last executing test programs: 14.93476236s ago: executing program 0 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 13.780987536s ago: executing program 0 (id=78): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x1, 0x0, 0x0, 0xfffff02c}, {0x84}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 13.548972035s ago: executing program 0 (id=79): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000440)={0x0, 0x0}) 12.730519438s ago: executing program 0 (id=81): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 11.881970484s ago: executing program 0 (id=84): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r0, 0x11, 0x0, 0x74000) 11.651245543s ago: executing program 0 (id=85): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) r1 = gettid() openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f000000b040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a440)={0x28, 0x0, 0x5, {{0x5, 0xce7, 0x0, r1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$nl_xfrm(0x10, 0x3, 0x6) signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, 0x0, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) epoll_create1(0x80000) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 2.891754966s ago: executing program 1 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) read$FUSE(r1, &(0x7f00000036c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) 311.13427ms ago: executing program 1 (id=99): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000010c0)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 209.701673ms ago: executing program 1 (id=100): capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40041, 0x141) 131.918713ms ago: executing program 1 (id=101): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 131.615553ms ago: executing program 1 (id=102): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x9, 0x67, 0x5, 0x4, 0x2, 0x4, 0x3, 0x3}, 0x0, &(0x7f0000000300)={0x3b, 0x80000000, 0x4458d99a, 0x5, 0x100, 0xf, 0x7cd, 0x3}, &(0x7f0000000380), 0x0) 0s ago: executing program 1 (id=103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 47.239070][ T29] audit: type=1400 audit(47.160:56): avc: denied { read write } for pid=3086 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.241153][ T29] audit: type=1400 audit(47.160:57): avc: denied { open } for pid=3086 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:35218' (ED25519) to the list of known hosts. [ 60.206707][ T29] audit: type=1400 audit(60.120:58): avc: denied { name_bind } for pid=3089 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.335469][ T29] audit: type=1400 audit(61.250:59): avc: denied { execute } for pid=3090 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.343150][ T29] audit: type=1400 audit(61.260:60): avc: denied { execute_no_trans } for pid=3090 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.293018][ T29] audit: type=1400 audit(65.210:61): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.297015][ T29] audit: type=1400 audit(65.210:62): avc: denied { mount } for pid=3090 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.308220][ T3090] cgroup: Unknown subsys name 'net' [ 65.314000][ T29] audit: type=1400 audit(65.230:63): avc: denied { unmount } for pid=3090 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.454457][ T3090] cgroup: Unknown subsys name 'cpuset' [ 65.460825][ T3090] cgroup: Unknown subsys name 'hugetlb' [ 65.461686][ T3090] cgroup: Unknown subsys name 'rlimit' [ 65.666480][ T29] audit: type=1400 audit(65.580:64): avc: denied { setattr } for pid=3090 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.671296][ T29] audit: type=1400 audit(65.590:65): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.673755][ T29] audit: type=1400 audit(65.590:66): avc: denied { mount } for pid=3090 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.851960][ T3092] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.854852][ T29] audit: type=1400 audit(65.770:67): avc: denied { relabelto } for pid=3092 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.859666][ T29] audit: type=1400 audit(65.780:68): avc: denied { write } for pid=3092 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 65.886563][ T29] audit: type=1400 audit(65.800:69): avc: denied { read } for pid=3090 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.889295][ T29] audit: type=1400 audit(65.800:70): avc: denied { open } for pid=3090 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.830794][ T3090] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.526192][ T29] audit: type=1400 audit(75.440:71): avc: denied { execmem } for pid=3093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.597873][ T29] audit: type=1400 audit(75.510:72): avc: denied { read } for pid=3095 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.605575][ T29] audit: type=1400 audit(75.520:73): avc: denied { open } for pid=3095 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.618636][ T29] audit: type=1400 audit(75.530:74): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.636972][ T29] audit: type=1400 audit(75.550:75): avc: denied { module_request } for pid=3096 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.640234][ T29] audit: type=1400 audit(75.550:76): avc: denied { module_request } for pid=3095 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.717789][ T29] audit: type=1400 audit(75.630:77): avc: denied { sys_module } for pid=3096 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.272662][ T29] audit: type=1400 audit(76.190:78): avc: denied { ioctl } for pid=3096 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.064935][ T3096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.070293][ T3096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.156186][ T3095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.165212][ T3095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.674849][ T3095] hsr_slave_0: entered promiscuous mode [ 77.679294][ T3095] hsr_slave_1: entered promiscuous mode [ 77.769365][ T3096] hsr_slave_0: entered promiscuous mode [ 77.770400][ T3096] hsr_slave_1: entered promiscuous mode [ 77.771285][ T3096] debugfs: 'hsr0' already exists in 'hsr' [ 77.771682][ T3096] Cannot create hsr debugfs directory [ 78.069524][ T29] audit: type=1400 audit(77.990:79): avc: denied { create } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.072227][ T29] audit: type=1400 audit(77.990:80): avc: denied { write } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.084640][ T3095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.118923][ T3095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.134537][ T3095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.149460][ T3095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.159706][ T3096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.192770][ T3096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.210780][ T3096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.228778][ T3096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.887862][ T3095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.065452][ T3096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.360120][ T3095] veth0_vlan: entered promiscuous mode [ 81.373625][ T3095] veth1_vlan: entered promiscuous mode [ 81.428660][ T3095] veth0_macvtap: entered promiscuous mode [ 81.435238][ T3095] veth1_macvtap: entered promiscuous mode [ 81.483299][ T1602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.486979][ T1602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.501288][ T1602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.501700][ T1602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.610169][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 81.610552][ T29] audit: type=1400 audit(81.510:82): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.610781][ T29] audit: type=1400 audit(81.510:83): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/syzkaller.EbmYlc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.611016][ T29] audit: type=1400 audit(81.520:84): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.611204][ T29] audit: type=1400 audit(81.520:85): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/syzkaller.EbmYlc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.624199][ T29] audit: type=1400 audit(81.540:86): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/syzkaller.EbmYlc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 81.646838][ T29] audit: type=1400 audit(81.560:87): avc: denied { unmount } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.652756][ T29] audit: type=1400 audit(81.570:88): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 81.660686][ T29] audit: type=1400 audit(81.580:89): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="gadgetfs" ino=3158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.672093][ T29] audit: type=1400 audit(81.590:90): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.676180][ T29] audit: type=1400 audit(81.590:91): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 81.736178][ T3095] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.164319][ T3096] veth0_vlan: entered promiscuous mode [ 82.176918][ T3096] veth1_vlan: entered promiscuous mode [ 82.210605][ T3096] veth0_macvtap: entered promiscuous mode [ 82.214828][ T3096] veth1_macvtap: entered promiscuous mode [ 82.249532][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.250602][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.251410][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.251684][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.411711][ T3706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.493760][ T3706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.573987][ T3706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.651380][ T3706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.773515][ T1972] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.786923][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.803450][ T1046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.810927][ T1046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.821185][ T3706] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 82.822060][ T3706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.138457][ T3699] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.318047][ T3699] usb 1-1: Using ep0 maxpacket: 16 [ 85.340452][ T3699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.341661][ T3699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.366670][ T3699] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.368312][ T3699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.369203][ T3699] usb 1-1: Product: syz [ 85.369863][ T3699] usb 1-1: Manufacturer: syz [ 85.370516][ T3699] usb 1-1: SerialNumber: syz [ 85.626145][ T3699] usb 1-1: 0:2 : does not exist [ 85.653314][ T3699] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 85.685520][ T3699] usb 1-1: USB disconnect, device number 2 [ 85.871506][ T3768] could not allocate digest TFM handle blake2b-256 [ 86.728961][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 86.729685][ T29] audit: type=1400 audit(86.640:126): avc: denied { create } for pid=3799 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.734834][ T29] audit: type=1400 audit(86.650:127): avc: denied { setopt } for pid=3799 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.347517][ T3699] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.507657][ T3699] usb 1-1: Using ep0 maxpacket: 16 [ 90.521464][ T3699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.525880][ T3699] usb 1-1: config 128 has an invalid interface number: 66 but max is 0 [ 90.531604][ T3699] usb 1-1: config 128 has no interface number 0 [ 90.532605][ T3699] usb 1-1: config 128 interface 66 has no altsetting 0 [ 90.552465][ T3699] usb 1-1: string descriptor 0 read error: -22 [ 90.553404][ T3699] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=1e.90 [ 90.554398][ T3699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.791108][ T3699] comedi comedi5: could not set alternate setting 3 in high speed [ 90.791724][ T3699] usbduxsigma 1-1:128.66: driver 'usbduxsigma' failed to auto-configure device. [ 90.798232][ T3699] usbduxsigma 1-1:128.66: probe with driver usbduxsigma failed with error -71 [ 90.800810][ T3699] usb 1-1: USB disconnect, device number 3 [ 94.768922][ T3773] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.917997][ T3773] usb 1-1: Using ep0 maxpacket: 8 [ 94.939737][ T3773] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 94.940567][ T3773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.941421][ T3773] usb 1-1: Product: syz [ 94.941858][ T3773] usb 1-1: Manufacturer: syz [ 94.942741][ T3773] usb 1-1: SerialNumber: syz [ 94.948501][ T3773] usb 1-1: config 0 descriptor?? [ 95.447455][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.597459][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 95.609255][ T23] usb 2-1: config 53 has an invalid interface number: 151 but max is 0 [ 95.610016][ T23] usb 2-1: config 53 has no interface number 0 [ 95.610522][ T23] usb 2-1: config 53 interface 151 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 95.611169][ T23] usb 2-1: config 53 interface 151 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 95.611725][ T23] usb 2-1: config 53 interface 151 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 95.612203][ T23] usb 2-1: config 53 interface 151 altsetting 0 endpoint 0x2 has invalid maxpacket 25409, setting to 64 [ 95.623523][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=7a.dd [ 95.624026][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.624469][ T23] usb 2-1: Product: syz [ 95.624789][ T23] usb 2-1: Manufacturer: syz [ 95.625113][ T23] usb 2-1: SerialNumber: syz [ 95.645168][ T3881] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.860809][ T23] usbtest 2-1:53.151: Linux gadget zero [ 95.861334][ T23] usbtest 2-1:53.151: high-speed {control in/out bulk-out int-out} tests (+alt) [ 95.868626][ T23] usb 2-1: USB disconnect, device number 2 [ 96.618012][ T3697] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.768201][ T3697] usb 2-1: Using ep0 maxpacket: 8 [ 96.789157][ T3697] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 96.789457][ T3697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.789852][ T3697] usb 2-1: Product: syz [ 96.789910][ T3697] usb 2-1: Manufacturer: syz [ 96.789940][ T3697] usb 2-1: SerialNumber: syz [ 96.795986][ T3697] usb 2-1: config 0 descriptor?? [ 105.426256][ T3697] usb 1-1: USB disconnect, device number 4 [ 105.615609][ T29] audit: type=1400 audit(105.530:128): avc: denied { setopt } for pid=3920 comm="syz.0.50" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.621941][ T3921] raw_sendmsg: syz.0.50 forgot to set AF_INET. Fix it! [ 105.686382][ T3923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.51'. [ 106.046900][ T29] audit: type=1400 audit(105.960:129): avc: denied { name_bind } for pid=3930 comm="syz.0.55" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 106.050488][ T29] audit: type=1400 audit(105.970:130): avc: denied { node_bind } for pid=3930 comm="syz.0.55" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.266669][ T3935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 106.379518][ T29] audit: type=1400 audit(106.300:131): avc: denied { module_load } for pid=3936 comm="syz.0.58" path="/38/bus" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 106.383565][ T3937] Invalid ELF header magic: != ELF [ 107.312313][ T3773] usb 2-1: USB disconnect, device number 3 [ 108.618730][ T29] audit: type=1400 audit(108.530:132): avc: denied { read } for pid=3967 comm="syz.1.65" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.619141][ T29] audit: type=1400 audit(108.530:133): avc: denied { open } for pid=3967 comm="syz.1.65" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.979126][ T3971] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3971 comm=syz.0.66 [ 108.980194][ T3971] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3971 comm=syz.0.66 [ 110.738701][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 111.621714][ T29] audit: type=1400 audit(111.530:134): avc: denied { getopt } for pid=3984 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.312881][ T29] audit: type=1400 audit(113.230:135): avc: denied { append } for pid=4004 comm="syz.0.79" name="pcmC0D0p" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.357273][ C0] hrtimer: interrupt took 5572528 ns [ 113.840661][ T4009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.80'. [ 114.728500][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.890887][ T23] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 114.891245][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.891313][ T23] usb 2-1: config 0 has no interface number 0 [ 114.943631][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 114.944037][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.945568][ T23] usb 2-1: Product: syz [ 114.945815][ T23] usb 2-1: Manufacturer: syz [ 114.945969][ T23] usb 2-1: SerialNumber: syz [ 114.949401][ T23] usb 2-1: config 0 descriptor?? [ 114.970238][ T23] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 114.970555][ T23] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 115.154422][ T23] usb 2-1: USB disconnect, device number 4 [ 115.305202][ T29] audit: type=1400 audit(115.220:136): avc: denied { mounton } for pid=4022 comm="syz.0.85" path="/54/file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.548784][ T29] audit: type=1400 audit(116.470:137): avc: denied { create } for pid=4022 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.594979][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 121.603101][ T4049] syz_tun: refused to change device tx_queue_len [ 122.115103][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 122.133459][ T29] audit: type=1400 audit(122.050:138): avc: denied { write } for pid=4051 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.224895][ T29] audit: type=1400 audit(122.140:139): avc: denied { create } for pid=4055 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.229884][ T29] audit: type=1400 audit(122.150:140): avc: denied { write } for pid=4055 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.547925][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.698245][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 122.709873][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.710265][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.710676][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.724324][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 122.724710][ T10] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 122.724775][ T10] usb 2-1: Product: syz [ 122.724806][ T10] usb 2-1: Manufacturer: syz [ 122.724835][ T10] usb 2-1: SerialNumber: syz [ 122.734750][ T10] usb 2-1: config 0 descriptor?? [ 123.165022][ T10] gs_usb 2-1:0.0: Configuring for 163 interfaces [ 123.372734][ T10] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 123.373804][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 123.381188][ T10] usb 2-1: USB disconnect, device number 5 [ 126.385058][ T4083] capability: warning: `syz.1.100' uses deprecated v2 capabilities in a way that may be insecure [ 126.396607][ T29] audit: type=1400 audit(126.310:141): avc: denied { associate } for pid=4082 comm="syz.1.100" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 126.444314][ T29] audit: type=1400 audit(126.360:142): avc: denied { create } for pid=4084 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.448892][ T29] audit: type=1400 audit(126.370:143): avc: denied { ioctl } for pid=4084 comm="syz.1.101" path="socket:[3657]" dev="sockfs" ino=3657 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 528.279342][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 430s! [swapper/1:0] [ 528.279639][ C1] Modules linked in: [ 528.280458][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT [ 528.280676][ C1] Hardware name: ARM-Versatile Express [ 528.280886][ C1] PC is at _raw_spin_lock+0x4c/0x58 [ 528.281593][ C1] LR is at _raw_spin_lock+0x18/0x58 [ 528.281635][ C1] pc : [<81abc000>] lr : [<81abbfcc>] psr: 80000113 [ 528.281669][ C1] sp : df805d68 ip : df805d68 fp : df805d7c [ 528.281698][ C1] r10: 81c05450 r9 : 84286a40 r8 : 839ee288 [ 528.281732][ C1] r7 : 84286b68 r6 : 00000000 r5 : 00000001 r4 : 84286b68 [ 528.281769][ C1] r3 : 00007437 r2 : 00007438 r1 : 00000000 r0 : 00000001 [ 528.281873][ C1] Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 528.281935][ C1] Control: 30c5387d Table: 85f99640 DAC: 00000000 [ 528.282020][ C1] Call trace: frame pointer underflow [ 528.282292][ C1] [<81abbfb4>] (_raw_spin_lock) from [<809c7b2c>] (gpio_mmio_set+0x44/0x80) [ 528.282587][ C1] r5:00000001 r4:84286a40 [ 528.282666][ C1] [<809c7ae8>] (gpio_mmio_set) from [<809b82e8>] (gpiochip_set+0x1c/0x44) [ 528.282732][ C1] r7:00000000 r6:00000000 r5:00000000 r4:84245f00 [ 528.282748][ C1] [<809b82cc>] (gpiochip_set) from [<809babb0>] (gpiod_set_raw_value_commit+0x78/0x218) [ 528.282793][ C1] [<809bab38>] (gpiod_set_raw_value_commit) from [<809bc450>] (gpiod_set_value_nocheck+0x44/0x58) [ 528.282890][ C1] r10:81c05450 r9:df805ebc r8:00000102 r7:ffffbca3 r6:00000026 r5:00000000 [ 528.282921][ C1] r4:84245f00 [ 528.282936][ C1] [<809bc40c>] (gpiod_set_value_nocheck) from [<809bc4a0>] (gpiod_set_value+0x3c/0x88) [ 528.282980][ C1] [<809bc464>] (gpiod_set_value) from [<809ccc3c>] (gpio_led_set+0x5c/0x60) [ 528.283028][ C1] r5:832f7044 r4:832f7044 [ 528.283049][ C1] [<809ccbe0>] (gpio_led_set) from [<809ca4d4>] (led_set_brightness_nosleep+0x38/0x44) [ 528.283096][ C1] r5:832f7044 r4:843c6c0c [ 528.283111][ C1] [<809ca49c>] (led_set_brightness_nosleep) from [<809cd538>] (led_heartbeat_function+0x84/0x144) [ 528.283155][ C1] [<809cd4b4>] (led_heartbeat_function) from [<80327070>] (call_timer_fn+0x30/0x220) [ 528.283213][ C1] r7:ffffbca3 r6:809cd4b4 r5:843c6c0c r4:83216000 [ 528.283229][ C1] [<80327040>] (call_timer_fn) from [<80327524>] (__run_timers+0x2c4/0x3f8) [ 528.283286][ C1] r9:df805ebc r8:ffffbca3 r7:00000000 r6:809cd4b4 r5:dddd9f00 r4:843c6c0c [ 528.283304][ C1] [<80327260>] (__run_timers) from [<803276c0>] (run_timer_base+0x68/0x78) [ 528.283359][ C1] r10:83216000 r9:82804d80 r8:00000102 r7:00000001 r6:00000082 r5:00000002 [ 528.283379][ C1] r4:dddd9f00 [ 528.283392][ C1] [<80327658>] (run_timer_base) from [<803276ec>] (run_timer_softirq+0x1c/0x34) [ 528.283438][ C1] r4:82804084 [ 528.283451][ C1] [<803276d0>] (run_timer_softirq) from [<8025b65c>] (handle_softirqs+0x140/0x458) [ 528.283500][ C1] [<8025b51c>] (handle_softirqs) from [<8025bad0>] (__irq_exit_rcu+0x110/0x1d0) [ 528.283556][ C1] r10:00000000 r9:83216000 r8:00000000 r7:df865e08 r6:82443f98 r5:8247f0cc [ 528.283573][ C1] r4:83216000 [ 528.283587][ C1] [<8025b9c0>] (__irq_exit_rcu) from [<8025be48>] (irq_exit+0x10/0x18) [ 528.283632][ C1] r5:8247f0cc r4:826c3a9c [ 528.283646][ C1] [<8025be38>] (irq_exit) from [<81aada64>] (generic_handle_arch_irq+0x7c/0x80) [ 528.283697][ C1] [<81aad9e8>] (generic_handle_arch_irq) from [<81a7da0c>] (call_with_stack+0x1c/0x20) [ 528.283757][ C1] r9:83216000 r8:839ee288 r7:df865e3c r6:ffffffff r5:60000013 r4:809c832c [ 528.283773][ C1] [<81a7d9f0>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc) [ 528.283916][ C1] Exception stack(0xdf865e08 to 0xdf865e50) [ 528.284088][ C1] 5e00: e021f008 0000000d 00007437 00000000 e021f008 0000000d [ 528.284137][ C1] 5e20: 00000001 84286b68 839ee288 84286a40 00000000 df865e6c df865e58 df865e58 [ 528.284162][ C1] 5e40: 809c8328 809c832c 60000013 ffffffff [ 528.284212][ C1] [<809c830c>] (gpio_mmio_write32) from [<809c7b4c>] (gpio_mmio_set+0x64/0x80) [ 528.284273][ C1] r5:00000008 r4:84286a40 [ 528.284291][ C1] [<809c7ae8>] (gpio_mmio_set) from [<809b82e8>] (gpiochip_set+0x1c/0x44) [ 528.284351][ C1] r7:00000001 r6:00000000 r5:00000003 r4:84245f3c [ 528.284367][ C1] [<809b82cc>] (gpiochip_set) from [<809babb0>] (gpiod_set_raw_value_commit+0x78/0x218) [ 528.284413][ C1] [<809bab38>] (gpiod_set_raw_value_commit) from [<809bc450>] (gpiod_set_value_nocheck+0x44/0x58) [ 528.284471][ C1] r10:00000000 r9:00000000 r8:00000001 r7:ddde24c0 r6:8392f258 r5:00000001 [ 528.284489][ C1] r4:84245f3c [ 528.284503][ C1] [<809bc40c>] (gpiod_set_value_nocheck) from [<809bc4a0>] (gpiod_set_value+0x3c/0x88) [ 528.284545][ C1] [<809bc464>] (gpiod_set_value) from [<809ccc3c>] (gpio_led_set+0x5c/0x60) [ 528.284592][ C1] r5:000000ff r4:832f7314 [ 528.284607][ C1] [<809ccbe0>] (gpio_led_set) from [<809ca564>] (led_set_brightness+0x84/0x90) [ 528.284653][ C1] r5:000000ff r4:832f7314 [ 528.284668][ C1] [<809ca4e0>] (led_set_brightness) from [<809cc0e4>] (led_trigger_event+0x40/0x58) [ 528.284715][ C1] r5:000000ff r4:832f7314 [ 528.284730][ C1] [<809cc0a4>] (led_trigger_event) from [<809cd740>] (ledtrig_cpu+0xac/0xf4) [ 528.284783][ C1] r7:ddde24c0 r6:00000002 r5:82b15cd8 r4:000001fd [ 528.284798][ C1] [<809cd694>] (ledtrig_cpu) from [<80227a38>] (arch_cpu_idle_exit+0x14/0x18) [ 528.284857][ C1] r9:00000000 r8:00000001 r7:8280c710 r6:83216000 r5:8280c6d0 r4:00000001 [ 528.284875][ C1] [<80227a24>] (arch_cpu_idle_exit) from [<802b168c>] (do_idle+0x5c/0x2d8) [ 528.284927][ C1] [<802b1630>] (do_idle) from [<802b1c38>] (cpu_startup_entry+0x30/0x34) [ 528.284989][ C1] r10:00000000 r9:414fc0f0 r8:80003000 r7:82a7b4a4 r6:83216000 r5:00000001 [ 528.285007][ C1] r4:00000092 [ 528.285021][ C1] [<802b1c08>] (cpu_startup_entry) from [<8022f360>] (secondary_start_kernel+0x128/0x194) [ 528.285084][ C1] [<8022f238>] (secondary_start_kernel) from [<80220094>] (__enable_mmu+0x0/0xc) [ 528.285145][ C1] r7:82a7b4a4 r6:30c0387d r5:00000000 r4:830b7bc0 [ 528.285427][ C1] Sending NMI from CPU 1 to CPUs 0: [ 538.306994][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 538.327120][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT [ 538.327994][ C1] Tainted: [L]=SOFTLOCKUP [ 538.328144][ C1] Hardware name: ARM-Versatile Express [ 538.328370][ C1] Call trace: frame pointer underflow [ 538.328704][ C1] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 538.329426][ C1] r7:822965a4 r6:83216000 r5:00000000 r4:82295754 [ 538.329631][ C1] [<80201b58>] (show_stack) from [<8021ee08>] (dump_stack_lvl+0x54/0x7c) [ 538.329920][ C1] [<8021edb4>] (dump_stack_lvl) from [<8021ee48>] (dump_stack+0x18/0x1c) [ 538.330213][ C1] r5:00000000 r4:82a7bd14 [ 538.330381][ C1] [<8021ee30>] (dump_stack) from [<80202648>] (vpanic+0xe0/0x2e8) [ 538.330645][ C1] [<80202568>] (vpanic) from [<80202884>] (trace_suspend_resume+0x0/0xd8) [ 538.330952][ C1] r7:82ac27f8 [ 538.331096][ C1] [<80202850>] (panic) from [<80383fcc>] (watchdog_timer_fn+0x2dc/0x350) [ 538.331394][ C1] r3:00000001 r2:00004000 r1:82a7bd1c r0:822965a4 [ 538.331603][ C1] [<80383cf0>] (watchdog_timer_fn) from [<80329c64>] (__hrtimer_run_queues+0x1c4/0x454) [ 538.331930][ C1] r10:83216000 r9:00000000 r8:ddddb130 r7:80383cf0 r6:ddddb000 r5:ddddb040 [ 538.332203][ C1] r4:ddddb5d8 [ 538.332351][ C1] [<80329aa0>] (__hrtimer_run_queues) from [<8032b268>] (hrtimer_interrupt+0x148/0x2bc) [ 538.332703][ C1] r10:fb2fd920 r9:ddddb180 r8:ddddb130 r7:0000007a r6:00000003 r5:20000193 [ 538.332958][ C1] r4:ddddb000 [ 538.333099][ C1] [<8032b120>] (hrtimer_interrupt) from [<813409e8>] (arch_timer_handler_virt+0x30/0x38) [ 538.333451][ C1] r10:81d0fc78 r9:8309e400 r8:00000000 r7:00000001 r6:00000001 r5:82498528 [ 538.333696][ C1] r4:8309de40 [ 538.333845][ C1] [<813409b8>] (arch_timer_handler_virt) from [<802efab4>] (handle_percpu_devid_irq+0x128/0x34c) [ 538.334167][ C1] [<802ef98c>] (handle_percpu_devid_irq) from [<802e8c44>] (handle_irq_desc+0x74/0x84) [ 538.334532][ C1] r10:81c05450 r9:83216000 r8:00000000 r7:df80a00c r6:826c2388 r5:df80a000 [ 538.334777][ C1] r4:8280cc44 [ 538.334935][ C1] [<802e8bd0>] (handle_irq_desc) from [<802e8cc0>] (generic_handle_domain_irq+0x18/0x1c) [ 538.335254][ C1] [<802e8ca8>] (generic_handle_domain_irq) from [<802012c8>] (gic_handle_irq+0x68/0x7c) [ 538.335569][ C1] [<80201260>] (gic_handle_irq) from [<81aada48>] (generic_handle_arch_irq+0x60/0x80) [ 538.335869][ C1] r7:df805d18 r6:82443f98 r5:8247f0cc r4:826c3a9c [ 538.336059][ C1] [<81aad9e8>] (generic_handle_arch_irq) from [<80200bdc>] (__irq_svc+0x7c/0xbc) [ 538.336372][ C1] Exception stack(0xdf805d18 to 0xdf805d60) [ 538.336596][ C1] 5d00: 00000001 00000000 [ 538.336856][ C1] 5d20: 00007438 00007437 84286b68 00000001 00000000 84286b68 839ee288 84286a40 [ 538.337125][ C1] 5d40: 81c05450 df805d7c df805d68 df805d68 81abbfcc 81abc000 80000113 ffffffff [ 538.337405][ C1] r9:83216000 r8:839ee288 r7:df805d4c r6:ffffffff r5:80000113 r4:81abc000 [ 538.337640][ C1] [<81abbfb4>] (_raw_spin_lock) from [<809c7b2c>] (gpio_mmio_set+0x44/0x80) [ 538.337931][ C1] r5:00000001 r4:84286a40 [ 538.338088][ C1] [<809c7ae8>] (gpio_mmio_set) from [<809b82e8>] (gpiochip_set+0x1c/0x44) [ 538.338382][ C1] r7:00000000 r6:00000000 r5:00000000 r4:84245f00 [ 538.338581][ C1] [<809b82cc>] (gpiochip_set) from [<809babb0>] (gpiod_set_raw_value_commit+0x78/0x218) [ 538.338898][ C1] [<809bab38>] (gpiod_set_raw_value_commit) from [<809bc450>] (gpiod_set_value_nocheck+0x44/0x58) [ 538.339232][ C1] r10:81c05450 r9:df805ebc r8:00000102 r7:ffffbca3 r6:00000026 r5:00000000 [ 538.339465][ C1] r4:84245f00 [ 538.339602][ C1] [<809bc40c>] (gpiod_set_value_nocheck) from [<809bc4a0>] (gpiod_set_value+0x3c/0x88) [ 538.339902][ C1] [<809bc464>] (gpiod_set_value) from [<809ccc3c>] (gpio_led_set+0x5c/0x60) [ 538.340190][ C1] r5:832f7044 r4:832f7044 [ 538.340363][ C1] [<809ccbe0>] (gpio_led_set) from [<809ca4d4>] (led_set_brightness_nosleep+0x38/0x44) [ 538.340655][ C1] r5:832f7044 r4:843c6c0c [ 538.340809][ C1] [<809ca49c>] (led_set_brightness_nosleep) from [<809cd538>] (led_heartbeat_function+0x84/0x144) [ 538.341125][ C1] [<809cd4b4>] (led_heartbeat_function) from [<80327070>] (call_timer_fn+0x30/0x220) [ 538.341430][ C1] r7:ffffbca3 r6:809cd4b4 r5:843c6c0c r4:83216000 [ 538.341636][ C1] [<80327040>] (call_timer_fn) from [<80327524>] (__run_timers+0x2c4/0x3f8) [ 538.341970][ C1] r9:df805ebc r8:ffffbca3 r7:00000000 r6:809cd4b4 r5:dddd9f00 r4:843c6c0c [ 538.342238][ C1] [<80327260>] (__run_timers) from [<803276c0>] (run_timer_base+0x68/0x78) [ 538.342515][ C1] r10:83216000 r9:82804d80 r8:00000102 r7:00000001 r6:00000082 r5:00000002 [ 538.342701][ C1] r4:dddd9f00 [ 538.342787][ C1] [<80327658>] (run_timer_base) from [<803276ec>] (run_timer_softirq+0x1c/0x34) [ 538.343019][ C1] r4:82804084 [ 538.343155][ C1] [<803276d0>] (run_timer_softirq) from [<8025b65c>] (handle_softirqs+0x140/0x458) [ 538.343472][ C1] [<8025b51c>] (handle_softirqs) from [<8025bad0>] (__irq_exit_rcu+0x110/0x1d0) [ 538.343805][ C1] r10:00000000 r9:83216000 r8:00000000 r7:df865e08 r6:82443f98 r5:8247f0cc [ 538.344089][ C1] r4:83216000 [ 538.344234][ C1] [<8025b9c0>] (__irq_exit_rcu) from [<8025be48>] (irq_exit+0x10/0x18) [ 538.344543][ C1] r5:8247f0cc r4:826c3a9c [ 538.344708][ C1] [<8025be38>] (irq_exit) from [<81aada64>] (generic_handle_arch_irq+0x7c/0x80) [ 538.345022][ C1] [<81aad9e8>] (generic_handle_arch_irq) from [<81a7da0c>] (call_with_stack+0x1c/0x20) [ 538.345367][ C1] r9:83216000 r8:839ee288 r7:df865e3c r6:ffffffff r5:60000013 r4:809c832c [ 538.345620][ C1] [<81a7d9f0>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc) [ 538.345907][ C1] Exception stack(0xdf865e08 to 0xdf865e50) [ 538.346127][ C1] 5e00: e021f008 0000000d 00007437 00000000 e021f008 0000000d [ 538.346418][ C1] 5e20: 00000001 84286b68 839ee288 84286a40 00000000 df865e6c df865e58 df865e58 [ 538.346685][ C1] 5e40: 809c8328 809c832c 60000013 ffffffff [ 538.346896][ C1] [<809c830c>] (gpio_mmio_write32) from [<809c7b4c>] (gpio_mmio_set+0x64/0x80) [ 538.347207][ C1] r5:00000008 r4:84286a40 [ 538.347378][ C1] [<809c7ae8>] (gpio_mmio_set) from [<809b82e8>] (gpiochip_set+0x1c/0x44) [ 538.347662][ C1] r7:00000001 r6:00000000 r5:00000003 r4:84245f3c [ 538.347862][ C1] [<809b82cc>] (gpiochip_set) from [<809babb0>] (gpiod_set_raw_value_commit+0x78/0x218) [ 538.348163][ C1] [<809bab38>] (gpiod_set_raw_value_commit) from [<809bc450>] (gpiod_set_value_nocheck+0x44/0x58) [ 538.348536][ C1] r10:00000000 r9:00000000 r8:00000001 r7:ddde24c0 r6:8392f258 r5:00000001 [ 538.348808][ C1] r4:84245f3c [ 538.348939][ C1] [<809bc40c>] (gpiod_set_value_nocheck) from [<809bc4a0>] (gpiod_set_value+0x3c/0x88) [ 538.349260][ C1] [<809bc464>] (gpiod_set_value) from [<809ccc3c>] (gpio_led_set+0x5c/0x60) [ 538.349583][ C1] r5:000000ff r4:832f7314 [ 538.349754][ C1] [<809ccbe0>] (gpio_led_set) from [<809ca564>] (led_set_brightness+0x84/0x90) [ 538.350072][ C1] r5:000000ff r4:832f7314 [ 538.350242][ C1] [<809ca4e0>] (led_set_brightness) from [<809cc0e4>] (led_trigger_event+0x40/0x58) [ 538.350575][ C1] r5:000000ff r4:832f7314 [ 538.350747][ C1] [<809cc0a4>] (led_trigger_event) from [<809cd740>] (ledtrig_cpu+0xac/0xf4) [ 538.351073][ C1] r7:ddde24c0 r6:00000002 r5:82b15cd8 r4:000001fd [ 538.351307][ C1] [<809cd694>] (ledtrig_cpu) from [<80227a38>] (arch_cpu_idle_exit+0x14/0x18) [ 538.351615][ C1] r9:00000000 r8:00000001 r7:8280c710 r6:83216000 r5:8280c6d0 r4:00000001 [ 538.351887][ C1] [<80227a24>] (arch_cpu_idle_exit) from [<802b168c>] (do_idle+0x5c/0x2d8) [ 538.352198][ C1] [<802b1630>] (do_idle) from [<802b1c38>] (cpu_startup_entry+0x30/0x34) [ 538.352484][ C1] r10:00000000 r9:414fc0f0 r8:80003000 r7:82a7b4a4 r6:83216000 r5:00000001 [ 538.352738][ C1] r4:00000092 [ 538.352876][ C1] [<802b1c08>] (cpu_startup_entry) from [<8022f360>] (secondary_start_kernel+0x128/0x194) [ 538.353173][ C1] [<8022f238>] (secondary_start_kernel) from [<80220094>] (__enable_mmu+0x0/0xc) [ 538.353470][ C1] r7:82a7b4a4 r6:30c0387d r5:00000000 r4:830b7bc0 [ 539.858611][ C1] SMP: failed to stop secondary CPUs [ 539.860272][ C1] Rebooting in 86400 seconds..