last executing test programs: 813.105797ms ago: executing program 0 (id=1): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4, @private=0xa010100}}) 451.770627ms ago: executing program 1 (id=2): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc}, 0x0, [0x0, 0x0, 0x800, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x9, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 268.581582ms ago: executing program 0 (id=3): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000180)='\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x5, 0x4}, {0x80000000}], r1}, 0x18, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000080)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000004340)='./file0\x00') getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/178, 0xb2) 268.212532ms ago: executing program 1 (id=4): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) 109.144147ms ago: executing program 1 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="07008dff00"}) 0s ago: executing program 1 (id=6): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000440)={0x1d, r3, 0x3, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): syzkaller login: [ 50.703830][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 50.703946][ T31] audit: type=1400 audit(50.620:68): avc: denied { read write } for pid=3078 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.706562][ T31] audit: type=1400 audit(50.620:69): avc: denied { open } for pid=3078 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:26487' (ED25519) to the list of known hosts. [ 62.609919][ T31] audit: type=1400 audit(62.520:70): avc: denied { name_bind } for pid=3079 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.388223][ T31] audit: type=1400 audit(64.300:71): avc: denied { execute } for pid=3081 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.398087][ T31] audit: type=1400 audit(64.310:72): avc: denied { execute_no_trans } for pid=3081 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.778361][ T31] audit: type=1400 audit(67.700:73): avc: denied { mounton } for pid=3081 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.780127][ T31] audit: type=1400 audit(67.700:74): avc: denied { mount } for pid=3081 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.788859][ T3081] cgroup: Unknown subsys name 'net' [ 67.797723][ T31] audit: type=1400 audit(67.710:75): avc: denied { unmount } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.939835][ T3081] cgroup: Unknown subsys name 'cpuset' [ 67.944407][ T3081] cgroup: Unknown subsys name 'hugetlb' [ 67.945246][ T3081] cgroup: Unknown subsys name 'rlimit' [ 68.159510][ T31] audit: type=1400 audit(68.080:76): avc: denied { setattr } for pid=3081 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.162676][ T31] audit: type=1400 audit(68.080:77): avc: denied { mounton } for pid=3081 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.164618][ T31] audit: type=1400 audit(68.080:78): avc: denied { mount } for pid=3081 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.390470][ T3083] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.392126][ T31] audit: type=1400 audit(68.310:79): avc: denied { relabelto } for pid=3083 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.394998][ T31] audit: type=1400 audit(68.310:80): avc: denied { write } for pid=3083 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 68.428389][ T31] audit: type=1400 audit(68.340:81): avc: denied { read } for pid=3081 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.429926][ T31] audit: type=1400 audit(68.350:82): avc: denied { open } for pid=3081 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.250728][ T3081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.353971][ T31] audit: type=1400 audit(76.270:83): avc: denied { execmem } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.413396][ T31] audit: type=1400 audit(76.330:84): avc: denied { read } for pid=3086 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.428720][ T31] audit: type=1400 audit(76.330:85): avc: denied { open } for pid=3086 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.429405][ T31] audit: type=1400 audit(76.340:86): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.445315][ T31] audit: type=1400 audit(76.360:87): avc: denied { module_request } for pid=3086 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.553000][ T31] audit: type=1400 audit(76.470:88): avc: denied { sys_module } for pid=3087 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.231928][ T31] audit: type=1400 audit(77.150:89): avc: denied { ioctl } for pid=3086 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.455091][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.465368][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.669469][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.675904][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.600186][ T3086] hsr_slave_0: entered promiscuous mode [ 79.602842][ T3086] hsr_slave_1: entered promiscuous mode [ 79.793506][ T3087] hsr_slave_0: entered promiscuous mode [ 79.794762][ T3087] hsr_slave_1: entered promiscuous mode [ 79.795555][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.795869][ T3087] Cannot create hsr debugfs directory [ 79.969353][ T31] audit: type=1400 audit(79.890:90): avc: denied { create } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.972021][ T31] audit: type=1400 audit(79.890:91): avc: denied { write } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.974512][ T31] audit: type=1400 audit(79.890:92): avc: denied { read } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.992862][ T3086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.011157][ T3086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.020480][ T3086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.034998][ T3086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.291104][ T3087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.295698][ T3087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.301243][ T3087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.305560][ T3087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.923692][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.052821][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.776812][ T3086] veth0_vlan: entered promiscuous mode [ 83.801481][ T3086] veth1_vlan: entered promiscuous mode [ 83.873306][ T3086] veth0_macvtap: entered promiscuous mode [ 83.892989][ T3086] veth1_macvtap: entered promiscuous mode [ 83.963980][ T3086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.965494][ T3086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.965935][ T3086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.966518][ T3086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.070525][ T31] audit: type=1400 audit(83.990:93): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.073151][ T31] audit: type=1400 audit(83.990:94): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.ss98g4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.076084][ T31] audit: type=1400 audit(83.990:95): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.089288][ T31] audit: type=1400 audit(84.010:96): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.ss98g4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.093141][ T31] audit: type=1400 audit(84.010:97): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.ss98g4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.100668][ T31] audit: type=1400 audit(84.020:98): avc: denied { unmount } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.105629][ T31] audit: type=1400 audit(84.020:99): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.115514][ T31] audit: type=1400 audit(84.030:100): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.116313][ T31] audit: type=1400 audit(84.030:101): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.116897][ T31] audit: type=1400 audit(84.030:102): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.166539][ T3086] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.186560][ T3087] veth0_vlan: entered promiscuous mode [ 84.223445][ T3087] veth1_vlan: entered promiscuous mode [ 84.311989][ T3087] veth0_macvtap: entered promiscuous mode [ 84.322124][ T3087] veth1_macvtap: entered promiscuous mode [ 84.385504][ T3087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.386157][ T3087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.386518][ T3087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.386854][ T3087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.110469][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.160170][ C1] ------------[ cut here ]------------ [ 85.160669][ C1] WARNING: CPU: 1 PID: 23 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 85.161675][ C1] refcount_t: underflow; use-after-free. [ 85.161842][ C1] Modules linked in: [ 85.162248][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.162841][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.12.0-rc7-syzkaller #0 [ 85.163390][ C1] Hardware name: ARM-Versatile Express [ 85.163864][ C1] Call trace: frame pointer underflow [ 85.164605][ C1] [<8199cb58>] (dump_backtrace) from [<8199cc54>] (show_stack+0x18/0x1c) [ 85.165870][ C1] r7:00000000 r6:82622f44 r5:00000000 r4:8203dc40 [ 85.166195][ C1] [<8199cc3c>] (show_stack) from [<819bb0e8>] (dump_stack_lvl+0x54/0x7c) [ 85.166925][ C1] [<819bb094>] (dump_stack_lvl) from [<819bb128>] (dump_stack+0x18/0x1c) [ 85.167290][ C1] r5:00000000 r4:82870d18 [ 85.167433][ C1] [<819bb110>] (dump_stack) from [<8199d780>] (panic+0x120/0x374) [ 85.167661][ C1] [<8199d660>] (panic) from [<80242118>] (get_taint+0x0/0x1c) [ 85.167899][ C1] r3:8260c5c4 r2:00000001 r1:82026014 r0:8202da7c [ 85.168080][ C1] r7:808409b0 [ 85.168195][ C1] [<802420a4>] (check_panic_on_warn) from [<8024227c>] (__warn+0x80/0x188) [ 85.168459][ C1] [<802421fc>] (__warn) from [<8024256c>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 85.168716][ C1] r8:00000009 r7:8208c450 r6:df805c64 r5:82e42400 r4:00000000 [ 85.168986][ C1] [<80242388>] (warn_slowpath_fmt) from [<808409b0>] (refcount_warn_saturate+0x13c/0x174) [ 85.169325][ C1] r10:20000113 r9:850c7a5c r8:842f8000 r7:00000000 r6:8182c77c r5:00000002 [ 85.169805][ C1] r4:842f8000 [ 85.170098][ C1] [<80840874>] (refcount_warn_saturate) from [<8149bcd8>] (sk_skb_reason_drop+0x1d8/0x248) [ 85.170783][ C1] [<8149bb00>] (sk_skb_reason_drop) from [<8182c77c>] (j1939_xtp_rx_cts+0x220/0x3d0) [ 85.171402][ C1] r9:850c7a5c r8:842f8000 r7:845386d8 r6:00000df2 r5:850c7a00 r4:850c7a14 [ 85.171687][ C1] [<8182c55c>] (j1939_xtp_rx_cts) from [<8182d6f0>] (j1939_tp_recv+0x3f4/0x530) [ 85.171996][ C1] r10:ddde50c8 r9:00000040 r8:845386d0 r7:847ea000 r6:847ea008 r5:847ea000 [ 85.172460][ C1] r4:85186900 [ 85.172786][ C1] [<8182d2fc>] (j1939_tp_recv) from [<81827188>] (j1939_can_recv+0x1e4/0x2dc) [ 85.173309][ C1] r7:847ea000 r6:847ea008 r5:847ea810 r4:85186900 [ 85.173513][ C1] [<81826fa4>] (j1939_can_recv) from [<8181cf58>] (can_rcv_filter+0x9c/0x218) [ 85.173770][ C1] r9:00000040 r8:84968680 r7:98c80000 r6:851869c0 r5:00000001 r4:84bd5360 [ 85.173994][ C1] [<8181cebc>] (can_rcv_filter) from [<8181d8fc>] (can_receive+0xb4/0xf0) [ 85.174356][ C1] r9:00000040 r8:00000000 r7:84968000 r6:842e53c0 r5:844a0000 r4:851869c0 [ 85.174582][ C1] [<8181d848>] (can_receive) from [<8181d9bc>] (can_rcv+0x84/0xac) [ 85.174824][ C1] r9:00000040 r8:00000001 r7:00000000 r6:00000000 r5:8181d938 r4:851869c0 [ 85.175070][ C1] [<8181d938>] (can_rcv) from [<814bcc4c>] (__netif_receive_skb_one_core+0x5c/0x80) [ 85.175348][ C1] r5:8181d938 r4:84968000 [ 85.175479][ C1] [<814bcbf0>] (__netif_receive_skb_one_core) from [<814bccb8>] (__netif_receive_skb+0x18/0x5c) [ 85.175791][ C1] r5:ddde51b0 r4:851869c0 [ 85.175906][ C1] [<814bcca0>] (__netif_receive_skb) from [<814bcfc0>] (process_backlog+0xa0/0x17c) [ 85.176189][ C1] r5:ddde51b0 r4:851869c0 [ 85.176300][ C1] [<814bcf20>] (process_backlog) from [<814bdecc>] (__napi_poll+0x34/0x240) [ 85.176565][ C1] r10:ddde50c0 r9:ddde5300 r8:df805ea0 r7:df805e9b r6:00000040 r5:ddde51b0 [ 85.176998][ C1] r4:00000001 [ 85.177774][ C1] [<814bde98>] (__napi_poll) from [<814be740>] (net_rx_action+0x358/0x440) [ 85.178211][ C1] r9:ddde5300 r8:df805ea0 r7:0000012c r6:ffffac0f r5:ddde51b0 r4:00000000 [ 85.178535][ C1] [<814be3e8>] (net_rx_action) from [<8024b55c>] (handle_softirqs+0x158/0x464) [ 85.178934][ C1] r10:00000008 r9:82e42400 r8:00000101 r7:04208040 r6:00000003 r5:00000004 [ 85.179285][ C1] r4:8260408c [ 85.179460][ C1] [<8024b404>] (handle_softirqs) from [<8024b958>] (__irq_exit_rcu+0xa4/0x164) [ 85.179845][ C1] r10:00002001 r9:82e42400 r8:00000000 r7:df879e30 r6:821df7ec r5:82220000 [ 85.180156][ C1] r4:82e42400 [ 85.180339][ C1] [<8024b8b4>] (__irq_exit_rcu) from [<8024bc58>] (irq_exit+0x10/0x18) [ 85.180669][ C1] r5:82220000 r4:824bbcdc [ 85.180862][ C1] [<8024bc48>] (irq_exit) from [<819bbac4>] (generic_handle_arch_irq+0x7c/0x80) [ 85.181262][ C1] [<819bba48>] (generic_handle_arch_irq) from [<8196bfe4>] (call_with_stack+0x1c/0x20) [ 85.181654][ C1] r9:82e42400 r8:83830c00 r7:df879e64 r6:ffffffff r5:20000013 r4:8027d4c4 [ 85.182053][ C1] [<8196bfc8>] (call_with_stack) from [<80200bcc>] (__irq_svc+0x8c/0xbc) [ 85.182527][ C1] Exception stack(0xdf879e30 to 0xdf879e78) [ 85.183178][ C1] 9e20: 00000001 8203dc40 00000001 82e42400 [ 85.183496][ C1] 9e40: 00000000 ddde4400 819bf440 83ce3900 83830c00 82e42400 00002001 df879ec4 [ 85.183827][ C1] 9e60: df879e70 df879e80 819c839c 8027d4c4 20000013 ffffffff [ 85.184197][ C1] [<8027d438>] (finish_task_switch) from [<819bf440>] (__schedule+0x424/0xc2c) [ 85.184721][ C1] r10:83ce3bc0 r9:83ce3900 r8:00000001 r7:83ce3900 r6:82e42400 r5:ddde4400 [ 85.185117][ C1] r4:83830c00 [ 85.185310][ C1] [<819bf01c>] (__schedule) from [<819bfdd8>] (preempt_schedule+0x4c/0xb4) [ 85.185690][ C1] r10:00000000 r9:00000002 r8:82624734 r7:80275224 r6:00000001 r5:82e42400 [ 85.186076][ C1] r4:80275224 [ 85.186345][ C1] [<819bfd8c>] (preempt_schedule) from [<80275224>] (smpboot_thread_fn+0x238/0x284) [ 85.186706][ C1] r7:00000001 r6:82e42400 r5:82cc8480 r4:00000001 [ 85.186963][ C1] [<80274fec>] (smpboot_thread_fn) from [<8026fd40>] (kthread+0x104/0x134) [ 85.187390][ C1] r10:00000000 r9:df819d60 r8:82cc8700 r7:82cc8480 r6:80274fec r5:82e42400 [ 85.187689][ C1] r4:82cc8600 r3:00000000 [ 85.187877][ C1] [<8026fc3c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 85.188434][ C1] Exception stack(0xdf879fb0 to 0xdf879ff8) [ 85.188757][ C1] 9fa0: 00000000 00000000 00000000 00000000 [ 85.189384][ C1] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 85.189703][ C1] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 85.190029][ C1] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fc3c r4:82cc8600 [ 85.193847][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:21:04 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=8203dc40 R02=00079191 R03=80219ac0 R04=8261b4c0 R05=8260c5d0 R06=00000000 R07=8260c5fc R08=00000000 R09=00000000 R10=00000000 R11=82601f34 R12=82601f38 R13=82601f28 R14=8020898c R15=80219ac8 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=3fffe35f R01=bfffe35f R02=3fffe35f R03=80000193 R04=df805a48 R05=00000046 R06=dddd93d5 R07=00000000 R08=00000000 R09=00000000 R10=8262a1a8 R11=df8059f0 R12=00000000 R13=df8059dc R14=0000000c R15=802c36bc PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000