[ 0.000000][ T0] Linux version 5.5.0-syzkaller (syzkaller@syzkaller) (gcc version 9.0.0 20181231 (experimental) (GCC)) #0 SMP PREEMPT now [ 0.000000][ T0] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 security=apparmor lsm=lockdown,yama,safesetid,integrity,tomoyo,apparmor ima_policy=tcb workqueue.watchdog_thresh=140 kvm-intel.nested=1 nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 spec_store_bypass_disable=prctl numa=fake=2 nopcid dummy_hcd.num=8 binder.debug_mask=0 [ 0.000000][ T0] KERNEL supported cpus: [ 0.000000][ T0] Intel GenuineIntel [ 0.000000][ T0] AMD AuthenticAMD [ 0.000000][ T0] Centaur CentaurHauls [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' [ 0.000000][ T0] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000][ T0] x86/fpu: xstate_offset[5]: 1088, xstate_sizes[5]: 64 [ 0.000000][ T0] x86/fpu: xstate_offset[6]: 1152, xstate_sizes[6]: 512 [ 0.000000][ T0] x86/fpu: xstate_offset[7]: 1664, xstate_sizes[7]: 1024 [ 0.000000][ T0] x86/fpu: Enabled xstate features 0xe7, context size is 2688 bytes, using 'standard' format. [ 0.000000][ T0] BIOS-provided physical RAM map: [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000][ T0] printk: bootconsole [earlyser0] enabled [ 0.000000][ T0] Malformed early option 'vsyscall' [ 0.000000][ T0] nopcid: PCID feature disabled [ 0.000000][ T0] NX (Execute Disable) protection: active [ 0.000000][ T0] SMBIOS 2.8 present. [ 0.000000][ T0] DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 0.000000][ T0] Hypervisor detected: KVM [ 0.000000][ T0] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000087][ T0] kvm-clock: cpu 0, msr adda001, primary cpu clock [ 0.000088][ T0] kvm-clock: using sched offset of 12777349647 cycles [ 0.013349][ T0] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.060751][ T0] tsc: Detected 2000.182 MHz processor [ 0.101550][ T0] last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 [ 0.131945][ T0] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.174878][ T0] found SMP MP-table at [mem 0x000f5a50-0x000f5a5f] [ 0.194798][ T0] check: Scanning 1 areas for low memory corruption [ 0.220187][ T0] ACPI: Early table checksum verification disabled [ 0.239617][ T0] ACPI: RSDP 0x00000000000F5880 000014 (v00 BOCHS ) [ 0.252241][ T0] ACPI: RSDT 0x000000007FFE1F9D 000040 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) [ 0.276039][ T0] ACPI: FACP 0x000000007FFE1860 0000F4 (v03 BOCHS BXPCFACP 00000001 BXPC 00000001) [ 0.298035][ T0] ACPI: DSDT 0x000000007FFDF040 002820 (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001) [ 0.317408][ T0] ACPI: FACS 0x000000007FFDF000 000040 [ 0.326085][ T0] ACPI: APIC 0x000000007FFE1954 0000B0 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) [ 0.343396][ T0] ACPI: HPET 0x000000007FFE1A04 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001) [ 0.364863][ T0] ACPI: SRAT 0x000000007FFE1A3C 000178 (v01 BOCHS BXPCSRAT 00000001 BXPC 00000001) [ 0.385493][ T0] ACPI: MCFG 0x000000007FFE1BB4 00003C (v01 BOCHS BXPCMCFG 00000001 BXPC 00000001) [ 0.401368][ T0] ACPI: SSDT 0x000000007FFE1BF0 0002CD (v01 BOCHS NVDIMM 00000001 BXPC 00000001) [ 0.418400][ T0] ACPI: NFIT 0x000000007FFE1EBD 0000E0 (v01 BOCHS BXPCNFIT 00000001 BXPC 00000001) [ 0.447447][ T0] SRAT: PXM 0 -> APIC 0x00 -> Node 0 [ 0.456302][ T0] SRAT: PXM 0 -> APIC 0x01 -> Node 0 [ 0.466066][ T0] SRAT: PXM 0 -> APIC 0x02 -> Node 0 [ 0.474643][ T0] SRAT: PXM 0 -> APIC 0x03 -> Node 0 [ 0.483729][ T0] SRAT: PXM 1 -> APIC 0x04 -> Node 1 [ 0.493442][ T0] SRAT: PXM 1 -> APIC 0x05 -> Node 1 [ 0.502120][ T0] SRAT: PXM 1 -> APIC 0x06 -> Node 1 [ 0.509699][ T0] SRAT: PXM 1 -> APIC 0x07 -> Node 1 [ 0.518404][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] [ 0.527788][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x3fffffff] [ 0.537608][ T0] ACPI: SRAT: Node 1 PXM 1 [mem 0x40000000-0x7fffffff] [ 0.547521][ T0] ACPI: SRAT: Node 1 PXM 1 [mem 0x100000000-0x57fffffff] hotplug [ 0.565407][ T0] NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x3fffffff] -> [mem 0x00000000-0x3fffffff] [ 0.586115][ T0] Faking node 0 at [mem 0x0000000000000000-0x000000003fffffff] (1024MB) [ 0.601644][ T0] Faking node 1 at [mem 0x0000000040000000-0x000000007ffdcfff] (1023MB) [ 0.628630][ T0] NODE_DATA(0) allocated [mem 0x3fffb000-0x3fffffff] [ 0.653558][ T0] NODE_DATA(1) allocated [mem 0x7ffd7000-0x7ffdbfff] [ 0.695993][ T0] Zone ranges: [ 0.702634][ T0] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.715833][ T0] DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] [ 0.733129][ T0] Normal empty [ 0.740595][ T0] Device empty [ 0.747684][ T0] Movable zone start for each node [ 0.759641][ T0] Early memory node ranges [ 0.770831][ T0] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.789331][ T0] node 0: [mem 0x0000000000100000-0x000000003fffffff] [ 0.803410][ T0] node 1: [mem 0x0000000040000000-0x000000007ffdcfff] [ 0.819544][ T0] Zeroed struct page in unavailable ranges: 98 pages [ 0.819625][ T0] Initmem setup node 0 [mem 0x0000000000001000-0x000000003fffffff] [ 0.883883][ T0] Initmem setup node 1 [mem 0x0000000040000000-0x000000007ffdcfff] [ 1.093795][ T0] kasan: KernelAddressSanitizer initialized [ 1.124504][ T0] ACPI: PM-Timer IO Port: 0x608 [ 1.133804][ T0] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 1.150952][ T0] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 1.168276][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 1.183368][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 1.199524][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 1.216221][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 1.232218][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 1.245978][ T0] Using ACPI (MADT) for SMP configuration information [ 1.259131][ T0] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 1.278994][ T0] smpboot: Allowing 8 CPUs, 4 hotplug CPUs [ 1.302947][ T0] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 1.322303][ T0] PM: hibernation: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 1.340268][ T0] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 1.356354][ T0] PM: hibernation: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 1.371453][ T0] [mem 0xc0000000-0xfed1bfff] available for PCI devices [ 1.381159][ T0] Booting paravirtualized kernel on KVM [ 1.390102][ T0] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.406687][ T0] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:8 nr_node_ids:2 [ 1.430214][ T0] percpu: Embedded 66 pages/cpu s232584 r8192 d29560 u1048576 [ 1.446707][ T0] KVM setup async PF for cpu 0 [ 1.453825][ T0] kvm-stealtime: cpu 0, msr 2d022940 [ 1.462310][ T0] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) [ 1.482326][ T0] Built 2 zonelists, mobility grouping on. Total pages: 515942 [ 1.495928][ T0] Policy zone: DMA32 [ 1.503807][ T0] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 security=apparmor lsm=lockdown,yama,safesetid,integrity,tomoyo,apparmor ima_policy=tcb workqueue.watchdog_thresh=140 kvm-intel.nested=1 nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 spec_store_bypass_disable=prctl numa=fake=2 nopcid dummy_hcd.num=8 binder.debug_mask=0 [ 1.715442][ T0] mem auto-init: stack:off, heap alloc:on, heap free:off [ 1.991910][ T0] Memory: 1521820K/2096620K available (116745K kernel code, 16763K rwdata, 21088K rodata, 2780K init, 24912K bss, 574800K reserved, 0K cma-reserved) [ 2.057538][ T0] Running RCU self tests [ 2.067175][ T0] rcu: Preemptible hierarchical RCU implementation. [ 2.083892][ T0] rcu: RCU lockdep checking is enabled. [ 2.103251][ T0] rcu: RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=8. [ 2.133457][ T0] rcu: RCU callback double-/use-after-free debug enabled. [ 2.157401][ T0] Tasks RCU enabled. [ 2.167520][ T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 2.188938][ T0] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=8 [ 2.221637][ T0] NR_IRQS: 4352, nr_irqs: 488, preallocated irqs: 16 [ 2.248465][ T0] random: get_random_bytes called from start_kernel+0x552/0x8e2 with crng_init=0 [ 2.492658][ T0] Console: colour VGA+ 80x25 [ 2.523259][ T0] printk: console [ttyS0] enabled [ 2.523259][ T0] printk: console [ttyS0] enabled [ 2.548434][ T0] printk: bootconsole [earlyser0] disabled [ 2.548434][ T0] printk: bootconsole [earlyser0] disabled [ 2.572521][ T0] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 2.591412][ T0] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 2.601712][ T0] ... MAX_LOCK_DEPTH: 48 [ 2.612060][ T0] ... MAX_LOCKDEP_KEYS: 8192 [ 2.622773][ T0] ... CLASSHASH_SIZE: 4096 [ 2.635148][ T0] ... MAX_LOCKDEP_ENTRIES: 32768 [ 2.649611][ T0] ... MAX_LOCKDEP_CHAINS: 65536 [ 2.660531][ T0] ... CHAINHASH_SIZE: 32768 [ 2.672181][ T0] memory used by lock dependency info: 6237 kB [ 2.681573][ T0] memory used for stack traces: 4224 kB [ 2.691281][ T0] per task-struct memory footprint: 1920 bytes [ 2.718351][ T0] mempolicy: Enabling automatic NUMA balancing. Configure with numa_balancing= or the kernel.numa_balancing sysctl [ 2.748194][ T0] ACPI: Core revision 20200110 [ 2.786637][ T0] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns [ 2.849206][ T0] APIC: Switch to symmetric I/O mode setup [ 2.893673][ T0] x2apic enabled [ 2.933236][ T0] Switched APIC routing to physical x2apic. [ 2.971155][ T0] KVM setup pv IPIs [ 3.087362][ T0] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 3.109488][ T0] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x1cd4da2e704, max_idle_ns: 440795303197 ns [ 3.142076][ T0] Calibrating delay loop (skipped) preset value.. 4000.36 BogoMIPS (lpj=20001820) [ 3.153530][ T0] pid_max: default: 32768 minimum: 301 [ 3.179343][ T0] LSM: Security Framework initializing [ 3.182308][ T0] LSM: security= is ignored because it is superseded by lsm= [ 3.192937][ T0] Yama: becoming mindful. [ 3.204939][ T0] TOMOYO Linux initialized [ 3.233459][ T0] AppArmor: AppArmor initialized [ 3.248539][ T0] Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, vmalloc) [ 3.254289][ T0] Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, vmalloc) [ 3.262302][ T0] Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, vmalloc) [ 3.271657][ T0] Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, vmalloc) [ 3.286152][ T0] *** VALIDATE tmpfs *** [ 3.351079][ T0] *** VALIDATE proc *** [ 3.383713][ T0] *** VALIDATE cgroup1 *** [ 3.391737][ T0] *** VALIDATE cgroup2 *** [ 3.429300][ T0] x86/cpu: User Mode Instruction Prevention (UMIP) activated [ 3.441998][ T0] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 [ 3.451583][ T0] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 3.462755][ T0] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 3.471867][ T0] Spectre V2 : Spectre mitigation: kernel not compiled with retpoline; no mitigation available! [ 3.472207][ T0] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl [ 3.492658][ T0] TAA: Mitigation: Clear CPU buffers [ 3.501582][ T0] MDS: Mitigation: Clear CPU buffers [ 3.735903][ T0] Freeing SMP alternatives memory: 96K [ 3.977448][ T1] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.00GHz (family: 0x6, model: 0x55, stepping: 0x3) [ 4.094882][ T1] Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. [ 4.119455][ T1] rcu: Hierarchical SRCU implementation. [ 4.150187][ T1] NMI watchdog: Perf NMI watchdog permanently disabled [ 4.182374][ T1] smp: Bringing up secondary CPUs ... [ 4.276852][ T1] x86: Booting SMP configuration: [ 4.281867][ T1] .... node #0, CPUs: #1 [ 0.808506][ T0] kvm-clock: cpu 1, msr adda041, secondary cpu clock [ 4.325835][ T15] KVM setup async PF for cpu 1 [ 4.331564][ T15] kvm-stealtime: cpu 1, msr 2d122940 [ 4.356067][ T1] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. [ 4.363154][ T1] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. [ 4.455291][ T1] #2 [ 0.808506][ T0] kvm-clock: cpu 2, msr adda081, secondary cpu clock [ 4.498384][ T20] KVM setup async PF for cpu 2 [ 4.501564][ T20] kvm-stealtime: cpu 2, msr 2d222940 [ 4.617381][ T1] #3 [ 0.808506][ T0] kvm-clock: cpu 3, msr adda0c1, secondary cpu clock [ 4.639824][ T25] KVM setup async PF for cpu 3 [ 4.639824][ T25] kvm-stealtime: cpu 3, msr 2d322940 [ 4.652513][ T1] smp: Brought up 2 nodes, 4 CPUs [ 4.661846][ T1] smpboot: Max logical packages: 2 [ 4.671742][ T1] smpboot: Total of 4 processors activated (16001.45 BogoMIPS) [ 4.723496][ T1] devtmpfs: initialized [ 4.737727][ T1] x86/mm: Memory block size: 128MB [ 4.807776][ T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 4.821564][ T34] kworker/u17:0 (34) used greatest stack depth: 27440 bytes left [ 4.823491][ T1] futex hash table entries: 2048 (order: 6, 262144 bytes, vmalloc) [ 4.850364][ T1] xor: automatically using best checksumming function avx [ 4.858586][ T1] PM: RTC time: 18:42:48, date: 2020-01-30 [ 4.865161][ T1] thermal_sys: Registered thermal governor 'step_wise' [ 4.865251][ T1] thermal_sys: Registered thermal governor 'user_space' [ 4.891259][ T1] NET: Registered protocol family 16 [ 4.910473][ T1] audit: initializing netlink subsys (disabled) [ 4.917326][ T39] audit: type=2000 audit(1580409767.853:1): state=initialized audit_enabled=0 res=1 [ 4.952359][ T1] cpuidle: using governor menu [ 4.968173][ T1] KVM setup pv remote TLB flush [ 4.972267][ T1] ACPI: bus type PCI registered [ 4.996415][ T1] dca service started, version 1.12.1 [ 5.005711][ T1] PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) [ 5.032603][ T1] PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 [ 5.102909][ T1] PCI: Using configuration type 1 for base access [ 5.169603][ T129] kworker/u17:1 (129) used greatest stack depth: 27304 bytes left [ 5.433838][ T1] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages [ 5.594887][ T1] cryptd: max_cpu_qlen set to 1000 [ 5.881591][ T1] raid6: avx512x4 gen() 11827 MB/s [ 6.060244][ T1] raid6: avx512x4 xor() 5752 MB/s [ 6.245053][ T1] raid6: avx512x2 gen() 11046 MB/s [ 6.429639][ T1] raid6: avx512x2 xor() 5237 MB/s [ 6.607647][ T1] raid6: avx512x1 gen() 6531 MB/s [ 6.794392][ T1] raid6: avx512x1 xor() 2734 MB/s [ 6.991564][ T1] raid6: avx2x4 gen() 7080 MB/s [ 7.181587][ T1] raid6: avx2x4 xor() 4102 MB/s [ 7.370294][ T1] raid6: avx2x2 gen() 5738 MB/s [ 7.561059][ T1] raid6: avx2x2 xor() 2415 MB/s [ 7.732846][ T1] raid6: avx2x1 gen() 3463 MB/s [ 7.920520][ T1] raid6: avx2x1 xor() 1386 MB/s [ 8.100894][ T1] raid6: sse2x4 gen() 4173 MB/s [ 8.274563][ T1] raid6: sse2x4 xor() 2253 MB/s [ 8.451694][ T1] raid6: sse2x2 gen() 3078 MB/s [ 8.639385][ T1] raid6: sse2x2 xor() 1343 MB/s [ 8.820200][ T1] raid6: sse2x1 gen() 1803 MB/s [ 8.999982][ T1] raid6: sse2x1 xor() 661 MB/s [ 9.011681][ T1] raid6: using algorithm avx512x4 gen() 11827 MB/s [ 9.031794][ T1] raid6: .... xor() 5752 MB/s, rmw enabled [ 9.051814][ T1] raid6: using avx512x2 recovery algorithm [ 9.090164][ T1] ACPI: Added _OSI(Module Device) [ 9.101812][ T1] ACPI: Added _OSI(Processor Device) [ 9.131690][ T1] ACPI: Added _OSI(3.0 _SCP Extensions) [ 9.141684][ T1] ACPI: Added _OSI(Processor Aggregator Device) [ 9.171858][ T1] ACPI: Added _OSI(Linux-Dell-Video) [ 9.181678][ T1] ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) [ 9.191633][ T1] ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) [ 9.278895][ T1] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 9.383524][ T1] ACPI: Interpreter enabled [ 9.405988][ T1] ACPI: (supports S0 S3 S4 S5) [ 9.423749][ T1] ACPI: Using IOAPIC for interrupt routing [ 9.455386][ T1] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 9.487037][ T1] ACPI: Enabled 3 GPEs in block 00 to 3F [ 9.660824][ T1] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 9.664109][ T1] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] [ 9.681507][ T1] acpi PNP0A08:00: _OSC: platform does not support [LTR] [ 9.684926][ T1] acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] [ 9.699902][ T1] PCI host bridge to bus 0000:00 [ 9.701651][ T1] pci_bus 0000:00: Unknown NUMA node; performance will be reduced [ 9.711955][ T1] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 9.721728][ T1] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 9.731719][ T1] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 9.741829][ T1] pci_bus 0000:00: root bus resource [mem 0x80000000-0xafffffff window] [ 9.751703][ T1] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 9.761764][ T1] pci_bus 0000:00: root bus resource [mem 0x580000000-0xd7fffffff window] [ 9.771753][ T1] pci_bus 0000:00: root bus resource [bus 00-ff] [ 9.784246][ T1] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 [ 9.811564][ T1] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 [ 9.891023][ T1] pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] [ 10.101564][ T1] pci 0000:00:01.0: reg 0x18: [mem 0xfebf8000-0xfebf8fff] [ 10.431564][ T1] pci 0000:00:01.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] [ 10.770509][ T1] pci 0000:00:02.0: [8086:100e] type 00 class 0x020000 [ 10.824303][ T1] pci 0000:00:02.0: reg 0x10: [mem 0xfeb80000-0xfeb9ffff] [ 10.845185][ T1] pci 0000:00:02.0: reg 0x14: [io 0xc600-0xc63f] [ 10.888932][ T1] pci 0000:00:02.0: reg 0x30: [mem 0xfeb00000-0xfeb3ffff pref] [ 10.936050][ T1] pci 0000:00:03.0: [8086:10d3] type 00 class 0x020000 [ 10.972843][ T1] pci 0000:00:03.0: reg 0x10: [mem 0xfeba0000-0xfebbffff] [ 10.985207][ T1] pci 0000:00:03.0: reg 0x14: [mem 0xfebc0000-0xfebdffff] [ 11.006488][ T1] pci 0000:00:03.0: reg 0x18: [io 0xc680-0xc69f] [ 11.025458][ T1] pci 0000:00:03.0: reg 0x1c: [mem 0xfebf0000-0xfebf3fff] [ 11.053764][ T1] pci 0000:00:03.0: reg 0x30: [mem 0xfeb40000-0xfeb7ffff pref] [ 11.099023][ T1] pci 0000:00:04.0: [1274:5000] type 00 class 0x040100 [ 11.125068][ T1] pci 0000:00:04.0: reg 0x10: [io 0xc400-0xc4ff] [ 11.153347][ T1] pci 0000:00:05.0: [8086:2415] type 00 class 0x040100 [ 11.176230][ T1] pci 0000:00:05.0: reg 0x10: [io 0xc000-0xc3ff] [ 11.194839][ T1] pci 0000:00:05.0: reg 0x14: [io 0xc500-0xc5ff] [ 11.241565][ T1] pci 0000:00:06.0: [8086:2668] type 00 class 0x040300 [ 11.257380][ T1] pci 0000:00:06.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] [ 11.308101][ T1] pci 0000:00:07.0: [1af4:1009] type 00 class 0x000200 [ 11.350775][ T1] pci 0000:00:07.0: reg 0x10: [io 0xc6a0-0xc6bf] [ 11.385665][ T1] pci 0000:00:07.0: reg 0x14: [mem 0xfebf9000-0xfebf9fff] [ 11.427172][ T1] pci 0000:00:07.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] [ 11.511207][ T1] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 [ 11.545297][ T1] pci 0000:00:1d.0: reg 0x20: [io 0xc6c0-0xc6df] [ 11.572375][ T1] pci 0000:00:1d.1: [8086:2935] type 00 class 0x0c0300 [ 11.615104][ T1] pci 0000:00:1d.1: reg 0x20: [io 0xc6e0-0xc6ff] [ 11.638209][ T1] pci 0000:00:1d.2: [8086:2936] type 00 class 0x0c0300 [ 11.660779][ T1] pci 0000:00:1d.2: reg 0x20: [io 0xc700-0xc71f] [ 11.678239][ T1] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 [ 11.683962][ T1] pci 0000:00:1d.7: reg 0x10: [mem 0xfebfa000-0xfebfafff] [ 11.716977][ T1] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 [ 11.741487][ T1] pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO [ 11.753987][ T1] pci 0000:00:1f.0: quirk_ich7_lpc+0x0/0x70 took 19531 usecs [ 11.781654][ T1] pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 [ 11.805365][ T1] pci 0000:00:1f.2: reg 0x20: [io 0xc720-0xc73f] [ 11.823613][ T1] pci 0000:00:1f.2: reg 0x24: [mem 0xfebfb000-0xfebfbfff] [ 11.840214][ T1] pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 [ 11.873081][ T1] pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] [ 11.953412][ T1] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 11.966010][ T1] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 11.983875][ T1] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 12.004206][ T1] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 12.024146][ T1] ACPI: PCI Interrupt Link [LNKE] (IRQs 5 *10 11) [ 12.034145][ T1] ACPI: PCI Interrupt Link [LNKF] (IRQs 5 *10 11) [ 12.053556][ T1] ACPI: PCI Interrupt Link [LNKG] (IRQs 5 10 *11) [ 12.064068][ T1] ACPI: PCI Interrupt Link [LNKH] (IRQs 5 10 *11) [ 12.082804][ T1] ACPI: PCI Interrupt Link [GSIA] (IRQs *16) [ 12.102233][ T1] ACPI: PCI Interrupt Link [GSIB] (IRQs *17) [ 12.111970][ T1] ACPI: PCI Interrupt Link [GSIC] (IRQs *18) [ 12.132028][ T1] ACPI: PCI Interrupt Link [GSID] (IRQs *19) [ 12.151991][ T1] ACPI: PCI Interrupt Link [GSIE] (IRQs *20) [ 12.162173][ T1] ACPI: PCI Interrupt Link [GSIF] (IRQs *21) [ 12.181944][ T1] ACPI: PCI Interrupt Link [GSIG] (IRQs *22) [ 12.202037][ T1] ACPI: PCI Interrupt Link [GSIH] (IRQs *23) [ 12.282902][ T1] iommu: Default domain type: Translated [ 12.305028][ T1] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 12.321826][ T1] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 12.362044][ T1] pci 0000:00:01.0: vgaarb: bridge control possible [ 12.381702][ T1] vgaarb: loaded [ 12.422405][ T1] SCSI subsystem initialized [ 12.453582][ T1] ACPI: bus type USB registered [ 12.463335][ T1] usbcore: registered new interface driver usbfs [ 12.482468][ T1] usbcore: registered new interface driver hub [ 12.502092][ T1] usbcore: registered new device driver usb [ 12.533408][ T1] mc: Linux media interface: v0.10 [ 12.541681][ T1] videodev: Linux video capture interface: v2.00 [ 12.554659][ T1] pps_core: LinuxPPS API ver. 1 registered [ 12.561890][ T1] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 12.591838][ T1] PTP clock support registered [ 12.605706][ T1] EDAC MC: Ver: 3.0.0 [ 12.632852][ T1] Advanced Linux Sound Architecture Driver Initialized. [ 12.643673][ T1] PCI: Using ACPI for IRQ routing [ 13.770267][ T1] Bluetooth: Core ver 2.22 [ 13.784065][ T1] NET: Registered protocol family 31 [ 13.801772][ T1] Bluetooth: HCI device and connection manager initialized [ 13.822592][ T1] Bluetooth: HCI socket layer initialized [ 13.841684][ T1] Bluetooth: L2CAP socket layer initialized [ 13.851860][ T1] Bluetooth: SCO socket layer initialized [ 13.862245][ T1] NET: Registered protocol family 8 [ 13.881642][ T1] NET: Registered protocol family 20 [ 13.895800][ T1] NetLabel: Initializing [ 13.911751][ T1] NetLabel: domain hash size = 128 [ 13.921330][ T1] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 13.933975][ T1] NetLabel: unlabeled traffic allowed by default [ 13.945766][ T1] nfc: nfc_init: NFC Core ver 0.1 [ 13.963777][ T1] NET: Registered protocol family 39 [ 13.988270][ T1] ================================================================== [ 13.991564][ T1] BUG: KASAN: slab-out-of-bounds in hpet_alloc+0x442/0x490 [ 13.991564][ T1] Write of size 4 at addr ffff8880788a79d8 by task swapper/0/1 [ 13.991564][ T1] [ 13.991564][ T1] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 5.5.0-syzkaller #0 [ 13.991564][ T1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 13.991564][ T1] Call Trace: [ 13.991564][ T1] dump_stack+0x197/0x210 [ 13.991564][ T1] ? hpet_alloc+0x442/0x490 [ 13.991564][ T1] print_address_description.constprop.0.cold+0xd4/0x30b [ 13.991564][ T1] ? hpet_alloc+0x442/0x490 [ 13.991564][ T1] ? hpet_alloc+0x442/0x490 [ 13.991564][ T1] __kasan_report.cold+0x1b/0x32 [ 13.991564][ T1] ? microcode_sanity_check+0x6a1/0x6b0 [ 13.991564][ T1] ? hpet_alloc+0x442/0x490 [ 13.991564][ T1] kasan_report+0x12/0x20 [ 13.991564][ T1] __asan_report_store4_noabort+0x17/0x20 [ 13.991564][ T1] hpet_alloc+0x442/0x490 [ 13.991564][ T1] ? find_microcode_in_initrd+0x317/0x4c0 [ 13.991564][ T1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 13.991564][ T1] hpet_reserve_platform_timers+0x1fc/0x245 [ 13.991564][ T1] ? hpet_setup+0xd1/0xd1 [ 13.991564][ T1] ? up_write+0x150/0x490 [ 13.991564][ T1] ? debug_smp_processor_id+0x33/0x18a [ 13.991564][ T1] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 13.991564][ T1] ? hpet_enable+0x6e2/0x6e2 [ 13.991564][ T1] hpet_late_init+0x2f4/0x38b [ 13.991564][ T1] ? do_one_initcall+0x66e/0x820 [ 13.991564][ T1] ? hpet_enable+0x6e2/0x6e2 [ 14.321998][ T1] do_one_initcall+0x120/0x820 [ 14.321998][ T1] ? perf_trace_initcall_level+0x420/0x420 [ 14.321998][ T1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 14.321998][ T1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 14.321998][ T1] ? __kasan_check_read+0x11/0x20 [ 14.321998][ T1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 14.321998][ T1] kernel_init_freeable+0x4ca/0x570 [ 14.321998][ T1] ? rest_init+0x371/0x371 [ 14.321998][ T1] kernel_init+0x12/0x1bf [ 14.321998][ T1] ret_from_fork+0x24/0x30 [ 14.321998][ T1] [ 14.321998][ T1] Allocated by task 1: [ 14.321998][ T1] save_stack+0x23/0x90 [ 14.321998][ T1] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 14.321998][ T1] kasan_kmalloc+0x9/0x10 [ 14.321998][ T1] __kmalloc+0x163/0x770 [ 14.321998][ T1] hpet_alloc+0x12b/0x490 [ 14.321998][ T1] hpet_reserve_platform_timers+0x1fc/0x245 [ 14.321998][ T1] hpet_late_init+0x2f4/0x38b [ 14.321998][ T1] do_one_initcall+0x120/0x820 [ 14.321998][ T1] kernel_init_freeable+0x4ca/0x570 [ 14.321998][ T1] kernel_init+0x12/0x1bf [ 14.321998][ T1] ret_from_fork+0x24/0x30 [ 14.321998][ T1] [ 14.321998][ T1] Freed by task 0: [ 14.321998][ T1] (stack is not available) [ 14.321998][ T1] [ 14.321998][ T1] The buggy address belongs to the object at ffff8880788a7800 [ 14.321998][ T1] which belongs to the cache kmalloc-512 of size 512 [ 14.321998][ T1] The buggy address is located 472 bytes inside of [ 14.321998][ T1] 512-byte region [ffff8880788a7800, ffff8880788a7a00) [ 14.321998][ T1] The buggy address belongs to the page: [ 14.321998][ T1] page:ffffea0001e229c0 refcount:1 mapcount:0 mapping:ffff88802cc00a80 index:0xffff8880788a7c00 [ 14.321998][ T1] raw: 04fffe0000000200 ffff88807a800738 ffff88807a800738 ffff88802cc00a80 [ 14.321998][ T1] raw: ffff8880788a7c00 ffff8880788a7000 0000000100000003 0000000000000000 [ 14.321998][ T1] page dumped because: kasan: bad access detected [ 14.321998][ T1] [ 14.321998][ T1] Memory state around the buggy address: [ 14.321998][ T1] ffff8880788a7880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 14.321998][ T1] ffff8880788a7900: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 14.321998][ T1] >ffff8880788a7980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 14.321998][ T1] ^ [ 14.321998][ T1] ffff8880788a7a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 14.321998][ T1] ffff8880788a7a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 14.321998][ T1] ================================================================== [ 14.321998][ T1] Disabling lock debugging due to kernel taint [ 14.751859][ T1] Kernel panic - not syncing: panic_on_warn set ... [ 14.761346][ T1] CPU: 1 PID: 1 Comm: swapper/0 Tainted: G B 5.5.0-syzkaller #0 [ 14.761564][ T1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 14.761564][ T1] Call Trace: [ 14.761564][ T1] dump_stack+0x197/0x210 [ 14.761564][ T1] panic+0x2e3/0x75c [ 14.761564][ T1] ? add_taint.cold+0x16/0x16 [ 14.761564][ T1] ? hpet_alloc+0x442/0x490 [ 14.761564][ T1] ? preempt_schedule+0x4b/0x60 [ 14.761564][ T1] ? ___preempt_schedule+0x16/0x18 [ 14.761564][ T1] ? trace_hardirqs_on+0x5e/0x240 [ 14.761564][ T1] ? hpet_alloc+0x442/0x490 [ 14.761564][ T1] end_report+0x47/0x4f [ 14.761564][ T1] ? hpet_alloc+0x442/0x490 [ 14.761564][ T1] __kasan_report.cold+0xe/0x32 [ 14.761564][ T1] ? microcode_sanity_check+0x6a1/0x6b0 [ 14.761564][ T1] ? hpet_alloc+0x442/0x490 [ 14.761564][ T1] kasan_report+0x12/0x20 [ 14.761564][ T1] __asan_report_store4_noabort+0x17/0x20 [ 14.761564][ T1] hpet_alloc+0x442/0x490 [ 14.761564][ T1] ? find_microcode_in_initrd+0x317/0x4c0 [ 14.761564][ T1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 14.761564][ T1] hpet_reserve_platform_timers+0x1fc/0x245 [ 14.761564][ T1] ? hpet_setup+0xd1/0xd1 [ 14.761564][ T1] ? up_write+0x150/0x490 [ 14.761564][ T1] ? debug_smp_processor_id+0x33/0x18a [ 14.761564][ T1] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 14.761564][ T1] ? hpet_enable+0x6e2/0x6e2 [ 14.761564][ T1] hpet_late_init+0x2f4/0x38b [ 14.761564][ T1] ? do_one_initcall+0x66e/0x820 [ 14.761564][ T1] ? hpet_enable+0x6e2/0x6e2 [ 14.761564][ T1] do_one_initcall+0x120/0x820 [ 14.761564][ T1] ? perf_trace_initcall_level+0x420/0x420 [ 14.761564][ T1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 14.761564][ T1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 14.761564][ T1] ? __kasan_check_read+0x11/0x20 [ 14.761564][ T1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 14.761564][ T1] kernel_init_freeable+0x4ca/0x570 [ 14.761564][ T1] ? rest_init+0x371/0x371 [ 14.761564][ T1] kernel_init+0x12/0x1bf [ 14.761564][ T1] ret_from_fork+0x24/0x30 [ 14.761564][ T1] Rebooting in 86400 seconds..