[ 18.817779] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.519011] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [ 20.900583] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) [ 21.841472] random: sshd: uninitialized urandom read (32 bytes read, 107 bits of entropy available) [ 22.004766] random: sshd: uninitialized urandom read (32 bytes read, 112 bits of entropy available) Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. [ 27.371472] random: sshd: uninitialized urandom read (32 bytes read, 117 bits of entropy available) 2018/03/08 18:56:30 parsed 1 programs 2018/03/08 18:56:30 executed programs: 0 [ 27.750743] IPVS: Creating netns size=2552 id=1 [ 27.785779] audit: type=1400 audit(1520535390.432:5): avc: denied { set_context_mgr } for pid=3815 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 27.800544] IPVS: Creating netns size=2552 id=2 [ 27.813573] binder: 3815:3818 ERROR: BC_REGISTER_LOOPER called without request [ 27.828812] audit: type=1400 audit(1520535390.482:6): avc: denied { call } for pid=3815 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 27.841946] binder: BINDER_SET_CONTEXT_MGR already set [ 27.841953] binder: 3822:3823 ioctl 40046207 0 returned -16 [ 27.842577] binder: 3822:3823 ERROR: BC_REGISTER_LOOPER called without request [ 27.853782] binder: release 3815:3818 transaction 3 out, still active [ 27.853785] binder: undelivered TRANSACTION_COMPLETE [ 27.865606] binder: 3822:3824 got new transaction with bad transaction stack, transaction 4 has target 3815:0 [ 27.865615] binder: 3822:3824 transaction failed 29201/-71, size 0-0 line 3032 [ 27.866751] binder: release 3822:3824 transaction 4 out, still active [ 27.866754] binder: undelivered TRANSACTION_COMPLETE [ 27.866767] binder: undelivered TRANSACTION_ERROR: 29201 [ 27.882019] binder: 3815:3825 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 27.882026] binder: 3815:3825 Acquire 1 refcount change on invalid ref 1 ret -22 [ 27.882032] binder: 3815:3825 BC_FREE_BUFFER u0000000000000000 no match [ 27.882037] binder: 3815:3825 ERROR: BC_REGISTER_LOOPER called without request [ 27.882041] binder: 3815:3825 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 27.882047] binder: 3815:3825 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 27.891368] binder: 3822:3826 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 27.891375] binder: 3822:3826 Acquire 1 refcount change on invalid ref 1 ret -22 [ 27.891382] binder: 3822:3826 BC_FREE_BUFFER u0000000000000000 no match [ 27.891386] binder: 3822:3826 ERROR: BC_REGISTER_LOOPER called without request [ 27.891390] binder: 3822:3826 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 27.891396] binder: 3822:3826 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 27.906560] binder: release 3822:3826 transaction 7 out, still active [ 27.906563] binder: undelivered TRANSACTION_COMPLETE [ 27.917086] binder: BINDER_SET_CONTEXT_MGR already set [ 27.917092] binder: 3827:3828 ioctl 40046207 0 returned -16 [ 27.917722] binder: 3827:3828 ERROR: BC_REGISTER_LOOPER called without request [ 27.940630] binder: 3827:3829 got new transaction with bad transaction stack, transaction 8 has target 3815:0 [ 27.940639] binder: 3827:3829 transaction failed 29201/-71, size 0-0 line 3032 [ 27.941774] binder: release 3827:3829 transaction 8 out, still active [ 27.941777] binder: undelivered TRANSACTION_COMPLETE [ 27.941790] binder: undelivered TRANSACTION_ERROR: 29201 [ 27.966376] binder: 3827:3830 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 27.966383] binder: 3827:3830 Acquire 1 refcount change on invalid ref 1 ret -22 [ 27.966390] binder: 3827:3830 BC_FREE_BUFFER u0000000000000000 no match [ 27.966394] binder: 3827:3830 ERROR: BC_REGISTER_LOOPER called without request [ 27.966398] binder: 3827:3830 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 27.966404] binder: 3827:3830 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 27.980636] binder: release 3827:3830 transaction 10 out, still active [ 27.980640] binder: undelivered TRANSACTION_COMPLETE [ 27.990555] binder: BINDER_SET_CONTEXT_MGR already set [ 27.990561] binder: 3831:3832 ioctl 40046207 0 returned -16 [ 27.991224] binder: 3831:3832 ERROR: BC_REGISTER_LOOPER called without request [ 28.014596] binder: 3831:3833 got new transaction with bad transaction stack, transaction 11 has target 3815:0 [ 28.014605] binder: 3831:3833 transaction failed 29201/-71, size 0-0 line 3032 [ 28.015738] binder: release 3831:3833 transaction 11 out, still active [ 28.015742] binder: undelivered TRANSACTION_COMPLETE [ 28.015755] binder: undelivered TRANSACTION_ERROR: 29201 [ 28.039418] binder: 3831:3834 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 28.039425] binder: 3831:3834 Acquire 1 refcount change on invalid ref 1 ret -22 [ 28.039433] binder: 3831:3834 BC_FREE_BUFFER u0000000000000000 no match [ 28.039437] binder: 3831:3834 ERROR: BC_REGISTER_LOOPER called without request [ 28.039441] binder: 3831:3834 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 28.039447] binder: 3831:3834 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 28.053642] binder: release 3831:3834 transaction 13 out, still active [ 28.053645] binder: undelivered TRANSACTION_COMPLETE [ 28.063809] binder: BINDER_SET_CONTEXT_MGR already set [ 28.063815] binder: 3835:3836 ioctl 40046207 0 returned -16 [ 28.064441] binder: 3835:3836 ERROR: BC_REGISTER_LOOPER called without request [ 28.087689] binder: 3835:3837 got new transaction with bad transaction stack, transaction 14 has target 3815:0 [ 28.087698] binder: 3835:3837 transaction failed 29201/-71, size 0-0 line 3032 [ 28.088832] binder: release 3835:3837 transaction 14 out, still active [ 28.088835] binder: undelivered TRANSACTION_COMPLETE [ 28.088848] binder: undelivered TRANSACTION_ERROR: 29201 [ 28.113361] binder: 3835:3838 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 28.113368] binder: 3835:3838 Acquire 1 refcount change on invalid ref 1 ret -22 [ 28.113376] binder: 3835:3838 BC_FREE_BUFFER u0000000000000000 no match [ 28.113384] binder: 3835:3838 ERROR: BC_REGISTER_LOOPER called without request [ 28.113427] binder: 3835:3838 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 28.113434] binder: 3835:3838 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 28.127674] binder: release 3835:3838 transaction 16 out, still active [ 28.127677] binder: undelivered TRANSACTION_COMPLETE [ 28.137843] binder: BINDER_SET_CONTEXT_MGR already set [ 28.137849] binder: 3839:3840 ioctl 40046207 0 returned -16 [ 28.138499] binder: 3839:3840 ERROR: BC_REGISTER_LOOPER called without request [ 28.161652] binder: 3839:3841 got new transaction with bad transaction stack, transaction 17 has target 3815:0 [ 28.161661] binder: 3839:3841 transaction failed 29201/-71, size 0-0 line 3032 [ 28.162795] binder: release 3839:3841 transaction 17 out, still active [ 28.162798] binder: undelivered TRANSACTION_COMPLETE [ 28.162812] binder: undelivered TRANSACTION_ERROR: 29201 [ 28.187400] binder: 3839:3842 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 28.187407] binder: 3839:3842 Acquire 1 refcount change on invalid ref 1 ret -22 [ 28.187414] binder: 3839:3842 BC_FREE_BUFFER u0000000000000000 no match [ 28.187419] binder: 3839:3842 ERROR: BC_REGISTER_LOOPER called without request [ 28.187423] binder: 3839:3842 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 28.187429] binder: 3839:3842 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 28.201574] binder: release 3839:3842 transaction 19 out, still active [ 28.201577] binder: undelivered TRANSACTION_COMPLETE [ 28.211282] binder: BINDER_SET_CONTEXT_MGR already set [ 28.211288] binder: 3843:3844 ioctl 40046207 0 returned -16 [ 28.211937] binder: 3843:3844 ERROR: BC_REGISTER_LOOPER called without request [ 28.234560] binder: 3843:3845 got new transaction with bad transaction stack, transaction 20 has target 3815:0 [ 28.234569] binder: 3843:3845 transaction failed 29201/-71, size 0-0 line 3032 [ 28.235705] binder: release 3843:3845 transaction 20 out, still active [ 28.235708] binder: undelivered TRANSACTION_COMPLETE [ 28.235721] binder: undelivered TRANSACTION_ERROR: 29201 [ 28.259374] binder: 3843:3846 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 28.259381] binder: 3843:3846 Acquire 1 refcount change on invalid ref 1 ret -22 [ 28.259388] binder: 3843:3846 BC_FREE_BUFFER u0000000000000000 no match [ 28.259393] binder: 3843:3846 ERROR: BC_REGISTER_LOOPER called without request [ 28.259397] binder: 3843:3846 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 28.259403] binder: 3843:3846 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 28.273623] binder: release 3843:3846 transaction 22 out, still active [ 28.273627] binder: undelivered TRANSACTION_COMPLETE [ 28.283265] binder: BINDER_SET_CONTEXT_MGR already set [ 28.283271] binder: 3847:3848 ioctl 40046207 0 returned -16 [ 28.283891] binder: 3847:3848 ERROR: BC_REGISTER_LOOPER called without request [ 28.306616] binder: 3847:3849 got new transaction with bad transaction stack, transaction 23 has target 3815:0 [ 28.306625] binder: 3847:3849 transaction failed 29201/-71, size 0-0 line 3032 [ 28.307760] binder: release 3847:3849 transaction 23 out, still active [ 28.307763] binder: undelivered TRANSACTION_COMPLETE [ 28.307776] binder: undelivered TRANSACTION_ERROR: 29201 [ 28.332310] binder: 3847:3850 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 28.332317] binder: 3847:3850 Acquire 1 refcount change on invalid ref 1 ret -22 [ 28.332324] binder: 3847:3850 BC_FREE_BUFFER u0000000000000000 no match [ 28.332329] binder: 3847:3850 ERROR: BC_REGISTER_LOOPER called without request [ 28.332333] binder: 3847:3850 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 28.332339] binder: 3847:3850 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 28.346596] binder: release 3847:3850 transaction 25 out, still active [ 28.346599] binder: undelivered TRANSACTION_COMPLETE [ 28.356164] binder: BINDER_SET_CONTEXT_MGR already set [ 28.356170] binder: 3851:3852 ioctl 40046207 0 returned -16 [ 28.356822] binder: 3851:3852 ERROR: BC_REGISTER_LOOPER called without request [ 28.379604] binder: 3851:3853 got new transaction with bad transaction stack, transaction 26 has target 3815:0 [ 28.379613] binder: 3851:3853 transaction failed 29201/-71, size 0-0 line 3032 [ 28.380749] binder: release 3851:3853 transaction 26 out, still active [ 28.380752] binder: undelivered TRANSACTION_COMPLETE [ 28.380765] binder: undelivered TRANSACTION_ERROR: 29201 [ 28.405358] binder: 3851:3854 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 28.405365] binder: 3851:3854 Acquire 1 refcount change on invalid ref 1 ret -22 [ 28.405372] binder: 3851:3854 BC_FREE_BUFFER u0000000000000000 no match [ 28.405376] binder: 3851:3854 ERROR: BC_REGISTER_LOOPER called without request [ 28.405380] binder: 3851:3854 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 28.405386] binder: 3851:3854 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 28.419475] binder: release 3851:3854 transaction 28 out, still active [ 28.419478] binder: undelivered TRANSACTION_COMPLETE [ 28.428994] binder: BINDER_SET_CONTEXT_MGR already set [ 28.429000] binder: 3855:3856 ioctl 40046207 0 returned -16 [ 28.429624] binder: 3855:3856 ERROR: BC_REGISTER_LOOPER called without request [ 28.452615] binder: 3855:3857 got new transaction with bad transaction stack, transaction 29 has target 3815:0 [ 28.452624] binder: 3855:3857 transaction failed 29201/-71, size 0-0 line 3032 [ 28.453757] binder: release 3855:3857 transaction 29 out, still active [ 28.453760] binder: undelivered TRANSACTION_COMPLETE [ 28.453774] binder: undelivered TRANSACTION_ERROR: 29201 [ 28.477490] binder: 3855:3858 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 28.477497] binder: 3855:3858 Acquire 1 refcount change on invalid ref 1 ret -22 [ 28.477505] binder: 3855:3858 BC_FREE_BUFFER u0000000000000000 no match [ 28.477509] binder: 3855:3858 ERROR: BC_REGISTER_LOOPER called without request [ 28.477513] binder: 3855:3858 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 28.477519] binder: 3855:3858 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 28.491695] binder: release 3855:3858 transaction 31 out, still active [ 28.491698] binder: undelivered TRANSACTION_COMPLETE [ 28.891399] binder: release 3815:3816 transaction 2 out, still active [ 28.898004] binder: undelivered TRANSACTION_COMPLETE [ 28.901968] binder: 3861:3862 ERROR: BC_REGISTER_LOOPER called without request [ 28.910552] binder: release 3815:3825 transaction 6 out, still active [ 28.913055] IPVS: Creating netns size=2552 id=3 [ 28.921779] binder: release 3815:3825 transaction 3 in, still active [ 28.928761] binder: undelivered TRANSACTION_COMPLETE [ 28.929973] binder: release 3861:3862 transaction 34 out, still active [ 28.929978] binder: release 3861:3862 transaction 33 in, still active [ 28.929980] binder: undelivered TRANSACTION_COMPLETE [ 28.952221] binder: 3861:3863 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 28.957339] binder: send failed reply for transaction 4, target dead [ 28.957353] binder: send failed reply for transaction 6, target dead [ 28.957366] binder: send failed reply for transaction 3, target dead [ 28.957378] binder: send failed reply for transaction 7, target dead [ 28.957390] binder: send failed reply for transaction 8, target dead [ 28.957403] binder: send failed reply for transaction 10, target dead [ 28.957415] binder: send failed reply for transaction 11, target dead [ 28.957428] binder: send failed reply for transaction 13, target dead [ 28.957440] binder: send failed reply for transaction 14, target dead [ 28.957453] binder: send failed reply for transaction 16, target dead [ 28.957465] binder: send failed reply for transaction 17, target dead [ 28.957477] binder: send failed reply for transaction 19, target dead [ 28.957489] binder: send failed reply for transaction 20, target dead [ 28.957502] binder: send failed reply for transaction 22, target dead [ 28.957515] binder: send failed reply for transaction 23, target dead [ 28.957527] binder: send failed reply for transaction 25, target dead [ 28.957539] binder: send failed reply for transaction 26, target dead [ 28.957551] binder: send failed reply for transaction 28, target dead [ 28.957563] binder: send failed reply for transaction 29, target dead [ 28.957576] binder: send failed reply for transaction 31, target dead [ 28.957593] binder: send failed reply for transaction 2, target dead [ 28.966539] binder: BINDER_SET_CONTEXT_MGR already set [ 28.966545] binder: 3867:3868 ioctl 40046207 0 returned -16 [ 28.967198] binder: 3867:3868 ERROR: BC_REGISTER_LOOPER called without request [ 28.990588] binder: 3867:3871 got new transaction with bad transaction stack, transaction 36 has target 3861:0 [ 28.990597] binder: 3867:3871 transaction failed 29201/-71, size 0-0 line 3032 [ 28.991734] binder: release 3867:3871 transaction 36 out, still active [ 28.991738] binder: undelivered TRANSACTION_COMPLETE [ 28.991751] binder: undelivered TRANSACTION_ERROR: 29201 [ 29.015405] binder: 3867:3872 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 29.015412] binder: 3867:3872 Acquire 1 refcount change on invalid ref 1 ret -22 [ 29.015419] binder: 3867:3872 BC_FREE_BUFFER u0000000000000000 no match [ 29.015423] binder: 3867:3872 ERROR: BC_REGISTER_LOOPER called without request [ 29.015427] binder: 3867:3872 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 29.015433] binder: 3867:3872 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 29.029599] binder: release 3867:3872 transaction 38 out, still active [ 29.029602] binder: undelivered TRANSACTION_COMPLETE [ 29.207040] binder: 3861:3863 Acquire 1 refcount change on invalid ref 1 ret -22 [ 29.210993] IPVS: Creating netns size=2552 id=4 [ 29.220455] binder: 3861:3863 BC_FREE_BUFFER u0000000000000000 no match [ 29.227243] binder: 3861:3863 ERROR: BC_REGISTER_LOOPER called without request [ 29.234904] binder: 3861:3863 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 29.243274] binder: 3861:3863 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 29.253453] binder: release 3861:3863 transaction 34 in, still active [ 29.260056] binder: release 3861:3863 transaction 33 out, still active [ 29.260377] binder: 3876:3877 ERROR: BC_REGISTER_LOOPER called without request [ 29.274128] binder: send failed reply for transaction 34, target dead [ 29.280727] binder: send failed reply for transaction 33, target dead [ 29.283866] binder: release 3876:3877 transaction 41 out, still active [ 29.283870] binder: release 3876:3877 transaction 40 in, still active [ 29.283873] binder: undelivered TRANSACTION_COMPLETE [ 29.288450] IPVS: Creating netns size=2552 id=5 [ 29.305220] binder: 3876:3879 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 29.305226] binder: 3876:3879 Acquire 1 refcount change on invalid ref 1 ret -22 [ 29.305233] binder: 3876:3879 BC_FREE_BUFFER u0000000000000000 no match [ 29.305237] binder: 3876:3879 ERROR: BC_REGISTER_LOOPER called without request [ 29.305241] binder: 3876:3879 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 29.305247] binder: 3876:3879 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 29.346311] binder: BINDER_SET_CONTEXT_MGR already set [ 29.346317] binder: 3883:3884 ioctl 40046207 0 returned -16 [ 29.346941] binder: 3883:3884 ERROR: BC_REGISTER_LOOPER called without request [ 29.368436] binder_alloc: 3876: binder_alloc_buf, no vma [ 29.368476] binder: 3883:3885 transaction failed 29189/-3, size 0-0 line 3128 [ 29.370742] binder: undelivered TRANSACTION_ERROR: 29189 [ 29.391304] binder: release 3861:3870 transaction 35 out, still active [ 29.398368] binder: undelivered TRANSACTION_COMPLETE [ 29.403572] binder: send failed reply for transaction 35, target dead [ 29.407662] IPVS: Creating netns size=2552 id=6 [ 29.415123] binder: send failed reply for transaction 36, target dead [ 29.416585] binder: 3883:3887 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 29.416591] binder: 3883:3887 Acquire 1 refcount change on invalid ref 1 ret -22 [ 29.416598] binder: 3883:3887 BC_FREE_BUFFER u0000000000000000 no match [ 29.416603] binder: 3883:3887 ERROR: BC_REGISTER_LOOPER called without request [ 29.416607] binder: 3883:3887 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 29.416613] binder: 3883:3887 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 29.417833] binder_alloc: 3876: binder_alloc_buf, no vma [ 29.417871] binder: 3883:3887 transaction failed 29189/-3, size 0-0 line 3128 [ 29.457226] binder: BINDER_SET_CONTEXT_MGR already set [ 29.457232] binder: 3892:3893 ioctl 40046207 0 returned -16 [ 29.457881] binder: 3892:3893 ERROR: BC_REGISTER_LOOPER called without request [ 29.479443] binder_alloc: 3876: binder_alloc_buf, no vma [ 29.479482] binder: 3892:3894 transaction failed 29189/-3, size 0-0 line 3128 [ 29.481751] binder: undelivered TRANSACTION_ERROR: 29189 [ 29.509440] binder: 3892:3898 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 29.509446] binder: 3892:3898 Acquire 1 refcount change on invalid ref 1 ret -22 [ 29.509454] binder: 3892:3898 BC_FREE_BUFFER u0000000000000000 no match [ 29.509460] binder: 3892:3898 ERROR: BC_REGISTER_LOOPER called without request [ 29.509464] binder: 3892:3898 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 29.509470] binder: 3892:3898 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 29.510718] binder_alloc: 3876: binder_alloc_buf, no vma [ 29.510758] binder: 3892:3898 transaction failed 29189/-3, size 0-0 line 3128 [ 29.576436] binder: send failed reply for transaction 38, target dead [ 29.588352] binder: undelivered TRANSACTION_ERROR: 29189 [ 29.594071] binder: undelivered TRANSACTION_ERROR: 29189 [ 29.600818] binder: release 3876:3879 transaction 42 in, still active [ 29.607415] binder: send failed reply for transaction 42 to 3876:3879 [ 29.612577] IPVS: Creating netns size=2552 id=7 [ 29.619239] ================================================================== [ 29.626596] BUG: KASAN: use-after-free in __list_del_entry+0x196/0x1d0 [ 29.633243] Read of size 8 at addr ffff8801d174e310 by task kworker/u4:0/6 [ 29.640235] [ 29.641849] CPU: 0 PID: 6 Comm: kworker/u4:0 Not tainted 4.4.120-gd63fdf6 #29 [ 29.649102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.658447] Workqueue: binder binder_deferred_func [ 29.663480] 0000000000000000 1e83c01fd5e8a2fa ffff8801d9b1fa58 ffffffff81d0408d [ 29.671491] ffffea000745d380 ffff8801d174e310 0000000000000000 ffff8801d174e310 [ 29.679507] ffffed003b233779 ffff8801d9b1fa90[ 29.683962] binder: 3904:3905 ERROR: BC_REGISTER_LOOPER called without request [ 29.691367] ffffffff814fe143 ffff8801d174e310 [ 29.696436] Call Trace: [ 29.698994] [] dump_stack+0xc1/0x124 [ 29.704332] [] print_address_description+0x73/0x260 [ 29.706891] binder: release 3904:3905 transaction 49 out, still active [ 29.706896] binder: release 3904:3905 transaction 48 in, still active [ 29.706898] binder: undelivered TRANSACTION_COMPLETE [ 29.728247] binder: 3904:3907 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 29.728253] binder: 3904:3907 Acquire 1 refcount change on invalid ref 1 ret -22 [ 29.728260] binder: 3904:3907 BC_FREE_BUFFER u0000000000000000 no match [ 29.728264] binder: 3904:3907 ERROR: BC_REGISTER_LOOPER called without request [ 29.728268] binder: 3904:3907 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 29.728275] binder: 3904:3907 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 29.773609] [] kasan_report+0x285/0x370 [ 29.779202] [] ? __list_del_entry+0x196/0x1d0 [ 29.785315] [] __asan_report_load8_noabort+0x14/0x20 [ 29.792036] [] __list_del_entry+0x196/0x1d0 [ 29.797975] [] binder_release_work+0x6e/0x260 [ 29.804096] [] ? binder_send_failed_reply+0x18a/0x3a0 [ 29.810904] [] binder_thread_release+0x425/0x600 [ 29.817277] [] binder_deferred_func+0x438/0xd10 [ 29.823562] [] ? __lock_is_held+0xa1/0xf0 [ 29.829330] [] process_one_work+0x7d7/0x16e0 [ 29.835355] [] ? process_one_work+0x6f7/0x16e0 [ 29.841556] [] ? pwq_dec_nr_in_flight+0x280/0x280 [ 29.848017] [] ? worker_thread+0x288/0xfc0 [ 29.853870] [] worker_thread+0xd9/0xfc0 [ 29.859461] [] kthread+0x268/0x300 [ 29.864617] [] ? process_one_work+0x16e0/0x16e0 [ 29.870911] [] ? kthread_create_on_node+0x400/0x400 [ 29.877545] [] ? kthread_create_on_node+0x400/0x400 [ 29.884179] [] ret_from_fork+0x55/0x80 [ 29.889683] [] ? kthread_create_on_node+0x400/0x400 [ 29.896312] [ 29.897911] Allocated by task 3879: [ 29.901503] [] save_stack_trace+0x26/0x50 [ 29.907384] [] save_stack+0x43/0xd0 [ 29.912743] [] kasan_kmalloc+0xad/0xe0 [ 29.918361] [] kmem_cache_alloc_trace+0x100/0x2b0 [ 29.924940] [] binder_transaction+0x103c/0x7290 [ 29.931343] [] binder_thread_write+0x81f/0x33e0 [ 29.937745] [] binder_ioctl_write_read.isra.55+0x1cf/0xbc0 [ 29.945102] [] binder_ioctl+0xc50/0x12e0 [ 29.950898] [] compat_SyS_ioctl+0x28a/0x2540 [ 29.957041] [] do_fast_syscall_32+0x321/0x8a0 [ 29.963270] [] sysenter_flags_fixed+0xd/0x17 [ 29.969411] [ 29.971005] Freed by task 6: [ 29.973986] [] save_stack_trace+0x26/0x50 [ 29.979873] [] save_stack+0x43/0xd0 [ 29.985231] [] kasan_slab_free+0x72/0xc0 [ 29.991023] [] kfree+0xfc/0x300 [ 29.996030] [] binder_free_transaction+0x6a/0x90 [ 30.002523] [] binder_send_failed_reply+0x185/0x3a0 [ 30.009273] [] binder_thread_release+0x413/0x600 [ 30.015758] [] binder_deferred_func+0x438/0xd10 [ 30.022163] [] process_one_work+0x7d7/0x16e0 [ 30.028307] [] worker_thread+0xd9/0xfc0 [ 30.034012] [] kthread+0x268/0x300 [ 30.039288] [] ret_from_fork+0x55/0x80 [ 30.044909] [ 30.046507] The buggy address belongs to the object at ffff8801d174e300 [ 30.046507] which belongs to the cache kmalloc-192 of size 192 [ 30.059137] The buggy address is located 16 bytes inside of [ 30.059137] 192-byte region [ffff8801d174e300, ffff8801d174e3c0) [ 30.070892] The buggy address belongs to the page: [ 30.076102] ------------[ cut here ]------------ [ 30.080866] WARNING: CPU: 1 PID: 0 at kernel/locking/lockdep.c:973 __bfs+0x2c4/0x5d0() [ 30.088897] Kernel panic - not syncing: panic_on_warn set ... [ 30.088897] [ 30.096248] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.120-gd63fdf6 #29 [ 30.103244] Hardware name: Google GoogSeaBIOS (version 1.8.2-20171120_144221-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 256 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2360: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... early console in decompress_kernel input_data: 0x00000000037cb26e input_len: 0x0000000001423b30 output: 0x0000000001000000 output_len: 0x0000000003bdaa40 run_size: 0x0000000005310000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Initializing cgroup subsys schedtune [ 0.000000] Linux version 4.4.120-gd63fdf6 (syzkaller@ci) (gcc version 7.1.1 20170620 (GCC) ) #29 SMP PREEMPT Tue Mar 6 13:11:38 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=120 [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] Centaur CentaurHauls [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] x86/fpu: Using 'eager' FPU context switches. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfff2fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfff3000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbfff3 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f23e0-0x000f23ef] mapped at [ffff8800000f23e0] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F23A0 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFF3430 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFCF60 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFF3470 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFF65F0 00690D (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFF5D10 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFF5CE0 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFF4C30 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 2108309293 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfff2fff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] PM: Registered nosave memory: [mem 0xbfff3000-0xbfffffff] [ 0.000000] PM: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.000000] PM: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 42 pages/cpu @ffff8801db200000 s134024 r8192 d29816 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935227 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=120 [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6581404K/7863876K available (40422K kernel code, 6136K rwdata, 8808K rodata, 1848K init, 23616K bss, 1282472K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Kernel/User page tables isolation: enabled [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.151025] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.152174] pid_max: default: 32768 minimum: 301 [ 1.152873] ACPI: Core revision 20150930 [ 1.571784] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.573684] Security Framework initialized [ 1.574273] SELinux: Initializing. [ 1.574923] AppArmor: AppArmor disabled by boot time parameter [ 1.575837] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.576792] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.580520] Initializing cgroup subsys io [ 1.581110] Initializing cgroup subsys freezer [ 1.581756] Initializing cgroup subsys hugetlb [ 1.582378] Initializing cgroup subsys debug [ 1.583156] CPU: Physical Processor ID: 0 [ 1.584855] mce: CPU supports 32 MCE banks [ 1.585613] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.586457] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.587360] Spectre V2 : Vulnerable: Minimal generic ASM retpoline [ 1.590627] Freeing SMP alternatives memory: 44K [ 1.600196] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.720361] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.721844] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.810605] x86: Booting SMP configuration: [ 1.811266] .... node #0, CPUs: #1 [ 1.812027] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.816649] x86: Booted up 1 node, 2 CPUs [ 1.817281] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.821916] devtmpfs: initialized [ 1.831275] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.832627] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.834237] xor: automatically using best checksumming function: [ 1.837469] kworker/u4:0 (21) used greatest stack depth: 27944 bytes left [ 1.930368] avx : 21683.600 MB/sec [ 1.931520] RTC time: 18:56:37, date: 03/08/18 [ 1.933820] NET: Registered protocol family 16 [ 1.934881] schedtune: init normalization constants... [ 1.935601] schedtune: no energy model data [ 1.936188] schedtune: disabled! [ 1.970586] cpuidle: using governor ladder [ 2.000391] cpuidle: using governor menu [ 2.001661] ACPI: bus type PCI registered [ 2.002258] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 2.005063] PCI: Using configuration type 1 for base access [ 2.012149] kworker/u4:1 (47) used greatest stack depth: 27448 bytes left [ 2.440329] raid6: sse2x1 gen() 4767 MB/s [ 2.610305] raid6: sse2x1 xor() 2599 MB/s [ 2.780314] raid6: sse2x2 gen() 7356 MB/s [ 2.950287] raid6: sse2x2 xor() 4130 MB/s [ 3.120273] raid6: sse2x4 gen() 9760 MB/s [ 3.290261] raid6: sse2x4 xor() 5577 MB/s [ 3.460243] raid6: avx2x1 gen() 9269 MB/s [ 3.630221] raid6: avx2x2 gen() 13928 MB/s [ 3.800218] raid6: avx2x4 gen() 18473 MB/s [ 3.800910] raid6: using algorithm avx2x4 gen() 18473 MB/s [ 3.801685] raid6: using avx2x2 recovery algorithm [ 3.803007] ACPI: Added _OSI(Module Device) [ 3.803650] ACPI: Added _OSI(Processor Device) [ 3.804511] ACPI: Added _OSI(3.0 _SCP Extensions) [ 3.805234] ACPI: Added _OSI(Processor Aggregator Device) [ 3.833036] ACPI: Executed 2 blocks of module-level executable AML code [ 4.683097] ACPI: Interpreter enabled [ 4.684033] ACPI: (supports S0 S3 S4 S5) [ 4.684620] ACPI: Using IOAPIC for interrupt routing [ 4.685797] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 5.840816] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 5.841772] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 5.843056] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 5.844066] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 5.869541] PCI host bridge to bus 0000:00 [ 5.870271] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 5.871311] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 5.872261] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 5.873288] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 5.874311] pci_bus 0000:00: root bus resource [bus 00-ff] [ 5.908519] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 5.987044] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 5.993087] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 5.999102] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 6.004604] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 6.008057] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 6.547399] ACPI: Enabled 16 GPEs in block 00 to 0F [ 6.551075] vgaarb: loaded [ 6.554117] SCSI subsystem initialized [ 6.568629] ACPI: bus type USB registered [ 6.570866] usbcore: registered new interface driver usbfs [ 6.572222] usbcore: registered new interface driver hub [ 6.573403] usbcore: registered new device driver usb [ 6.576344] pps_core: LinuxPPS API ver. 1 registered [ 6.577230] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 6.579103] PTP clock support registered [ 6.596649] ioremap error for 0xbfffd000-0xc0000000, requested 0x2, got 0x0 [ 6.597901] dmi: Firmware registration failed. [ 6.599629] Advanced Linux Sound Architecture Driver Initialized. [ 6.601817] PCI: Using ACPI for IRQ routing [ 6.626340] NetLabel: Initializing [ 6.626871] NetLabel: domain hash size = 128 [ 6.627489] NetLabel: protocols = UNLABELED CIPSOv4 [ 6.628437] NetLabel: unlabeled traffic allowed by default [ 6.631489] amd_nb: Cannot enumerate AMD northbridges [ 6.632278] clocksource: Switched to clocksource kvm-clock [ 6.791374] pnp: PnP ACPI init [ 6.816767] pnp: PnP ACPI: found 7 devices [ 6.830732] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 6.832454] NET: Registered protocol family 2 [ 6.835064] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 6.836665] TCP bind hash table entries: 65536 (order: 10, 4194304 bytes) [ 6.844308] TCP: Hash tables configured (established 65536 bind 65536) [ 6.845457] UDP hash table entries: 4096 (order: 7, 655360 bytes) [ 6.847000] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes) [ 6.850241] NET: Registered protocol family 1 [ 6.851012] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 6.852805] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 6.853680] software IO TLB [mem 0xbbff3000-0xbfff3000] (64MB) mapped at [ffff8800bbff3000-ffff8800bfff2fff] [ 6.855585] RAPL PMU detected, API unit is 2^-32 Joules, 3 fixed counters 10737418240 ms ovfl timer [ 6.856799] hw unit of domain pp0-core 2^-0 Joules [ 6.857471] hw unit of domain package 2^-0 Joules [ 6.858138] hw unit of domain dram 2^-16 Joules [ 6.864005] Scanning for low memory corruption every 60 seconds [ 6.872417] audit: initializing netlink subsys (disabled) [ 6.873466] audit: type=2000 audit(1520535401.970:1): initialized [ 6.881380] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 7.012321] VFS: Disk quotas dquot_6.6.0 [ 7.013953] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 7.036767] fuse init (API version 7.23) [ 7.040055] 9p: Installing v9fs 9p2000 file system support [ 7.054782] async_tx: api initialized (async) [ 7.056580] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) [ 7.057722] io scheduler noop registered [ 7.058278] io scheduler deadline registered [ 7.060617] io scheduler cfq registered (default) [ 7.072040] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 7.075674] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 7.076867] ACPI: Power Button [PWRF] [ 7.078541] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 7.079786] ACPI: Sleep Button [SLPF] [ 7.114773] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 7.115683] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 7.137810] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 10 [ 7.138715] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 7.145230] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 7.168181] 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A