[ 16.502370] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.066327] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 21.566478] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 22.435035] random: sshd: uninitialized urandom read (32 bytes read, 109 bits of entropy available) [ 22.604369] random: sshd: uninitialized urandom read (32 bytes read, 113 bits of entropy available) Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. [ 28.012567] random: sshd: uninitialized urandom read (32 bytes read, 121 bits of entropy available) executing program executing program [ 28.119277] [ 28.120946] ===================================== [ 28.125752] [ BUG: bad unlock balance detected! ] [ 28.130558] 4.4.107-g610c835 #4 Not tainted [ 28.134842] ------------------------------------- [ 28.139646] syzkaller726085/3320 is trying to release lock (mrt_lock) at: [ 28.146763] [] ipmr_mfc_seq_stop+0xe4/0x140 [ 28.152606] but there are no more locks to release! [ 28.157582] [ 28.157582] other info that might help us debug this: [ 28.164209] 1 lock held by syzkaller726085/3320: [ 28.168948] #0: (&p->lock){+.+.+.}, at: [] seq_read+0xdd/0x1270 [ 28.177284] [ 28.177284] stack backtrace: [ 28.181744] CPU: 0 PID: 3320 Comm: syzkaller726085 Not tainted 4.4.107-g610c835 #4 [ 28.189421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.198739] 0000000000000000 69081fd5c1abb98e ffff8800b5027860 ffffffff81d0457d [ 28.206685] ffffffff8476ab98 ffff8801d13717c0 ffffffff833c77d4 ffffffff8476ab98 [ 28.214631] ffff8801d1372008 ffff8800b5027890 ffffffff812301a4 dffffc0000000000 [ 28.222573] Call Trace: [ 28.225126] [] dump_stack+0xc1/0x124 [ 28.230455] [] ? ipmr_mfc_seq_stop+0xe4/0x140 [ 28.236564] [] print_unlock_imbalance_bug+0x174/0x1a0 [ 28.243365] [] lock_release+0x72a/0xc10 [ 28.248954] [] ? memcpy+0x45/0x50 [ 28.254021] [] ? ipmr_mfc_seq_stop+0xe4/0x140 [ 28.260135] [] _raw_read_unlock+0x1a/0x50 [ 28.265896] [] ipmr_mfc_seq_stop+0xe4/0x140 [ 28.271830] [] traverse+0x3a7/0x900 [ 28.277069] [] ? seq_buf_alloc+0x80/0x80 [ 28.282741] [] seq_read+0x7ea/0x1270 [ 28.288069] [] ? seq_lseek+0x3c0/0x3c0 [ 28.293573] [] ? seq_lseek+0x3c0/0x3c0 [ 28.299074] [] proc_reg_read+0xef/0x170 [ 28.304660] [] ? proc_reg_write+0x170/0x170 [ 28.310598] [] __vfs_read+0x103/0x440 [ 28.316013] [] ? vfs_iter_write+0x2d0/0x2d0 [ 28.321946] [] ? fsnotify+0x5ad/0xee0 [ 28.327357] [] ? fsnotify+0xee0/0xee0 [ 28.332772] [] ? avc_policy_seqno+0x9/0x20 [ 28.338620] [] ? selinux_file_permission+0x348/0x460 [ 28.345336] [] ? security_file_permission+0x89/0x1e0 [ 28.352053] [] ? rw_verify_area+0x100/0x2f0 [ 28.357987] [] vfs_read+0x123/0x3a0 [ 28.363227] [] SyS_pread64+0x13f/0x170 executing program [ 28.368726] [] ? SyS_write+0x1b0/0x1b0 [ 28.374247] [] sys32_pread+0x39/0x50 [ 28.379584] [] ? sys32_waitpid+0x30/0x30 [ 28.385268] [] do_fast_syscall_32+0x314/0x890 [ 28.391377] [] sysenter_flags_fixed+0xd/0x17