[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.400760] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.104871] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [ 24.350124] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [ 25.642671] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. 2018/07/14 04:42:47 fuzzer started 2018/07/14 04:42:49 dialing manager at 10.128.0.26:33337 2018/07/14 04:42:50 syscalls: 1172 2018/07/14 04:42:50 code coverage: enabled 2018/07/14 04:42:50 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/07/14 04:42:50 setuid sandbox: enabled 2018/07/14 04:42:50 namespace sandbox: enabled 2018/07/14 04:42:50 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/07/14 04:42:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/14 04:42:50 net packed injection: enabled 2018/07/14 04:42:50 net device setup: enabled 04:43:15 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r2 = dup2(r1, r1) r3 = accept4$inet6(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) 04:43:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x800000020000002, &(0x7f0000000140)={0xa, 0x6bb, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 04:43:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, 0x0, 0x74d7, 0x3, 0x7, 0x6}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:43:15 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x108) 04:43:15 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/216, 0xd8}}], 0x1, 0x0, &(0x7f0000000600)) close(r1) 04:43:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=ANY=[@ANYBLOB="20000000000000000000000007000000441005ab7d600300ef00009700000000"], 0x20}, 0x0) 04:43:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) 04:43:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) getpeername$unix(r1, &(0x7f0000000580), &(0x7f0000000600)=0x6e) [ 59.348014] IPVS: Creating netns size=2552 id=1 [ 59.445497] IPVS: Creating netns size=2552 id=2 [ 59.527120] IPVS: Creating netns size=2552 id=3 [ 59.627653] IPVS: Creating netns size=2552 id=4 [ 59.741635] IPVS: Creating netns size=2552 id=5 [ 59.912723] IPVS: Creating netns size=2552 id=6 [ 60.070923] IPVS: Creating netns size=2552 id=7 [ 60.249054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.322101] IPVS: Creating netns size=2552 id=8 [ 60.367104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.539101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.613812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.692465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.831704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.036184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.092999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.144620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.162211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.177798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.221388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.279739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.316804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.439249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.506985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.571820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.588409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.643781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.667034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.704317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.715603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.747400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.855374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.864103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.934809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.985291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.092108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.166142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.174609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.186123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.210290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.235987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.266603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.310135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.331872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.346878] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.388049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.398472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.462888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.485369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.500172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.607482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.619328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.684968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.694706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.713781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.751131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.798518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.857501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.905437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.914291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.947273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.971908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.056579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.091665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.144720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.189066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.269022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.332433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.350496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.447430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.531685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.592864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.922480] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.195399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.303217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.535752] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.570495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.762046] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.809647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.060748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.071703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.144040] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.164212] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.325435] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.347530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.448297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.460601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.603901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 04:43:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080), 0x4) 04:43:24 executing program 0: 04:43:24 executing program 0: 04:43:24 executing program 0: 04:43:24 executing program 0: [ 68.527845] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. 04:43:24 executing program 0: 04:43:24 executing program 2: 04:43:24 executing program 0: 04:43:24 executing program 2: 04:43:24 executing program 0: 04:43:25 executing program 1: 04:43:25 executing program 2: 04:43:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x10) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da283016beee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 04:43:26 executing program 0: 04:43:26 executing program 7: 04:43:26 executing program 2: 04:43:26 executing program 1: 04:43:26 executing program 3: 04:43:26 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 04:43:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100000000000000000000000000", @ANYBLOB="0000000000000000080012002262000000000000e85a89e1e667f9ef8f83719e6faf2552c3cd80621f105678d292f456d6aed40f02ee0251de96bac97b4c5c5f21a01e6dd855a506f5079d77c2f9369c98710fac99303b1a4560f867f0eb9343439a14031c043d0488000000000000000000"], 0x2}, 0x1}, 0x0) 04:43:26 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = socket$inet(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da283016beee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 04:43:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc56b70c0e4b1c7857dde5f9eedfc811ff1f75b2da11e0307f86c73d13", 0x46) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) 04:43:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='cpuset\x00') sendfile(r1, r2, &(0x7f0000000040), 0x100000001) 04:43:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000000)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0xe4ffffff00000000, 0x0, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1}, 0x0) 04:43:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa}, 0x1c) 04:43:26 executing program 7: 04:43:26 executing program 0: 04:43:26 executing program 4: 04:43:26 executing program 1: r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 04:43:26 executing program 7: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f10101c7033400b0", 0x26) 04:43:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) 04:43:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000200)={0x0, {{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) 04:43:26 executing program 5: r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 04:43:26 executing program 3: 04:43:26 executing program 2: 04:43:26 executing program 1: 04:43:26 executing program 6: 04:43:26 executing program 0: 04:43:26 executing program 5: 04:43:26 executing program 6: 04:43:26 executing program 7: 04:43:26 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000040)='[', 0x1) 04:43:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000030101074007e610f7f2c900001000000400020008e0bc2b2f94dc11261c"], 0x22}, 0x1}, 0x0) 04:43:26 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000200), &(0x7f0000000240)) socket$inet6(0x10, 0x3, 0x0) 04:43:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 04:43:26 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x81) r1 = memfd_create(&(0x7f0000000040)="6e6f01fcffff692a2936f0d00c94808bcfbce5de2d57e70200818c6ab7847c51a44bb3aaaefbb8ae99506ae53aa88a80fec3073ecbcc3e72", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 04:43:26 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create1(0x0) r2 = dup3(r0, r1, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 04:43:26 executing program 0: 04:43:26 executing program 5: 04:43:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") syz_emit_ethernet(0x2e, &(0x7f0000001040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0xfffffffffffffffe, {[@timestamp={0x44, 0x4, 0x7ff, 0x0, 0x1ff}]}}, @igmp}}}}, 0x0) 04:43:26 executing program 0: r0 = socket$inet6(0xa, 0x100000002, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 04:43:26 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) fallocate(r0, 0x10, 0x0, 0x400) 04:43:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) 04:43:26 executing program 6: r0 = socket$inet6(0xa, 0x805, 0x0) sendto$inet6(r0, &(0x7f0000000240)="93", 0x1, 0x0, &(0x7f0000001240)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) 04:43:26 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cd390b081bf2ffffffffffff86dd6002290f000001000000000000000000ffff00000000ff020000000000000000000000000001010090780000000060d5cae200002f0000000500000000000000000000000000ff020000000000000000000000000001f601929f106531aa0000"], 0x0) 04:43:26 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11}, 0x14) mincore(&(0x7f0000001000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/6) 04:43:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}]}, 0x110) 04:43:26 executing program 1: r0 = socket(0x2, 0x3, 0x40000000000000ff) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000080)) 04:43:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 04:43:26 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)="8925", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 04:43:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) 04:43:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000000)={0x83, 0x7d, 0x0, {0x0, 0x7c, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\\-%user]!&@@nodev(]vboxnet0', 0x21, "6e6f6465762d657468302187776c616e306d696d655f7479706547504c47504c2d", 0x7, '\'user(!', 0x6, '.bdev$'}}, 0x83) 04:43:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco={0x1f}, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2={0x1f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 04:43:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) pread64(r1, &(0x7f0000000ac0)=""/4096, 0x1052, 0x0) 04:43:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x0, 0x4, 0x0, 0x0, {0x8}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000001400)=@alg, 0x36c, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000000140)={0x0, 0x989680}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0) [ 71.009420] ================================================================== [ 71.016851] BUG: KASAN: use-after-free in ip6_xmit+0x1776/0x1a00 [ 71.023001] Read of size 8 at addr ffff8801d37f7298 by task syz-executor2/6177 [ 71.030423] [ 71.032050] CPU: 1 PID: 6177 Comm: syz-executor2 Not tainted 4.4.140-ged9bdc8 #4 [ 71.039583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.048956] 0000000000000000 7905aca41134e259 ffff8800a372f548 ffffffff81e0e08d [ 71.057017] ffffea00074dfdc0 ffff8801d37f7298 0000000000000000 ffff8801d37f7298 [ 71.065924] 0000000000001200 ffff8800a372f580 ffffffff81515a56[ 71.070696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 71.077595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 71.090923] ffff8801d37f7298 [ 71.094452] Call Trace: [ 71.097039] [] dump_stack+0xc1/0x124 [ 71.102394] [] print_address_description+0x6c/0x216 04:43:27 executing program 6: 04:43:27 executing program 6: [ 71.109052] [] kasan_report.cold.7+0x175/0x2f7 [ 71.115277] [] ? ip6_xmit+0x1776/0x1a00 [ 71.120948] [] __asan_report_load8_noabort+0x14/0x20 [ 71.127693] [] ip6_xmit+0x1776/0x1a00 [ 71.133149] [] ? ip6_finish_output2+0x1ca0/0x1ca0 [ 71.139645] [] ? __lock_is_held+0xa2/0xf0 [ 71.145443] [] ? ipv4_dst_check+0x111/0x160 [ 71.151420] [] ? __sk_dst_check+0x114/0x270 [ 71.157393] [] inet6_csk_xmit+0x245/0x490 [ 71.163192] [] ? inet6_csk_xmit+0xff/0x490 [ 71.169080] [] ? inet6_csk_update_pmtu+0x160/0x160 [ 71.175660] [] ? udp6_set_csum+0xd3/0xa70 [ 71.181492] [] l2tp_xmit_skb+0xbeb/0xeb0 [ 71.187210] [] pppol2tp_sendmsg+0x4e0/0x7d0 [ 71.193185] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 71.199678] [] ? pppol2tp_release+0x310/0x310 [ 71.205827] [] sock_sendmsg+0xcc/0x110 [ 71.211368] [] ___sys_sendmsg+0x441/0x880 [ 71.217170] [] ? copy_msghdr_from_user+0x550/0x550 [ 71.223795] [] ? __fget_light+0x9f/0x1f0 [ 71.229522] [] ? __fdget+0x18/0x20 [ 71.234692] [] ? sockfd_lookup_light+0xb6/0x160 [ 71.240999] [] __sys_sendmmsg+0x1d4/0x2e0 [ 71.246785] [] ? SyS_sendmsg+0x50/0x50 [ 71.252302] [] ? security_socket_connect+0x8f/0xc0 [ 71.258867] [] ? fput+0x20/0x150 [ 71.263864] [] ? SYSC_connect+0x22a/0x300 [ 71.269639] [] ? SYSC_bind+0x280/0x280 [ 71.275152] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 71.281288] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 71.288282] [] ? SyS_socket+0x121/0x1b0 [ 71.293885] [] ? move_addr_to_kernel+0x50/0x50 [ 71.300098] [] compat_SyS_sendmmsg+0x32/0x40 [ 71.306134] [] ? compat_SyS_sendmsg+0x40/0x40 [ 71.312270] [] do_fast_syscall_32+0x326/0x8b0 [ 71.318412] [] sysenter_flags_fixed+0xd/0x17 [ 71.324469] [ 71.326075] Allocated by task 6131: [ 71.329677] [] save_stack_trace+0x26/0x50 [ 71.335573] [] save_stack+0x43/0xd0 [ 71.340971] [] kasan_kmalloc+0xc7/0xe0 [ 71.346620] [] kasan_slab_alloc+0x12/0x20 [ 71.352518] [] kmem_cache_alloc+0xbe/0x2a0 [ 71.358505] [] dst_alloc+0xb5/0x1a0 [ 71.363901] [] rt_dst_alloc+0x78/0x430 [ 71.369570] [] ip_route_input_noref+0x1a59/0x3890 [ 71.376190] [] ip_rcv_finish+0x1df/0x1640 [ 71.382099] [] ip_rcv+0x9e4/0x1190 [ 71.387392] [] __netif_receive_skb_core+0x12d6/0x2940 [ 71.394345] [] __netif_receive_skb+0x5b/0x1b0 [ 71.400589] [] process_backlog+0x216/0x6a0 [ 71.406575] [] net_rx_action+0x3a2/0xdb0 [ 71.412414] [] __do_softirq+0x22c/0xa1a [ 71.418148] [ 71.419751] Freed by task 3873: [ 71.423001] [] save_stack_trace+0x26/0x50 [ 71.428901] [] save_stack+0x43/0xd0 [ 71.434292] [] kasan_slab_free+0x72/0xc0 [ 71.440116] [] kmem_cache_free+0xbe/0x340 [ 71.446027] [] dst_destroy.part.6+0x1f5/0x330 [ 71.452307] [] dst_destroy_rcu+0x15/0x40 [ 71.458206] [] rcu_process_callbacks+0x927/0x1440 [ 71.464813] [] __do_softirq+0x22c/0xa1a [ 71.470581] [ 71.472203] The buggy address belongs to the object at ffff8801d37f7280 [ 71.472203] which belongs to the cache ip_dst_cache of size 208 [ 71.484932] The buggy address is located 24 bytes inside of [ 71.484932] 208-byte region [ffff8801d37f7280, ffff8801d37f7350) [ 71.496695] The buggy address belongs to the page: [ 71.532879] ------------[ cut here ]------------ [ 71.537718] WARNING: CPU: 0 PID: 6167 at lib/list_debug.c:62 __list_del_entry+0x162/0x1c0() [ 71.546213] list_del corruption. next->prev should be ffff8801d73ac140, but was (null) [ 71.555442] Kernel panic - not syncing: panic_on_warn set ... [ 71.555442] [ 71.562819] CPU: 0 PID: 6167 Comm: syz-executor0 Not tainted 4.4.140-ged9bdc8 #4 [ 71.570358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.579940] 0000000000000000 af93ed5a58c92dc3 ffff8801d65ff7d8 ffffffff81e0e08d [ 71.588041] ffffffff83a43dc0 ffff8801d73ab000 ffffffff83c13ac0 0000000000000009 [ 71.596111] 000000000000003e ffff8801d65ff898 ffffffff8140a1c4 0000000041b58ab3 [ 71.604180] Call Trace: [ 71.606775] [] dump_stack+0xc1/0x124 [ 71.612148] [] panic+0x19e/0x38d [ 71.617173] [] ? add_taint.cold.4+0x16/0x16 [ 71.623159] [] ? warn_slowpath_common.cold.6+0x5/0x20 [ 71.630127] [] warn_slowpath_common.cold.6+0x20/0x20 [ 71.636979] [] ? __list_del_entry+0x162/0x1c0 [ 71.643217] [] warn_slowpath_fmt+0xbf/0x100 [ 71.649199] [] ? warn_slowpath_common+0x120/0x120 [ 71.655733] [] ? __mutex_unlock_slowpath+0x243/0x3b0 [ 71.662499] [] __list_del_entry+0x162/0x1c0 [ 71.668475] [] css_set_move_task+0x184/0x480 [ 71.674548] [] cgroup_exit+0xad/0x250 [ 71.680015] [] do_exit+0x9fd/0x26b0 [ 71.685311] [] ? release_task.part.17+0x1200/0x1200 [ 71.691992] [] ? recalc_sigpending+0x76/0xa0 [ 71.698073] [] do_group_exit+0x111/0x330 [ 71.703804] [] get_signal+0x4ec/0x14b0 [ 71.709354] [] ? SYSC_connect+0x300/0x300 [ 71.718643] [] do_signal+0x8b/0x1d30 [ 71.724039] [] ? compat_SyS_ioctl+0x1d5/0x2270 [ 71.730276] [] ? setup_sigcontext+0x780/0x780 [ 71.736445] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 71.742602] [] ? fd_install+0x4d/0x60 [ 71.748068] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 71.755094] [] ? SyS_socket+0x121/0x1b0 [ 71.760735] [] ? exit_to_usermode_loop+0xe4/0x160 [ 71.767243] [] exit_to_usermode_loop+0x11a/0x160 [ 71.773661] [] do_fast_syscall_32+0x620/0x8b0 [ 71.779855] [] sysenter_flags_fixed+0xd/0x17 SeaBIOS (version 1.8.2-20171130_102032-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 256 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2290: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... early console in decompress_kernel input_data: 0x0000000003b5126e input_len: 0x00000000014cbf94 output: 0x0000000001000000 output_len: 0x0000000004008a40 run_size: 0x0000000005752000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Initializing cgroup subsys schedtune [ 0.000000] Linux version 4.4.140-ged9bdc8 (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC) ) #4 SMP PREEMPT Fri Jul 13 14:00:43 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] Centaur CentaurHauls [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfff2fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfff3000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] Kernel/User page tables isolation: disabled [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbfff3 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f2310-0x000f231f] mapped at [ffff8800000f2310] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F22D0 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFF3430 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFCF60 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFF3470 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFF65F0 00690D (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFF5D10 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFF5CE0 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFF4C30 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 2023598324 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfff2fff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] PM: Registered nosave memory: [mem 0xbfff3000-0xbfffffff] [ 0.000000] PM: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.000000] PM: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 42 pages/cpu @ffff8801db200000 s134024 r8192 d29816 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935227 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6579092K/7863876K available (41761K kernel code, 6302K rwdata, 9052K rodata, 1864K init, 23696K bss, 1284784K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.411373] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.412619] pid_max: default: 32768 minimum: 301 [ 1.413454] ACPI: Core revision 20150930 [ 1.809432] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.810854] Security Framework initialized [ 1.811529] SELinux: Initializing. [ 1.812300] AppArmor: AppArmor disabled by boot time parameter [ 1.813246] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.814177] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.817763] Initializing cgroup subsys io [ 1.818383] Initializing cgroup subsys freezer [ 1.819103] Initializing cgroup subsys hugetlb [ 1.819794] Initializing cgroup subsys debug [ 1.820626] CPU: Physical Processor ID: 0 [ 1.822634] mce: CPU supports 32 MCE banks [ 1.823428] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.824447] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.825400] Spectre V2 : Mitigation: Full generic retpoline [ 1.828688] Freeing SMP alternatives memory: 48K [ 1.838766] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.950642] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.952370] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 2.040992] x86: Booting SMP configuration: [ 2.041758] .... node #0, CPUs: #1 [ 2.042622] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 2.047828] x86: Booted up 1 node, 2 CPUs [ 2.048914] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 2.054105] devtmpfs: initialized [ 2.064444] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 2.066004] futex hash table entries: 512 (order: 4, 65536 bytes) [ 2.067678] xor: automatically using best checksumming function: [ 2.079044] kworker/u4:0 (21) used greatest stack depth: 27920 bytes left [ 2.160654] avx : 23385.600 MB/sec [ 2.162352] RTC time: 4:43:33, date: 07/14/18 [ 2.166066] NET: Registered protocol family 16 [ 2.167271] schedtune: init normalization constants... [ 2.168022] schedtune: no energy model data [ 2.168726] schedtune: disabled! [ 2.201006] cpuidle: using governor ladder [ 2.230767] cpuidle: using governor menu [ 2.232354] ACPI: bus type PCI registered [ 2.232964] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 2.236163] PCI: Using configuration type 1 for base access [ 2.243801] kworker/u4:1 (45) used greatest stack depth: 27424 bytes left [ 2.680608] raid6: sse2x1 gen() 4613 MB/s [ 2.850593] raid6: sse2x1 xor() 2573 MB/s [ 3.020596] raid6: sse2x2 gen() 6929 MB/s [ 3.190573] raid6: sse2x2 xor() 3983 MB/s [ 3.360560] raid6: sse2x4 gen() 8614 MB/s [ 3.530556] raid6: sse2x4 xor() 5197 MB/s [ 3.700534] raid6: avx2x1 gen() 9319 MB/s [ 3.870520] raid6: avx2x2 gen() 14583 MB/s [ 4.040509] raid6: avx2x4 gen() 19057 MB/s [ 4.041299] raid6: using algorithm avx2x4 gen() 19057 MB/s [ 4.042095] raid6: using avx2x2 recovery algorithm [ 4.043499] ACPI: Added _OSI(Module Device) [ 4.044202] ACPI: Added _OSI(Processor Device) [ 4.044891] ACPI: Added _OSI(3.0 _SCP Extensions) [ 4.046234] ACPI: Added _OSI(Processor Aggregator Device) [ 4.073154] ACPI: Executed 2 blocks of module-level executable AML code [ 4.985102] ACPI: Interpreter enabled [ 4.986949] ACPI: (supports S0 S3 S4 S5) [ 4.988235] ACPI: Using IOAPIC for interrupt routing [ 4.989633] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug