[ 12.000941][ T30] audit: type=1400 audit(1714297846.727:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.005435][ T30] audit: type=1400 audit(1714297846.727:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.220840][ T225] sshd (225) used greatest stack depth: 22288 bytes left Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. 2024/04/28 09:50:53 fuzzer started 2024/04/28 09:50:53 dialing manager at 10.128.0.163:30004 [ 19.157660][ T30] audit: type=1400 audit(1714297853.897:66): avc: denied { node_bind } for pid=282 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 19.177929][ T30] audit: type=1400 audit(1714297853.897:67): avc: denied { name_bind } for pid=282 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 19.205524][ T30] audit: type=1400 audit(1714297853.937:68): avc: denied { integrity } for pid=290 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 19.209209][ T290] cgroup: Unknown subsys name 'net' [ 19.227683][ T30] audit: type=1400 audit(1714297853.937:69): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.255260][ T30] audit: type=1400 audit(1714297853.937:70): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.255401][ T290] cgroup: Unknown subsys name 'devices' [ 19.277195][ T30] audit: type=1400 audit(1714297853.967:71): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.418801][ T290] cgroup: Unknown subsys name 'hugetlb' [ 19.424280][ T290] cgroup: Unknown subsys name 'rlimit' [ 19.638930][ T30] audit: type=1400 audit(1714297854.377:72): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.663447][ T30] audit: type=1400 audit(1714297854.377:73): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.686359][ T30] audit: type=1400 audit(1714297854.377:74): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.702694][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.717867][ T30] audit: type=1400 audit(1714297854.457:75): avc: denied { relabelto } for pid=292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.741952][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/28 09:50:54 code coverage: enabled 2024/04/28 09:50:54 comparison tracing: enabled 2024/04/28 09:50:54 extra coverage: enabled 2024/04/28 09:50:54 delay kcov mmap: mmap returned an invalid pointer 2024/04/28 09:50:54 setuid sandbox: enabled 2024/04/28 09:50:54 namespace sandbox: enabled 2024/04/28 09:50:54 Android sandbox: enabled 2024/04/28 09:50:54 fault injection: enabled 2024/04/28 09:50:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/28 09:50:54 net packet injection: enabled 2024/04/28 09:50:54 net device setup: enabled 2024/04/28 09:50:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/28 09:50:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/28 09:50:54 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/28 09:50:54 USB emulation: enabled 2024/04/28 09:50:54 hci packet injection: /dev/vhci does not exist 2024/04/28 09:50:54 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/04/28 09:50:54 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2024/04/28 09:50:54 swap file: enabled 2024/04/28 09:50:54 starting 5 executor processes [ 20.314231][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.321110][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.328479][ T300] device bridge_slave_0 entered promiscuous mode [ 20.336085][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.343108][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.350288][ T300] device bridge_slave_1 entered promiscuous mode [ 20.439406][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.446257][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.453525][ T301] device bridge_slave_0 entered promiscuous mode [ 20.461032][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.467946][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.474971][ T301] device bridge_slave_1 entered promiscuous mode [ 20.524998][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.531958][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.539051][ T303] device bridge_slave_0 entered promiscuous mode [ 20.545640][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.552583][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.559635][ T303] device bridge_slave_1 entered promiscuous mode [ 20.608394][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.615239][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.622590][ T302] device bridge_slave_0 entered promiscuous mode [ 20.632220][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.639089][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.646144][ T305] device bridge_slave_0 entered promiscuous mode [ 20.652917][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.659781][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.666955][ T305] device bridge_slave_1 entered promiscuous mode [ 20.673390][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.680250][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.687453][ T302] device bridge_slave_1 entered promiscuous mode [ 20.771683][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.778629][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.785705][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.792534][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.820918][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.827775][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.834864][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.841700][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.886495][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.893357][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.900444][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.907234][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.928830][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.935663][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.942787][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.949568][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.970699][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.977562][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.984647][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.991466][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.013469][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.021771][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.030240][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.037554][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.045507][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.053913][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.060895][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.068111][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.075827][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.084066][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.091087][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.098111][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.105056][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.112381][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.119592][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.148255][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.156331][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.164933][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.172687][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.179848][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.186995][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.194789][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.202516][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.210519][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.217360][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.224591][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.232478][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.239315][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.261982][ T301] device veth0_vlan entered promiscuous mode [ 21.277353][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.286177][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.294160][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.303509][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.311573][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.318412][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.325555][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.333520][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.340365][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.347656][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.355334][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.363411][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.370254][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.377396][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.385265][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.392056][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.399190][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.406856][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.422769][ T303] device veth0_vlan entered promiscuous mode [ 21.433865][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.441714][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.449540][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.457744][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.465784][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.473538][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.481399][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.488689][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.503238][ T300] device veth0_vlan entered promiscuous mode [ 21.509832][ T305] device veth0_vlan entered promiscuous mode [ 21.515985][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.524133][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.532284][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.539895][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.547713][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.555422][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.563233][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.571199][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.579295][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.586532][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.593857][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.601803][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.610007][ T303] device veth1_macvtap entered promiscuous mode [ 21.623052][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.630713][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.638784][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.646812][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.654706][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.662414][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.670380][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.682342][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.690542][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.701306][ T301] device veth1_macvtap entered promiscuous mode [ 21.709471][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.716812][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.724720][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.732431][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.740414][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.750577][ T300] device veth1_macvtap entered promiscuous mode [ 21.767134][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.774635][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.783300][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.791455][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.799417][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.807522][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready executing program 2: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="840e0000", @ANYBLOB="000000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb2"], 0xe84}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23f", 0x25}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 21.815361][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.837368][ T305] device veth1_macvtap entered promiscuous mode [ 21.841314][ T330] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.862352][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.870320][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.878443][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.886447][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.894938][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.903100][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = gettid() r2 = eventfd2(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = dup(r2) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) [ 21.911245][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.924776][ T302] device veth0_vlan entered promiscuous mode [ 21.939320][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.947025][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.961080][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready executing program 2: r0 = gettid() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid, 0x22}], [], 0x6b}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)) [ 21.971263][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.980654][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.990085][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.010507][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780), &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fb000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x26, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 22.019509][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.027910][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.036168][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.046569][ T302] device veth1_macvtap entered promiscuous mode executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 22.080075][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.088067][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.096389][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x6, {[@local, @local=@item_4={0x3, 0x2, 0x0, "2e649efc"}]}}, 0x0}, 0x0) [ 22.124008][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.137558][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.159095][ T347] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: syz_io_uring_setup(0x76cd, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000185000)) io_uring_setup(0x4401, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x0, 0x3) executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x0, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') [ 22.427139][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)="f3e6cd898663a8a95349f0fe96239509ee084b106847686f604a55ace5edd02717397804bb7c117a55228c1f43adab3241a61690f16ef251f034c41bec3beb849babae30bf45999f81286fae16a3b618c8b6f67df01b941100855693b2432f08a41b3cc2a40952ba6c40282558eea7da15dc70a76e579c0667b1ddc21bf185c86ef64d03d19314734e7661eda03781821b36ff4bebb2fa402d832dc1d61eef1d700ebef0356aa66104b150680124f1ceaed52830064ee179ace79abafaafd585cc2406a4735f12ef73bb9d73e0c49680d76eccc3fd04c386fb6e9667e1c9f23593ae52e2224266788b89dda45de3741b0ea3e84781aad42fdf512a8a986bf8b974a7d329792cb792a7da030fe27b70d0428296a569664c82f70f25dd86d99a381451489a9835f5281b39bb98e05f0443272e6e18b05597f0dc53f088c5cd79082d6ce432223f8b002dbdaf3c1883685863d43a76a99f686485df94b984fc7591173ea2a5237f412a4be072cd8cfe1e9594cb23b6e404462960badd25af3213ce781d716f8a2030919c14768e7ccf1fe2ca1b77c3084ab39e9ebe24fb44d090e60f237286625ea44bb02c2ada62c0ba8203611631066456701a6a7cc40b8652408b8e65e6165f25eb2416d1097962e2a4769463b38572a72022514057ed72217bf1d4c69a1beeb5f0dfdb327e8af3c65e50eb3868e4d106db6cae1c72772db2dbc253c718cba7f07dfee2205c4483049012dea347a983eab7b70db0b5813cdf12361e65376d34275cc60c420717e4023586408e1f08231e6eec346f4b510de555cefbc5b00b29b9f0b4a0353498e6bd90e0b41e4a82eaa4ed9f57407c9c85df5c3e315dc1d95148bbad76de2bdd1a056499624f0bed8ceea275a18c58bb5d2535ce0dcfde33f67f9b4cecd920d25b6455748ead62de7d7121c5612f62c96754bb8d794b3708a2ea35c60d6c3b9ffae8589c05a162a1f66fa5d007bfdd1e92c95f9e3f23ba3a591ec2b0428fd4b2b360681dfb35d43db2658d9d02d8edfbff2a519bc398354799e5f596843fe18f6ff43db1f01fb24d152ee3730d9d099c7910376c0edc6ed38b320b8cbc161e9768fb60b0ea83cd66ad209c65999d1a0c1a08d1b5198317a7bc725e735480917918bdb78103e2633b30bb22cb5d7323d00a1a95e3d923b0616e9caaf8cad8cc2ec628f4f8b642465ae0599841df2acda090a03137b3de9876397d4cc8a36722f80c5521ded5d6c62726d340cbd3536504775319b5e2fde841e2b409db313a6cb8c0a04c633c258034cae65bef3c749fee4b6391c159c1cfa26a7d9fde759d48e531bfb78fc7eff5d671076f145bc7f138158c00973faac5e1e321bb8543d54cdc3c275e2ac2f507bf81827f7c8e673f06c581d9858e6bc0f46e4402a1139055bc1ae1f56c1387a17ffa3783b3bb7f83b11f56036023768210f160df0f9ee700c957fc13988340e2d229fb4d75088022a4eaa986ee16d19a2d8b9945b336a3167defbe7f6619cc08894edc95afb4ab6e039a93ae8b479efd51f1209bfefddbfd1797686b811c42088168490858143d4ffae0a1ea47c0ce0eee4a5d577b623c6f51a520b30fdafb871b61f134597958e85fd71f8c40440d43fb4e829a4c0dda6b4906adda5a4301050b5f50a03e4b7d8b7a9d156e4729ed31aaedbb9bfc24710d86abdb4446e0a343ba47581df71ef239cdc58efee8ec89c9461e2db4e6f386a40c3e792562e64a9851cf86975c129c90a90171f56bfaa028fe3e1dce6b56af3a9a6b1af66833f1493d668f0963d07659bc10d56e6fb84a90436a2ffe9120f71e7e9a78f30902861879809731e6cf7c059293b69b52bc3d7a3cf1ecac8f04dd33d60552c68224ea0f4c921936478b239e15a8405a43fe4e14a26f447319ef953adef7d8459eabf9eb137fd594a89b07777727ced57a5d8b1593b473d6c56f32d4b8f54152d5cb8d35bb0ee7c2f1187d48895976d6cc92f2a2448ebf6589da0ad1001c8ea08f22a74874b6714df7bf31ab75649c91b37df46373a80a486b1717ab51a2920e258a6f47120386fc7a26f2119d26dd13f824781a7d389320c05e41ea4623e76dd4bfb3b0ef1a5ef88839588a1c5f582f0860ce8b7a06d961c9967f54514a4ed532917ad5f3e4990c0be0f69e86fefddc4f290294b3ba056e7f01195c8b7cc865365fad20014bd9445959122f340a9a0f32b3c768fc9b3b1c74bc1b5842baf1e05d48c4fcfbbe70693bf744e4f957dfd755ede4de7d9195ba49d7e0e0b9f69dac6dca9fce0edaf2f82e9972475a34fb3868152d0add735ee533909bd1cf743b6758ba405d3f8f01e8df4692d7be627c3068a665bbc154549af9942ffa3748d9ddef989b7bf021246f1934490d6c94ca1ae82e20f83a95526f4bd2bc4942ddcf1eaef68676cbbdb0635da867118cf38dd9cef4985d926f5a025fb79643b6bed9eceef3ac947b6e6ced991947a1c266af27b1e103affe71b4aa0663a4a291ca39b2730a65daebcba617ad4621f9f266b995fe1fc324c2ae8095317ced7c4a614243bcf36cbddb0bd8fc8c713be6211a7bb051bf28f43f2e00c037e0fe1e6ead30fcf57d4c18388232972f114dc55ab4b05ddbfe71c23a188ddcc0ea31de50144e470a463721450d9bf88bc0319df08f650d65b85ae3383ed8841825b8f0e1d328043aef2ea68a74a545b4b0962e64850f8d2395347c4f2b3b91edbd7968dc1029ff5453b6b24eda8b9c261d3244a277a31cdb3ead3dea35943d5eaf6f270544d969c5e21933780f2afa0b534a347011b34a7b390b192b3e9376d28f7c1f07ce4562a55b29546c79324c1adcff209d2d94a67fe096f0223ad3f5c7a3ea48bd50063f4a592a776670bfac6a380e1a062d5bed30676dd982f614122ec4f2739b8474df206e67d52749abfbbc238e8ba327753a67350de9f56f2c995bce5c820909874f6f0570170e9e2688f98f6a1a7ec6dc385cc409c61e11e4fb2dae659e10a889e3ee55d364a7d42598bcb689b7dd4df09e700ddaebdc4a7b1afaa41cbc1ab8f49c6c13d85c2e128332dd2b55ecfb7be25ab802572a41c6911a01cf09d8e955666dd6e792303bbf94768831a173c0bbe87eec38323343e395d57307fdec3b402411e77a0cbb18dd2dc3d6d0f6ca5c017d427ff2ecf6a7d7f45e8ba72419a8ac780b04bc974aa82c2673bd65673a8283ffae090b17eaa9c1142ce049d73768760a843f1b5c871246a9ec2a11b157dc886aef6d6b52640db8df0b7f268151f7d64c09e3b6de3896335971ba95d67e67295e42d3b9ccf945824b0bb25367454a7d14632e13c98858625cc6b2a36f1ee8b931383172b46e89c2492ceb9e31fce5b7794f42c29ef592c52991414fa75705c93e8802b27a9613276a5615aa33d3191f90ad91ddcbb6f7b547088c358b3ed69569465c9407188a2ed2ba13dc4ac39a2b78d8d8041a8fad745dc02b4e94638c99b2416c47aacd49c99b5461ba10f1870e03f3c4245a7741dfdc2095a5a5ed7ba14d8ac9415e45faf16246e98fc1d79d8405b831ae99776b4c1ca90f22d5899fb8399ba13939e676e4be133037cd444bab825301bfbe65c5345d3b49138e7aaf0c93e6c2ec5946bca684089c9a38b69cb5f230d1879fca7437b3ea5eca5bf162aa20c742eed009762aaa2c0137b5dd4dac8c039efd0e397378ce66e7b2730472de239343c404ecc32b58246a9deb2d6eeff97c925bea1ade496fb364f9b8382a40a5a9b7af9b21eba6d8585633c342dc79a85ff66a88a1e0bf22267aa336d6fa8f5af8e29ec7c025234ea3d6e8b795485ee5d94bccac15b6b1b6cc4a7df7c88a7664d59de1cb39a191708b6e90eda50c167ca1963fac51a16e62580bea72ed3f77ac74019f0f37c1bcf9d6c5b262bfa6703eba9da29e8c587d2340713f7bbd5380dfbeba88d9db3dfc661e7818fbbfde05251083336974a60b5b4645d2aa8d0034296f8c33f302485a0ad14246ffcabad41d7a61cfa77124e96a5bd9926494b719f87122bd7e46a169963e9182e3049ddbb62484da3979369c9d6791687137614c5b950fb5e8b7fa87a5aeafbfe9dc7b7d6362af9f4b16336d1883351bf4c8b5d9de67e7e4c0f8d2be54eedae54bb00e764a886096e73254451792ee2cb22a6b3abc7c18c363cd242bcad479e1e880540ef2880cab271f2381e900464606a04e7997164c003b36d8ffdea16a7c7adc8003c6a7973bd75dffca23b2db15e8f26e4a9e7f5310d6bf790bc577033ebd8c0dcf243d51cc5506ec09c4850c51f1395510b69b4fa5ba28bb2a38361cbb0215e8cb58b7c3d518864f9bbc916d0d7c8858914692572e00b23e425fbd0155c3319c0328ee94e6aa34e1257b9f76e8347b6c085ee6bcbf14a262862f54ea9a690219bdd1291fbb35e993be12a561670b83bcd776575dbdc0af5ef4b0ce9e5facbde2e4a05c55cd1badec58c2eec13e3999e80f63254e08e607bdb775b41d6dd2907ea80ab0ee86ae342f86a9b2b835d7ad5b2e3d8d77319f5e5cfe7218c9a30a00d7f73e5b7926fcd746f291b286ede65b5f78a2364c1097eb4b7ba6539d3173759047f52972371b1a7f47b2429b23b4a41c25ac7e56335cc303d72379e69e58c46c17a995eadcb2b67f9b32401b3915b81b67c807dc198d7b2a3aac9a6ec4e639973be90267fbba71da72f782b413838d8c4da1f5998f0fb918c0262a225ab2889ed532ddd1047fa221a09a6ba8744302a94877298ea31e6cf1dafb4152d8a8dbebabc2fc895a4c6c1f86c7a0936657bd82f87c8bb2f99772e5fadc8bbe5c26ea88e2e8fa8bc73266bab93bf5a048edacf20c542c8f49cf6307f6290535c109f46d0689c5f4f6790bf127134e4782028aa9761a2c6e6dcd509ec6c43a359c3975881153c267b0abd5fafa6504813bdb6c4d328d4d1162def75eeba1417170c962d9c2da51d59727ca5864ffdb6f91f9294f6eaedd0d322feed9d3368c28e6d3c31a66ad0d143e65b1081b6a11a699c9c4fe2993c2594ea9d6e1496fac2103ba6ac60defd4b20438b1fd143af2e0746435b22e523503a3319370b81461fe2fef049053f4393170ec0e843b73013f0a4d21d33d5586eda7c3f8aee7189eaa660050d2ce86c9f6e3aa0a75b56007924311feeba24611a24383089758bde35c967b4088dbaf3f61ca7fe60da18b4a983ae47f7bce743f288b7970a91a763c4a637a89b01afae8133a7eb08883969fee6a3c76fdccec45840999dc92207bfde9b1851b477b9f3ae8a356600eb06b26a2411ff64dff69b07f286009c9abc804642ef9be51ed8ee31a2c0fca4f21d96380ab09b1713de72959bc9fe482cd181c49412278d1591e9d63bb675f748285efc200942ff258f3243fb39cc2b07b3433b5b199a0bc3d850de95525efc973fbf699085f19e268433be54aef832ca368d72454e9f47ca857c46d1ebdb1da23fbaf85b3d30c293cd14b6c8e33f0e6a7b559a097cfb9387dd33f62a05e4394e02733d8bf1e1cb79bd563e2845ed4452150cecb787ca939d5a4ae0d5cb45d7a8eda72f7e023088d2ad148ce708498a734ccaea54bc38354aeab4643a82e9b1143861eb08e6623d22744888c31a66f8b84c4e87896462721c0c9759fd176b96259c10f64416e0714c40751337f153c5aeb3b2982c92ba8d935faf478b28f1bc304a0684c51dbebcaa6191e2de99017c079270f2489a077b7fa02dc20d3c7900c951c609f4ccbcceeeb868c0a310c052539bdbb8cfc761d40451a5bd5ea8997bd167fb56f901ee7d2498a96", 0x1000, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0xd7d418}, 0x1c) executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) executing program 3: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x2004001, &(0x7f00000011c0)=ANY=[], 0x1, 0x5526, &(0x7f0000006940)="$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") unshare(0x22000600) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xf502, 0x0) executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, 0x0, 0xe) executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) dup3(r2, r3, 0x0) sendmsg$can_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = dup(r0) write$FUSE_WRITE(r4, &(0x7f0000000100)={0x18}, 0x18) recvmmsg$unix(r1, &(0x7f0000002380), 0x0, 0x20, &(0x7f0000000000)={0x0, 0x3938700}) read$FUSE(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000a240), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r5, 0x540c, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)={@initdev, @multicast1}, &(0x7f0000000200)=0xc) r6 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'ip6gretap0\x00'}) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1) executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f00000000c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00', r0}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x5451, 0x0) executing program 0: r0 = eventfd(0x800a6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) dup(r0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 22.718823][ T362] loop3: detected capacity change from 0 to 40427 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) [ 22.778300][ T362] F2FS-fs (loop3): Invalid segment/section count (280 != 24 * 1) [ 22.785996][ T362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 22.795210][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.795956][ T362] F2FS-fs (loop3): invalid crc value [ 22.809169][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1) executing program 2: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="840e0000", @ANYBLOB="000000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb2"], 0xe84}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23f", 0x25}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00', r0}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 22.821026][ T20] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 22.839675][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.847574][ T362] F2FS-fs (loop3): Found nat_bits in checkpoint [ 22.858163][ T20] usb 5-1: config 0 descriptor?? executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = gettid() r2 = eventfd2(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = dup(r2) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) executing program 2: syz_io_uring_setup(0x76cd, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000185000)) io_uring_setup(0x4401, &(0x7f0000001040)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x0, 0x3) executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) [ 22.912343][ T362] F2FS-fs (loop3): recover fsync data on readonly fs [ 22.920801][ T362] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 22.930023][ T362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1) executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00', r0}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780), &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) [ 123.107149][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 123.114192][ C1] (detected by 1, t=10002 jiffies, g=965, q=141) [ 123.120417][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294949529-4294939526), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 123.133875][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g965 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 123.144711][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 123.154520][ C1] rcu: RCU grace-period kthread stack dump: [ 123.160254][ C1] task:rcu_preempt state:R running task stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 123.170938][ C1] Call Trace: [ 123.174048][ C1] [ 123.176842][ C1] __schedule+0xccc/0x1590 [ 123.181076][ C1] ? __sched_text_start+0x8/0x8 [ 123.185763][ C1] ? __kasan_check_write+0x14/0x20 [ 123.190711][ C1] schedule+0x11f/0x1e0 [ 123.194702][ C1] schedule_timeout+0x18c/0x370 [ 123.199390][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 123.204425][ C1] ? console_conditional_schedule+0x30/0x30 [ 123.210159][ C1] ? update_process_times+0x200/0x200 [ 123.215363][ C1] ? prepare_to_swait_event+0x308/0x320 [ 123.220751][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 123.225350][ C1] ? debug_smp_processor_id+0x17/0x20 [ 123.230553][ C1] ? __note_gp_changes+0x4ab/0x920 [ 123.235501][ C1] ? rcu_gp_init+0xc30/0xc30 [ 123.239923][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 123.244960][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 123.249386][ C1] rcu_gp_kthread+0xa4/0x350 [ 123.253811][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 123.258496][ C1] ? rcu_barrier_callback+0x50/0x50 [ 123.263531][ C1] ? __kasan_check_read+0x11/0x20 [ 123.268392][ C1] ? __kthread_parkme+0xb2/0x200 [ 123.273166][ C1] kthread+0x421/0x510 [ 123.277072][ C1] ? rcu_barrier_callback+0x50/0x50 [ 123.282112][ C1] ? kthread_blkcg+0xd0/0xd0 [ 123.286531][ C1] ret_from_fork+0x1f/0x30 [ 123.290787][ C1] [ 123.293656][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 123.299821][ C1] NMI backtrace for cpu 1 [ 123.303994][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 123.313352][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 123.323248][ C1] Call Trace: [ 123.326372][ C1] [ 123.329060][ C1] dump_stack_lvl+0x151/0x1b7 [ 123.333576][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 123.339229][ C1] dump_stack+0x15/0x17 [ 123.343209][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 123.347984][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 123.353973][ C1] ? panic+0x751/0x751 [ 123.357879][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 123.363780][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 123.369595][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 123.375508][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 123.381225][ C1] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 123.387221][ C1] print_other_cpu_stall+0x112d/0x1340 [ 123.392508][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 123.397283][ C1] ? __kasan_check_read+0x11/0x20 [ 123.402141][ C1] ? trigger_load_balance+0x228/0xfc0 [ 123.407354][ C1] rcu_sched_clock_irq+0xaec/0x12f0 [ 123.412386][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 123.418378][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 123.423411][ C1] update_process_times+0x198/0x200 [ 123.428453][ C1] tick_sched_timer+0x188/0x240 [ 123.433126][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 123.438509][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 123.443545][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 123.448494][ C1] ? clockevents_program_event+0x22f/0x300 [ 123.454134][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 123.460035][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 123.464812][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 123.470538][ C1] sysvec_apic_timer_interrupt+0x44/0xc0 [ 123.476002][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 123.481828][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 123.486595][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 123.506039][ C1] RSP: 0018:ffffc900001d07e0 EFLAGS: 00000246 [ 123.511935][ C1] RAX: 0000000000000001 RBX: 1ffff9200003a100 RCX: 1ffffffff0d1aa9c [ 123.519747][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7137ed4 [ 123.527561][ C1] RBP: ffffc900001d0890 R08: dffffc0000000000 R09: ffffed103ee26fdb [ 123.535370][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 123.543184][ C1] R13: ffff8881f7137ed4 R14: 0000000000000001 R15: 1ffff9200003a104 [ 123.550998][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 123.556982][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 123.561931][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 123.567835][ C1] ? __kasan_slab_free+0x11/0x20 [ 123.572606][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 123.578856][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 123.583368][ C1] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 123.589015][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 123.595000][ C1] ? acpi_idle_enter+0x416/0x760 [ 123.599825][ C1] ? cpuidle_enter+0x5f/0xa0 [ 123.604198][ C1] ? do_idle+0x36b/0x5d0 [ 123.608279][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 123.613062][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 123.618088][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 123.623384][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 123.628417][ C1] ? kvfree+0x35/0x40 [ 123.632234][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x6e8 [ 123.637735][ C1] bpf_trace_run2+0xec/0x210 [ 123.642159][ C1] ? debug_smp_processor_id+0x17/0x20 [ 123.647367][ C1] ? kasan_quarantine_put+0x34/0x1a0 [ 123.652489][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 123.657177][ C1] ? kvfree+0x35/0x40 [ 123.660994][ C1] ? ____kasan_slab_free+0x131/0x160 [ 123.666115][ C1] ? kvfree+0x35/0x40 [ 123.669938][ C1] __bpf_trace_kfree+0x6f/0x90 [ 123.674533][ C1] ? kvfree+0x35/0x40 [ 123.678554][ C1] kfree+0x1f3/0x220 [ 123.682289][ C1] ? kmem_cache_free+0x116/0x2e0 [ 123.687060][ C1] ? __bpf_prog_put_noref+0x2c0/0x2c0 [ 123.692270][ C1] kvfree+0x35/0x40 [ 123.695914][ C1] __bpf_prog_put_rcu+0x3b/0xc0 [ 123.700601][ C1] ? __bpf_prog_put_noref+0x2c0/0x2c0 [ 123.705808][ C1] rcu_do_batch+0x57a/0xc10 [ 123.710150][ C1] ? local_bh_enable+0x20/0x20 [ 123.714749][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 123.720044][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 123.725686][ C1] ? rcu_report_qs_rnp+0x381/0x390 [ 123.730635][ C1] rcu_core+0x517/0x1020 [ 123.734714][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 123.739748][ C1] rcu_core_si+0x9/0x10 [ 123.743737][ C1] __do_softirq+0x26d/0x5bf [ 123.748081][ C1] __irq_exit_rcu+0x50/0xf0 [ 123.752419][ C1] irq_exit_rcu+0x9/0x10 [ 123.756498][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 123.761967][ C1] [ 123.764851][ C1] [ 123.767630][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 123.773447][ C1] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 123.778835][ C1] Code: 89 de 48 83 e6 08 31 ff e8 b7 6e a7 fc 48 83 e3 08 0f 85 b0 00 00 00 0f 1f 44 00 00 e8 63 6a a7 fc 0f 00 2d 6c 8a c0 00 fb f4 e9 e1 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 123.798271][ C1] RSP: 0018:ffffc90000157c30 EFLAGS: 000002d3 [ 123.804175][ C1] RAX: ffffffff84c8bbcd RBX: 0000000000000000 RCX: ffff888100334f00 [ 123.811982][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.819793][ C1] RBP: ffffc90000157c70 R08: ffffffff84c8bbb9 R09: ffffed10200669e1 [ 123.827613][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 123.835416][ C1] R13: ffff888102dbd804 R14: dffffc0000000000 R15: ffff888105dc0064 [ 123.843229][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 123.848001][ C1] ? acpi_idle_enter+0x40d/0x760 [ 123.852778][ C1] ? intel_idle_ibrs+0x130/0x130 [ 123.857552][ C1] cpuidle_enter_state+0x5e1/0x1550 [ 123.862583][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 123.867793][ C1] ? menu_enable_device+0x380/0x380 [ 123.872825][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 123.877514][ C1] cpuidle_enter+0x5f/0xa0 [ 123.881764][ C1] do_idle+0x36b/0x5d0 [ 123.885670][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 123.890707][ C1] cpu_startup_entry+0x18/0x20 [ 123.895307][ C1] start_secondary+0x2e6/0x3a0 [ 123.899905][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 123.905635][ C1] [ 155.059690][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.3:408] [ 155.068013][ C0] Modules linked in: [ 155.071737][ C0] CPU: 0 PID: 408 Comm: syz-executor.3 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 155.081718][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 155.091700][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 155.096473][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 155.116436][ C0] RSP: 0018:ffffc9000539f320 EFLAGS: 00000246 [ 155.122338][ C0] RAX: 0000000000000003 RBX: 1ffff92000a73e68 RCX: ffffffff8154fa7f [ 155.130149][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810badac48 [ 155.137960][ C0] RBP: ffffc9000539f3d0 R08: dffffc0000000000 R09: ffffed102175b58a [ 155.145771][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 155.153581][ C0] R13: ffff88810badac48 R14: 0000000000000003 R15: 1ffff92000a73e6c [ 155.161395][ C0] FS: 00007f228c01e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 155.170167][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.176583][ C0] CR2: 0000000020001000 CR3: 00000001285e4000 CR4: 00000000003506b0 [ 155.184398][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.192205][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.200020][ C0] Call Trace: [ 155.203145][ C0] [ 155.205844][ C0] ? show_regs+0x58/0x60 [ 155.209918][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 155.214862][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 155.220068][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 155.225276][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 155.230228][ C0] ? clockevents_program_event+0x22f/0x300 [ 155.235865][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 155.241768][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 155.246716][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 155.252637][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 155.258260][ C0] [ 155.261038][ C0] [ 155.263841][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 155.269807][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 155.275878][ C0] ? kvm_wait+0x147/0x180 [ 155.280127][ C0] ? asm_common_interrupt+0x27/0x40 [ 155.285161][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 155.290112][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 155.296187][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 155.302093][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 155.308338][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 155.313110][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 155.318148][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 155.323444][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 155.328477][ C0] ? sock_map_unref+0x352/0x4d0 [ 155.333161][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x6e8 [ 155.338550][ C0] bpf_trace_run2+0xec/0x210 [ 155.343015][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 155.347658][ C0] ? sock_map_unref+0x352/0x4d0 [ 155.352343][ C0] ? sock_map_unref+0x352/0x4d0 [ 155.357029][ C0] __bpf_trace_kfree+0x6f/0x90 [ 155.361629][ C0] ? sock_map_unref+0x352/0x4d0 [ 155.366314][ C0] kfree+0x1f3/0x220 [ 155.370050][ C0] sock_map_unref+0x352/0x4d0 [ 155.374562][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 155.379693][ C0] ? ida_alloc_range+0x987/0xa80 [ 155.384458][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x6e8 [ 155.389839][ C0] bpf_trace_run2+0xec/0x210 [ 155.394351][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 155.399044][ C0] ? ida_alloc_range+0x987/0xa80 [ 155.403825][ C0] ? ida_alloc_range+0x987/0xa80 [ 155.408673][ C0] __bpf_trace_kfree+0x6f/0x90 [ 155.413276][ C0] ? ida_alloc_range+0x987/0xa80 [ 155.418046][ C0] kfree+0x1f3/0x220 [ 155.421799][ C0] ? xas_nomem+0x19a/0x1d0 [ 155.426031][ C0] ida_alloc_range+0x987/0xa80 [ 155.430635][ C0] ? idr_replace+0x230/0x230 [ 155.435058][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 155.439658][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 155.444864][ C0] set_anon_super+0x2c/0xb0 [ 155.449204][ C0] sget+0x218/0x4c0 [ 155.452857][ C0] ? free_anon_bdev+0x30/0x30 [ 155.457363][ C0] ? ovl_mount+0x40/0x40 [ 155.461458][ C0] mount_nodev+0x31/0xf0 [ 155.465530][ C0] ovl_mount+0x2c/0x40 [ 155.469430][ C0] legacy_get_tree+0xf1/0x190 [ 155.473948][ C0] ? virtio_fs_request_complete+0xd70/0xd70 [ 155.479676][ C0] vfs_get_tree+0x88/0x290 [ 155.483932][ C0] do_new_mount+0x2ba/0xb30 [ 155.488362][ C0] ? do_move_mount_old+0x160/0x160 [ 155.493295][ C0] ? path_mount+0x40a/0x1070 [ 155.497722][ C0] path_mount+0x671/0x1070 [ 155.501976][ C0] __se_sys_mount+0x2c4/0x3b0 [ 155.506491][ C0] ? __x64_sys_mount+0xd0/0xd0 [ 155.511089][ C0] ? __kasan_check_read+0x11/0x20 [ 155.515949][ C0] __x64_sys_mount+0xbf/0xd0 [ 155.520384][ C0] do_syscall_64+0x3d/0xb0 [ 155.524627][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 155.530358][ C0] RIP: 0033:0x7f228d2aaea9 [ 155.534620][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 155.554052][ C0] RSP: 002b:00007f228c01e0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.562297][ C0] RAX: ffffffffffffffda RBX: 00007f228d3d8f80 RCX: 00007f228d2aaea9 [ 155.570111][ C0] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 155.577921][ C0] RBP: 00007f228d2f74a4 R08: 0000000020000400 R09: 0000000000000000 [ 155.585731][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.593543][ C0] R13: 000000000000000b R14: 00007f228d3d8f80 R15: 00007fffd49a76f8 [ 155.601357][ C0] [ 155.604219][ C0] Sending NMI from CPU 0 to CPUs 1: [ 155.609281][ C1] NMI backtrace for cpu 1 [ 155.609291][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 155.609310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 155.609320][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 155.609343][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 155.609357][ C1] RSP: 0018:ffffc900001d07e0 EFLAGS: 00000246 [ 155.609372][ C1] RAX: 0000000000000001 RBX: 1ffff9200003a100 RCX: 1ffffffff0d1aa9c [ 155.609385][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7137ed4 [ 155.609396][ C1] RBP: ffffc900001d0890 R08: dffffc0000000000 R09: ffffed103ee26fdb [ 155.609410][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 155.609422][ C1] R13: ffff8881f7137ed4 R14: 0000000000000001 R15: 1ffff9200003a104 [ 155.609434][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 155.609448][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.609461][ C1] CR2: 0000001b2e423000 CR3: 000000012860a000 CR4: 00000000003506a0 [ 155.609476][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.609486][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.609497][ C1] Call Trace: [ 155.609502][ C1] [ 155.609508][ C1] ? show_regs+0x58/0x60 [ 155.609538][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 155.609559][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 155.609581][ C1] ? kvm_wait+0x147/0x180 [ 155.609596][ C1] ? kvm_wait+0x147/0x180 [ 155.609618][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 155.609637][ C1] ? nmi_handle+0xa8/0x280 [ 155.609655][ C1] ? kvm_wait+0x147/0x180 [ 155.609670][ C1] ? default_do_nmi+0x69/0x160 [ 155.609689][ C1] ? exc_nmi+0xaf/0x120 [ 155.609705][ C1] ? end_repeat_nmi+0x16/0x31 [ 155.609723][ C1] ? kvm_wait+0x147/0x180 [ 155.609739][ C1] ? kvm_wait+0x147/0x180 [ 155.609755][ C1] ? kvm_wait+0x147/0x180 [ 155.609771][ C1] [ 155.609775][ C1] [ 155.609780][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 155.609797][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 155.609815][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 155.609838][ C1] ? __kasan_slab_free+0x11/0x20 [ 155.609855][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 155.609874][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 155.609893][ C1] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 155.609911][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 155.609927][ C1] ? acpi_idle_enter+0x416/0x760 [ 155.609945][ C1] ? cpuidle_enter+0x5f/0xa0 [ 155.609963][ C1] ? do_idle+0x36b/0x5d0 [ 155.609981][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 155.610000][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 155.610020][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 155.610040][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 155.610058][ C1] ? kvfree+0x35/0x40 [ 155.610074][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x6e8 [ 155.610088][ C1] bpf_trace_run2+0xec/0x210 [ 155.610107][ C1] ? debug_smp_processor_id+0x17/0x20 [ 155.610125][ C1] ? kasan_quarantine_put+0x34/0x1a0 [ 155.610144][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 155.610161][ C1] ? kvfree+0x35/0x40 [ 155.610176][ C1] ? ____kasan_slab_free+0x131/0x160 [ 155.610192][ C1] ? kvfree+0x35/0x40 [ 155.610207][ C1] __bpf_trace_kfree+0x6f/0x90 [ 155.610224][ C1] ? kvfree+0x35/0x40 [ 155.610238][ C1] kfree+0x1f3/0x220 [ 155.610255][ C1] ? kmem_cache_free+0x116/0x2e0 [ 155.610274][ C1] ? __bpf_prog_put_noref+0x2c0/0x2c0 [ 155.610291][ C1] kvfree+0x35/0x40 [ 155.610305][ C1] __bpf_prog_put_rcu+0x3b/0xc0 [ 155.610321][ C1] ? __bpf_prog_put_noref+0x2c0/0x2c0 [ 155.610338][ C1] rcu_do_batch+0x57a/0xc10 [ 155.610359][ C1] ? local_bh_enable+0x20/0x20 [ 155.610377][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 155.610396][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 155.610417][ C1] ? rcu_report_qs_rnp+0x381/0x390 [ 155.610435][ C1] rcu_core+0x517/0x1020 [ 155.610455][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 155.610476][ C1] rcu_core_si+0x9/0x10 [ 155.610492][ C1] __do_softirq+0x26d/0x5bf [ 155.610509][ C1] __irq_exit_rcu+0x50/0xf0 [ 155.610532][ C1] irq_exit_rcu+0x9/0x10 [ 155.610549][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 155.610568][ C1] [ 155.610572][ C1] [ 155.610577][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 155.610594][ C1] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 155.610614][ C1] Code: 89 de 48 83 e6 08 31 ff e8 b7 6e a7 fc 48 83 e3 08 0f 85 b0 00 00 00 0f 1f 44 00 00 e8 63 6a a7 fc 0f 00 2d 6c 8a c0 00 fb f4 e9 e1 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 155.610627][ C1] RSP: 0018:ffffc90000157c30 EFLAGS: 000002d3 [ 155.610641][ C1] RAX: ffffffff84c8bbcd RBX: 0000000000000000 RCX: ffff888100334f00 [ 155.610653][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.610663][ C1] RBP: ffffc90000157c70 R08: ffffffff84c8bbb9 R09: ffffed10200669e1 [ 155.610676][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 155.610687][ C1] R13: ffff888102dbd804 R14: dffffc0000000000 R15: ffff888105dc0064 [ 155.610701][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 155.610719][ C1] ? acpi_idle_enter+0x40d/0x760 [ 155.610738][ C1] ? intel_idle_ibrs+0x130/0x130 [ 155.610757][ C1] cpuidle_enter_state+0x5e1/0x1550 [ 155.610776][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 155.610794][ C1] ? menu_enable_device+0x380/0x380 [ 155.610813][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 155.610831][ C1] cpuidle_enter+0x5f/0xa0 [ 155.610848][ C1] do_idle+0x36b/0x5d0 [ 155.610865][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 155.610885][ C1] cpu_startup_entry+0x18/0x20 [ 155.610902][ C1] start_secondary+0x2e6/0x3a0 [ 155.610918][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 155.610938][ C1]