Extracting prog: 2m4.684580076s
Minimizing prog: 3m52.789185113s
Simplifying prog options: 0s
Extracting C: 36.458166905s
Simplifying C: 6m36.665063278s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x176, &(0x7f0000000440)="$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")
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

program crashed: WARNING in do_open_execat
program crashed: WARNING in do_open_execat
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=42.411028081s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x176, &(0x7f0000000440)="$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")

program did not crash
testing program (duration=42.411028081s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): execve
detailed listing:
executing program 0:
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

program did not crash
testing program (duration=42.411028081s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x176, &(0x7f0000000440)="$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")
execve(0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=42.411028081s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
program crashed: WARNING in do_open_execat
simplifying C reproducer
testing compiled C program (duration=42.411028081s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
program crashed: WARNING in do_open_execat
testing compiled C program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
program crashed: WARNING in do_open_execat
testing compiled C program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
program crashed: WARNING in do_open_execat
testing compiled C program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
program crashed: WARNING in do_open_execat
testing compiled C program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
program crashed: WARNING in do_open_execat
testing compiled C program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
program crashed: WARNING in do_open_execat
testing compiled C program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
program crashed: WARNING in do_open_execat
testing program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x176, &(0x7f0000000440)="$eJzskbtOOkEYxc8sy+1f/KMJFQ0kGsVC2V3UGBstsfcBJLAicfHCkiiEYo0xFBbG0ifgNUx8AS0MsbamINZmzVydfQbnV3D2O3O+by6chJdhFsD3fNTEPhgp/McbIbABlAj3ZhbXR6HvQh+44FXkDoR/K7QYDoanjSDwe+XdMhYTBoAv5ikr3LuxMCvQxul81KQzjwDEcRxTrwXQOCzMiMykPmy2kcwUbaDALhGrDE3QYhVAtd+9qIaD4Xqn22j7bf/M82rbzqbjbHnV407gO/yXaFuIq4DqGgD6XnltPQ3gTmT+IQnRjibWid6b0d6wspTstZBX33IGwbPqzUL+X8AhVpADcBWRX3fKp9hgV6qDICUK19bOx1M5trDRPA9aYxAQ2TaBrWa4n0irwtOL2k4kjzoWuiy0LnSiPSOllEkaNptwL6pKJI/Yc2nwutHv91wgw7885XkLEbRBdNcnK3m5FwsGg8FgMBgMBoPB8Nf5CQAA//96G3UC")
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

program crashed: WARNING in do_open_execat
validation run: crashed=true
testing program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x176, &(0x7f0000000440)="$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")
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

program crashed: WARNING in do_open_execat
validation run: crashed=true
testing program (duration=42.411028081s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-execve
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x176, &(0x7f0000000440)="$eJzskbtOOkEYxc8sy+1f/KMJFQ0kGsVC2V3UGBstsfcBJLAicfHCkiiEYo0xFBbG0ifgNUx8AS0MsbamINZmzVydfQbnV3D2O3O+by6chJdhFsD3fNTEPhgp/McbIbABlAj3ZhbXR6HvQh+44FXkDoR/K7QYDoanjSDwe+XdMhYTBoAv5ikr3LuxMCvQxul81KQzjwDEcRxTrwXQOCzMiMykPmy2kcwUbaDALhGrDE3QYhVAtd+9qIaD4Xqn22j7bf/M82rbzqbjbHnV407gO/yXaFuIq4DqGgD6XnltPQ3gTmT+IQnRjibWid6b0d6wspTstZBX33IGwbPqzUL+X8AhVpADcBWRX3fKp9hgV6qDICUK19bOx1M5trDRPA9aYxAQ2TaBrWa4n0irwtOL2k4kjzoWuiy0LnSiPSOllEkaNptwL6pKJI/Yc2nwutHv91wgw7885XkLEbRBdNcnK3m5FwsGg8FgMBgMBoPB8Nf5CQAA//96G3UC")
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

program crashed: WARNING in do_open_execat
validation run: crashed=true
reproducing took 16m14.321973614s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 8
process 'syz.0.17' launched './file0/file0' with NULL argv: empty string added
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4511 at fs/exec.c:936 do_open_execat+0x4fc/0x5ec fs/exec.c:936
Modules linked in:
CPU: 1 PID: 4511 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : do_open_execat+0x4fc/0x5ec fs/exec.c:936
lr : do_open_execat+0x4fc/0x5ec fs/exec.c:936
sp : ffff800020f67a60
x29: ffff800020f67ad0 x28: 1ffff000041ecf7c x27: dfff800000000000
x26: dfff800000000000 x25: ffff7000041ecf4c x24: 0000000000000000
x23: ffff800020f67a60 x22: ffff0000ea3a0b40 x21: ffff0000cd62c400
x20: 00000000ffff94ed x19: ffff0000d8e5b180 x18: ffff800011abbcc0
x17: ffff8000181f9000 x16: ffff8000082e7de8 x15: 0000000000000000
x14: 000000000000000b x13: 1ffff00002a180b1 x12: 0000000000ff0100
x11: ff008000089b06ec x10: 0000000000000000 x9 : ffff8000089b06ec
x8 : ffff0000d300d340 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010
x2 : 0000000000000000 x1 : 00000000000094ed x0 : 0000000000008fff
Call trace:
 do_open_execat+0x4fc/0x5ec fs/exec.c:936
 bprm_execve+0x468/0x154c fs/exec.c:1849
 do_execveat_common+0x648/0x7dc fs/exec.c:1979
 do_execve fs/exec.c:2053 [inline]
 __do_sys_execve fs/exec.c:2129 [inline]
 __se_sys_execve fs/exec.c:2124 [inline]
 __arm64_sys_execve+0x98/0xb0 fs/exec.c:2124
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4434
hardirqs last  enabled at (4433): [<ffff800011a48554>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (4433): [<ffff800011a48554>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (4434): [<ffff80001195cc30>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4172): [<ffff8000080309e0>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (4170): [<ffff8000080309ac>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 8
process 'syz.0.17' launched './file0/file0' with NULL argv: empty string added
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4511 at fs/exec.c:936 do_open_execat+0x4fc/0x5ec fs/exec.c:936
Modules linked in:
CPU: 1 PID: 4511 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : do_open_execat+0x4fc/0x5ec fs/exec.c:936
lr : do_open_execat+0x4fc/0x5ec fs/exec.c:936
sp : ffff800020f67a60
x29: ffff800020f67ad0 x28: 1ffff000041ecf7c x27: dfff800000000000
x26: dfff800000000000 x25: ffff7000041ecf4c x24: 0000000000000000
x23: ffff800020f67a60 x22: ffff0000ea3a0b40 x21: ffff0000cd62c400
x20: 00000000ffff94ed x19: ffff0000d8e5b180 x18: ffff800011abbcc0
x17: ffff8000181f9000 x16: ffff8000082e7de8 x15: 0000000000000000
x14: 000000000000000b x13: 1ffff00002a180b1 x12: 0000000000ff0100
x11: ff008000089b06ec x10: 0000000000000000 x9 : ffff8000089b06ec
x8 : ffff0000d300d340 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010
x2 : 0000000000000000 x1 : 00000000000094ed x0 : 0000000000008fff
Call trace:
 do_open_execat+0x4fc/0x5ec fs/exec.c:936
 bprm_execve+0x468/0x154c fs/exec.c:1849
 do_execveat_common+0x648/0x7dc fs/exec.c:1979
 do_execve fs/exec.c:2053 [inline]
 __do_sys_execve fs/exec.c:2129 [inline]
 __se_sys_execve fs/exec.c:2124 [inline]
 __arm64_sys_execve+0x98/0xb0 fs/exec.c:2124
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4434
hardirqs last  enabled at (4433): [<ffff800011a48554>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (4433): [<ffff800011a48554>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (4434): [<ffff80001195cc30>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4172): [<ffff8000080309e0>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (4170): [<ffff8000080309ac>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---