INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.7' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 28.631726] IPVS: ftp: loaded support on port[0] = 21 [ 28.681208] kasan: CONFIG_KASAN_INLINE enabled [ 28.686533] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 28.693867] general protection fault: 0000 [#1] SMP KASAN [ 28.699384] Dumping ftrace buffer: [ 28.702913] (ftrace buffer empty) [ 28.706606] Modules linked in: [ 28.709791] CPU: 1 PID: 4412 Comm: syzkaller402313 Not tainted 4.16.0-rc7+ #3 [ 28.717044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.726388] RIP: 0010:timerqueue_add+0xb8/0x280 [ 28.731326] RSP: 0018:ffff8801db307a28 EFLAGS: 00010002 [ 28.736663] RAX: ffffed003b664cc7 RBX: ffff8801db326620 RCX: ffffffff866a78ec [ 28.743908] RDX: 0000502020005023 RSI: ffff8801db326620 RDI: 0002810100028119 [ 28.751152] RBP: ffff8801db307a68 R08: 0000000000000000 R09: 1ffff1003b660f0f [ 28.758395] R10: ffff8801db307a78 R11: 0000000000000002 R12: dffffc0000000000 [ 28.765637] R13: 0002810100028101 R14: 00000006ad949680 R15: ffff8801b7b97cc8 [ 28.772881] FS: 000000000147e880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 28.781078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.786929] CR2: 0000000000421d60 CR3: 00000001b47c2005 CR4: 00000000001606e0 [ 28.794180] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.801419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.808668] Call Trace: [ 28.811233] [ 28.813361] enqueue_hrtimer+0x177/0x4b0 [ 28.817392] ? lock_release+0xa40/0xa40 [ 28.821336] ? retrigger_next_event+0x1e0/0x1e0 [ 28.825975] ? __lock_is_held+0xb6/0x140 [ 28.830008] __hrtimer_run_queues+0xb15/0xec0 [ 28.834479] ? hrtimer_fixup_init+0x70/0x70 [ 28.838775] ? pvclock_read_flags+0x160/0x160 [ 28.843240] ? lock_acquire+0x1d5/0x580 [ 28.847183] ? ktime_get+0x26f/0x3a0 [ 28.850875] ? kvm_clock_get_cycles+0x25/0x30 [ 28.855340] ? ktime_get_update_offsets_now+0x34a/0x520 [ 28.860674] ? do_timer+0x50/0x50 [ 28.864110] ? native_apic_msr_write+0x5c/0x80 [ 28.868671] ? rcu_idle_enter+0x530/0x530 [ 28.872794] ? lapic_next_event+0x54/0x80 [ 28.876912] ? clockevents_program_event+0x108/0x2e0 [ 28.881989] hrtimer_interrupt+0x2a5/0x6f0 [ 28.886618] smp_apic_timer_interrupt+0x14a/0x700 [ 28.891432] ? smp_reschedule_interrupt+0xe6/0x650 [ 28.896330] ? smp_call_function_single_interrupt+0x640/0x640 [ 28.902184] ? _raw_spin_lock+0x32/0x40 [ 28.906127] ? _raw_spin_unlock+0x22/0x30 [ 28.910246] ? handle_edge_irq+0x2b4/0x7c0 [ 28.914450] ? task_prio+0x50/0x50 [ 28.917978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.922795] apic_timer_interrupt+0xf/0x20 [ 28.926997] [ 28.929205] RIP: 0010:__memmove+0x24/0x1a0 [ 28.933404] RSP: 0018:ffff8801b467ee28 EFLAGS: 00010287 ORIG_RAX: ffffffffffffff12 [ 28.941081] RAX: ffff8801b52ec984 RBX: fffffffffffffffe RCX: fffffffffd610431 [ 28.948321] RDX: fffffffffffffffe RSI: ffff8801b7cdc54d RDI: ffff8801b7cdc551 [ 28.955559] RBP: ffff8801b467ee48 R08: ffff8801b52ec97e R09: ffffed0036a5d931 [ 28.962799] R10: 0000000000000001 R11: ffffed0036a5d930 R12: ffff8801b52ec984 [ 28.970037] R13: ffff8801b52ec980 R14: ffff8801b4108106 R15: ffff8801b4108040 [ 28.977289] ? memmove+0x45/0x50 [ 28.980626] skb_vlan_untag+0x470/0xc40 [ 28.984571] ? skb_vlan_pop+0x2a0/0x2a0 [ 28.988515] ? __lock_is_held+0xb6/0x140 [ 28.992555] __netif_receive_skb_core+0x119c/0x3460 [ 28.997546] ? nf_ingress+0x9f0/0x9f0 [ 29.001318] ? __skb_flow_dissect+0x4ce/0x3f00 [ 29.005876] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 29.011040] ? __skb_flow_get_ports+0x420/0x420 [ 29.015680] ? trace_hardirqs_off+0x10/0x10 [ 29.019973] ? __lock_is_held+0xb6/0x140 [ 29.024005] ? trace_hardirqs_off+0x10/0x10 [ 29.028299] ? find_held_lock+0x35/0x1d0 [ 29.032330] ? find_held_lock+0x35/0x1d0 [ 29.036394] ? netif_receive_skb_internal+0x1d7/0x670 [ 29.041553] ? lock_downgrade+0x980/0x980 [ 29.045677] ? pvclock_read_flags+0x160/0x160 [ 29.050142] ? lock_acquire+0x1d5/0x580 [ 29.054086] ? lock_acquire+0x1d5/0x580 [ 29.058033] ? netif_receive_skb_internal+0xa2/0x670 [ 29.063122] ? ktime_get_with_offset+0x2c1/0x420 [ 29.067851] ? lock_release+0xa40/0xa40 [ 29.071812] ? ktime_get+0x3a0/0x3a0 [ 29.075499] ? debug_object_fixup+0x30/0x30 [ 29.079795] ? find_held_lock+0x35/0x1d0 [ 29.083829] __netif_receive_skb+0x2c/0x1b0 [ 29.088119] ? __netif_receive_skb+0x2c/0x1b0 [ 29.092584] netif_receive_skb_internal+0x10b/0x670 [ 29.097570] ? dev_cpu_dead+0xb00/0xb00 [ 29.101526] ? __do_once_done+0xf2/0x300 [ 29.105571] ? rcu_pm_notify+0xc0/0xc0 [ 29.109435] netif_receive_skb+0xae/0x390 [ 29.113552] ? netif_receive_skb_internal+0x670/0x670 [ 29.118715] ? find_held_lock+0x35/0x1d0 [ 29.122747] ? tun_rx_batched.isra.50+0x5c4/0x870 [ 29.127558] tun_rx_batched.isra.50+0x5ee/0x870 [ 29.132199] ? tun_sock_write_space+0x370/0x370 [ 29.136845] tun_get_user+0x299e/0x3c20 [ 29.140788] ? find_held_lock+0x35/0x1d0 [ 29.144823] ? lock_downgrade+0x900/0x980 [ 29.148945] ? tun_build_skb.isra.48+0x1840/0x1840 [ 29.153844] ? rcu_read_lock_sched_held+0x108/0x120 [ 29.158829] ? do_raw_spin_trylock+0x190/0x190 [ 29.163380] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.167844] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.172835] ? tun_get+0x1ab/0x2e0 [ 29.176348] ? lock_release+0xa40/0xa40 [ 29.180293] ? __lock_is_held+0xb6/0x140 [ 29.184329] ? tun_get+0x1d4/0x2e0 [ 29.187849] ? tun_do_read+0x27c0/0x27c0 [ 29.191879] ? sock_ioctl+0x367/0x670 [ 29.195649] ? sock_ioctl+0x277/0x670 [ 29.199422] tun_chr_write_iter+0xb9/0x160 [ 29.203633] __vfs_write+0x684/0x970 [ 29.207332] ? kernel_read+0x120/0x120 [ 29.211196] ? __schedule+0x1ec0/0x1ec0 [ 29.215157] ? rw_verify_area+0xe5/0x2b0 [ 29.219189] ? __fdget_raw+0x20/0x20 [ 29.222874] vfs_write+0x189/0x510 [ 29.226386] SyS_write+0xef/0x220 [ 29.229809] ? exit_to_usermode_loop+0x198/0x2f0 [ 29.234536] ? SyS_read+0x220/0x220 [ 29.238133] ? do_syscall_64+0xb7/0x940 [ 29.242079] ? SyS_read+0x220/0x220 [ 29.245677] do_syscall_64+0x281/0x940 [ 29.249534] ? __do_page_fault+0xc90/0xc90 [ 29.253738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.258465] ? syscall_return_slowpath+0x550/0x550 [ 29.263364] ? syscall_return_slowpath+0x2ac/0x550 [ 29.268264] ? prepare_exit_to_usermode+0x350/0x350 [ 29.273249] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 29.278584] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.283397] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 29.288556] RIP: 0033:0x4447d9 [ 29.291719] RSP: 002b:00007ffe5ab19af8 EFLAGS: 00000297 ORIG_RAX: 0000000000000001 [ 29.299395] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004447d9 [ 29.306635] RDX: 0000000000000157 RSI: 0000000020000180 RDI: 0000000000000004 [ 29.313887] RBP: 0000000030626669 R08: 0000000000000000 R09: 0000000000000000 [ 29.321125] R10: 0000000000000400 R11: 0000000000000297 R12: 00000000004020e0 [ 29.328363] R13: 0000000000402170 R14: 0000000000000000 R15: 0000000000000000 [ 29.335613] Code: 00 00 4d 8b 2f 4d 85 ed 74 3d e8 34 50 07 fb 48 8b 45 d0 80 38 00 0f 85 be 01 00 00 49 8d 7d 18 4c 8b 73 18 48 89 fa 48 c1 ea 03 <42> 80 3c 22 00 0f 85 9a 01 00 00 4d 3b 75 18 7c a3 e8 02 50 07 [ 29.354687] RIP: timerqueue_add+0xb8/0x280 RSP: ffff8801db307a28 [ 29.360805] [ 29.360807] ====================================================== [ 29.360808] WARNING: possible circular locking dependency detected [ 29.360810] 4.16.0-rc7+ #3 Not tainted [ 29.360811] ------------------------------------------------------ [ 29.360813] syzkaller402313/4412 is trying to acquire lock: [ 29.360813] ((console_sem).lock){-.-.}, at: [<00000000af0b4a23>] down_trylock+0x13/0x70 [ 29.360818] [ 29.360819] but task is already holding lock: [ 29.360819] (hrtimer_bases.lock){-.-.}, at: [<00000000bf18422f>] __hrtimer_run_queues+0x3dc/0xec0 [ 29.360823] [ 29.360825] which lock already depends on the new lock. [ 29.360826] [ 29.360826] [ 29.360828] the existing dependency chain (in reverse order) is: [ 29.360829] [ 29.360829] -> #4 (hrtimer_bases.lock){-.-.}: [ 29.360833] _raw_spin_lock_irqsave+0x96/0xc0 [ 29.360835] lock_hrtimer_base.isra.16+0x75/0x130 [ 29.360836] hrtimer_start_range_ns+0x106/0xb80 [ 29.360837] enqueue_task_rt+0x94f/0xfb0 [ 29.360839] __sched_setscheduler+0xfef/0x2300 [ 29.360840] _sched_setscheduler+0x20d/0x350 [ 29.360841] sched_setscheduler+0xe/0x10 [ 29.360842] watchdog_enable+0x122/0x170 [ 29.360844] smpboot_thread_fn+0x359/0x7c0 [ 29.360845] kthread+0x33c/0x400 [ 29.360846] ret_from_fork+0x3a/0x50 [ 29.360846] [ 29.360847] -> #3 (&rt_b->rt_runtime_lock){-...}: [ 29.360851] _raw_spin_lock+0x2a/0x40 [ 29.360852] enqueue_task_rt+0x62a/0xfb0 [ 29.360854] __sched_setscheduler+0xfef/0x2300 [ 29.360855] _sched_setscheduler+0x20d/0x350 [ 29.360856] sched_setscheduler+0xe/0x10 [ 29.360857] watchdog_enable+0x122/0x170 [ 29.360859] smpboot_thread_fn+0x359/0x7c0 [ 29.360860] kthread+0x33c/0x400 [ 29.360861] ret_from_fork+0x3a/0x50 [ 29.360861] [ 29.360862] -> #2 (&rq->lock){-.-.}: [ 29.360866] _raw_spin_lock+0x2a/0x40 [ 29.360867] task_fork_fair+0x7a/0x690 [ 29.360868] sched_fork+0x450/0xc10 [ 29.360870] copy_process.part.38+0x17c9/0x4bd0 [ 29.360871] _do_fork+0x1f7/0xf70 [ 29.360872] kernel_thread+0x34/0x40 [ 29.360873] rest_init+0x22/0xf0 [ 29.360874] start_kernel+0x7f1/0x819 [ 29.360875] x86_64_start_reservations+0x2a/0x2c [ 29.360877] x86_64_start_kernel+0x77/0x7a [ 29.360878] secondary_startup_64+0xa5/0xb0 [ 29.360879] [ 29.360879] -> #1 (&p->pi_lock){-.-.}: [ 29.360883] _raw_spin_lock_irqsave+0x96/0xc0 [ 29.360884] try_to_wake_up+0xbc/0x15f0 [ 29.360886] wake_up_process+0x10/0x20 [ 29.360887] __up.isra.0+0x1cc/0x2c0 [ 29.360888] up+0x13b/0x1d0 [ 29.360889] __up_console_sem+0xb2/0x1a0 [ 29.360890] console_unlock+0x5af/0xfb0 [ 29.360891] vprintk_emit+0x5c3/0xb90 [ 29.360892] vprintk_default+0x28/0x30 [ 29.360894] vprintk_func+0x57/0xc0 [ 29.360895] printk+0xaa/0xca [ 29.360896] regdb_fw_cb+0x1d7/0x220 [ 29.360897] request_firmware_work_func+0x151/0x2c0 [ 29.360898] process_one_work+0xc47/0x1bb0 [ 29.360900] worker_thread+0x223/0x1990 [ 29.360901] kthread+0x33c/0x400 [ 29.360902] ret_from_fork+0x3a/0x50 [ 29.360902] [ 29.360903] -> #0 ((console_sem).lock){-.-.}: [ 29.360907] lock_acquire+0x1d5/0x580 [ 29.360908] _raw_spin_lock_irqsave+0x96/0xc0 [ 29.360909] down_trylock+0x13/0x70 [ 29.360911] __down_trylock_console_sem+0xa2/0x1e0 [ 29.360912] console_trylock+0x15/0x70 [ 29.360913] vprintk_emit+0x5b5/0xb90 [ 29.360914] vprintk_default+0x28/0x30 [ 29.360915] vprintk_func+0x57/0xc0 [ 29.360916] printk+0xaa/0xca [ 29.360918] kasan_die_handler+0x31/0x3f [ 29.360919] notifier_call_chain+0x136/0x2c0 [ 29.360920] atomic_notifier_call_chain+0x77/0x140 [ 29.360921] notify_die+0x18c/0x280 [ 29.360923] do_general_protection+0x331/0x3e0 [ 29.360924] general_protection+0x25/0x50 [ 29.360925] timerqueue_add+0xb8/0x280 [ 29.360926] enqueue_hrtimer+0x177/0x4b0 [ 29.360928] __hrtimer_run_queues+0xb15/0xec0 [ 29.360929] hrtimer_interrupt+0x2a5/0x6f0 [ 29.360930] smp_apic_timer_interrupt+0x14a/0x700 [ 29.360931] apic_timer_interrupt+0xf/0x20 [ 29.360933] __memmove+0x24/0x1a0 [ 29.360934] skb_vlan_untag+0x470/0xc40 [ 29.360935] __netif_receive_skb_core+0x119c/0x3460 [ 29.360936] __netif_receive_skb+0x2c/0x1b0 [ 29.360938] netif_receive_skb_internal+0x10b/0x670 [ 29.360939] netif_receive_skb+0xae/0x390 [ 29.360940] tun_rx_batched.isra.50+0x5ee/0x870 [ 29.360941] tun_get_user+0x299e/0x3c20 [ 29.360943] tun_chr_write_iter+0xb9/0x160 [ 29.360944] __vfs_write+0x684/0x970 [ 29.360945] vfs_write+0x189/0x510 [ 29.360946] SyS_write+0xef/0x220 [ 29.360947] do_syscall_64+0x281/0x940 [ 29.360949] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 29.360949] [ 29.360951] other info that might help us debug this: [ 29.360951] [ 29.360952] Chain exists of: [ 29.360953] (console_sem).lock --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 29.360958] [ 29.360959] Possible unsafe locking scenario: [ 29.360960] [ 29.360961] CPU0 CPU1 [ 29.360963] ---- ---- [ 29.360963] lock(hrtimer_bases.lock); [ 29.360966] lock(&rt_b->rt_runtime_lock); [ 29.360969] lock(hrtimer_bases.lock); [ 29.360971] lock((console_sem).lock); [ 29.360973] [ 29.360974] *** DEADLOCK *** [ 29.360975] [ 29.360976] 3 locks held by syzkaller402313/4412: [ 29.360977] #0: (rcu_read_lock){....}, at: [<00000000a5bed563>] netif_receive_skb_internal+0xa2/0x670 [ 29.360981] #1: (hrtimer_bases.lock){-.-.}, at: [<00000000bf18422f>] __hrtimer_run_queues+0x3dc/0xec0 [ 29.360986] #2: (rcu_read_lock){....}, at: [<00000000a372e3c7>] atomic_notifier_call_chain+0x0/0x140 [ 29.360990] [ 29.360991] stack backtrace: [ 29.360993] CPU: 1 PID: 4412 Comm: syzkaller402313 Not tainted 4.16.0-rc7+ #3 [ 29.360995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.360996] Call Trace: [ 29.360997] [ 29.360998] dump_stack+0x194/0x24d [ 29.360999] ? arch_local_irq_restore+0x53/0x53 [ 29.361001] print_circular_bug.isra.38+0x2cd/0x2dc [ 29.361002] ? save_trace+0xe0/0x2b0 [ 29.361003] __lock_acquire+0x30a8/0x3e00 [ 29.361004] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 29.361006] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 29.361007] ? print_irqtrace_events+0x270/0x270 [ 29.361008] ? enqueue_entity+0x34f/0x2030 [ 29.361009] ? put_prev_task_fair+0x80/0x80 [ 29.361011] ? __rb_erase_color+0x27b0/0x27b0 [ 29.361012] ? __lock_acquire+0x664/0x3e00 [ 29.361013] ? print_irqtrace_events+0x270/0x270 [ 29.361014] ? trace_hardirqs_off+0x10/0x10 [ 29.361016] ? print_irqtrace_events+0x270/0x270 [ 29.361017] ? trace_hardirqs_off+0x10/0x10 [ 29.361018] ? __lock_acquire+0x664/0x3e00 [ 29.361019] ? print_irqtrace_events+0x270/0x270 [ 29.361020] lock_acquire+0x1d5/0x580 [ 29.361022] ? lock_acquire+0x1d5/0x580 [ 29.361023] ? down_trylock+0x13/0x70 [ 29.361024] ? lock_release+0xa40/0xa40 [ 29.361025] ? vprintk_emit+0x43b/0xb90 [ 29.361026] ? lock_downgrade+0x980/0x980 [ 29.361027] ? kvm_sched_clock_read+0x25/0x40 [ 29.361028] ? sched_clock+0x31/0x40 [ 29.361029] ? sched_clock_cpu+0x1b/0x180 [ 29.361031] ? vprintk_emit+0x5b5/0xb90 [ 29.361032] _raw_spin_lock_irqsave+0x96/0xc0 [ 29.361033] ? down_trylock+0x13/0x70 [ 29.361034] down_trylock+0x13/0x70 [ 29.361035] ? vprintk_emit+0x5b5/0xb90 [ 29.361037] __down_trylock_console_sem+0xa2/0x1e0 [ 29.361038] console_trylock+0x15/0x70 [ 29.361039] vprintk_emit+0x5b5/0xb90 [ 29.361040] ? console_unlock+0xfb0/0xfb0 [ 29.361041] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 29.361043] ? print_irqtrace_events+0x270/0x270 [ 29.361044] ? find_held_lock+0x35/0x1d0 [ 29.361045] vprintk_default+0x28/0x30 [ 29.361046] vprintk_func+0x57/0xc0 [ 29.361047] printk+0xaa/0xca [ 29.361048] ? show_regs_print_info+0x18/0x18 [ 29.361049] ? kasan_die_handler+0x25/0x3f [ 29.361051] kasan_die_handler+0x31/0x3f [ 29.361052] notifier_call_chain+0x136/0x2c0 [ 29.361053] ? raw_notifier_chain_unregister+0x1b0/0x1b0 [ 29.361055] ? rcutorture_record_progress+0x10/0x10 [ 29.361056] atomic_notifier_call_chain+0x77/0x140 [ 29.361057] notify_die+0x18c/0x280 [ 29.361058] ? atomic_notifier_call_chain+0x140/0x140 [ 29.361060] ? search_exception_tables+0x47/0x50 [ 29.361061] do_general_protection+0x331/0x3e0 [ 29.361062] general_protection+0x25/0x50 [ 29.361063] RIP: 0010:timerqueue_add+0xb8/0x280 [ 29.361065] RSP: 0018:ffff8801db307a28 EFLAGS: 00010002 [ 29.361067] RAX: ffffed003b664cc7 RBX: ffff8801db326620 RCX: ffffffff866a78ec [ 29.361069] RDX: 0000502020005023 RSI: ffff8801db326620 RDI: 0002810100028119 [ 29.361071] RBP: ffff8801db307a68 R08: 0000000000000000 R09: 1ffff1003b660f0f [ 29.361072] R10: ffff8801db307a78 R11: 0000000000000002 R12: dffffc0000000000 [ 29.361074] R13: 0002810100028101 R14: 00000006ad949680 R15: ffff8801b7b97cc8 [ 29.361075] ? timerqueue_add+0x9c/0x280 [ 29.361077] ? timerqueue_add+0x9c/0x280 [ 29.361078] enqueue_hrtimer+0x177/0x4b0 [ 29.361079] ? lock_release+0xa40/0xa40 [ 29.361080] ? retrigger_next_event+0x1e0/0x1e0 [ 29.361082] ? __lock_is_held+0xb6/0x140 [ 29.361083] __hrtimer_run_queues+0xb15/0xec0 [ 29.361084] ? hrtimer_fixup_init+0x70/0x70 [ 29.361085] ? pvclock_read_flags+0x160/0x160 [ 29.361086] ? lock_acquire+0x1d5/0x580 [ 29.361087] ? ktime_get+0x26f/0x3a0 [ 29.361089] ? kvm_clock_get_cycles+0x25/0x30 [ 29.361090] ? ktime_get_update_offsets_now+0x34a/0x520 [ 29.361091] ? do_timer+0x50/0x50 [ 29.361092] ? native_apic_msr_write+0x5c/0x80 [ 29.361094] ? rcu_idle_enter+0x530/0x530 [ 29.361095] ? lapic_next_event+0x54/0x80 [ 29.361096] ? clockevents_program_event+0x108/0x2e0 [ 29.361097] hrtimer_interrupt+0x2a5/0x6f0 [ 29.361099] smp_apic_timer_interrupt+0x14a/0x700 [ 29.361100] ? smp_reschedule_interrupt+0xe6/0x650 [ 29.361102] ? smp_call_function_single_interrupt+0x640/0x640 [ 29.361103] ? _raw_spin_lock+0x32/0x40 [ 29.361104] ? _raw_spin_unlock+0x22/0x30 [ 29.361105] ? handle_edge_irq+0x2b4/0x7c0 [ 29.361106] ? task_prio+0x50/0x50 [ 29.361108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.361109] apic_timer_interrupt+0xf/0x20 [ 29.361110] [ 29.361111] RIP: 0010:__memmove+0x24/0x1a0 [ 29.361112] RSP: 0018:ffff8801b467ee28 EFLAGS: 00010287 ORIG_RAX: ffffffffffffff12 [ 29.361115] RAX: ffff8801b52ec984 RBX: fffffffffffffffe RCX: fffffffffd610431 [ 29.361117] RDX: fffffffffffffffe RSI: ffff8801b7cdc54d RDI: ffff8801b7cdc551 [ 29.361118] Lost 83 message(s)! [ 30.391433] ---[ end trace cad7214be10b65c1 ]--- [ 30.396168] Kernel panic - not syncing: Fatal exception in interrupt [ 30.403011] Dumping ftrace buffer: [ 30.406523] (ftrace buffer empty) [ 30.410204] Kernel Offset: disabled [ 30.413808] Rebooting in 86400 seconds..