[ 0.000000][ T0] Linux version 5.9.0-rc4-syzkaller (syzkaller@syzkaller) (clang version 10.0.0 (https://github.com/llvm/llvm-project/ c2443155a0fb245c8f17f2c1c72b6ea391e86e81), GNU ld (GNU Binutils for Ubuntu) 2.26.1) #0 SMP now [ 0.000000][ T0] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 security=selinux lsm=lockdown,yama,safesetid,integrity,selinux,tomoyo,bpf ima_policy=tcb workqueue.watchdog_thresh=140 kvm-intel.nested=1 nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 spec_store_bypass_disable=prctl numa=fake=2 nopcid dummy_hcd.num=8 binder.debug_mask=0 rcupdate.rcu_expedited=1 [ 0.000000][ T0] KERNEL supported cpus: [ 0.000000][ T0] Intel GenuineIntel [ 0.000000][ T0] AMD AuthenticAMD [ 0.000000][ T0] Centaur CentaurHauls [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 0.000000][ T0] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000][ T0] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000][ T0] BIOS-provided physical RAM map: [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000100000-0x00000000bfffcfff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x00000000bfffd000-0x00000000bfffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000][ T0] printk: bootconsole [earlyser0] enabled [ 0.000000][ T0] Malformed early option 'vsyscall' [ 0.000000][ T0] nopcid: PCID feature disabled [ 0.000000][ T0] NX (Execute Disable) protection: active [ 0.000000][ T0] SMBIOS 2.4 present. [ 0.000000][ T0] DMI: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 0.000000][ T0] Hypervisor detected: KVM [ 0.000000][ T0] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000009][ T0] kvm-clock: cpu 0, msr 131ba001, primary cpu clock [ 0.000010][ T0] kvm-clock: using sched offset of 5805629849 cycles [ 0.001034][ T0] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.003604][ T0] tsc: Detected 2300.000 MHz processor [ 0.014498][ T0] last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.015863][ T0] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.016958][ T0] last_pfn = 0xbfffd max_arch_pfn = 0x400000000 [ 0.036098][ T0] found SMP MP-table at [mem 0x000f24f0-0x000f24ff] [ 0.037229][ T0] check: Scanning 1 areas for low memory corruption [ 0.038171][ T0] Using GB pages for direct mapping [ 0.043711][ T0] ACPI: Early table checksum verification disabled [ 0.044735][ T0] ACPI: RSDP 0x00000000000F2270 000014 (v00 Google) [ 0.045876][ T0] ACPI: RSDT 0x00000000BFFFFFC0 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.047536][ T0] ACPI: FACP 0x00000000BFFFF380 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.048987][ T0] ACPI: DSDT 0x00000000BFFFDAC0 0018BA (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.050328][ T0] ACPI: FACS 0x00000000BFFFDA80 000040 [ 0.051084][ T0] ACPI: FACS 0x00000000BFFFDA80 000040 [ 0.051892][ T0] ACPI: SRAT 0x00000000BFFFFEB0 0000C8 (v03 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.053179][ T0] ACPI: APIC 0x00000000BFFFFE00 000076 (v05 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.054619][ T0] ACPI: SSDT 0x00000000BFFFF480 000980 (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.056107][ T0] ACPI: WAET 0x00000000BFFFFE80 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.057916][ T0] SRAT: PXM 0 -> APIC 0x00 -> Node 0 [ 0.058667][ T0] SRAT: PXM 0 -> APIC 0x01 -> Node 0 [ 0.059486][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] [ 0.060764][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0xbfffffff] [ 0.061735][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x21fffffff] [ 0.062852][ T0] NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0xbfffffff] -> [mem 0x00000000-0xbfffffff] [ 0.064403][ T0] NUMA: Node 0 [mem 0x00000000-0xbfffffff] + [mem 0x100000000-0x21fffffff] -> [mem 0x00000000-0x21fffffff] [ 0.066166][ T0] Faking node 0 at [mem 0x0000000000000000-0x000000012fffffff] (4864MB) [ 0.067446][ T0] Faking node 1 at [mem 0x0000000130000000-0x000000021fffffff] (3840MB) [ 0.069134][ T0] NODE_DATA(0) allocated [mem 0x12fffb000-0x12fffffff] [ 0.071069][ T0] NODE_DATA(1) allocated [mem 0x21fff8000-0x21fffcfff] [ 0.072650][ T0] Zone ranges: [ 0.073152][ T0] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.074210][ T0] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.075296][ T0] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.076371][ T0] Device empty [ 0.076879][ T0] Movable zone start for each node [ 0.077555][ T0] Early memory node ranges [ 0.078317][ T0] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.079604][ T0] node 0: [mem 0x0000000000100000-0x00000000bfffcfff] [ 0.080714][ T0] node 0: [mem 0x0000000100000000-0x000000012fffffff] [ 0.081660][ T0] node 1: [mem 0x0000000130000000-0x000000021fffffff] [ 0.084209][ T0] Zeroed struct page in unavailable ranges: 101 pages [ 0.084223][ T0] Initmem setup node 0 [mem 0x0000000000001000-0x000000012fffffff] [ 0.363555][ T0] Initmem setup node 1 [mem 0x0000000130000000-0x000000021fffffff] [ 0.642501][ T0] ACPI: PM-Timer IO Port: 0xb008 [ 0.643385][ T0] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.644589][ T0] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.645891][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.647040][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.648207][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.649276][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.650549][ T0] Using ACPI (MADT) for SMP configuration information [ 0.651518][ T0] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.652471][ T0] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.653651][ T0] PM: hibernation: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.654880][ T0] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.656194][ T0] PM: hibernation: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.657359][ T0] PM: hibernation: Registered nosave memory: [mem 0xbfffd000-0xbfffffff] [ 0.658477][ T0] PM: hibernation: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.659570][ T0] PM: hibernation: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.660713][ T0] [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.661630][ T0] Booting paravirtualized kernel on KVM [ 0.662383][ T0] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.664445][ T0] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:2 [ 0.666680][ T0] percpu: Embedded 159 pages/cpu s612616 r8192 d30456 u1048576 [ 0.668149][ T0] Built 2 zonelists, mobility grouping on. Total pages: 1927557 [ 0.669168][ T0] Policy zone: Normal [ 0.669731][ T0] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 security=selinux lsm=lockdown,yama,safesetid,integrity,selinux,tomoyo,bpf ima_policy=tcb workqueue.watchdog_thresh=140 kvm-intel.nested=1 nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 spec_store_bypass_disable=prctl numa=fake=2 nopcid dummy_hcd.num=8 binder.debug_mask=0 rcupdate.rcu_expedited=1 [ 0.683522][ T0] mem auto-init: stack:off, heap alloc:on, heap free:off [ 1.170982][ T0] Memory: 2121664K/7863916K available (266247K kernel code, 9287K rwdata, 14188K rodata, 4188K init, 10628K bss, 1472452K reserved, 0K cma-reserved) [ 1.176564][ T0] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=2 [ 1.177751][ T0] vmalloc area at: ffffc90000000000 [ 1.178454][ T0] vmalloc shadow at: ffffd10000000000 [ 1.179160][ T0] Starting KernelMemorySanitizer [ 1.183979][ T0] rcu: Hierarchical RCU implementation. [ 1.184851][ T0] rcu: RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 1.185950][ T0] rcu: RCU debug extended QS entry/exit. [ 1.186795][ T0] All grace periods are expedited (rcu_expedited). [ 1.187760][ T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 1.188947][ T0] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 [ 1.211800][ T0] NR_IRQS: 4352, nr_irqs: 440, preallocated irqs: 16 [ 1.215620][ T0] random: get_random_bytes called from start_kernel+0x4f7/0xbdf with crng_init=0 [ 1.216785][ T0] Console: colour VGA+ 80x25 [ 1.219177][ T0] printk: console [ttyS0] enabled [ 1.219177][ T0] printk: console [ttyS0] enabled [ 1.220607][ T0] printk: bootconsole [earlyser0] disabled [ 1.220607][ T0] printk: bootconsole [earlyser0] disabled [ 1.222723][ T0] mempolicy: Enabling automatic NUMA balancing. Configure with numa_balancing= or the kernel.numa_balancing sysctl [ 1.224457][ T0] ACPI: Core revision 20200717 [ 1.226908][ T0] APIC: Switch to symmetric I/O mode setup [ 1.228453][ T0] x2apic enabled [ 1.230592][ T0] Switched APIC routing to physical x2apic. [ 1.235011][ T0] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.236145][ T0] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns [ 1.238368][ T0] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.239695][ T0] pid_max: default: 32768 minimum: 301 [ 1.241550][ T0] LSM: Security Framework initializing [ 1.242361][ T0] LSM: security= is ignored because it is superseded by lsm= [ 1.243686][ T0] Yama: becoming mindful. [ 1.244878][ T0] SELinux: Initializing. [ 1.246336][ T0] TOMOYO Linux initialized [ 1.273657][ T0] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, vmalloc) [ 1.287681][ T0] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, vmalloc) [ 1.289019][ T0] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, vmalloc) [ 1.290693][ T0] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, vmalloc) [ 1.302968][ T0] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.304150][ T0] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.305284][ T0] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 1.306701][ T0] Spectre V2 : Spectre mitigation: kernel not compiled with retpoline; no mitigation available! [ 1.306815][ T0] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl [ 1.308397][ T0] MDS: Mitigation: Clear CPU buffers [ 1.311875][ T0] Freeing SMP alternatives memory: 140K [ 1.434947][ T1] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.438347][ T1] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.438347][ T1] rcu: Hierarchical SRCU implementation. [ 1.438347][ T1] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build [ 1.438347][ T1] NMI watchdog: Perf NMI watchdog permanently disabled [ 1.439476][ T1] smp: Bringing up secondary CPUs ... [ 1.442393][ T1] x86: Booting SMP configuration: [ 1.443258][ T1] .... node #0, CPUs: #1 [ 0.023967][ T0] kvm-clock: cpu 1, msr 131ba041, secondary cpu clock [ 1.445365][ T1] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. [ 1.448570][ T1] smp: Brought up 2 nodes, 2 CPUs [ 1.449341][ T1] smpboot: Max logical packages: 1 [ 1.450117][ T1] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.458425][ T1] devtmpfs: initialized [ 1.460221][ T1] x86/mm: Memory block size: 128MB [ 1.502773][ T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.505545][ T1] futex hash table entries: 512 (order: 3, 32768 bytes, vmalloc) [ 1.508905][ T1] xor: automatically using best checksumming function avx [ 1.507664][ T22] kworker/u4:0 (22) used greatest stack depth: 9872 bytes left [ 1.511900][ T1] PM: RTC time: 19:46:54, date: 2020-09-29 [ 1.516367][ T1] NET: Registered protocol family 16 [ 1.527772][ T1] audit: initializing netlink subsys (disabled) [ 1.528661][ T26] audit: type=2000 audit(1601408814.879:1): state=initialized audit_enabled=0 res=1 [ 1.534207][ T1] thermal_sys: Registered thermal governor 'step_wise' [ 1.534241][ T1] thermal_sys: Registered thermal governor 'user_space' [ 1.541383][ T1] cpuidle: using governor menu [ 1.541383][ T1] NET: Registered protocol family 42 [ 1.558521][ T1] ACPI: bus type PCI registered [ 1.558521][ T1] dca service started, version 1.12.1 [ 1.558521][ T1] PCI: Using configuration type 1 for base access [ 3.448317][ T1] WARNING: workqueue cpumask: online intersect > possible intersect [ 3.462428][ T1] HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages [ 3.463787][ T1] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages [ 3.532804][ T1] cryptd: max_cpu_qlen set to 1000 [ 3.778458][ T1] raid6: avx2x4 gen() 275 MB/s [ 3.948413][ T1] raid6: avx2x4 xor() 254 MB/s [ 4.118418][ T1] raid6: avx2x2 gen() 256 MB/s [ 4.288418][ T1] raid6: avx2x2 xor() 288 MB/s [ 4.458405][ T1] raid6: avx2x1 gen() 200 MB/s [ 4.628421][ T1] raid6: avx2x1 xor() 279 MB/s [ 4.798392][ T1] raid6: sse2x4 gen() 159 MB/s [ 4.968429][ T1] raid6: sse2x4 xor() 127 MB/s [ 5.138388][ T1] raid6: sse2x2 gen() 134 MB/s [ 5.308460][ T1] raid6: sse2x2 xor() 145 MB/s [ 5.478556][ T1] raid6: sse2x1 gen() 96 MB/s [ 5.648430][ T1] raid6: sse2x1 xor() 140 MB/s [ 5.649411][ T1] raid6: using algorithm avx2x4 gen() 275 MB/s [ 5.650378][ T1] raid6: .... xor() 254 MB/s, rmw enabled [ 5.651336][ T1] raid6: using avx2x2 recovery algorithm [ 5.653625][ T1] ACPI: Added _OSI(Module Device) [ 5.654677][ T1] ACPI: Added _OSI(Processor Device) [ 5.655811][ T1] ACPI: Added _OSI(3.0 _SCP Extensions) [ 5.656915][ T1] ACPI: Added _OSI(Processor Aggregator Device) [ 5.657965][ T1] ACPI: Added _OSI(Linux-Dell-Video) [ 5.658390][ T1] ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) [ 5.659612][ T1] ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) [ 5.772748][ T1] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 5.800712][ T1] ACPI: Interpreter enabled [ 5.802043][ T1] ACPI: (supports S0 S3 S4 S5) [ 5.803066][ T1] ACPI: Using IOAPIC for interrupt routing [ 5.804448][ T1] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 5.810435][ T1] ACPI: Enabled 16 GPEs in block 00 to 0F [ 6.000484][ T1] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 6.002112][ T1] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] [ 6.004196][ T1] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 6.018235][ T1] PCI host bridge to bus 0000:00 [ 6.018506][ T1] pci_bus 0000:00: Unknown NUMA node; performance will be reduced [ 6.020002][ T1] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 6.021312][ T1] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 6.026592][ T1] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 6.028446][ T1] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfefff window] [ 6.029939][ T1] pci_bus 0000:00: root bus resource [bus 00-ff] [ 6.031417][ T1] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 6.040817][ T1] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 6.064635][ T1] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 6.084520][ T1] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 6.092918][ T1] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 6.102153][ T1] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] [ 6.108189][ T1] pci 0000:00:03.0: reg 0x14: [mem 0xfebfc000-0xfebfc07f] [ 6.130579][ T1] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 [ 6.139840][ T1] pci 0000:00:04.0: reg 0x10: [io 0xc040-0xc07f] [ 6.145419][ T1] pci 0000:00:04.0: reg 0x14: [mem 0xfebfd000-0xfebfd07f] [ 6.166878][ T1] pci 0000:00:05.0: [1af4:1005] type 00 class 0x00ff00 [ 6.176381][ T1] pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] [ 6.181657][ T1] pci 0000:00:05.0: reg 0x14: [mem 0xfebfe000-0xfebfe03f] [ 6.230880][ T1] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 6.237390][ T1] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 6.243497][ T1] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 6.250345][ T1] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 6.254507][ T1] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 6.272995][ T1] iommu: Default domain type: Translated [ 6.274877][ T1] vgaarb: loaded [ 6.284878][ T1] SCSI subsystem initialized [ 6.295008][ T1] ACPI: bus type USB registered [ 6.297544][ T1] usbcore: registered new interface driver usbfs [ 6.299162][ T1] usbcore: registered new interface driver hub [ 6.301255][ T1] usbcore: registered new device driver usb [ 6.305309][ T1] mc: Linux media interface: v0.10 [ 6.306987][ T1] videodev: Linux video capture interface: v2.00 [ 6.309537][ T1] pps_core: LinuxPPS API ver. 1 registered [ 6.311013][ T1] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 6.313534][ T1] PTP clock support registered [ 6.325809][ T1] EDAC MC: Ver: 3.0.0 [ 6.333943][ T1] Advanced Linux Sound Architecture Driver Initialized. [ 6.342941][ T1] Bluetooth: Core ver 2.22 [ 6.344326][ T1] NET: Registered protocol family 31 [ 6.345370][ T1] Bluetooth: HCI device and connection manager initialized [ 6.347092][ T1] Bluetooth: HCI socket layer initialized [ 6.348632][ T1] Bluetooth: L2CAP socket layer initialized [ 6.350020][ T1] Bluetooth: SCO socket layer initialized [ 6.351342][ T1] NET: Registered protocol family 8 [ 6.352280][ T1] NET: Registered protocol family 20 [ 6.353354][ T1] NetLabel: Initializing [ 6.354053][ T1] NetLabel: domain hash size = 128 [ 6.354997][ T1] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 6.357545][ T1] NetLabel: unlabeled traffic allowed by default [ 6.361818][ T1] nfc: nfc_init: NFC Core ver 0.1 [ 6.363851][ T1] NET: Registered protocol family 39 [ 6.365054][ T1] PCI: Using ACPI for IRQ routing [ 6.385792][ T1] clocksource: Switched to clocksource kvm-clock [ 15.357016][ T1] VFS: Disk quotas dquot_6.6.0 [ 15.358206][ T1] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 15.360546][ T1] FS-Cache: Loaded [ 15.362802][ T1] CacheFiles: Loaded [ 15.364562][ T1] TOMOYO: 2.6.0 [ 15.365268][ T1] Mandatory Access Control activated. [ 15.366984][ T1] pnp: PnP ACPI init [ 15.398146][ T1] pnp: PnP ACPI: found 7 devices [ 15.540181][ T1] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 15.552510][ T1] NET: Registered protocol family 2 [ 15.563883][ T1] tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, vmalloc) [ 15.577882][ T1] TCP established hash table entries: 65536 (order: 7, 524288 bytes, vmalloc) [ 15.598746][ T1] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, vmalloc) [ 15.618663][ T1] TCP: Hash tables configured (established 65536 bind 65536) [ 15.630418][ T1] MPTCP token hash table entries: 8192 (order: 5, 196608 bytes, vmalloc) [ 15.640888][ T1] UDP hash table entries: 4096 (order: 5, 131072 bytes, vmalloc) [ 15.651482][ T1] UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, vmalloc) [ 15.662350][ T1] NET: Registered protocol family 1 [ 15.670372][ T1] RPC: Registered named UNIX socket transport module. [ 15.677339][ T1] RPC: Registered udp transport module. [ 15.683384][ T1] RPC: Registered tcp transport module. [ 15.689022][ T1] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 15.701343][ T1] NET: Registered protocol family 44 [ 15.706852][ T1] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] [ 15.714138][ T1] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] [ 15.721894][ T1] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] [ 15.729837][ T1] pci_bus 0000:00: resource 7 [mem 0xc0000000-0xfebfefff window] [ 15.738948][ T1] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 15.746247][ T1] PCI: CLS 0 bytes, default 64 [ 15.759845][ T1] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 15.767187][ T1] software IO TLB: mapped [mem 0xbbffd000-0xbfffd000] (64MB) [ 15.784619][ T1] RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer [ 15.799435][ T1] kvm: already loaded the other module [ 15.804995][ T1] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns [ 15.816133][ T1] clocksource: Switched to clocksource tsc [ 15.822799][ T1] mce: Machine check injector initialized [ 15.836760][ T1] check: Scanning for low memory corruption every 60 seconds [ 15.887296][ T1] Initialise system trusted keyrings [ 15.894833][ T1] workingset: timestamp_bits=40 max_order=21 bucket_order=0 [ 15.954126][ T1] zbud: loaded [ 15.964314][ T1] DLM installed [ 15.974365][ T1] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 15.988906][ T1] FS-Cache: Netfs 'nfs' registered for caching [ 16.000130][ T1] NFS: Registering the id_resolver key type [ 16.006127][ T1] Key type id_resolver registered [ 16.011250][ T1] Key type id_legacy registered [ 16.016870][ T1] nfs4filelayout_init: NFSv4 File Layout Driver Registering... [ 16.024556][ T1] Installing knfsd (copyright (C) 1996 okir@monad.swb.de). [ 16.041009][ T1] FS-Cache: Netfs 'cifs' registered for caching [ 16.050724][ T1] Key type cifs.spnego registered [ 16.055880][ T1] Key type cifs.idmap registered [ 16.061026][ T1] ntfs: driver 2.1.32 [Flags: R/W]. [ 16.068141][ T1] fuse: init (API version 7.31) [ 16.079684][ T1] JFS: nTxBlock = 8192, nTxLock = 65536 [ 16.125584][ T1] SGI XFS with ACLs, security attributes, realtime, quota, no debug enabled [ 16.144353][ T1] 9p: Installing v9fs 9p2000 file system support [ 16.151473][ T1] FS-Cache: Netfs '9p' registered for caching [ 16.159300][ T1] ocfs2: Registered cluster interface o2cb [ 16.165854][ T1] ocfs2: Registered cluster interface user [ 16.172982][ T1] OCFS2 User DLM kernel interface loaded [ 16.189610][ T1] gfs2: GFS2 installed [ 16.212727][ T1] FS-Cache: Netfs 'ceph' registered for caching [ 16.219133][ T1] ceph: loaded (mds proto 32) [ 16.961085][ T1] NET: Registered protocol family 38 [ 16.967366][ T1] async_tx: api initialized (async) [ 16.972909][ T1] Key type asymmetric registered [ 16.977881][ T1] Asymmetric key parser 'x509' registered [ 16.983686][ T1] Asymmetric key parser 'pkcs8' registered [ 16.989706][ T1] Key type pkcs7_test registered [ 16.994675][ T1] Asymmetric key parser 'tpm_parser' registered [ 17.001205][ T1] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 241) [ 17.010668][ T1] io scheduler mq-deadline registered [ 17.016090][ T1] io scheduler kyber registered [ 17.021942][ T1] io scheduler bfq registered [ 17.070785][ T1] hgafb: HGA card not detected. [ 17.076892][ T1] hgafb: probe of hgafb.0 failed with error -22 [ 17.084595][ T1] usbcore: registered new interface driver udlfb [ 17.088693][ T17] ===================================================== [ 17.092043][ T1] usbcore: registered new interface driver smscufx [ 17.097972][ T17] BUG: KMSAN: use-after-free in __fput+0x42b/0xf20 [ 17.098068][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.9.0-rc4-syzkaller #0 [ 17.110150][ T1] uvesafb: failed to execute /sbin/v86d [ 17.106420][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 17.106420][ T17] Workqueue: events delayed_fput [ 17.106420][ T17] Call Trace: [ 17.106420][ T17] dump_stack+0x21c/0x280 [ 17.106420][ T17] kmsan_report+0xf7/0x1e0 [ 17.106420][ T17] __msan_warning+0x58/0xa0 [ 17.106420][ T17] __fput+0x42b/0xf20 [ 17.106420][ T17] ? kmsan_get_metadata+0x116/0x180 [ 17.106420][ T17] ? kmsan_set_origin_checked+0x95/0xf0 [ 17.106420][ T17] delayed_fput+0x7a/0xe0 [ 17.106420][ T17] ? flush_delayed_fput+0xe0/0xe0 [ 17.106420][ T17] process_one_work+0x1688/0x2140 [ 17.106420][ T17] worker_thread+0x10bc/0x2730 [ 17.106420][ T17] ? kmsan_get_metadata+0x116/0x180 [ 17.106420][ T17] ? kmsan_get_metadata+0x116/0x180 [ 17.106420][ T17] kthread+0x551/0x590 [ 17.106420][ T17] ? process_one_work+0x2140/0x2140 [ 17.106420][ T17] ? kthread_blkcg+0x110/0x110 [ 17.106420][ T17] ret_from_fork+0x1f/0x30 [ 17.106420][ T17] [ 17.106420][ T17] Uninit was created at: [ 17.106420][ T17] kmsan_internal_poison_shadow+0x66/0xd0 [ 17.106420][ T17] kmsan_slab_free+0x6e/0xb0 [ 17.106420][ T17] kmem_cache_free+0x2f7/0xd50 [ 17.106420][ T17] file_free_rcu+0x15d/0x190 [ 17.106420][ T17] rcu_core+0xf35/0x1e90 [ 17.106420][ T17] rcu_core_si+0xe/0x10 [ 17.106420][ T17] __do_softirq+0x2ea/0x7f5 [ 17.106420][ T17] ===================================================== [ 17.106420][ T17] Disabling lock debugging due to kernel taint [ 17.106420][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 17.129185][ C0] ===================================================== [ 17.129185][ C0] BUG: KMSAN: use-after-free in rcu_cblist_dequeue+0x201/0x240 [ 17.106420][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 17.106420][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 17.106420][ T17] Workqueue: events delayed_fput [ 17.106420][ T17] Call Trace: [ 17.106420][ T17] dump_stack+0x21c/0x280 [ 17.106420][ T17] panic+0x4d7/0xef7 [ 17.106420][ T17] ? add_taint+0x17c/0x210 [ 17.106420][ T17] kmsan_report+0x1df/0x1e0 [ 17.106420][ T17] __msan_warning+0x58/0xa0 [ 17.106420][ T17] __fput+0x42b/0xf20 [ 17.106420][ T17] ? kmsan_get_metadata+0x116/0x180 [ 17.106420][ T17] ? kmsan_set_origin_checked+0x95/0xf0 [ 17.106420][ T17] delayed_fput+0x7a/0xe0 [ 17.106420][ T17] ? flush_delayed_fput+0xe0/0xe0 [ 17.106420][ T17] process_one_work+0x1688/0x2140 [ 17.106420][ T17] worker_thread+0x10bc/0x2730 [ 17.106420][ T17] ? kmsan_get_metadata+0x116/0x180 [ 17.106420][ T17] ? kmsan_get_metadata+0x116/0x180 [ 17.106420][ T17] kthread+0x551/0x590 [ 17.106420][ T17] ? process_one_work+0x2140/0x2140 [ 17.106420][ T17] ? kthread_blkcg+0x110/0x110 [ 17.106420][ T17] ret_from_fork+0x1f/0x30 [ 17.129185][ C0] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 17.129185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 17.129185][ C0] Call Trace: [ 17.129185][ C0] [ 17.129185][ C0] dump_stack+0x21c/0x280 [ 17.129185][ C0] kmsan_report+0xf7/0x1e0 [ 17.129185][ C0] __msan_warning+0x58/0xa0 [ 17.129185][ C0] rcu_cblist_dequeue+0x201/0x240 [ 17.129185][ C0] ? __put_cred+0x240/0x240 [ 17.129185][ C0] rcu_core+0x1043/0x1e90 [ 17.129185][ C0] ? rcu_scheduler_starting+0xc0/0xc0 [ 17.129185][ C0] rcu_core_si+0xe/0x10 [ 17.129185][ C0] __do_softirq+0x2ea/0x7f5 [ 17.129185][ C0] asm_call_on_stack+0xf/0x20 [ 17.129185][ C0] [ 17.129185][ C0] do_softirq_own_stack+0x7c/0xa0 [ 17.129185][ C0] __irq_exit_rcu+0x226/0x270 [ 17.129185][ C0] irq_exit_rcu+0xe/0x10 [ 17.129185][ C0] sysvec_apic_timer_interrupt+0x118/0x140 [ 17.129185][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 17.129185][ C0] RIP: 0010:console_unlock+0x195c/0x1e10 [ 17.129185][ C0] Code: c8 00 00 00 48 8b 9c 24 c0 00 00 00 e8 5d d3 00 00 48 85 db 0f 85 89 00 00 00 4c 89 bc 24 28 01 00 00 ff b4 24 28 01 00 00 9d <44> 89 f0 34 01 22 44 24 3f 44 89 f3 0a 5c 24 2a 3c 01 74 76 f6 c3 [ 17.129185][ C0] RSP: 0000:ffff88812e34adb0 EFLAGS: 00000286 [ 17.129185][ C0] RAX: 00007ffffffff000 RBX: 0000000000000000 RCX: ffff88821d680000 [ 17.129185][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000001b9a0 [ 17.129185][ C0] RBP: ffff88812e34af38 R08: ffffea000000000f R09: ffff88812fffa000 [ 17.129185][ C0] R10: 0000000000000004 R11: 00000000ff000000 R12: ffffffff927419b0 [ 17.129185][ C0] R13: ffff88821d6809f0 R14: 0000000000000001 R15: 0000000000000286 [ 17.129185][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 17.129185][ C0] vprintk_emit+0x48f/0x990 [ 17.129185][ C0] vprintk_default+0x90/0xa0 [ 17.129185][ C0] vprintk_func+0x2f7/0x300 [ 17.129185][ C0] printk+0x18b/0x1d3 [ 17.129185][ C0] ? uvesafb_exec+0x81e/0xd00 [ 17.129185][ C0] uvesafb_exec+0x9a5/0xd00 [ 17.129185][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 17.129185][ C0] uvesafb_probe+0x602/0xb3f0 [ 17.129185][ C0] ? kernfs_activate+0x830/0x840 [ 17.129185][ C0] ? kmsan_get_metadata+0x116/0x180 [ 17.129185][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 17.129185][ C0] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 17.129185][ C0] ? kernfs_put+0x9f/0x990 [ 17.129185][ C0] ? kernfs_create_link+0x3bd/0x420 [ 17.129185][ C0] ? __msan_get_context_state+0x9/0x20 [ 17.129185][ C0] ? is_acpi_device_node+0x90/0x110 [ 17.129185][ C0] ? acpi_dev_pm_attach+0xd0/0x5f0 [ 17.129185][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 17.129185][ C0] ? kmsan_get_metadata+0x116/0x180 [ 17.129185][ C0] ? uvesafb_cn_callback+0x610/0x610 [ 17.129185][ C0] platform_drv_probe+0x218/0x3a0 [ 17.129185][ C0] ? __platform_driver_register+0x190/0x190 [ 17.129185][ C0] really_probe+0xec3/0x2430 [ 17.129185][ C0] driver_probe_device+0x293/0x390 [ 17.129185][ C0] __device_attach_driver+0x63f/0x830 [ 17.129185][ C0] bus_for_each_drv+0x2ca/0x3f0 [ 17.129185][ C0] ? state_synced_show+0x130/0x130 [ 17.129185][ C0] __device_attach+0x538/0x850 [ 17.129185][ C0] device_initial_probe+0x4a/0x60 [ 17.129185][ C0] bus_probe_device+0x177/0x3d0 [ 17.129185][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 17.129185][ C0] device_add+0x3c8a/0x4240 [ 17.129185][ C0] platform_device_add+0x97f/0xca0 [ 17.129185][ C0] uvesafb_init+0x14ee/0x16e0 [ 17.129185][ C0] ? kmsan_get_metadata+0x116/0x180 [ 17.129185][ C0] do_one_initcall+0x4fb/0x9f0 [ 17.129185][ C0] ? ufx_reg_write+0x3f0/0x3f0 [ 17.129185][ C0] ? kmsan_get_metadata+0x116/0x180 [ 17.129185][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 17.129185][ C0] ? ufx_reg_write+0x3f0/0x3f0 [ 17.129185][ C0] do_initcall_level+0x336/0x3c5 [ 17.129185][ C0] do_initcalls+0x18d/0x24f [ 17.129185][ C0] ? cpu_init_udelay+0xcf/0xcf [ 17.129185][ C0] do_basic_setup+0x33/0x36 [ 17.129185][ C0] kernel_init_freeable+0x242/0x395 [ 17.129185][ C0] ? rest_init+0x1f0/0x1f0 [ 17.129185][ C0] kernel_init+0x1f/0x840 [ 17.129185][ C0] ? rest_init+0x1f0/0x1f0 [ 17.129185][ C0] ret_from_fork+0x1f/0x30 [ 17.129185][ C0] [ 17.129185][ C0] Uninit was created at: [ 17.129185][ C0] kmsan_internal_poison_shadow+0x66/0xd0 [ 17.129185][ C0] kmsan_slab_free+0x6e/0xb0 [ 17.129185][ C0] kmem_cache_free+0x2f7/0xd50 [ 17.129185][ C0] __d_free+0x65/0x70 [ 17.129185][ C0] rcu_core+0xf35/0x1e90 [ 17.129185][ C0] rcu_core_si+0xe/0x10 [ 17.129185][ C0] __do_softirq+0x2ea/0x7f5 [ 17.129185][ C0] ===================================================== [ 17.106420][ T17] Shutting down cpus with NMI [ 17.106420][ T17] Kernel Offset: disabled [ 17.106420][ T17] Rebooting in 86400 seconds..