[   46.992653][   T23] audit: type=1800 audit(1575437139.496:27): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[   47.032423][   T23] audit: type=1800 audit(1575437139.496:28): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   47.974891][   T23] audit: type=1800 audit(1575437140.536:29): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   47.994173][   T23] audit: type=1800 audit(1575437140.546:30): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.15.217' (ECDSA) to the list of known hosts.
2019/12/04 05:25:51 fuzzer started
2019/12/04 05:25:52 dialing manager at 10.128.0.26:42111
2019/12/04 05:25:52 syscalls: 2689
2019/12/04 05:25:52 code coverage: enabled
2019/12/04 05:25:52 comparison tracing: enabled
2019/12/04 05:25:52 extra coverage: extra coverage is not supported by the kernel
2019/12/04 05:25:52 setuid sandbox: enabled
2019/12/04 05:25:52 namespace sandbox: enabled
2019/12/04 05:25:52 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/04 05:25:52 fault injection: enabled
2019/12/04 05:25:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/04 05:25:52 net packet injection: enabled
2019/12/04 05:25:52 net device setup: enabled
2019/12/04 05:25:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/04 05:25:52 devlink PCI setup: PCI device 0000:00:10.0 is not available
05:25:53 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="8723ecf1c044381cea181db7dadc28aa", 0x0, 0x0, 0x3, 0x1, 0x0, 0x6}, 0x23)

05:25:54 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x20200, 0x0)
ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
r1 = gettid()
r2 = syz_open_procfs(r1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4)
fchdir(r0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ftruncate(r4, 0x2008002)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

syzkaller login: [   61.522792][ T8220] IPVS: ftp: loaded support on port[0] = 21
[   61.657576][ T8220] chnl_net:caif_netlink_parms(): no params data found
[   61.699748][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.708705][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.716795][ T8220] device bridge_slave_0 entered promiscuous mode
[   61.725191][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.733583][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.741738][ T8220] device bridge_slave_1 entered promiscuous mode
[   61.763479][ T8220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.777531][ T8220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.778841][ T8223] IPVS: ftp: loaded support on port[0] = 21
[   61.804845][ T8220] team0: Port device team_slave_0 added
05:25:54 executing program 2:
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
creat(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x4000)
socket$inet_udplite(0x2, 0x2, 0x88)
mlockall(0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$uinput_user_dev(r2, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000200)={'HL\x00'}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))

[   61.814894][ T8220] team0: Port device team_slave_1 added
[   61.908015][ T8220] device hsr_slave_0 entered promiscuous mode
[   61.945698][ T8220] device hsr_slave_1 entered promiscuous mode
[   62.009889][ T8225] IPVS: ftp: loaded support on port[0] = 21
05:25:54 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x161, 0x11, 0x64}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x622, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[   62.052535][ T8220] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.098099][ T8220] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.176717][ T8220] netdevsim netdevsim0 netdevsim2: renamed from eth2
05:25:54 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10)

[   62.218581][ T8220] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.303664][ T8227] IPVS: ftp: loaded support on port[0] = 21
[   62.411742][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.418958][ T8220] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.426737][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.433796][ T8220] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.455746][ T8223] chnl_net:caif_netlink_parms(): no params data found
[   62.525331][ T8225] chnl_net:caif_netlink_parms(): no params data found
[   62.560207][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.575509][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.583080][ T8223] device bridge_slave_0 entered promiscuous mode
[   62.598915][ T8232] IPVS: ftp: loaded support on port[0] = 21
05:25:55 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x27})
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, 0x26})

[   62.630675][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.639244][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.649126][ T8223] device bridge_slave_1 entered promiscuous mode
[   62.705541][ T8220] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.717647][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.726581][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.735768][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   62.783584][ T8223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.794246][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.803814][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.811902][ T8225] device bridge_slave_0 entered promiscuous mode
[   62.820172][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.827500][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.835017][ T8225] device bridge_slave_1 entered promiscuous mode
[   62.849019][ T8223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.871867][ T8236] IPVS: ftp: loaded support on port[0] = 21
[   62.889851][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.898836][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.909095][ T8220] 8021q: adding VLAN 0 to HW filter on device team0
[   62.929942][ T8223] team0: Port device team_slave_0 added
[   62.936424][ T8227] chnl_net:caif_netlink_parms(): no params data found
[   62.946605][ T8223] team0: Port device team_slave_1 added
[   62.953877][ T8225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.966779][ T8225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.014016][ T8225] team0: Port device team_slave_0 added
[   63.024527][ T8225] team0: Port device team_slave_1 added
[   63.036770][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.045247][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.054604][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.061714][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.089072][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.097425][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.105123][ T8227] device bridge_slave_0 entered promiscuous mode
[   63.113101][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.120286][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.128259][ T8227] device bridge_slave_1 entered promiscuous mode
[   63.137558][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.146036][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.154257][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.161350][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.168867][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.177415][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.227951][ T8223] device hsr_slave_0 entered promiscuous mode
[   63.265787][ T8223] device hsr_slave_1 entered promiscuous mode
[   63.305554][ T8223] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.331299][ T8227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.371698][ T8236] chnl_net:caif_netlink_parms(): no params data found
[   63.391010][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.399613][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.434414][ T8227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.464825][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.481401][ T8232] chnl_net:caif_netlink_parms(): no params data found
[   63.527070][ T8225] device hsr_slave_0 entered promiscuous mode
[   63.575911][ T8225] device hsr_slave_1 entered promiscuous mode
[   63.635511][ T8225] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.643389][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.652013][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.667378][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.676661][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.699270][ T8223] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.747537][ T8223] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.807396][ T8223] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.859379][ T8227] team0: Port device team_slave_0 added
[   63.865238][ T8223] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.913512][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.922053][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.949184][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.959333][ T8227] team0: Port device team_slave_1 added
[   63.966068][ T8236] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.973124][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.980867][ T8236] device bridge_slave_0 entered promiscuous mode
[   63.989403][ T8236] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.996704][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.004319][ T8236] device bridge_slave_1 entered promiscuous mode
[   64.029470][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.037242][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.044827][ T8232] device bridge_slave_0 entered promiscuous mode
[   64.054135][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.061357][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.070027][ T8232] device bridge_slave_1 entered promiscuous mode
[   64.083516][ T8236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.168540][ T8227] device hsr_slave_0 entered promiscuous mode
[   64.216031][ T8227] device hsr_slave_1 entered promiscuous mode
[   64.265666][ T8227] debugfs: Directory 'hsr0' with parent '/' already present!
[   64.285883][ T8225] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.328629][ T8236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.369218][ T8225] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.409042][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.430605][ T8236] team0: Port device team_slave_0 added
[   64.436887][ T8227] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.489163][ T8227] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.547848][ T8225] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.588228][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.605187][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.612707][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.621450][ T8236] team0: Port device team_slave_1 added
[   64.629905][ T8227] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.687916][ T8225] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.734745][ T8232] team0: Port device team_slave_0 added
[   64.753451][ T8227] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.816236][ T8232] team0: Port device team_slave_1 added
[   64.824274][ T8220] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.857421][ T8236] device hsr_slave_0 entered promiscuous mode
[   64.907764][ T8236] device hsr_slave_1 entered promiscuous mode
[   64.945498][ T8236] debugfs: Directory 'hsr0' with parent '/' already present!
[   65.017249][ T8232] device hsr_slave_0 entered promiscuous mode
[   65.066019][ T8232] device hsr_slave_1 entered promiscuous mode
[   65.095650][ T8232] debugfs: Directory 'hsr0' with parent '/' already present!
[   65.182141][ T8236] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  170.185360][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  170.192129][    C1] rcu: 	1-...!: (10499 ticks this GP) idle=27e/1/0x4000000000000002 softirq=12437/12437 fqs=0 
[  170.202594][    C1] 	(t=10501 jiffies g=6189 q=137)
[  170.207614][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g6189 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  170.218698][    C1] rcu: RCU grace-period kthread stack dump:
[  170.224569][    C1] rcu_preempt     R  running task    29104    10      2 0x80004000
[  170.232451][    C1] Call Trace:
[  170.235731][    C1]  __schedule+0x9a0/0xcc0
[  170.240057][    C1]  schedule+0x181/0x210
[  170.244198][    C1]  schedule_timeout+0x14f/0x240
[  170.249036][    C1]  ? run_local_timers+0x120/0x120
[  170.254073][    C1]  rcu_gp_kthread+0xed8/0x1770
[  170.258854][    C1]  kthread+0x332/0x350
[  170.262904][    C1]  ? rcu_report_qs_rsp+0x140/0x140
[  170.267998][    C1]  ? kthread_blkcg+0xe0/0xe0
[  170.272572][    C1]  ret_from_fork+0x24/0x30
[  170.276987][    C1] NMI backtrace for cpu 1
[  170.281303][    C1] CPU: 1 PID: 8227 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0
[  170.289518][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  170.299730][    C1] Call Trace:
[  170.302996][    C1]  <IRQ>
[  170.305833][    C1]  dump_stack+0x1fb/0x318
[  170.310155][    C1]  nmi_cpu_backtrace+0xaf/0x1a0
[  170.314998][    C1]  ? nmi_trigger_cpumask_backtrace+0x16d/0x290
[  170.321139][    C1]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[  170.327190][    C1]  nmi_trigger_cpumask_backtrace+0x174/0x290
[  170.333159][    C1]  arch_trigger_cpumask_backtrace+0x10/0x20
[  170.339048][    C1]  rcu_dump_cpu_stacks+0x15a/0x220
[  170.344152][    C1]  rcu_sched_clock_irq+0xe25/0x1ad0
[  170.349342][    C1]  ? trace_hardirqs_off+0x74/0x80
[  170.354368][    C1]  update_process_times+0x12d/0x180
[  170.359556][    C1]  tick_sched_timer+0x263/0x420
[  170.364407][    C1]  ? tick_setup_sched_timer+0x3d0/0x3d0
[  170.369940][    C1]  __hrtimer_run_queues+0x403/0x840
[  170.375447][    C1]  hrtimer_interrupt+0x38c/0xda0
[  170.381646][    C1]  ? debug_smp_processor_id+0x9/0x20
[  170.387657][    C1]  smp_apic_timer_interrupt+0x109/0x280
[  170.393203][    C1]  apic_timer_interrupt+0xf/0x20
[  170.398130][    C1]  </IRQ>
[  170.401080][    C1] RIP: 0010:free_thread_stack+0x151/0x590
[  170.406791][    C1] Code: 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 25 a4 69 00 48 8b 3b be fc ff ff ff e8 28 04 00
[  170.426531][    C1] RSP: 0018:ffffc900023c7938 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  170.434935][    C1] RAX: 1ffff11013f860b1 RBX: ffff88809fc30588 RCX: 0000000000000000
[  170.442897][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002232ac0
[  170.450857][    C1] RBP: ffffc900023c7970 R08: 000000000003a768 R09: ffffed101500667f
[  170.458822][    C1] R10: ffffed101500667f R11: 0000000000000000 R12: ffff88809fc30620
[  170.466783][    C1] R13: dffffc0000000000 R14: 1ffff11013f860c4 R15: ffff8880a80333e8
[  170.474765][    C1]  ? free_thread_stack+0x12e/0x590
[  170.479868][    C1]  put_task_stack+0xa3/0x130
[  170.484459][    C1]  finish_task_switch+0x3f1/0x550
[  170.489501][    C1]  __schedule+0x9a8/0xcc0
[  170.493830][    C1]  preempt_schedule_irq+0xc1/0x140
[  170.498930][    C1]  retint_kernel+0x1b/0x2b
[  170.503333][    C1] RIP: 0010:kmalloc_slab+0x4d/0x70
[  170.508430][    C1] Code: 81 ff 01 00 40 00 73 40 48 83 ec 04 ff cf 89 3c 24 b8 ff ff ff ff 0f bd 04 24 ff c0 48 83 c4 04 40 f6 c6 11 75 1a 31 f6 89 c0 <48> 69 ce b8 00 00 00 48 8b 84 c1 80 ab e0 88 c3 b8 10 00 00 00 c3
[  170.528019][    C1] RSP: 0018:ffffc900023c7b80 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff02
[  170.536414][    C1] RAX: 0000000000000006 RBX: 0000000000000d40 RCX: ffff88809c820000
[  170.544370][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  170.552362][    C1] RBP: ffffc900023c7bc8 R08: ffffffff83564a27 R09: ffffed1012d0d805
[  170.560328][    C1] R10: ffffed1012d0d805 R11: 0000000000000000 R12: 000000000000002e
[  170.568289][    C1] R13: 0000000000000023 R14: 0000000000000023 R15: ffffffff83564a53
[  170.576252][    C1]  ? tomoyo_encode2+0x273/0x5a0
[  170.581092][    C1]  ? tomoyo_encode2+0x247/0x5a0
[  170.585933][    C1]  ? __kmalloc+0x2c/0x340
[  170.590259][    C1]  tomoyo_encode2+0x273/0x5a0
[  170.594926][    C1]  tomoyo_realpath_from_path+0x769/0x7c0
[  170.600553][    C1]  tomoyo_path_number_perm+0x166/0x640
[  170.606022][    C1]  ? smack_file_ioctl+0x226/0x2e0
[  170.611034][    C1]  ? assoc_array_gc+0x1371/0x1440
[  170.616071][    C1]  tomoyo_file_ioctl+0x23/0x30
[  170.620850][    C1]  security_file_ioctl+0x6d/0xd0
[  170.625786][    C1]  __x64_sys_ioctl+0xa3/0x120
[  170.630459][    C1]  do_syscall_64+0xf7/0x1c0
[  170.634950][    C1]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  170.640825][    C1] RIP: 0033:0x45a4e7
[  170.644709][    C1] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  170.664294][    C1] RSP: 002b:00007ffda8836e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.672688][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a4e7
[  170.680644][    C1] RDX: 00007ffda8836e20 RSI: 0000000000008933 RDI: 0000000000000004
[  170.688604][    C1] RBP: 00000000004bfaf7 R08: 0000000000000008 R09: 0000000000000008
[  170.696745][    C1] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000003
[  170.704722][    C1] R13: 0000000000000006 R14: 0000000000000000 R15: 00007ffda8837050