 audit(106.030:122): avc: denied { shutdown } for pid=3825 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.065234][ T3039] usb 2-1: USB disconnect, device number 2 [ 110.281697][ T31] audit: type=1400 audit(110.200:123): avc: denied { map_read map_write } for pid=3838 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.207181][ T31] audit: type=1400 audit(111.130:124): avc: denied { prog_run } for pid=3844 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.243022][ T3845] Illegal XDP return value 2211786752 on prog (id 1) dev syz_tun, expect packet loss! [ 111.526864][ T31] audit: type=1400 audit(111.440:125): avc: denied { create } for pid=3846 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.536901][ T31] audit: type=1400 audit(111.450:126): avc: denied { setopt } for pid=3846 comm="syz.0.19" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.009436][ T3849] block nbd0: shutting down sockets [ 116.714416][ T31] audit: type=1400 audit(116.630:127): avc: denied { ioctl } for pid=3854 comm="syz.0.22" path="socket:[2323]" dev="sockfs" ino=2323 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.699757][ T31] audit: type=1400 audit(122.620:128): avc: denied { create } for pid=3858 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.864813][ T31] audit: type=1400 audit(122.780:129): avc: denied { create } for pid=3862 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 125.077131][ T31] audit: type=1400 audit(124.990:130): avc: denied { write } for pid=3862 comm="syz.0.24" path="socket:[3106]" dev="sockfs" ino=3106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 125.078403][ T31] audit: type=1400 audit(124.990:131): avc: denied { nlmsg_read } for pid=3862 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.477864][ T3867] block nbd1: shutting down sockets [ 131.083833][ T31] audit: type=1400 audit(131.000:132): avc: denied { unmount } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.870483][ T3850] block nbd0: Receive control failed (result -32) [ 133.872148][ T3880] block nbd0: shutting down sockets [ 134.037865][ T31] audit: type=1400 audit(133.960:133): avc: denied { create } for pid=3885 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.051796][ T31] audit: type=1400 audit(143.970:134): avc: denied { create } for pid=3893 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.079771][ T31] audit: type=1400 audit(144.000:135): avc: denied { ioctl } for pid=3893 comm="syz.1.34" path="socket:[2374]" dev="sockfs" ino=2374 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.096900][ T31] audit: type=1400 audit(144.000:136): avc: denied { bind } for pid=3893 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.101788][ T31] audit: type=1400 audit(144.020:137): avc: denied { connect } for pid=3893 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.127675][ T31] audit: type=1400 audit(144.020:138): avc: denied { write } for pid=3893 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.370608][ C1] vxcan1: j1939_tp_rxtimer: 0x850ce900: rx timeout, send abort [ 145.372584][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x850ce900: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.373872][ C1] ------------[ cut here ]------------ [ 145.374266][ C1] WARNING: CPU: 1 PID: 3088 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 145.375007][ C1] refcount_t: underflow; use-after-free. [ 145.375273][ C1] Modules linked in: [ 145.375918][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.377169][ C1] CPU: 1 UID: 0 PID: 3088 Comm: syz-executor Not tainted 6.12.0-rc6-syzkaller #0 [ 145.379217][ C1] Hardware name: ARM-Versatile Express [ 145.379916][ C1] Call trace: frame pointer underflow [ 145.380586][ C1] [<8199c7f8>] (dump_backtrace) from [<8199c8f4>] (show_stack+0x18/0x1c) [ 145.381387][ C1] r7:00000000 r6:82622f44 r5:00000000 r4:8203db14 [ 145.381794][ C1] [<8199c8dc>] (show_stack) from [<819bad88>] (dump_stack_lvl+0x54/0x7c) [ 145.382275][ C1] [<819bad34>] (dump_stack_lvl) from [<819badc8>] (dump_stack+0x18/0x1c) [ 145.382848][ C1] r5:00000000 r4:82870d18 [ 145.383140][ C1] [<819badb0>] (dump_stack) from [<8199d420>] (panic+0x120/0x374) [ 145.383633][ C1] [<8199d300>] (panic) from [<80242118>] (get_taint+0x0/0x1c) [ 145.384729][ C1] r3:8260c5c4 r2:00000001 r1:82025ee8 r0:8202d950 [ 145.385202][ C1] r7:80840670 [ 145.385570][ C1] [<802420a4>] (check_panic_on_warn) from [<8024227c>] (__warn+0x80/0x188) [ 145.386190][ C1] [<802421fc>] (__warn) from [<8024256c>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 145.386817][ C1] r8:00000009 r7:8208c310 r6:df805c3c r5:8412d400 r4:00000000 [ 145.387229][ C1] [<80242388>] (warn_slowpath_fmt) from [<80840670>] (refcount_warn_saturate+0x13c/0x174) [ 145.387829][ C1] r10:ddde50c8 r9:00000003 r8:00000001 r7:00000000 r6:81829ec4 r5:00000002 [ 145.388244][ C1] r4:83e6e240 [ 145.388423][ C1] [<80840534>] (refcount_warn_saturate) from [<8149b980>] (sk_skb_reason_drop+0x1d8/0x248) [ 145.388879][ C1] [<8149b7a8>] (sk_skb_reason_drop) from [<81829ec4>] (j1939_session_destroy+0x78/0x200) [ 145.389369][ C1] r9:00000003 r8:00000001 r7:84bd881c r6:850ce950 r5:850ce900 r4:83e6e240 [ 145.389807][ C1] [<81829e4c>] (j1939_session_destroy) from [<8182a6b0>] (j1939_xtp_rx_abort_one+0xbc/0x2a4) [ 145.390152][ C1] r6:84bd8000 r5:850ce900 r4:83e6e600 [ 145.390339][ C1] [<8182a5f4>] (j1939_xtp_rx_abort_one) from [<8182d468>] (j1939_tp_recv+0x4c4/0x530) [ 145.390661][ C1] r9:00000040 r8:83d30250 r7:84bd8000 r6:84bd8008 r5:84bd8000 r4:83e6e600 [ 145.390979][ C1] [<8182cfa4>] (j1939_tp_recv) from [<81826e30>] (j1939_can_recv+0x1e4/0x2dc) [ 145.391297][ C1] r7:84bd8000 r6:84bd8008 r5:84bd8810 r4:83e6e600 [ 145.391603][ C1] [<81826c4c>] (j1939_can_recv) from [<8181cc00>] (can_rcv_filter+0x9c/0x218) [ 145.391961][ C1] r9:00000040 r8:848fc6a0 r7:98ec0001 r6:83e6e480 r5:00000001 r4:85031120 [ 145.392337][ C1] [<8181cb64>] (can_rcv_filter) from [<8181d5a4>] (can_receive+0xb4/0xf0) [ 145.392700][ C1] r9:00000040 r8:00000000 r7:848fc000 r6:83cb5240 r5:84a80000 r4:83e6e480 [ 145.392918][ C1] [<8181d4f0>] (can_receive) from [<8181d664>] (can_rcv+0x84/0xac) [ 145.393186][ C1] r9:00000040 r8:00000002 r7:00000000 r6:00000000 r5:8181d5e0 r4:83e6e480 [ 145.393464][ C1] [<8181d5e0>] (can_rcv) from [<814bc8f4>] (__netif_receive_skb_one_core+0x5c/0x80) [ 145.393870][ C1] r5:8181d5e0 r4:848fc000 [ 145.393997][ C1] [<814bc898>] (__netif_receive_skb_one_core) from [<814bc960>] (__netif_receive_skb+0x18/0x5c) [ 145.394294][ C1] r5:ddde51b0 r4:83e6e480 [ 145.394495][ C1] [<814bc948>] (__netif_receive_skb) from [<814bcc68>] (process_backlog+0xa0/0x17c) [ 145.394810][ C1] r5:ddde51b0 r4:83e6e480 [ 145.394930][ C1] [<814bcbc8>] (process_backlog) from [<814bdb74>] (__napi_poll+0x34/0x240) [ 145.395186][ C1] r10:ddde50c0 r9:ddde5300 r8:df805ea0 r7:df805e9b r6:00000040 r5:ddde51b0 [ 145.395412][ C1] r4:00000001 [ 145.395510][ C1] [<814bdb40>] (__napi_poll) from [<814be3e8>] (net_rx_action+0x358/0x440) [ 145.395778][ C1] r9:ddde5300 r8:df805ea0 r7:0000012c r6:ffffc393 r5:ddde51b0 r4:00000000 [ 145.395997][ C1] [<814be090>] (net_rx_action) from [<8024b55c>] (handle_softirqs+0x158/0x464) [ 145.396444][ C1] r10:00000008 r9:8412d400 r8:00000101 r7:00400140 r6:00000003 r5:00000004 [ 145.396589][ C1] r4:8260408c [ 145.396684][ C1] [<8024b404>] (handle_softirqs) from [<8024b958>] (__irq_exit_rcu+0xa4/0x164) [ 145.396982][ C1] r10:00000072 r9:8412d400 r8:00000000 r7:df985e38 r6:821df6f0 r5:8221ff04 [ 145.397234][ C1] r4:8412d400 [ 145.397417][ C1] [<8024b8b4>] (__irq_exit_rcu) from [<8024bc58>] (irq_exit+0x10/0x18) [ 145.397742][ C1] r5:8221ff04 r4:824bbcdc [ 145.397883][ C1] [<8024bc48>] (irq_exit) from [<819bb764>] (generic_handle_arch_irq+0x7c/0x80) [ 145.398204][ C1] [<819bb6e8>] (generic_handle_arch_irq) from [<8196bc84>] (call_with_stack+0x1c/0x20) [ 145.398537][ C1] r9:8412d400 r8:df985ef4 r7:df985e6c r6:ffffffff r5:60000013 r4:802499b0 [ 145.398877][ C1] [<8196bc68>] (call_with_stack) from [<80200bcc>] (__irq_svc+0x8c/0xbc) [ 145.399224][ C1] Exception stack(0xdf985e38 to 0xdf985e80) [ 145.399491][ C1] 5e20: 00000000 00000000 [ 145.399772][ C1] 5e40: 00000000 00000000 df985edc 8412d400 df985edc 00000001 df985ef4 8412d400 [ 145.400028][ C1] 5e60: 00000072 df985eac df985e48 df985e88 8027d40c 802499b0 60000013 ffffffff [ 145.400353][ C1] [<80249964>] (__do_wait) from [<80249bf4>] (do_wait+0x6c/0x14c) [ 145.400638][ C1] r9:8412d400 r8:df985ef4 r7:00000001 r6:df985edc r5:8412d400 r4:40000005 [ 145.400944][ C1] [<80249b88>] (do_wait) from [<8024a1ac>] (kernel_wait4+0x9c/0x154) [ 145.401216][ C1] r9:8412d400 r8:00000000 r7:00000000 r6:7ecc3a7c r5:00000000 r4:40000005 [ 145.401463][ C1] [<8024a110>] (kernel_wait4) from [<8024a3f4>] (sys_wait4+0xf4/0x100) [ 145.401780][ C1] r9:8412d400 r8:8020029c r7:ffffffff r6:40000001 r5:00000000 r4:7ecc3a7c [ 145.402018][ C1] [<8024a300>] (sys_wait4) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 145.402313][ C1] Exception stack(0xdf985fa8 to 0xdf985ff0) [ 145.402497][ C1] 5fa0: 00000000 40000001 ffffffff 7ecc3a7c 40000001 00000000 [ 145.402764][ C1] 5fc0: 00000000 40000001 ffffffff 00000072 00000000 7ecc3ac8 00000000 00000547 [ 145.403020][ C1] 5fe0: 00000158 7ecc39e0 00000000 00127db8 [ 145.403196][ C1] r7:00000072 r6:ffffffff r5:40000001 r4:00000000 [ 147.187350][ C1] SMP: failed to stop secondary CPUs [ 147.188695][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:36:44 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00000103 R03=819bcbf8 R04=826f89c8 R05=826f89c0 R06=00000028 R07=00000006 R08=826f89c8 R09=00000000 R10=dddd0400 R11=df801e44 R12=df801e48 R13=df801e38 R14=819bb88c R15=819bcc08 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=83fc8440 R01=00000032 R02=ebb73000 R03=00000000 R04=8287346d R05=83fc8440 R06=809e9850 R07=82873481 R08=8287341c R09=00000066 R10=00000001 R11=df80597c R12=00000002 R13=df805970 R14=827584a4 R15=809e98a8 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000