[ 21.401335] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.037982] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 25.444079] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 26.445378] random: sshd: uninitialized urandom read (32 bytes read, 121 bits of entropy available) [ 26.617811] random: sshd: uninitialized urandom read (32 bytes read, 125 bits of entropy available) [ 30.424759] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 32.133007] kasan: CONFIG_KASAN_INLINE enabled[ 32.137527] BUG: spinlock bad magic on CPU#1, syzkaller084253/3789 [ 32.137537] lock: 0xffff8800aad88018, .magic: dead4eac, .owner: /-1, .owner_cpu: -1 [ 32.137544] CPU: 1 PID: 3789 Comm: syzkaller084253 Not tainted 4.4.120-gd63fdf6 #28 [ 32.137547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.137550] 0000000000000000 030e976e9749cc1a ffff8801db307760 ffffffff81d0408d [ 32.137556] ffff8800aad88018 ffff8801c6048000 0000000000000001 0000000000000001 [ 32.137562] 0000000000000000 ffff8801db3077a0 ffffffff81246aad ffff8801d51d0d80 [ 32.137568] Call Trace: [ 32.137569] [] dump_stack+0xc1/0x124 [ 32.137599] [] spin_dump+0x14d/0x280 [ 32.137609] [] ? __blk_mq_free_request+0xe8/0x130 [ 32.137614] [] do_raw_spin_lock+0x228/0x2c0 [ 32.137625] [] _raw_spin_lock_irqsave+0x56/0x70 [ 32.137634] [] ? __wake_up+0x1e/0x50 [ 32.137639] [] __wake_up+0x1e/0x50 [ 32.137650] [] sg_rq_end_io+0x5dc/0xbc0 [ 32.137656] [] ? sg_release+0x1f0/0x1f0 [ 32.137662] [] ? blk_account_io_done+0xb1/0x860 [ 32.137667] [] ? blk_update_request+0x64e/0xce0 [ 32.137672] [] ? sg_release+0x1f0/0x1f0 [ 32.137679] [] __blk_mq_end_request+0x54/0xc0 [ 32.137687] [] scsi_end_request+0x135/0x5b0 [ 32.137695] [] scsi_io_completion+0x15c3/0x1710 [ 32.137702] [] ? scsi_unblock_requests+0x50/0x50 [ 32.137707] [] scsi_finish_command+0x3af/0x520 [ 32.137713] [] scsi_softirq_done+0x250/0x350 [ 32.137719] [] __blk_mq_complete_request+0x205/0x500 [ 32.137726] [] blk_mq_complete_request+0x5b/0x70 [ 32.137731] [] scsi_mq_done+0xfb/0x3c0 [ 32.137738] [] virtscsi_complete_cmd+0x5cf/0x7f0 [ 32.137745] [] ? virtscsi_remove+0x140/0x140 [ 32.137751] [] virtscsi_vq_done+0xc9/0x170 [ 32.137757] [] ? virtscsi_target_destroy+0x50/0x50 [ 32.137763] [] ? process_cpu_nsleep+0x30/0x30 [ 32.137769] [] virtscsi_req_done+0xa7/0xd0 [ 32.137774] [] ? virtscsi_vq_done+0x170/0x170 [ 32.137781] [] vring_interrupt+0x109/0x150 [ 32.137786] [] ? vring_new_virtqueue+0x7c0/0x7c0 [ 32.137794] [] handle_irq_event_percpu+0xf1/0x960 [ 32.137800] [] handle_irq_event+0xa7/0x140 [ 32.137806] [] handle_edge_irq+0x1fa/0x8e0 [ 32.137814] [] handle_irq+0x250/0x3a0 [ 32.137822] [] ? check_preemption_disabled+0x3b/0x200 [ 32.137827] [] ? trace_hardirqs_off+0xd/0x10 [ 32.137834] [] do_IRQ+0x89/0x1b0 [ 32.137840] [] common_interrupt+0xa0/0xa0 [ 32.137846] [] ? __do_softirq+0x1e1/0xa38 [ 32.137851] [] ? __do_softirq+0x1da/0xa38 [ 32.137862] [] irq_exit+0x119/0x140 [ 32.137869] [] smp_apic_timer_interrupt+0x7b/0xa0 [ 32.137874] [] apic_timer_interrupt+0xa0/0xb0 [ 32.137876] [] ? console_unlock+0x790/0xa00 [ 32.137887] [] ? console_unlock+0x79a/0xa00 [ 32.137892] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 32.137897] [] ? vprintk_emit+0x323/0x850 [ 32.137903] [] vprintk_emit+0x55e/0x850 [ 32.137909] [] vprintk+0x28/0x30 [ 32.137913] [] vprintk_default+0x1d/0x30 [ 32.137921] [] printk+0xb7/0xe2 [ 32.137928] [] ? pm_qos_get_value.part.4+0xb/0xb [ 32.137934] [] ? kasan_die_handler+0x25/0x40 [ 32.137939] [] kasan_die_handler+0x31/0x40 [ 32.137945] [] notifier_call_chain+0x95/0x1b0 [ 32.137951] [] atomic_notifier_call_chain+0x7b/0x140 [ 32.137957] [] ? __atomic_notifier_call_chain+0x150/0x150 [ 32.137963] [] notify_die+0xdf/0x160 [ 32.137969] [] ? atomic_notifier_call_chain+0x140/0x140 [ 32.137975] [] ? __free_pages+0x21/0x90 [ 32.137981] [] ? search_exception_tables+0x31/0x40 [ 32.137986] [] do_general_protection+0x2f7/0x390 [ 32.137992] [] general_protection+0x28/0x30 [ 32.137998] [] ? sg_remove_scat.isra.17+0x19b/0x2d0 [ 32.138004] [] ? __free_pages+0x21/0x90 [ 32.138011] [] sg_remove_scat.isra.17+0x1c1/0x2d0 [ 32.138017] [] sg_finish_rem_req+0x2b5/0x340 [ 32.138023] [] sg_new_read.isra.18+0x17d/0x3c0 [ 32.138030] [] sg_read+0x8bc/0x1490 [ 32.138038] [] ? __check_object_size+0x154/0x35b [ 32.138045] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 32.138053] [] ? fsnotify+0xee0/0xee0 [ 32.138062] [] ? avc_policy_seqno+0x9/0x20 [ 32.138069] [] do_loop_readv_writev+0x141/0x1e0 [ 32.138076] [] ? security_file_permission+0x89/0x1e0 [ 32.138082] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 32.138089] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 32.138094] [] do_readv_writev+0x5dd/0x6e0 [ 32.138099] [] ? vfs_write+0x530/0x530 [ 32.138105] [] ? sg_ioctl+0x29f0/0x29f0 [ 32.138111] [] ? __vfs_write+0x10b/0x450 [ 32.138116] [] ? quarantine_put+0xab/0x180 [ 32.138123] [] ? __fget+0x213/0x3b0 [ 32.138129] [] ? __fget+0x23a/0x3b0 [ 32.138134] [] ? __fget+0x47/0x3b0 [ 32.138139] [] vfs_readv+0x78/0xb0 [ 32.138145] [] SyS_readv+0xd9/0x240 [ 32.138150] [] ? rw_copy_check_uvector+0x2b0/0x2b0 [ 32.138156] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 32.138163] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 32.145337] kasan: CONFIG_KASAN_INLINE enabledkasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 32.145359] Dumping ftrace buffer: [ 32.145363] (ftrace buffer empty) [ 32.145365] Modules linked in: [ 32.145375] CPU: 0 PID: 3796 Comm: syzkaller084253 Not tainted 4.4.120-gd63fdf6 #28 [ 32.145379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.145383] task: ffff8801d9539800 task.stack: ffff8800bb3d8000 [ 32.145386] RIP: 0010:[] [] __free_pages+0x21/0x90 [ 32.145405] RSP: 0018:ffff8800bb3df9f0 EFLAGS: 00010a07 [ 32.145409] RAX: dffffc0000000000 RBX: dead4ead00000000 RCX: ffffffff825b85eb [ 32.145413] RDX: 1bd5a9d5a0000003 RSI: 0000000000000006 RDI: dead4ead0000001c [ 32.145416] RBP: ffff8800bb3dfa00 R08: 0000000048000000 R09: 0000000000001e30 [ 32.145420] R10: 0000000000002100 R11: 1ffff1001767bf1c R12: 0000000000000004 [ 32.145423] R13: 0000000000000020 R14: ffff8801d8e9a100 R15: dffffc0000000000 [ 32.145429] FS: 00007f5f62974700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 32.145432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.145436] CR2: 0000000020a2afe3 CR3: 00000001cfa20000 CR4: 0000000000160670 [ 32.145443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.145446] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.145447] Stack: [ 32.145449] 0000000000000246 ffff8801d8e9a258 ffff8800bb3dfa60 ffffffff825b8611 [ 32.145457] ffff8801d8e9a270 ffffed003b1d344b ffffed003b1d344e ffff8801d8e9a268 [ 32.145465] dead4ead00000000 ffff8801d8e9a240 0000000000000000 0000000000000000 [ 32.145472] Call Trace: [ 32.145487] [] sg_remove_scat.isra.17+0x1c1/0x2d0 [ 32.145493] [] sg_finish_rem_req+0x2b5/0x340 [ 32.145500] [] sg_new_read.isra.18+0x17d/0x3c0 [ 32.145506] [] sg_read+0x8bc/0x1490 [ 32.145516] [] ? __check_object_size+0x154/0x35b [ 32.145522] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 32.145530] [] ? fsnotify+0xee0/0xee0 [ 32.145541] [] ? avc_policy_seqno+0x9/0x20 [ 32.145549] [] do_loop_readv_writev+0x141/0x1e0 [ 32.145556] [] ? security_file_permission+0x89/0x1e0 [ 32.145562] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 32.145569] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 32.145574] [] do_readv_writev+0x5dd/0x6e0 [ 32.145579] [] ? vfs_write+0x530/0x530 [ 32.145585] [] ? sg_ioctl+0x29f0/0x29f0 [ 32.145591] [] ? __vfs_write+0x10b/0x450 [ 32.145599] [] ? __fget+0x47/0x3b0 [ 32.145605] [] ? avc_policy_seqno+0x9/0x20 [ 32.145610] [] ? __fget+0x213/0x3b0 [ 32.145616] [] ? __fget+0x23a/0x3b0 [ 32.145621] [] ? __fget+0x47/0x3b0 [ 32.145626] [] vfs_readv+0x78/0xb0 [ 32.145631] [] SyS_readv+0xd9/0x240 [ 32.145637] [] ? rw_copy_check_uvector+0x2b0/0x2b0 [ 32.145645] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 32.145654] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 32.145656] Code: c6 a0 0c 00 e9 78 fd ff ff 90 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 48 89 fb 48 83 c7 1c 48 89 fa 48 83 ec 08 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 49 [ 32.145756] RIP [] __free_pages+0x21/0x90 [ 32.145763] RSP [ 32.145770] ---[ end trace 8cf76e71675b5c3f ]--- [ 32.145774] Kernel panic - not syncing: Fatal exception [ 32.153638] Dumping ftrace buffer: [ 32.153641] (ftrace buffer empty) [ 32.153644] Kernel Offset: disabled [ 33.116596] Rebooting in 86400 seconds..