[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.039657][ T25] audit: type=1800 audit(1575398351.298:25): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.058791][ T25] audit: type=1800 audit(1575398351.298:26): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.105809][ T25] audit: type=1800 audit(1575398351.308:27): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.205' (ECDSA) to the list of known hosts. 2019/12/03 18:39:22 fuzzer started 2019/12/03 18:39:23 dialing manager at 10.128.0.26:42111 2019/12/03 18:39:23 syscalls: 2689 2019/12/03 18:39:23 code coverage: enabled 2019/12/03 18:39:23 comparison tracing: enabled 2019/12/03 18:39:23 extra coverage: extra coverage is not supported by the kernel 2019/12/03 18:39:23 setuid sandbox: enabled 2019/12/03 18:39:23 namespace sandbox: enabled 2019/12/03 18:39:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 18:39:23 fault injection: enabled 2019/12/03 18:39:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 18:39:23 net packet injection: enabled 2019/12/03 18:39:23 net device setup: enabled 2019/12/03 18:39:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 18:39:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 18:39:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x4]}}, r1}}, 0x48) 18:39:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80008000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\xfc', 0x248800) syzkaller login: [ 57.194979][ T8195] IPVS: ftp: loaded support on port[0] = 21 [ 57.312123][ T8195] chnl_net:caif_netlink_parms(): no params data found [ 57.391049][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.417708][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.426536][ T8195] device bridge_slave_0 entered promiscuous mode 18:39:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000dc0)="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", 0x481, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r2}], 0x1, 0x81) r3 = socket$rxrpc(0x21, 0x2, 0x2) dup2(r3, r2) [ 57.438435][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.453216][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.474037][ T8195] device bridge_slave_1 entered promiscuous mode [ 57.520569][ T8195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.538099][ T8195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.587836][ T8198] IPVS: ftp: loaded support on port[0] = 21 [ 57.589487][ T8195] team0: Port device team_slave_0 added [ 57.618364][ T8195] team0: Port device team_slave_1 added 18:39:24 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) [ 57.740232][ T8195] device hsr_slave_0 entered promiscuous mode 18:39:25 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 57.876865][ T8195] device hsr_slave_1 entered promiscuous mode [ 57.970784][ T8202] IPVS: ftp: loaded support on port[0] = 21 [ 57.979269][ T8200] IPVS: ftp: loaded support on port[0] = 21 18:39:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) [ 58.096121][ T8195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.159838][ T8195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.220208][ T8195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.280459][ T8195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.369048][ T8207] IPVS: ftp: loaded support on port[0] = 21 [ 58.379351][ T8205] IPVS: ftp: loaded support on port[0] = 21 [ 58.392140][ T8198] chnl_net:caif_netlink_parms(): no params data found [ 58.521941][ T8202] chnl_net:caif_netlink_parms(): no params data found [ 58.547766][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.555629][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.563416][ T8198] device bridge_slave_0 entered promiscuous mode [ 58.573059][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.580225][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.588293][ T8198] device bridge_slave_1 entered promiscuous mode [ 58.661694][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.671749][ T8200] chnl_net:caif_netlink_parms(): no params data found [ 58.701234][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.722826][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.730532][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.738749][ T8202] device bridge_slave_0 entered promiscuous mode [ 58.748072][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.755321][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.763263][ T8202] device bridge_slave_1 entered promiscuous mode [ 58.782333][ T8202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.806133][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.813958][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.822103][ T8200] device bridge_slave_0 entered promiscuous mode [ 58.851430][ T8202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.862434][ T8198] team0: Port device team_slave_0 added [ 58.870945][ T8198] team0: Port device team_slave_1 added [ 58.877626][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.884724][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.894626][ T8200] device bridge_slave_1 entered promiscuous mode [ 58.932273][ T8202] team0: Port device team_slave_0 added [ 58.942119][ T8202] team0: Port device team_slave_1 added [ 58.958039][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.970177][ T8207] chnl_net:caif_netlink_parms(): no params data found [ 58.980599][ T8195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.000963][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.079927][ T8202] device hsr_slave_0 entered promiscuous mode [ 59.117062][ T8202] device hsr_slave_1 entered promiscuous mode [ 59.157522][ T8202] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.165429][ T8205] chnl_net:caif_netlink_parms(): no params data found [ 59.208338][ T8198] device hsr_slave_0 entered promiscuous mode [ 59.276998][ T8198] device hsr_slave_1 entered promiscuous mode [ 59.316760][ T8198] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.351988][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.359339][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.368650][ T8207] device bridge_slave_0 entered promiscuous mode [ 59.377222][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.384530][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.392626][ T8207] device bridge_slave_1 entered promiscuous mode [ 59.401374][ T8200] team0: Port device team_slave_0 added [ 59.409573][ T8200] team0: Port device team_slave_1 added [ 59.439642][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.448049][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.484429][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.491936][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.499908][ T8205] device bridge_slave_0 entered promiscuous mode [ 59.518954][ T8207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.536405][ T8195] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.547696][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.554776][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.563758][ T8205] device bridge_slave_1 entered promiscuous mode [ 59.572089][ T8207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.619538][ T8200] device hsr_slave_0 entered promiscuous mode [ 59.697593][ T8200] device hsr_slave_1 entered promiscuous mode [ 59.746651][ T8200] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.764147][ T8198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.800962][ T8198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.853542][ T8198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.922565][ T8198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.991746][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.000778][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.009692][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.017105][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.025581][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.034448][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.042905][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.050333][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.058130][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.068163][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.076675][ T8202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.131962][ T8202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.203301][ T8202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.258302][ T8202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.319986][ T8205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.331478][ T8207] team0: Port device team_slave_0 added [ 60.351533][ T8207] team0: Port device team_slave_1 added [ 60.370231][ T8205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.382759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.392013][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.401469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.409953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.478619][ T8207] device hsr_slave_0 entered promiscuous mode [ 60.517000][ T8207] device hsr_slave_1 entered promiscuous mode [ 60.566717][ T8207] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.577172][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.586041][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.598356][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.609281][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.618146][ T8200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.658525][ T8200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.698884][ T8200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.754805][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.765319][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.777805][ T8205] team0: Port device team_slave_0 added [ 60.784135][ T8200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.842898][ T8195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.861413][ T8205] team0: Port device team_slave_1 added [ 60.909333][ T8205] device hsr_slave_0 entered promiscuous mode [ 60.957011][ T8205] device hsr_slave_1 entered promiscuous mode [ 61.006671][ T8205] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.065721][ T8207] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.121684][ T8205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.169961][ T8205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.240088][ T8207] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.292263][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.300603][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.313778][ T8195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.323217][ T8205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.368945][ T8205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.429463][ T8207] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.469241][ T8207] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.552756][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.581216][ T8198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.616405][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.624851][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.637226][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.667850][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.684544][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.701063][ T3208] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.708233][ T3208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.717831][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.822129][ T8202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.833505][ T8202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.868710][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.929421][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.952330][ T8207] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.999773][ T8207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.016237][ T8207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.057898][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.736464][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.743249][ C0] rcu: 0-...!: (10499 ticks this GP) idle=6da/1/0x4000000000000002 softirq=11267/11267 fqs=16 [ 166.753812][ C0] (t=10500 jiffies g=6297 q=684) [ 166.758881][ C0] rcu: rcu_preempt kthread starved for 10467 jiffies! g6297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 166.770339][ C0] rcu: RCU grace-period kthread stack dump: [ 166.776252][ C0] rcu_preempt R running task 29104 10 2 0x80004000 [ 166.784184][ C0] Call Trace: [ 166.787472][ C0] __schedule+0x9a0/0xcc0 [ 166.791821][ C0] schedule+0x181/0x210 [ 166.795982][ C0] schedule_timeout+0x14f/0x240 [ 166.800835][ C0] ? run_local_timers+0x120/0x120 [ 166.805864][ C0] rcu_gp_kthread+0xed8/0x1770 [ 166.810645][ C0] kthread+0x332/0x350 [ 166.814717][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 166.819817][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.824421][ C0] ret_from_fork+0x24/0x30 [ 166.828944][ C0] NMI backtrace for cpu 0 [ 166.833283][ C0] CPU: 0 PID: 8217 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 166.841522][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.851574][ C0] Call Trace: [ 166.854849][ C0] [ 166.857694][ C0] dump_stack+0x1fb/0x318 [ 166.862034][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.866892][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.873057][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.879113][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.885170][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.891187][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.896301][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.901492][ C0] ? trace_hardirqs_off+0x74/0x80 [ 166.906602][ C0] update_process_times+0x12d/0x180 [ 166.911791][ C0] tick_sched_timer+0x263/0x420 [ 166.916628][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.922176][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.927376][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.932320][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.937595][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.943128][ C0] apic_timer_interrupt+0xf/0x20 [ 166.948048][ C0] [ 166.950975][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x35/0x50 [ 166.957118][ C0] Code: 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 83 fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 8d 7e 01 <8b> 89 84 13 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a c3 0f 1f [ 166.976979][ C0] RSP: 0018:ffffc900025d7448 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.985383][ C0] RAX: ffffffff81486ea4 RBX: ffffea00024545c0 RCX: ffff8880a8538640 [ 166.993347][ C0] RDX: ffffc90001e79000 RSI: 000000000003ffff RDI: 0000000000040000 [ 167.001305][ C0] RBP: ffffc900025d7488 R08: 000000000003a768 R09: ffffed1011a31aaf [ 167.009725][ C0] R10: ffffed1011a31aaf R11: 0000000000000000 R12: ffff88809234b820 [ 167.017698][ C0] R13: dffffc0000000000 R14: 1ffff11012469704 R15: ffff88808d18d568 [ 167.025674][ C0] ? free_thread_stack+0x124/0x590 [ 167.030869][ C0] ? free_thread_stack+0x124/0x590 [ 167.035980][ C0] put_task_stack+0xa3/0x130 [ 167.040652][ C0] finish_task_switch+0x3f1/0x550 [ 167.045670][ C0] __schedule+0x9a8/0xcc0 [ 167.049999][ C0] ? ___preempt_schedule+0x16/0x18 [ 167.055098][ C0] preempt_schedule+0xdb/0x120 [ 167.059855][ C0] ___preempt_schedule+0x16/0x18 [ 167.064817][ C0] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 167.070440][ C0] pwq_adjust_max_active+0x791/0x8d0 [ 167.075722][ C0] numa_pwq_tbl_install+0x217/0x430 [ 167.080958][ C0] apply_wqattrs_commit+0x1d2/0x570 [ 167.086150][ C0] apply_workqueue_attrs_locked+0xdc/0x650 [ 167.092048][ C0] alloc_workqueue+0xddc/0x1310 [ 167.096926][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 167.102658][ C0] ? trace_kmalloc+0xcd/0x130 [ 167.107342][ C0] ? ucma_open+0x67/0x1f0 [ 167.111672][ C0] ? ucma_open+0x57/0x1f0 [ 167.115993][ C0] ucma_open+0x8c/0x1f0 [ 167.120134][ C0] ? ucma_poll+0xd0/0xd0 [ 167.124368][ C0] misc_open+0x3ef/0x440 [ 167.128602][ C0] chrdev_open+0x509/0x590 [ 167.133039][ C0] ? cd_forget+0x160/0x160 [ 167.137444][ C0] do_dentry_open+0x740/0x10c0 [ 167.142205][ C0] vfs_open+0x73/0x80 [ 167.146178][ C0] path_openat+0x1397/0x44a0 [ 167.150757][ C0] ? __kasan_kmalloc+0x178/0x1b0 [ 167.155722][ C0] do_filp_open+0x192/0x3d0 [ 167.160260][ C0] do_sys_open+0x29f/0x560 [ 167.164671][ C0] __x64_sys_openat+0xa2/0xb0 [ 167.169338][ C0] do_syscall_64+0xf7/0x1c0 [ 167.173833][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.179712][ C0] RIP: 0033:0x45a679 [ 167.183596][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.203199][ C0] RSP: 002b:00007f618f4aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.211600][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 167.219845][ C0] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 167.227893][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 167.235964][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f618f4ab6d4 [ 167.243923][ C0] R13: 00000000004c7f21 R14: 00000000004df158 R15: 00000000ffffffff