last executing test programs: 1.470094417s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1441c05465f0006fc8afa8e488a8", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.179957746s ago: executing program 0 (id=3): r0 = socket$inet6(0xa, 0x40000080806, 0x0) write(0xffffffffffffffff, &(0x7f0000000540), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x400, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 1.179739536s ago: executing program 1 (id=2): syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x8, 0x3, 0x0, [{@empty}, {@loopback}]}, @generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 891.344054ms ago: executing program 1 (id=4): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000006780)=0x82e, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x1f, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xffffffff}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/27, 0x1b}, 0x3}], 0x1, 0x60, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0xe) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000040)=0x68) 0s ago: executing program 0 (id=5): uname(0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r3, 0x0, {0x0, 0xff, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f0000000100)={&(0x7f00000000c0)="d45dac54b098953bd2", 0x9}}, 0x0) dup3(r2, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x0, 0x800, {{0xa, 0x4, 0x1, 0x3f, 0x28, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xac, [@private=0xa010100, @loopback, @multicast2]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): [ 50.710574][ T31] audit: type=1400 audit(50.620:68): avc: denied { read write } for pid=3078 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.712997][ T31] audit: type=1400 audit(50.620:69): avc: denied { open } for pid=3078 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:44212' (ED25519) to the list of known hosts. [ 62.477397][ T31] audit: type=1400 audit(62.360:70): avc: denied { name_bind } for pid=3079 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.645599][ T31] audit: type=1400 audit(64.550:71): avc: denied { execute } for pid=3081 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.658885][ T31] audit: type=1400 audit(64.570:72): avc: denied { execute_no_trans } for pid=3081 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.314751][ T31] audit: type=1400 audit(68.220:73): avc: denied { mounton } for pid=3081 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.317668][ T31] audit: type=1400 audit(68.230:74): avc: denied { mount } for pid=3081 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.327197][ T3081] cgroup: Unknown subsys name 'net' [ 68.332970][ T31] audit: type=1400 audit(68.240:75): avc: denied { unmount } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.542110][ T3081] cgroup: Unknown subsys name 'cpuset' [ 68.548470][ T3081] cgroup: Unknown subsys name 'hugetlb' [ 68.549608][ T3081] cgroup: Unknown subsys name 'rlimit' [ 68.780257][ T31] audit: type=1400 audit(68.690:76): avc: denied { setattr } for pid=3081 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.781135][ T31] audit: type=1400 audit(68.690:77): avc: denied { mounton } for pid=3081 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.782062][ T31] audit: type=1400 audit(68.690:78): avc: denied { mount } for pid=3081 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.966802][ T3083] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.968134][ T31] audit: type=1400 audit(68.880:79): avc: denied { relabelto } for pid=3083 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.972814][ T31] audit: type=1400 audit(68.880:80): avc: denied { write } for pid=3083 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.997767][ T31] audit: type=1400 audit(68.910:81): avc: denied { read } for pid=3081 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.998856][ T31] audit: type=1400 audit(68.910:82): avc: denied { open } for pid=3081 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 74.482425][ T3081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.355580][ T31] audit: type=1400 audit(76.260:83): avc: denied { execmem } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.399086][ T31] audit: type=1400 audit(76.310:84): avc: denied { read } for pid=3087 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.399949][ T31] audit: type=1400 audit(76.310:85): avc: denied { open } for pid=3086 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.403552][ T31] audit: type=1400 audit(76.310:86): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.417835][ T31] audit: type=1400 audit(76.330:87): avc: denied { module_request } for pid=3087 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.502146][ T31] audit: type=1400 audit(76.410:88): avc: denied { sys_module } for pid=3086 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.187431][ T31] audit: type=1400 audit(77.100:89): avc: denied { ioctl } for pid=3087 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.638893][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.651411][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.766783][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.773770][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.718177][ T3087] hsr_slave_0: entered promiscuous mode [ 79.723201][ T3087] hsr_slave_1: entered promiscuous mode [ 79.818578][ T3086] hsr_slave_0: entered promiscuous mode [ 79.820982][ T3086] hsr_slave_1: entered promiscuous mode [ 79.822242][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.822714][ T3086] Cannot create hsr debugfs directory [ 80.205495][ T31] audit: type=1400 audit(80.110:90): avc: denied { create } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.206394][ T31] audit: type=1400 audit(80.110:91): avc: denied { write } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.207131][ T31] audit: type=1400 audit(80.110:92): avc: denied { read } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.212670][ T3087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.232361][ T3087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.248346][ T3087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.269548][ T3087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.279904][ T3086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.308041][ T3086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.322227][ T3086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.333715][ T3086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.249752][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.337493][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.424254][ T3086] veth0_vlan: entered promiscuous mode [ 84.433568][ T3086] veth1_vlan: entered promiscuous mode [ 84.481668][ T3086] veth0_macvtap: entered promiscuous mode [ 84.487672][ T3086] veth1_macvtap: entered promiscuous mode [ 84.518266][ T3086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.518763][ T3086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.519057][ T3086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.519426][ T3086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.670654][ T31] audit: type=1400 audit(84.580:93): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.683073][ T31] audit: type=1400 audit(84.590:94): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.eTuL8a/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.686939][ T31] audit: type=1400 audit(84.600:95): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.698816][ T31] audit: type=1400 audit(84.610:96): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.eTuL8a/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.703575][ T31] audit: type=1400 audit(84.610:97): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.eTuL8a/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.728842][ T31] audit: type=1400 audit(84.630:98): avc: denied { unmount } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.729363][ T3087] veth0_vlan: entered promiscuous mode [ 84.737096][ T31] audit: type=1400 audit(84.650:99): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.743658][ T31] audit: type=1400 audit(84.650:100): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.754142][ T31] audit: type=1400 audit(84.660:101): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.758187][ T3087] veth1_vlan: entered promiscuous mode [ 84.761658][ T31] audit: type=1400 audit(84.660:102): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.842578][ T3086] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.843572][ T3087] veth0_macvtap: entered promiscuous mode [ 84.858896][ T3087] veth1_macvtap: entered promiscuous mode [ 84.942463][ T3087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.943162][ T3087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.943512][ T3087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.943878][ T3087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.086914][ T3781] ------------[ cut here ]------------ [ 87.087301][ T3781] WARNING: CPU: 1 PID: 3781 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 87.088232][ T3781] refcount_t: underflow; use-after-free. [ 87.088474][ T3781] Modules linked in: [ 87.089382][ T3781] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.091206][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: syz.0.5 Not tainted 6.12.0-rc6-syzkaller #0 [ 87.092094][ T3781] Hardware name: ARM-Versatile Express [ 87.092842][ T3781] Call trace: [ 87.093192][ T3781] [<8199c7b8>] (dump_backtrace) from [<8199c8b4>] (show_stack+0x18/0x1c) [ 87.093593][ T3781] r7:00000000 r6:82622f44 r5:00000000 r4:8203db14 [ 87.093825][ T3781] [<8199c89c>] (show_stack) from [<819bad50>] (dump_stack_lvl+0x54/0x7c) [ 87.094124][ T3781] [<819bacfc>] (dump_stack_lvl) from [<819bad90>] (dump_stack+0x18/0x1c) [ 87.094478][ T3781] r5:00000000 r4:82870d18 [ 87.094653][ T3781] [<819bad78>] (dump_stack) from [<8199d3e0>] (panic+0x120/0x374) [ 87.095274][ T3781] [<8199d2c0>] (panic) from [<80242118>] (get_taint+0x0/0x1c) [ 87.095699][ T3781] r3:8260c5c4 r2:00000001 r1:82025ee8 r0:8202d950 [ 87.096026][ T3781] r7:80840670 [ 87.096124][ T3781] [<802420a4>] (check_panic_on_warn) from [<8024227c>] (__warn+0x80/0x188) [ 87.096567][ T3781] [<802421fc>] (__warn) from [<8024256c>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 87.097112][ T3781] r8:00000009 r7:8208c310 r6:dfea5d6c r5:84010000 r4:00000000 [ 87.097427][ T3781] [<80242388>] (warn_slowpath_fmt) from [<80840670>] (refcount_warn_saturate+0x13c/0x174) [ 87.097748][ T3781] r10:00000166 r9:8464fa80 r8:0000006c r7:00000000 r6:81829e84 r5:00000002 [ 87.098024][ T3781] r4:84b1cc00 [ 87.098187][ T3781] [<80840534>] (refcount_warn_saturate) from [<8149b940>] (sk_skb_reason_drop+0x1d8/0x248) [ 87.098610][ T3781] [<8149b768>] (sk_skb_reason_drop) from [<81829e84>] (j1939_session_destroy+0x78/0x200) [ 87.099117][ T3781] r9:8464fa80 r8:0000006c r7:8464fa84 r6:84b1a950 r5:84b1a900 r4:84b1cc00 [ 87.099377][ T3781] [<81829e0c>] (j1939_session_destroy) from [<8182b1a0>] (j1939_session_put+0x54/0x58) [ 87.099929][ T3781] r6:8464fa78 r5:8464fa78 r4:8464fa78 [ 87.100268][ T3781] [<8182b14c>] (j1939_session_put) from [<81828260>] (j1939_sk_queue_drop_all+0x7c/0xc4) [ 87.100607][ T3781] [<818281e4>] (j1939_sk_queue_drop_all) from [<818284a0>] (j1939_sk_release+0x1f8/0x200) [ 87.100956][ T3781] r9:84010000 r8:82cae790 r7:8464fa74 r6:8478b000 r5:84c3fb80 r4:8464f800 [ 87.101170][ T3781] [<818282a8>] (j1939_sk_release) from [<81484f6c>] (__sock_release+0x44/0xbc) [ 87.101451][ T3781] r8:82cae790 r7:00000000 r6:81c7e7d4 r5:84c3fc80 r4:84c3fb80 [ 87.101686][ T3781] [<81484f28>] (__sock_release) from [<81484ffc>] (sock_close+0x18/0x20) [ 87.101971][ T3781] r7:84c3fc00 r6:8311de58 r5:082e0003 r4:84502c00 [ 87.102145][ T3781] [<81484fe4>] (sock_close) from [<80518b40>] (__fput+0xdc/0x2e4) [ 87.102402][ T3781] [<80518a64>] (__fput) from [<80518dd0>] (____fput+0x14/0x18) [ 87.102653][ T3781] r9:84010000 r8:82871694 r7:84010000 r6:84010884 r5:84010854 r4:00000000 [ 87.102900][ T3781] [<80518dbc>] (____fput) from [<8026c678>] (task_work_run+0x90/0xb8) [ 87.103133][ T3781] [<8026c5e8>] (task_work_run) from [<8020bde0>] (do_work_pending+0x448/0x4f8) [ 87.103397][ T3781] r9:84010000 r8:8020029c r7:00000166 r6:8020029c r5:dfea5fb0 r4:84010000 [ 87.103621][ T3781] [<8020b998>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 87.104000][ T3781] Exception stack(0xdfea5fb0 to 0xdfea5ff8) [ 87.104276][ T3781] 5fa0: 00000003 00000003 00000000 00000000 [ 87.104459][ T3781] 5fc0: 00000000 00000000 002862f0 00000166 00000000 00006364 003d0f00 76b7f0bc [ 87.104606][ T3781] 5fe0: 76b7eec0 76b7eeb0 00018b10 00133470 60000010 00000004 [ 87.104769][ T3781] r10:00000166 r9:84010000 r8:8020029c r7:00000166 r6:002862f0 r5:00000000 [ 87.104906][ T3781] r4:00000000 [ 87.106870][ T3781] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:22:43 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=8203db14 R02=001321e9 R03=80219ac0 R04=8261b4c0 R05=8260c5d0 R06=00000000 R07=8260c5fc R08=00000000 R09=00000000 R10=00000000 R11=82601f34 R12=82601f38 R13=82601f28 R14=8020898c R15=80219ac8 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=8203db14 R01=84010000 R02=5b928000 R03=82e41800 R04=84010000 R05=8203db14 R06=827f27a6 R07=82871154 R08=00000001 R09=00000000 R10=00000ec5 R11=dfea5cb4 R12=8203db14 R13=dfea5c68 R14=ddddb640 R15=81970254 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=004e27e9 s17=00000000 d08=00000000004e27e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=209a9964 s33=89e590f1 d16=89e590f1209a9964 s34=d86e1781 s35=e4357237 d17=e4357237d86e1781 s36=84ebfb51 s37=647a1a4b d18=647a1a4b84ebfb51 s38=6b6661a2 s39=6ae8b773 d19=6ae8b7736b6661a2 s40=52e34d9d s41=bc5fef2d d20=bc5fef2d52e34d9d s42=14f2183d s43=0f66d280 d21=0f66d28014f2183d s44=7dd8193a s45=97e7d115 d22=97e7d1157dd8193a s46=f56fbaa3 s47=a5b6399d d23=a5b6399df56fbaa3 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000300 s53=ffb60000 d26=ffb6000000000300 s54=000cffff s55=00020000 d27=00020000000cffff s56=00000000 s57=00000300 d28=0000030000000000 s58=ff1a0000 s59=0008ffff d29=0008ffffff1a0000 s60=00000000 s61=00000300 d30=0000030000000000 s62=ff2a0000 s63=0008ffff d31=0008ffffff2a0000 FPSCR: 00000000