printk: log buffer data + meta data: 262144 + 917504 = 1179648 bytes software IO TLB: area num 1. Fallback order for Node 0: 0 1 Fallback order for Node 1: 1 0 Built 2 zonelists, mobility grouping on. Total pages: 393083 Policy zone: DMA32 mem auto-init: stack:all(zero), heap alloc:on, heap free:off stackdepot: allocating hash table via alloc_large_system_hash stackdepot hash table entries: 1048576 (order: 12, 16777216 bytes, linear) stackdepot: allocating space for 8192 stack pools via memblock ********************************************************** ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** ** ** ** This system shows unhashed kernel memory addresses ** ** via the console, logs, and other interfaces. This ** ** might reduce the security of your system. ** ** ** ** If you see this message and you are not debugging ** ** the kernel, report this immediately to your system ** ** administrator! ** ** ** ** Use hash_pointers=always to force this mode off ** ** ** ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** ********************************************************** SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=2 allocated 31457280 bytes of page_ext Node 0, zone DMA: page owner found early allocated 0 pages Node 0, zone DMA32: page owner found early allocated 4596 pages Node 1, zone DMA32: page owner found early allocated 3207 pages Dynamic Preempt: full Running RCU self tests Running RCU synchronous self tests rcu: Preemptible hierarchical RCU implementation. rcu: RCU lockdep checking is enabled. rcu: RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=1. rcu: RCU callback double-/use-after-free debug is enabled. rcu: RCU debug extended QS entry/exit. All grace periods are expedited (rcu_expedited). Trampoline variant of Tasks RCU enabled. Tracing variant of Tasks RCU enabled. rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 Running RCU synchronous self tests RCU Tasks: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1. NR_IRQS: 4352, nr_irqs: 256, preallocated irqs: 16 rcu: srcu_init: Setting srcu_struct sizes based on contention. clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns ============================= [ BUG: Invalid wait context ] syzkaller #0 Not tainted ----------------------------- swapper/0/0 is trying to lock: ffffffff8e984b00 (clocksource_mutex){....}-{4:4}, at: __clocksource_register_scale+0x921/0xff0 kernel/time/clocksource.c:1319 other info that might help us debug this: context-{5:5} 1 lock held by swapper/0/0: #0: ffffffff9a4d39f0 (&tkd->lock){....}-{2:2}, at: class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:572 [inline] #0: ffffffff9a4d39f0 (&tkd->lock){....}-{2:2}, at: timekeeping_init+0x227/0x390 kernel/time/timekeeping.c:2064 stack backtrace: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4830 [inline] check_wait_context kernel/locking/lockdep.c:4902 [inline] __lock_acquire+0xe39/0x2cf0 kernel/locking/lockdep.c:5187 lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x19d/0x1550 kernel/locking/mutex.c:821 __clocksource_register_scale+0x921/0xff0 kernel/time/clocksource.c:1319 __clocksource_register include/linux/clocksource.h:273 [inline] clocksource_default_clock+0x20/0x40 kernel/time/jiffies.c:68 timekeeping_init+0x236/0x390 kernel/time/timekeeping.c:2068 start_kernel+0x1db/0x3e0 init/main.c:1087 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 kfence: initialized - using 2097152 bytes for 255 objects at 0xffff88805b200000-0xffff88805b400000 Console: colour VGA+ 80x25 printk: legacy console [ttyS0] enabled printk: legacy console [ttyS0] enabled printk: legacy bootconsole [earlyser0] disabled printk: legacy bootconsole [earlyser0] disabled Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar ... MAX_LOCKDEP_SUBCLASSES: 8 ... MAX_LOCK_DEPTH: 48 ... MAX_LOCKDEP_KEYS: 8192 ... CLASSHASH_SIZE: 4096 ... MAX_LOCKDEP_ENTRIES: 1048576 ... MAX_LOCKDEP_CHAINS: 1048576 ... CHAINHASH_SIZE: 524288 memory used by lock dependency info: 106625 kB memory used for stack traces: 8320 kB per task-struct memory footprint: 1920 bytes mempolicy: Enabling automatic NUMA balancing. Configure with numa_balancing= or the kernel.numa_balancing sysctl ACPI: Core revision 20260408 clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns APIC: Switch to symmetric I/O mode setup DMAR: Host address width 48 DMAR: DRHD base: 0x000000fed90000 flags: 0x0 DMAR: dmar0: reg_base_addr fed90000 ver 1:0 cap d2008c222f0606 ecap f00f5e DMAR: ATSR flags: 0x1 DMAR-IR: IOAPIC id 0 under DRHD base 0xfed90000 IOMMU 0 DMAR-IR: Queued invalidation will be enabled to support x2apic and Intr-remapping. DMAR-IR: Enabled IRQ remapping in x2apic mode x2apic enabled APIC: Switched APIC routing to: cluster x2apic ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Calibrating delay loop (skipped) preset value.. 5599.99 BogoMIPS (lpj=27999980) x86/cpu: User Mode Instruction Prevention (UMIP) activated numa_add_cpu cpu 0 node 0: mask now 0 numa_add_cpu cpu 0 node 1: mask now 0 Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 mitigations: Enabled attack vectors: user_kernel, user_user, guest_host, guest_guest, SMT mitigations: auto Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl Spectre V2 : Mitigation: Enhanced / Automatic IBRS RETBleed: Mitigation: Enhanced IBRS ITS: Mitigation: Aligned branch/return thunks TAA: Vulnerable: Clear CPU buffers attempted, no microcode MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier active return thunk: its_return_thunk Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall and VM exit x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. pid_max: default: 32768 minimum: 301 landlock: Up and running. Yama: becoming mindful. TOMOYO Linux initialized AppArmor: AppArmor initialized LSM support for eBPF active Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, vmalloc) Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, vmalloc) Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, vmalloc) Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, vmalloc) VFS: Finished mounting rootfs on nullfs Running RCU synchronous self tests Running RCU synchronous self tests