[....] Starting enhanced syslogd: rsyslogd[ 14.986679] audit: type=1400 audit(1543913595.884:4): avc: denied { syslog } for pid=1926 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.51' (ECDSA) to the list of known hosts. 2018/12/04 08:53:32 fuzzer started 2018/12/04 08:53:34 dialing manager at 10.128.0.26:43217 2018/12/04 08:53:35 syscalls: 1 2018/12/04 08:53:35 code coverage: enabled 2018/12/04 08:53:35 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/04 08:53:35 setuid sandbox: enabled 2018/12/04 08:53:35 namespace sandbox: enabled 2018/12/04 08:53:35 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/04 08:53:35 fault injection: kernel does not have systematic fault injection support 2018/12/04 08:53:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/04 08:53:35 net packet injection: enabled 2018/12/04 08:53:35 net device setup: enabled 08:54:17 executing program 0: 08:54:17 executing program 1: 08:54:17 executing program 5: 08:54:17 executing program 3: 08:54:17 executing program 4: 08:54:17 executing program 2: syzkaller login: [ 79.587053] ip (2628) used greatest stack depth: 24288 bytes left 08:54:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000340)) fcntl$setstatus(r1, 0x4, 0x6100) creat(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000240)=""/252, 0xfc) r2 = socket$inet_udp(0x2, 0x2, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x9) r3 = open(&(0x7f0000000000)='./bus\x00', 0x20000000, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) sendfile(r1, r3, 0x0, 0xa5cc554) 08:54:25 executing program 5: open$dir(&(0x7f0000000280)='./file0\x00', 0x410000, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{}, "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", [[]]}, 0x2e8) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) fremovexattr(0xffffffffffffffff, &(0x7f0000000200)=ANY=[]) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'user.', ')md5sum*selfppp0\x00'}, &(0x7f0000000140)=""/141, 0x8d) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001100), 0x0, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) personality(0xe00000f) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000a40)="bd", 0x1) tee(r2, r1, 0x3, 0x0) io_setup(0x80, &(0x7f00000005c0)=0x0) r5 = getpid() sched_getaffinity(r5, 0x8, &(0x7f00000007c0)) io_getevents(r4, 0x5, 0xa, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)) r6 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000013) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 08:54:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000000)=0x80, 0xb4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000340)='/dev/keychord\x00', 0x402000, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x1000}, {0x9, 0x2}, {0x2, 0x29}]}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000380)=0x7) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000001c0)={0x2f, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x3, 'fo\x00', 0x5, 0x2}, 0x2c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400)=0x800000000, 0x4) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000006c0), &(0x7f0000004b00), 0x0, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000100)) 08:54:25 executing program 1: clone(0x20002500, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x100000000000) io_setup(0x10001, &(0x7f0000000200)=0x0) io_destroy(r3) write$P9_RREADLINK(r2, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socket$inet6(0xa, 0x0, 0x8) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000500)=ANY=[], 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) 08:54:26 executing program 0: r0 = syz_open_procfs$namespace(0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe2(0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3b) lstat(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={0x0}}, 0x24008800) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x21, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0xfe56) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffda8) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000000c0)={@broadcast, @loopback}, &(0x7f0000000180)=0x8) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000400)={'syz'}, 0x0, 0xffffffffffffffff) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) add_key$keyring(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000800), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xb) sendmmsg(r4, &(0x7f0000007fc0), 0x5654807, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000340)) 08:54:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080)=0xffff7ffffffffffd, 0xfd89) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x3, [], 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=""/3}, &(0x7f0000000140)=0x50) listen(r1, 0x80) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x2}, 0x8) close(r0) 08:54:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x8010a0ffffffff, {}, 'lo\x00'}) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1af, 0x14f, 0x9, 0xc, 0x3, 0x3, 0x4, 0x172, 0x40, 0x289, 0x40, 0x1ff, 0x38, 0x1, 0x10000, 0xfffffffffffffffc, 0x2}, [{0x5, 0x7, 0x6, 0xfff, 0x1, 0x2, 0x7fffffff, 0x9}, {0x6474e551, 0x223b51a1, 0x77f, 0x4, 0x100000001, 0x100000001, 0xde45, 0x10001}], "78a8e8fbc3274dbc18d6ebf7ded1cd792d0cac893e0c5cb606c5a3dde6d1b28b4a6bfeace7ac6dd05d563675fd6a06d2afb0338baa08c1a6bc3caabc60b4892238cf8d38efb0938992596f2a0fa3acf341ab9679db58400007f7ff2c6b21d6cde958758f1ba39b7f5a0d180d1675f1cc945628bb3e0469e9f44543a71f69b20dab54e80293e6980488d2ba325ccd772492c681bd1d136db6bfe4d8e126ca13b7d014a510b9018533a405d4a7207cc43f8b1df6d3d27b0cb625fb46988bb70694387b6bd550b799ca24ef942927e47c63d009d068178b7663a9ff93ee6e97dff7", [[], [], [], [], []]}, 0x690) r1 = gettid() ptrace$setregs(0xf, r1, 0xfffffffffffffff7, &(0x7f0000000740)="1afb3dcc305cf5f8821774d7efeec8f25864742138d0466d60ae43c85a3922806561e649") 08:54:26 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) fchdir(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0xfffffffffffffe67) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0xfffffe63) r4 = epoll_create1(0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x8080f, 0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000300)) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 08:54:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f00000001c0)) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r1) socketpair$inet6(0xa, 0x803, 0x3, &(0x7f0000000280)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 08:54:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000018c0)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x739) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="328d43a93a297afe4f45102ece541272c1c88fbd90354ee6a756482ac7d13c43e97cd8563d0ce12f0d5fbe31153cd1071ad76cbd872f7dff4ac3df1907c2e693"}], 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 08:54:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = gettid() setpriority(0x2, r2, 0x8) clone(0x2040000004, &(0x7f0000000200), 0x0, &(0x7f0000000100), &(0x7f0000000200)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x8000000000000014) r3 = socket$inet6(0xa, 0x0, 0x0) sync() ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) wait4(r4, &(0x7f0000000180), 0x80000000, &(0x7f0000000280)) r5 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='eth1*ppp0\x00', 0xfffffffffffffff8) keyctl$chown(0x4, r5, 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_proto_private(r6, 0x89e2, &(0x7f0000000340)="d22b7af09095171042739897b97e7d52d8a73b2e87820261e8a3af3b7852a6d628e94f8a6fd7707fdac4cf224e062046ca0bbc5215517a0987041df40346fc02808db3d4e8f087e57bd0d587374ed32b7652a8e702ba8b27a674") capset(&(0x7f0000000580)={0x20080522, r2}, &(0x7f00000005c0)={0x563, 0x5, 0x6, 0x800, 0x716, 0x1}) socket$inet6(0xa, 0x807, 0x7) sched_getparam(0x0, &(0x7f0000000040)) set_robust_list(&(0x7f00000006c0)={&(0x7f0000000600), 0x9, &(0x7f0000000680)={&(0x7f0000000640)}}, 0xc) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000200)={0x2, 0x1000, 0x101, 0x8, 0xffff, 0xffffffffffffff00, 0x7fffffff, 0x100, 0x6, 0xcf0f, 0x5, 0xfffffffffffffffb}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000480)=0x50) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)={@rand_addr, @empty, 0x0, 0x6, [@local, @dev={0xac, 0x14, 0x14, 0x14}, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @broadcast]}, 0x28) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x13, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) sendfile(r0, r6, &(0x7f0000000540), 0x4) 08:54:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)="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") sendfile(r1, r0, 0x0, 0x8000) sendfile(r0, r1, &(0x7f0000000000), 0x3fd) io_setup(0x10000, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x101, r1, &(0x7f0000000080)="f2f5ece2e82b7fae0f030d61cfd50d5bcd79716289f657d8aade062b33e89c7ac7aa2cceb5d82185ecfe7f8fa1aa801a7f7057188837defaf7d218c1909787e97f29f283340bd4dbda5b629cc0677f69f6b54e585e22900dcaa178f64b48b7c63c7ef13491ff6dd70803bc7cf43a61bf23ac4395247d51dc64a0fddde8e6068662726983eb5aeb9bd1817e272cedb9085bbce747d6043c5ca1c63594f8f058927b1a08fb34fbcd54c318", 0xaa, 0x15e000000, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xf, 0x1f, r1, &(0x7f0000000180)="a3d083373e77c9e4dbec94f3c78a8dd6d5", 0x11, 0x1ff, 0x0, 0x1, r1}]) [ 85.511514] audit: type=1400 audit(1543913666.404:5): avc: denied { create } for pid=3780 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:54:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0xfffffd92) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) 08:54:26 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x5, 0x10001, 0xe7, 0x8, 0x0, 0x8, 0x12080, 0xc, 0x3ff, 0xe60, 0x200, 0x800, 0x9, 0xbce, 0x0, 0x8, 0x1, 0x9, 0x3, 0x8, 0x2, 0x1, 0x3, 0x40, 0x7, 0x0, 0x0, 0x7e, 0x8, 0x100, 0x2, 0xa0, 0x8, 0x10000, 0x4d, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x40, 0x10000}, 0x2, 0xff, 0x8, 0x7, 0x5, 0x2, 0x3}, r0, 0x5, 0xffffffffffffff9c, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/sco\x00') preadv(r2, &(0x7f0000000040), 0x0, 0x10400003) [ 85.853036] audit: type=1400 audit(1543913666.744:6): avc: denied { set_context_mgr } for pid=3804 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 85.898061] binder: 3804:3820 unknown command 536871488 [ 85.904165] binder: 3804:3820 ioctl c0306201 20000440 returned -22 08:54:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x100000001) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) setsockopt$inet6_buf(r0, 0x29, 0x80000000000002, &(0x7f0000000080), 0x0) io_setup(0x0, &(0x7f0000000080)) eventfd2(0xfff, 0x0) getpid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) socketpair(0x2, 0x5, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) [ 86.091276] binder: BINDER_SET_CONTEXT_MGR already set [ 86.097997] binder: 3808:3840 unknown command 536871488 [ 86.115612] binder: 3808:3838 ioctl 40046207 0 returned -16 [ 86.130923] binder: 3808:3840 ioctl c0306201 20000440 returned -22 08:54:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) r2 = dup2(r0, r0) fstat(r1, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000040)="948c802d", 0x4}], 0x1) 08:54:27 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x0) 08:54:27 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf0, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x25}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r2) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0xfffffffffffffc2f}], 0x1}, 0x0) munlockall() munlockall() request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='%system\x00', r2) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}], 0x1, 0x0, 0x0) 08:54:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='net/ip_tables_targets\x00') fcntl$getownex(r0, 0x10, &(0x7f0000005240)) fcntl$getown(r1, 0x9) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000005040)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000001000)='./file0\x00', 0x0, 0x3) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, 0x0) getuid() getresuid(&(0x7f0000006ac0), &(0x7f0000006b00), &(0x7f0000006b40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000006b80)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000006c80)=0xe8) stat(&(0x7f0000006cc0)='./file0\x00', &(0x7f0000005100)) fstat(r4, &(0x7f0000006d80)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006e00), &(0x7f0000006e40)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006e80), &(0x7f0000006ec0)=0xc) fsetxattr$system_posix_acl(r3, &(0x7f00000050c0)='system.posix_acl_default\x00', &(0x7f0000006f00)=ANY=[@ANYBLOB="b9ebe335041f55718c5947a7b172129df6a502accea74bbb497bc710d791a7637406f10fd98a6cc9e12c10254cdb6fafb487bf35e30e733b05cd84b589ac4d5a0813a5ab23ff4ee0566c84acaec4be125014404a993dedd1c9dd923840734b852039f038133a4ae14474b5757cb0c67ece6143faef3c4717b83991b8265ef4ceb5fba3366bbd05ff69010f0462f22e0092e41bd8d22b3aae7e1642c74e9e48"], 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000053c0)='/dev/ptmx\x00', 0x7fffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000069c0)) futex(&(0x7f0000006980), 0x89, 0x1, &(0x7f0000004cc0)={0x77359400}, &(0x7f0000005b00), 0x10000000000005) syz_open_pts(r5, 0xfffffffffffffffd) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r6, 0x1, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) ioctl$KDADDIO(r1, 0x4b34, 0xb4) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r6, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0x0, &(0x7f0000005180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000006900)={0x0, 0x0}) recvmmsg(r6, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005400)=""/205, 0xcd}], 0x1, &(0x7f0000005500)=""/242, 0xf2, 0x6}, 0xff}, {{&(0x7f0000005340)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005600)=""/120, 0x78}, {&(0x7f0000005680)=""/97, 0x61}, {&(0x7f0000005700)=""/100, 0x64}, {&(0x7f0000005780)=""/165, 0xa5}, {&(0x7f0000005840)=""/119, 0x77}, {&(0x7f00000058c0)=""/77, 0x4d}, {&(0x7f0000005940)=""/8, 0x8}, {&(0x7f0000005980)=""/70, 0x46}, {&(0x7f0000005a00)=""/105, 0x69}], 0x9, &(0x7f0000005b40)=""/118, 0x76, 0x7}, 0xffffffff7fffffff}, {{&(0x7f0000005bc0)=@rc, 0x80, &(0x7f0000006080)=[{&(0x7f0000005c40)=""/36, 0x24}, {&(0x7f0000005c80)=""/135, 0x87}, {&(0x7f0000005d40)=""/138, 0x8a}, {&(0x7f0000005e00)=""/148, 0x94}, {&(0x7f0000005ec0)=""/148, 0x94}, {&(0x7f0000005f80)=""/68, 0x44}, {&(0x7f0000006000)=""/81, 0x51}], 0x7, &(0x7f0000006100)=""/149, 0x95, 0x400}, 0x5}, {{&(0x7f00000061c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000006480)=[{&(0x7f0000006240)=""/238, 0xee}, {&(0x7f0000006340)=""/186, 0xba}, {&(0x7f0000006400)=""/110, 0x6e}], 0x3, &(0x7f00000064c0)=""/83, 0x53, 0x1000}, 0x7c}, {{&(0x7f0000006540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000006740)=[{&(0x7f00000065c0)=""/100, 0x64}, {&(0x7f0000006640)=""/19, 0x13}, {&(0x7f0000006680)=""/168, 0xa8}], 0x3, &(0x7f0000006780)=""/10, 0xa, 0x7ff}}], 0x5, 0x0, &(0x7f0000006940)={r9, r10+30000000}) socket(0x9, 0xf, 0x1) recvmmsg(r6, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=""/139, 0x8b, 0x1}, 0xffffffff}, {{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/198, 0xc6, 0x2}, 0x1ff}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/15, 0xf}], 0x3, 0x0, 0x0, 0x7cab}, 0xffffffffffffff64}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/57, 0x39}, {&(0x7f0000000f00)=""/130, 0x82}], 0x8, &(0x7f0000001040)=""/20, 0x14}, 0x800}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/24, 0x18}], 0x2, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}, 0x200}, {{&(0x7f0000003340)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000033c0)=""/151, 0x97}, {&(0x7f0000003480)=""/88, 0x58}], 0x3, &(0x7f0000003540)=""/190, 0xbe, 0x100}, 0x1ff}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/7, 0x7}], 0x3, &(0x7f0000003840)=""/105, 0x69}, 0x10001}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003a80)=""/3, 0x3}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/45, 0x2d}, {&(0x7f0000004b00)=""/189, 0xbd}, {&(0x7f0000004bc0)=""/130, 0x82}], 0x7, 0x0, 0x0, 0x2000}, 0x7ff}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0x7}, 0xffffffffffffe4f0}], 0xa, 0x100, &(0x7f00000051c0)={r7, r8+30000000}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000005200)={0x2, &(0x7f0000000140)=[{0x800, 0x5, 0x7, 0x4}, {0x20, 0x771b, 0x9, 0x7ff}]}, 0x10) connect(r6, &(0x7f00000012c0)=@nl=@unspec, 0x80) [ 86.356418] audit: type=1400 audit(1543913667.254:7): avc: denied { create } for pid=3857 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:54:27 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/26, 0x1a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4000) io_setup(0x4, &(0x7f0000000040)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x10080, 0x0) sendfile(r2, r0, &(0x7f0000000200), 0x80) write$P9_RXATTRWALK(r2, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x5}, 0xf) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0x10}) [ 86.424710] audit: type=1400 audit(1543913667.324:8): avc: denied { write } for pid=3857 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 86.550661] audit: type=1400 audit(1543913667.444:9): avc: denied { read } for pid=3857 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:54:27 executing program 5: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x80000, 0x8c6) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 08:54:27 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x80000, 0x80000000000, 0x1, 0x0, 0x9, 0x0, 0x1}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x41, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x807, 0x80000000) fcntl$getown(r2, 0x9) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f0000000640)=0x5) openat$cgroup_subtree(r2, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r2, 0x2, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) vmsplice(r6, &(0x7f0000000900)=[{&(0x7f00000001c0)="84a823d55a172fe8e89b1a3cbb799feb7097b774491fd9048998574b75d59173bb23b70a9445c518213ac66cde673d00", 0x30}], 0x1, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff}) sync_file_range(r1, 0x7, 0x20, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000340)={{0x0, @multicast1, 0x4e24, 0x2, 'sh\x00', 0x4, 0x0, 0x63}, {@local, 0x4e21, 0x1, 0x800, 0x5, 0x5}}, 0x44) io_setup(0x1f, &(0x7f0000000180)=0x0) recvfrom(r4, &(0x7f00000004c0)=""/197, 0xc5, 0x40000000, &(0x7f00000003c0)=@in6={0xa, 0x4e22, 0x200, @local, 0x6}, 0x80) io_submit(r9, 0x2, &(0x7f0000001680)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000200)}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x3, 0x0, r7, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r6, r10, &(0x7f0000d83ff8), 0x8000fffffffe) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000300)={0x1}, 0x0, &(0x7f0000000600)={r11, r12+30000000}, 0x8) [ 87.173482] ================================================================== [ 87.180867] BUG: KASAN: use-after-free in tcp_write_xmit+0x3b22/0x4680 [ 87.187507] Read of size 2 at addr ffff8801cf5636b0 by task syz-executor1/3865 [ 87.194843] [ 87.196458] CPU: 0 PID: 3865 Comm: syz-executor1 Not tainted 4.4.166+ #18 [ 87.203355] 0000000000000000 2d6ec5859eb2f994 ffff8801db6074e0 ffffffff81aa62ad [ 87.211380] ffffea00073d5880 ffff8801cf5636b0 0000000000000000 ffff8801cf5636b0 [ 87.219402] dffffc0000000000 ffff8801db607518 ffffffff8148b12b ffff8801cf5636b0 [ 87.227454] Call Trace: [ 87.230023] [] dump_stack+0xc1/0x124 [ 87.236132] [] print_address_description+0x6c/0x217 [ 87.242788] [] kasan_report.cold.6+0x175/0x2f7 [ 87.249010] [] ? tcp_write_xmit+0x3b22/0x4680 [ 87.255133] [] __asan_report_load2_noabort+0x14/0x20 [ 87.261872] [] tcp_write_xmit+0x3b22/0x4680 [ 87.267832] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 87.274574] [] ? tcp_rcv_space_adjust+0x450/0x450 [ 87.281079] [] __tcp_push_pending_frames+0xa4/0x2a0 [ 87.287738] [] tcp_rcv_state_process+0xb02/0x4180 [ 87.294224] [] ? tcp_finish_connect+0x470/0x470 [ 87.300536] [] ? sk_filter_trim_cap+0xf1/0x6a0 [ 87.306766] [] ? tcp_v4_rcv+0x220b/0x3750 [ 87.312554] [] ? __inet_lookup_established+0xa7/0x590 [ 87.319387] [] tcp_v4_do_rcv+0x1a5/0x7a0 [ 87.325085] [] tcp_v4_rcv+0x2a84/0x3750 [ 87.330709] [] ip_local_deliver_finish+0x3c0/0xa70 [ 87.337282] [] ? ip_local_deliver_finish+0x12a/0xa70 [ 87.344025] [] ip_local_deliver+0x1ac/0x390 [ 87.349990] [] ? ip_call_ra_chain+0x540/0x540 [ 87.356127] [] ? nf_hook_slow+0x1db/0x340 [ 87.361913] [] ? inet_del_offload+0x40/0x40 [ 87.367877] [] ? nf_hook_slow+0x202/0x340 [ 87.373694] [] ? nf_iterate+0x210/0x210 [ 87.379311] [] ip_rcv_finish+0x759/0x1220 [ 87.385097] [] ip_rcv+0x899/0xfc0 [ 87.390191] [] ? ip_local_deliver+0x390/0x390 [ 87.396333] [] ? ip_local_deliver_finish+0xa70/0xa70 [ 87.403079] [] ? ip_local_deliver+0x390/0x390 [ 87.409215] [] __netif_receive_skb_core+0x12c8/0x2820 [ 87.416046] [] ? dev_loopback_xmit+0x420/0x420 [ 87.422268] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 87.429016] [] __netif_receive_skb+0x5b/0x1c0 [ 87.435153] [] process_backlog+0x20a/0x670 [ 87.441027] [] ? process_backlog+0x1a6/0x670 [ 87.447074] [] net_rx_action+0x367/0xd50 [ 87.452782] [] ? net_rps_action_and_irq_enable.isra.29+0x170/0x170 [ 87.460743] [] ? check_preemption_disabled+0x3b/0x200 [ 87.467589] [] __do_softirq+0x22a/0xa3e [ 87.473202] [] ? release_sock+0x3b6/0x500 [ 87.478987] [] do_softirq_own_stack+0x1c/0x30 [ 87.485117] [] do_softirq.part.2+0x54/0x60 [ 87.491728] [] __local_bh_enable_ip+0xd4/0xe0 [ 87.497855] [] _raw_spin_unlock_bh+0x30/0x40 [ 87.503899] [] release_sock+0x3b6/0x500 [ 87.509518] [] __inet_stream_connect+0x5aa/0xc30 [ 87.515912] [] ? inet_bind+0x8a0/0x8a0 [ 87.521428] [] ? autoremove_wake_function.part.1+0x130/0x130 [ 87.528851] [] ? kmem_cache_alloc_trace+0x117/0x2d0 [ 87.535495] [] tcp_sendmsg+0x1a07/0x2b30 [ 87.541185] [] ? trace_hardirqs_on+0x10/0x10 [ 87.547221] [] ? tcp_sendpage+0x17e0/0x17e0 [ 87.553182] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 87.560712] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 87.567454] [] ? check_preemption_disabled+0x3b/0x200 [ 87.574273] [] ? inet_sendmsg+0x143/0x4d0 [ 87.580046] [] inet_sendmsg+0x203/0x4d0 [ 87.585684] [] ? inet_sendmsg+0x73/0x4d0 [ 87.591371] [] ? inet_recvmsg+0x4c0/0x4c0 [ 87.597176] [] sock_sendmsg+0xbb/0x110 [ 87.602700] [] SyS_sendto+0x220/0x370 [ 87.608147] [] ? SyS_getpeername+0x2d0/0x2d0 [ 87.614183] [] ? kvm_clock_get_cycles+0x9/0x10 [ 87.620390] [] ? ktime_get_ts64+0x251/0x310 [ 87.626336] [] ? posix_ktime_get_ts+0x15/0x20 [ 87.632460] [] ? __compat_put_timespec.isra.3+0xc7/0x140 [ 87.639549] [] ? compat_SyS_clock_gettime+0x14d/0x1d0 [ 87.646364] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 87.653188] [] ? __do_page_fault+0x2b6/0x7e0 [ 87.659234] [] ? do_fast_syscall_32+0xdb/0xa80 [ 87.665549] [] ? SyS_getpeername+0x2d0/0x2d0 [ 87.671587] [] do_fast_syscall_32+0x31e/0xa80 [ 87.677720] [] sysenter_flags_fixed+0xd/0x1a [ 87.683754] [ 87.685358] Allocated by task 3860: [ 87.688977] [] save_stack_trace+0x26/0x50 [ 87.694878] [] kasan_kmalloc.part.1+0x62/0xf0 [ 87.701142] [] kasan_kmalloc+0xaf/0xc0 [ 87.706787] [] kasan_slab_alloc+0x12/0x20 [ 87.712702] [] kmem_cache_alloc+0xdc/0x2c0 [ 87.718691] [] __alloc_skb+0xe6/0x5b0 [ 87.724244] [] sk_stream_alloc_skb+0xa3/0x5d0 [ 87.730490] [] tcp_sendmsg+0xf81/0x2b30 [ 87.736230] [] inet_sendmsg+0x203/0x4d0 [ 87.741954] [] sock_sendmsg+0xbb/0x110 [ 87.747593] [] SyS_sendto+0x220/0x370 [ 87.753138] [] do_fast_syscall_32+0x31e/0xa80 [ 87.759388] [] sysenter_flags_fixed+0xd/0x1a [ 87.765573] [ 87.767197] Freed by task 3865: [ 87.770448] [] save_stack_trace+0x26/0x50 [ 87.776395] [] kasan_slab_free+0xac/0x190 [ 87.782294] [] kmem_cache_free+0xbe/0x350 [ 87.788189] [] kfree_skbmem+0xcf/0x100 [ 87.793824] [] __kfree_skb+0x1d/0x20 [ 87.799301] [] tcp_connect+0xae9/0x3110 [ 87.805039] [] tcp_v4_connect+0xf31/0x1890 [ 87.811021] [] __inet_stream_connect+0x2a9/0xc30 [ 87.817521] [] tcp_sendmsg+0x1a07/0x2b30 [ 87.823376] [] inet_sendmsg+0x203/0x4d0 [ 87.829095] [] sock_sendmsg+0xbb/0x110 [ 87.834739] [] SyS_sendto+0x220/0x370 [ 87.840285] [] do_fast_syscall_32+0x31e/0xa80 [ 87.846557] [] sysenter_flags_fixed+0xd/0x1a [ 87.852720] [ 87.854333] The buggy address belongs to the object at ffff8801cf563680 [ 87.854333] which belongs to the cache skbuff_fclone_cache of size 456 [ 87.867682] The buggy address is located 48 bytes inside of [ 87.867682] 456-byte region [ffff8801cf563680, ffff8801cf563848) [ 87.879459] The buggy address belongs to the page: [ 87.887475] kasan: CONFIG_KASAN_INLINE enabled [ 87.891892] kasan: GPF could be caused by NULL-ptr deref or user memory accessSeaBIOS (version 1.8.2-20181014_101610-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 2 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2a10: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 4.4.166+ (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC) ) #18 SMP PREEMPT Mon Dec 3 19:05:51 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfffcfff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfffd000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] Hypervisor detected: KVM [ 0.000000] Kernel/User page tables isolation: disabled [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC UC UC UC UC [ 0.000000] e820: last_pfn = 0xbfffd max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f2c80-0x000f2c8f] mapped at [ffff8800000f2c80] [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F2A50 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFFDBA0 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFFF00 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFFDBE0 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFFEC0 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFFEC0 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFFF590 000930 (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFFF4A0 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFFF470 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFFF3A0 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 1786354675 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA32 [mem 0x0000000000001000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfffcfff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:8 nr_cpumask_bits:8 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 41 pages/cpu @ffff8801db600000 s130696 r8192 d29048 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935238 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6609220K/7863916K available (23659K kernel code, 3782K rwdata, 5032K rodata, 1300K init, 23352K bss, 1254696K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.121392] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.122603] pid_max: default: 32768 minimum: 301 [ 1.123306] ACPI: Core revision 20150930 [ 1.202141] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.203418] Security Framework initialized [ 1.204044] SELinux: Initializing. [ 1.204884] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.205852] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.209887] Initializing cgroup subsys freezer [ 1.210830] CPU: Physical Processor ID: 0 [ 1.211429] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.212254] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.213170] Spectre V2 : Mitigation: Full generic retpoline [ 1.213945] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 1.215087] Speculative Store Bypass: Vulnerable [ 1.216407] Freeing SMP alternatives memory: 28K [ 1.227197] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.340709] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.342259] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.430998] x86: Booting SMP configuration: [ 1.431693] .... node #0, CPUs: #1 [ 1.432572] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.436728] x86: Booted up 1 node, 2 CPUs [ 1.437341] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.439285] CPU1: update max cpu_capacity 1024 [ 1.441829] CPU0: update max cpu_capacity 1024 [ 1.442122] devtmpfs: initialized [ 1.451956] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.453429] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.457889] NET: Registered protocol family 16 [ 1.480796] cpuidle: using governor ladder [ 1.510780] cpuidle: using governor menu [ 1.511794] ACPI: bus type PCI registered [ 1.512581] PCI: Using configuration type 1 for base access [ 1.595887] ACPI: Added _OSI(Module Device) [ 1.596524] ACPI: Added _OSI(Processor Device) [ 1.597177] ACPI: Added _OSI(3.0 _SCP Extensions) [ 1.597905] ACPI: Added _OSI(Processor Aggregator Device) [ 1.609665] ACPI: Executed 2 blocks of module-level executable AML code [ 1.695590] ACPI: Interpreter enabled [ 1.696549] ACPI: (supports S0 S3 S5) [ 1.697125] ACPI: Using IOAPIC for interrupt routing [ 1.698255] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 1.925239] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 1.926296] acpi PNP0A03:00: _OSC: OS supports [Segments MSI] [ 1.927583] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 1.941365] PCI host bridge to bus 0000:00 [ 1.942091] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 1.943100] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 1.944135] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 1.945222] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 1.946600] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.984228] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 2.064557] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 2.070781] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 2.076944] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 2.083138] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 2.086785] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 2.101696] ACPI: Enabled 16 GPEs in block 00 to 0F [ 2.105361] vgaarb: loaded [ 2.108577] SCSI subsystem initialized [ 2.110482] ACPI: bus type USB registered [ 2.111785] usbcore: registered new interface driver usbfs [ 2.112851] usbcore: registered new interface driver hub [ 2.113855] usbcore: registered new device driver usb [ 2.115809] Advanced Linux Sound Architecture Driver Initialized. [ 2.116887] PCI: Using ACPI for IRQ routing [ 2.122077] amd_nb: Cannot enumerate AMD northbridges [ 2.123056] clocksource: Switched to clocksource kvm-clock [ 2.241481] pnp: PnP ACPI init [ 2.266654] pnp: PnP ACPI: found 7 devices [ 2.278185] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 2.279918] NET: Registered protocol family 2 [ 2.283112] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 2.284559] TCP bind hash table entries: 65536 (order: 10, 4194304 bytes) [ 2.289575] TCP: Hash tables configured (established 65536 bind 65536) [ 2.290721] UDP hash table entries: 4096 (order: 7, 655360 bytes) [ 2.292709] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes) [ 2.294587] NET: Registered protocol family 1 [ 2.295353] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 2.297542] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 2.298640] software IO TLB [mem 0xbbffd000-0xbfffd000] (64MB) mapped at [ffff8800bbffd000-ffff8800bfffcfff] [ 2.300708] RAPL PMU detected, API unit is 2^-32 Joules, 3 fixed counters 10737418240 ms ovfl timer [ 2.301973] hw unit of domain pp0-core 2^-0 Joules [ 2.302877] hw unit of domain package 2^-0 Joules [ 2.303613] hw unit of domain dram 2^-16 Joules [ 2.309027] audit: initializing netlink subsys (disabled) [ 2.310810] audit: type=2000 audit(1543913673.278:1): initialized [ 2.410563] VFS: Disk quotas dquot_6.6.0 [ 2.412307] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 2.426742] Registering sdcardfs 0.1 [ 2.431287] fuse init (API version 7.23) [ 2.451475] cryptomgr_test (31) used greatest stack depth: 28656 bytes left [ 2.464062] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253) [ 2.465139] io scheduler noop registered [ 2.465728] io scheduler deadline registered [ 2.468036] io scheduler cfq registered (default) [ 2.476124] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 2.477384] ACPI: Power Button [PWRF] [ 2.479265] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 2.480470] ACPI: Sleep Button [SLPF] [ 2.481537] Warning: Processor Platform Limit event detected, but not handled. [ 2.482649] Consider compiling CPUfreq support into your kernel. [ 2.507268] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 2.508206] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 2.529869] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 10 [ 2.530793] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 2.536922] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 2.560293] 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 2.585678] 00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 2.610674] 00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A [ 2.635678] 00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A [ 2.703403] brd: module loaded [ 2.738950] loop: module loaded [ 2.753338] scsi host0: Virtio SCSI HBA [ 2.766319] scsi 0:0:1:0: Direct-Access Google PersistentDisk 1 PQ: 0 ANSI: 6 [ 3.293275] tsc: Refined TSC clocksource calibration: 2299.998 MHz [ 3.294649] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212733415c7, max_idle_ns: 440795236380 ns [ 3.320533] sd 0:0:1:0: [sda] 4194304 512-byte logical blocks: (2.15 GB/2.00 GiB) [ 3.320611] tun: Universal TUN/TAP device driver, 1.6 [ 3.320615] tun: (C) 1999-2004 Max Krasnyansky [ 3.330352] sd 0:0:1:0: [sda] 4096-byte physical blocks [ 3.336288] sd 0:0:1:0: [sda] Write Protect is off [ 3.340266] sd 0:0:1:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 3.351829] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI [ 3.353164] e1000: Copyright (c) 1999-2006 Intel Corporation. [ 3.355140] PPP generic driver version 2.4.2 [ 3.357914] PPP BSD Compression module registered [ 3.358646] PPP Deflate Compression module registered [ 3.359469] PPP MPPE Compression module registered [ 3.360240] NET: Registered protocol family 24 [ 3.361948] usbcore: registered new interface driver asix [ 3.362957] usbcore: registered new interface driver ax88179_178a [ 3.365592] usbcore: registered new interface driver cdc_ether [ 3.366799] usbcore: registered new interface driver net1080 [ 3.367896] usbcore: registered new interface driver cdc_subset [ 3.369110] usbcore: registered new interface driver zaurus [ 3.370331] usbcore: registered new interface driver cdc_ncm [ 3.371226] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 3.372296] ehci-pci: EHCI PCI platform driver [ 3.374048] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 3.376044] sda: sda1 [ 3.376493] i8042: Warning: Keylock active [ 3.378367] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 3.382488] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 3.387973] mousedev: PS/2 mouse device common for all mice [ 3.391201] sd 0:0:1:0: [sda] Attached SCSI disk [ 3.393479] usbcore: registered new interface driver xpad [ 3.394542] usbcore: registered new interface driver usb_acecad [ 3.395627] usbcore: registered new interface driver aiptek [ 3.396675] usbcore: registered new interface driver gtco [ 3.397717] usbcore: registered new interface driver hanwang [ 3.398808] usbcore: registered new interface driver kbtab [ 3.401377] rtc_cmos 00:00: RTC can wake from S4 [ 3.404128] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 3.405320] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram [ 3.409885] device-mapper: uevent: version 1.0.3 [ 3.413398] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com [ 3.415541] hidraw: raw HID events driver (C) Jiri Kosina [ 3.431781] usbcore: registered new interface driver usbhid [ 3.432710] usbhid: USB HID core driver [ 3.441692] ashmem: initialized [ 3.465140] u32 classifier [ 3.471413] Actions configured [ 3.472006] Netfilter messages via NETLINK v0.30. [ 3.473313] nf_conntrack version 0.5.0 (65536 buckets, 262144 max) [ 3.478169] ctnetlink v0.93: registering with nfnetlink. [ 3.485004] xt_time: kernel timezone is -0000 [ 3.485900] IPv4 over IPsec tunneling driver [ 3.490337] ip_tables: (C) 2000-2006 Netfilter Core Team [ 3.492537] arp_tables: (C) 2002 David S. Miller [ 3.493622] Initializing XFRM netlink socket [ 3.500577] NET: Registered protocol family 10 [ 3.508202] mip6: Mobile IPv6 [ 3.508799] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 3.514542] sit: IPv6 over IPv4 tunneling driver [ 3.522245] NET: Registered protocol family 17 [ 3.523139] NET: Registered protocol family 15 [ 3.527198] registered taskstats version 1 [ 3.531450] rtc_cmos 00:00: setting system clock to 2018-12-04 08:54:34 UTC (1543913674) [ 3.532730] ALSA device list: [ 3.533222] No soundcards found. [ 3.585489] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2 [ 3.594309] EXT4-fs (sda1): couldn't mount as ext3 due to feature incompatibilities [ 3.597354] EXT4-fs (sda1): couldn't mount as ext2 due to feature incompatibilities [ 3.644486] EXT4-fs (sda1): mounted filesystem without journal. Opts: (null) [ 3.645764] VFS: Mounted root (ext4 filesystem) readonly on device 8:1. [ 3.668650] devtmpfs: mounted [ 3.673351] Freeing unused kernel memory: 1300K [ 3.673999] Kernel memory protection disabled. [ 4.963149] SELinux: Permission module_load in class system not defined in policy. [ 4.964537] SELinux: Class netlink_iscsi_socket not defined in policy. [ 4.965500] SELinux: Class netlink_fib_lookup_socket not defined in policy. [ 4.966622] SELinux: Class netlink_connector_socket not defined in policy. [ 4.967672] SELinux: Class netlink_netfilter_socket not defined in policy. [ 4.968665] SELinux: Class netlink_generic_socket not defined in policy. [ 4.969709] SELinux: Class netlink_scsitransport_socket not defined in policy. [ 4.970763] SELinux: Class netlink_rdma_socket not defined in policy. [ 4.971660] SELinux: Class netlink_crypto_socket not defined in policy. [ 4.972747] SELinux: Permission wake_alarm in class capability2 not defined in policy. [ 4.973994] SELinux: Permission block_suspend in class capability2 not defined in policy. [ 4.975158] SELinux: Permission audit_read in class capability2 not defined in policy. [ 4.976321] SELinux: Permission attach_queue in class tun_socket not defined in policy. [ 4.977474] SELinux: Class binder not defined in policy. [ 4.978253] SELinux: the above unknown classes and permissions will be denied [ 5.087228] audit: type=1403 audit(1543913676.050:2): policy loaded auid=4294967295 ses=4294967295 INIT: version 2.88 booting [ 5.235444] stty (356) used greatest stack depth: 26112 bytes left [info] Using makefile-style concurrent boot in runlevel S. [ 6.540843] audit: type=1400 audit(1543913677.500:3): avc: denied { associate } for pid=460 comm="restorecon" name="pts" dev="devtmpfs" ino=4812 scontext=system_u:object_r:devpts_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [....] Starting the hotplug events dispatcher: udevd[ 6.599915] udevd[468]: starting version 175 [?25l[?1c7[ ok 8[?25h[?0c.