INIT: Entering runlevel: 2 [[36minfo[39;49m] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-7,10.128.0.14' (ECDSA) to the list of known hosts. 2017/11/07 06:49:45 parsed 1 programs 2017/11/07 06:49:45 executed programs: 0 syzkaller login: [ 39.684117] IPVS: Creating netns size=2536 id=1 [ 39.700323] IPVS: Creating netns size=2536 id=2 [ 39.708138] IPVS: Creating netns size=2536 id=3 [ 39.738677] IPVS: Creating netns size=2536 id=4 [ 39.748987] IPVS: Creating netns size=2536 id=5 [ 39.782657] IPVS: Creating netns size=2536 id=6 [ 39.814992] IPVS: Creating netns size=2536 id=7 [ 39.835773] IPVS: Creating netns size=2536 id=8 2017/11/07 06:49:50 executed programs: 1215 2017/11/07 06:49:55 executed programs: 2252 [ 51.980663] kasan: CONFIG_KASAN_INLINE enabled [ 51.992985] BUG: spinlock bad magic on CPU#0, syz-executor6/11203 [ 51.992997] lock: 0xffff8801c43c4218, .magic: dead4eac, .owner: /-1, .owner_cpu: -1 [ 51.993005] CPU: 0 PID: 11203 Comm: syz-executor6 Not tainted 4.9.60-gdfe0a9b #81 [ 51.993007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.993018] ffff8801db207730 ffffffff81d91389 ffff8801c43c4218 ffff8801c4274800 [ 51.993025] 0000000000000001 0000000000000001 0000000000000000 ffff8801db207770 [ 51.993030] ffffffff8124856d ffffffff812238ae 0000000000000000 0000000000000000 [ 51.993032] Call Trace: [ 51.993045] [ 51.993045] [] dump_stack+0xc1/0x128 [ 51.993054] [] spin_dump+0x14d/0x280 [ 51.993060] [] ? __wake_up+0x1e/0x50 [ 51.993065] [] do_raw_spin_lock+0x174/0x1e0 [ 51.993075] [] _raw_spin_lock_irqsave+0x56/0x70 [ 51.993079] [] ? __wake_up+0x1e/0x50 [ 51.993084] [] __wake_up+0x1e/0x50 [ 51.993091] [] sg_rq_end_io+0x5dc/0xbb0 [ 51.993095] [] ? sg_release+0x1e0/0x1e0 [ 51.993103] [] ? blk_account_io_done+0xb4/0x860 [ 51.993110] [] ? sg_free_table_chained+0x71/0x80 [ 51.993114] [] ? sg_release+0x1e0/0x1e0 [ 51.993121] [] __blk_mq_end_request+0x54/0xc0 [ 51.993128] [] scsi_end_request+0x135/0x5c0 [ 51.993134] [] scsi_io_completion+0x15de/0x1730 [ 51.993140] [] ? scsi_unblock_requests+0x50/0x50 [ 51.993147] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 51.993152] [] scsi_finish_command+0x3b8/0x530 [ 51.993157] [] scsi_softirq_done+0x250/0x350 [ 51.993162] [] __blk_mq_complete_request+0x205/0x4b0 [ 51.993168] [] blk_mq_complete_request+0x65/0x80 [ 51.993173] [] scsi_mq_done+0xce/0x320 [ 51.993178] [] virtscsi_complete_cmd+0x5cf/0x7f0 [ 51.993182] [] ? virtscsi_remove+0x140/0x140 [ 51.993190] [] virtscsi_vq_done+0xc9/0x170 [ 51.993195] [] ? virtscsi_target_destroy+0x50/0x50 [ 51.993201] [] virtscsi_req_done+0xa7/0xd0 [ 51.993207] [] ? virtscsi_vq_done+0x170/0x170 [ 51.993214] [] vring_interrupt+0x109/0x150 [ 51.993219] [] ? vring_create_virtqueue+0x3f0/0x3f0 [ 51.993226] [] __handle_irq_event_percpu+0xef/0x800 [ 51.993231] [] handle_irq_event_percpu+0x74/0x150 [ 51.993236] [] ? __handle_irq_event_percpu+0x800/0x800 [ 51.993242] [] ? handle_irq_event+0x9f/0x140 [ 51.993247] [] handle_irq_event+0xa7/0x140 [ 51.993253] [] handle_edge_irq+0x1fa/0x8e0 [ 51.993261] [] handle_irq+0x24e/0x3b0 [ 51.993269] [] ? check_preemption_disabled+0x3b/0x200 [ 51.993275] [] do_IRQ+0x89/0x1b0 [ 51.993280] [] common_interrupt+0x8c/0x8c [ 51.993285] [] ? __do_softirq+0x1c5/0x951 [ 51.993289] [] ? __do_softirq+0x1be/0x951 [ 51.993296] [] irq_exit+0x165/0x190 [ 51.993302] [] smp_apic_timer_interrupt+0x7b/0xa0 [ 51.993307] [] apic_timer_interrupt+0x8c/0xa0 [ 51.993315] [ 51.993315] [] ? _raw_spin_unlock_irqrestore+0x5f/0x70 [ 51.993323] [] quarantine_reduce+0x191/0x1d0 [ 51.993328] [] kasan_kmalloc+0xca/0xe0 [ 51.993334] [] ? __split_vma.isra.42+0x171/0x750 [ 51.993339] [] kasan_slab_alloc+0x12/0x20 [ 51.993344] [] kmem_cache_alloc+0xba/0x290 [ 51.993348] [] __split_vma.isra.42+0x171/0x750 [ 51.993352] [] ? find_vma+0x30/0x150 [ 51.993357] [] do_munmap+0x24a/0xeb0 [ 51.993363] [] mmap_region+0x14d/0xfd0 [ 51.993371] [] ? selinux_mmap_addr+0x1f/0xf0 [ 51.993375] [] do_mmap+0x57b/0xbe0 [ 51.993388] [] vm_mmap_pgoff+0x16b/0x1b0 [ 51.993394] [] ? vma_is_stack_for_current+0xa0/0xa0 [ 51.993403] [] ? SyS_futex+0x22e/0x2d0 [ 51.993408] [] SyS_mmap_pgoff+0xd0/0x560 [ 51.993413] [] ? find_mergeable_anon_vma+0xd0/0xd0 [ 51.993420] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 51.993426] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 51.993432] [] SyS_mmap+0x16/0x20 [ 51.993437] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 52.501447] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 52.508785] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 52.514988] Dumping ftrace buffer: [ 52.518492] (ftrace buffer empty) [ 52.522171] Modules linked in: [ 52.525441] CPU: 1 PID: 11226 Comm: syz-executor1 Not tainted 4.9.60-gdfe0a9b #81 [ 52.533024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.542341] task: ffff8801c43ec800 task.stack: ffff8801c0c28000 [ 52.548359] RIP: 0010:[] [] __free_pages+0x21/0x80 [ 52.556595] RSP: 0018:ffff8801c0c2fab0 EFLAGS: 00010a07 [ 52.562008] RAX: dffffc0000000000 RBX: dead4ead00000000 RCX: 1ffff10038182003 [ 52.569244] RDX: 1bd5a9d5a0000003 RSI: 0000000000000001 RDI: dead4ead0000001c [ 52.576478] RBP: ffff8801c0c2fac0 R08: 0000000000000001 R09: 0000000000000000 [ 52.583714] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 52.590947] R13: 0000000000000020 R14: ffff8801c0c10000 R15: dffffc0000000000 [ 52.598182] FS: 00007f016c8e1700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 52.606371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.612223] CR2: 0000000020def000 CR3: 00000001c4198000 CR4: 00000000001406e0 [ 52.619458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.626694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.633930] Stack: [ 52.636044] ffff8801c43ec800 ffff8801c0c10158 ffff8801c0c2fb20 ffffffff8265fab1 [ 52.643997] ffff8801c0c10170 ffffed003818202b ffffed003818202e ffff8801c0c10168 [ 52.651956] dead4ead00000000 ffff8801c0c10140 0000000000000000 0000000000000000 [ 52.659905] Call Trace: [ 52.662459] [] sg_remove_scat.isra.20+0x1c1/0x2d0 [ 52.668921] [] sg_finish_rem_req+0x2b5/0x340 [ 52.674951] [] sg_new_read.isra.21+0x39/0x3e0 [ 52.681061] [] ? sg_get_rq_mark+0x142/0x190 [ 52.686995] [] sg_read+0x8a6/0x1400 [ 52.692247] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 52.698878] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.705853] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 52.713085] [] __vfs_read+0x103/0x670 [ 52.718499] [] ? __kernel_write+0x340/0x340 [ 52.724453] [] ? fsnotify+0x86/0xf30 [ 52.729781] [] ? fsnotify+0xf30/0xf30 [ 52.735198] [] ? avc_policy_seqno+0x9/0x20 [ 52.741049] [] ? selinux_file_permission+0x82/0x460 [ 52.747684] [] ? security_file_permission+0x89/0x1e0 [ 52.754400] [] ? rw_verify_area+0xe5/0x2b0 [ 52.760246] [] vfs_read+0x107/0x330 [ 52.765486] [] SyS_read+0xd9/0x1b0 [ 52.770638] [] ? vfs_copy_file_range+0x740/0x740 [ 52.777016] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.783822] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 52.790368] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 52.796911] Code: ff 66 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 48 89 fb 48 83 c7 1c 48 89 fa 48 83 ec 08 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 3d [ 52.823277] RIP [] __free_pages+0x21/0x80 [ 52.829157] RSP [ 52.833526] ---[ end trace 160a9f0184abf71e ]--- [ 52.838280] Kernel panic - not syncing: Fatal exception [ 52.844044] Dumping ftrace buffer: [ 52.847552] (ftrace buffer empty) [ 52.851229] Kernel Offset: disabled [ 52.854820] Rebooting in 86400 seconds..