[ 43.674985][ T23] audit: type=1800 audit(1575409776.440:29): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/12/03 21:49:46 fuzzer started 2019/12/03 21:49:47 dialing manager at 10.128.0.26:42111 2019/12/03 21:49:47 syscalls: 2689 2019/12/03 21:49:47 code coverage: enabled 2019/12/03 21:49:47 comparison tracing: enabled 2019/12/03 21:49:47 extra coverage: extra coverage is not supported by the kernel 2019/12/03 21:49:47 setuid sandbox: enabled 2019/12/03 21:49:47 namespace sandbox: enabled 2019/12/03 21:49:47 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 21:49:47 fault injection: enabled 2019/12/03 21:49:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 21:49:47 net packet injection: enabled 2019/12/03 21:49:47 net device setup: enabled 2019/12/03 21:49:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 21:49:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:49:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000040)='*', 0x1}], 0x1}}], 0x1, 0x4000000) 21:49:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x3, 0xc9) syzkaller login: [ 56.260007][ T8189] IPVS: ftp: loaded support on port[0] = 21 21:49:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f00000000c0)=""/1, 0x1) write$P9_RLCREATE(r0, &(0x7f0000000180)={0x18, 0xf, 0x0, {{0xa}}}, 0x18) [ 56.328820][ T8191] IPVS: ftp: loaded support on port[0] = 21 [ 56.432948][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 56.480431][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.488894][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.497364][ T8189] device bridge_slave_0 entered promiscuous mode [ 56.508103][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.516548][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.524695][ T8189] device bridge_slave_1 entered promiscuous mode [ 56.552668][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.583921][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.621831][ T8189] team0: Port device team_slave_0 added [ 56.640194][ T8194] IPVS: ftp: loaded support on port[0] = 21 [ 56.655238][ T8189] team0: Port device team_slave_1 added 21:49:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800030800000000a9030000003500000000001008000100575a78b8fb6dbc86b119ff9fefebf9ae20f36b6744254ffe2e4173a0380144abbbb00194819c7fdd68561939066d75013cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f7e08e8af562834753ed172a98aefa3d02dc38718d516eab35d647da08e236", @ANYRES32=0x0], 0x20}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 56.764990][ T8189] device hsr_slave_0 entered promiscuous mode [ 56.801692][ T8189] device hsr_slave_1 entered promiscuous mode 21:49:49 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="e3d50000", @ANYRES16=0x0, @ANYBLOB="88670e2e98f01a", @ANYRES32, @ANYBLOB='\x00w\x00\b', @ANYRES32], 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x28}}, {{0x0, 0x0, &(0x7f0000000040), 0x2bc, &(0x7f0000000140)}}], 0x40001ab, 0xa00) [ 56.929612][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 56.968398][ T8197] IPVS: ftp: loaded support on port[0] = 21 [ 57.005247][ T8189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.056270][ T8189] netdevsim netdevsim0 netdevsim1: renamed from eth1 21:49:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x38, 0x1, 'enabled\x00'}, {0x5}, {0x4, 0x5}}, {0x8}}}]}}]}, 0x5c}}, 0x0) [ 57.148794][ T8199] IPVS: ftp: loaded support on port[0] = 21 [ 57.155331][ T8189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.227079][ T8189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.295103][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.303273][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.310885][ T8191] device bridge_slave_0 entered promiscuous mode [ 57.319026][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.326234][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.334178][ T8191] device bridge_slave_1 entered promiscuous mode [ 57.355092][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.367881][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.392623][ T8191] team0: Port device team_slave_0 added [ 57.410192][ T8191] team0: Port device team_slave_1 added [ 57.428506][ T8201] IPVS: ftp: loaded support on port[0] = 21 [ 57.543857][ T8191] device hsr_slave_0 entered promiscuous mode [ 57.581785][ T8191] device hsr_slave_1 entered promiscuous mode [ 57.631601][ T8191] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.654637][ T8194] chnl_net:caif_netlink_parms(): no params data found [ 57.693727][ T8191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.747045][ T8191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.794318][ T8191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.824924][ T8191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.920262][ T8199] chnl_net:caif_netlink_parms(): no params data found [ 57.948302][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.955707][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.964082][ T8194] device bridge_slave_0 entered promiscuous mode [ 57.994560][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.001803][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.009334][ T8194] device bridge_slave_1 entered promiscuous mode [ 58.038853][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.047265][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.055077][ T8199] device bridge_slave_0 entered promiscuous mode [ 58.063774][ T8197] chnl_net:caif_netlink_parms(): no params data found [ 58.091983][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.099065][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.107578][ T8199] device bridge_slave_1 entered promiscuous mode [ 58.117692][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.145818][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.175971][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.194548][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.244274][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.251521][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.259094][ T8197] device bridge_slave_0 entered promiscuous mode [ 58.270267][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.277405][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.285141][ T8197] device bridge_slave_1 entered promiscuous mode [ 58.296695][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.307641][ T8194] team0: Port device team_slave_0 added [ 58.329632][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 58.341133][ T8194] team0: Port device team_slave_1 added [ 58.348843][ T8197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.359885][ T8199] team0: Port device team_slave_0 added [ 58.375146][ T8189] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.387501][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.398634][ T8197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.409039][ T8199] team0: Port device team_slave_1 added [ 58.423886][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.432527][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.494140][ T8194] device hsr_slave_0 entered promiscuous mode [ 58.521771][ T8194] device hsr_slave_1 entered promiscuous mode [ 58.581586][ T8194] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.610917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.619965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.628474][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.635652][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.657893][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.704174][ T8199] device hsr_slave_0 entered promiscuous mode [ 58.741865][ T8199] device hsr_slave_1 entered promiscuous mode [ 58.801528][ T8199] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.813159][ T8197] team0: Port device team_slave_0 added [ 58.819122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.827305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.835573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.843446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.853762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.862602][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.869644][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.877415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.900650][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.908749][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.918558][ T8201] device bridge_slave_0 entered promiscuous mode [ 58.926667][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.933834][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.941800][ T8201] device bridge_slave_1 entered promiscuous mode [ 58.954057][ T8197] team0: Port device team_slave_1 added [ 58.979713][ T8194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.036138][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.049597][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.068704][ T8189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.079528][ T8189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.093169][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.101807][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.110243][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.118997][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.126090][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.133917][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.142404][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.150578][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.159197][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.167665][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.176214][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.184888][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.193479][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.202895][ T8194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.263091][ T8194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.303111][ T8194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.362939][ T8199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.418383][ T8199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.503473][ T8199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.554606][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.564627][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.573059][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.601075][ T8201] team0: Port device team_slave_0 added [ 59.608487][ T8199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.638761][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.647507][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.659163][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.666406][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.674132][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.706962][ T8201] team0: Port device team_slave_1 added [ 59.753702][ T8197] device hsr_slave_0 entered promiscuous mode [ 59.791817][ T8197] device hsr_slave_1 entered promiscuous mode [ 59.831489][ T8197] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.842640][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.851186][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.860396][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.868831][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.877825][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.886269][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.894848][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.903740][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.912120][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.920530][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.939569][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.995895][ T8201] device hsr_slave_0 entered promiscuous mode [ 60.041883][ T8201] device hsr_slave_1 entered promiscuous mode [ 60.121670][ T8201] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.129596][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.137436][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.169701][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.249153][ T8201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.286961][ T8201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.299907][ T8211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.321356][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.328150][ C0] rcu: 0-...!: (1 GPs behind) idle=66e/1/0x4000000000000002 softirq=11134/11141 fqs=0 [ 165.338291][ C0] (t=10501 jiffies g=6325 q=82) [ 165.343228][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g6325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 165.354484][ C0] rcu: RCU grace-period kthread stack dump: [ 165.360360][ C0] rcu_preempt I29032 10 2 0x80004000 [ 165.366702][ C0] Call Trace: [ 165.370001][ C0] __schedule+0x9a0/0xcc0 [ 165.374332][ C0] schedule+0x181/0x210 [ 165.378478][ C0] schedule_timeout+0x14f/0x240 [ 165.383320][ C0] ? run_local_timers+0x120/0x120 [ 165.388343][ C0] rcu_gp_kthread+0xed8/0x1770 [ 165.393107][ C0] kthread+0x332/0x350 [ 165.397163][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 165.402289][ C0] ? kthread_blkcg+0xe0/0xe0 [ 165.406869][ C0] ret_from_fork+0x24/0x30 [ 165.411328][ C0] NMI backtrace for cpu 0 [ 165.415649][ C0] CPU: 0 PID: 8065 Comm: rsyslogd Not tainted 5.4.0-syzkaller #0 [ 165.423345][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.433387][ C0] Call Trace: [ 165.436663][ C0] [ 165.439524][ C0] dump_stack+0x1fb/0x318 [ 165.443852][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.448694][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.454842][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.460905][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.466878][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.472758][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.477865][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.483057][ C0] ? trace_hardirqs_off+0x74/0x80 [ 165.488080][ C0] update_process_times+0x12d/0x180 [ 165.493277][ C0] tick_sched_timer+0x263/0x420 [ 165.498120][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.503656][ C0] __hrtimer_run_queues+0x403/0x840 [ 165.508857][ C0] hrtimer_interrupt+0x38c/0xda0 [ 165.513803][ C0] ? debug_smp_processor_id+0x9/0x20 [ 165.519102][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 165.524655][ C0] apic_timer_interrupt+0xf/0x20 [ 165.529608][ C0] [ 165.532552][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1c/0x50 [ 165.538718][ C0] Code: cd 07 48 89 de e8 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 75 2c <8b> 91 80 13 00 00 83 fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 [ 165.558334][ C0] RSP: 0018:ffffc90001ab7a28 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.566886][ C0] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: ffff8880a26d2040 [ 165.574858][ C0] RDX: 0000000000000001 RSI: 00000000fffffffc RDI: ffffea0002a55600 [ 165.582823][ C0] RBP: ffffc90001ab7a50 R08: dffffc0000000000 R09: fffffbfff120248a [ 165.590787][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: dffffc0000000000 [ 165.598752][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff888096b0b8e8 [ 165.606741][ C0] ? mod_memcg_page_state+0x123/0x190 [ 165.612212][ C0] ? free_thread_stack+0x124/0x590 [ 165.617315][ C0] ? mod_memcg_page_state+0x123/0x190 [ 165.622679][ C0] free_thread_stack+0x168/0x590 [ 165.627615][ C0] put_task_stack+0xa3/0x130 [ 165.632206][ C0] finish_task_switch+0x3f1/0x550 [ 165.637234][ C0] __schedule+0x9a8/0xcc0 [ 165.641563][ C0] schedule+0x181/0x210 [ 165.645713][ C0] do_syslog+0xdc7/0x1740 [ 165.650055][ C0] ? init_wait_entry+0xe0/0xe0 [ 165.654814][ C0] kmsg_read+0x94/0xd0 [ 165.658957][ C0] ? mmap_vmcore_fault+0x10/0x10 [ 165.663900][ C0] proc_reg_read+0x1e2/0x2d0 [ 165.668481][ C0] ? proc_reg_llseek+0x2c0/0x2c0 [ 165.673407][ C0] __vfs_read+0xb8/0x730 [ 165.677641][ C0] ? security_file_permission+0x23c/0x350 [ 165.683376][ C0] ? rw_verify_area+0x1c2/0x360 [ 165.688218][ C0] vfs_read+0x1dd/0x420 [ 165.692368][ C0] ksys_read+0x117/0x220 [ 165.696608][ C0] __x64_sys_read+0x7b/0x90 [ 165.701101][ C0] do_syscall_64+0xf7/0x1c0 [ 165.705597][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.711665][ C0] RIP: 0033:0x7fc0bdcf11fd [ 165.716068][ C0] Code: d1 20 00 00 75 10 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e fa ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 a7 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 165.735680][ C0] RSP: 002b:00007fc0bb290e30 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 165.744080][ C0] RAX: ffffffffffffffda RBX: 0000000001066650 RCX: 00007fc0bdcf11fd [ 165.752041][ C0] RDX: 0000000000000fff RSI: 00007fc0bcac55a0 RDI: 0000000000000004 [ 165.760008][ C0] RBP: 0000000000000000 R08: 0000000001051260 R09: 0000000000000000 [ 165.767975][ C0] R10: 203a7463656a626f R11: 0000000000000293 R12: 000000000065e420 [ 165.775951][ C0] R13: 00007fc0bb2919c0 R14: 00007fc0be336040 R15: 0000000000000003