[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.528749] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.062720] random: sshd: uninitialized urandom read (32 bytes read) [ 37.335763] random: sshd: uninitialized urandom read (32 bytes read) [ 38.699429] random: sshd: uninitialized urandom read (32 bytes read) [ 38.942967] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. [ 44.396293] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/16 04:21:20 parsed 1 programs [ 45.879346] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/16 04:21:22 executed programs: 0 [ 47.348505] IPVS: ftp: loaded support on port[0] = 21 2018/07/16 04:21:27 executed programs: 326 [ 54.995915] list_del corruption. prev->next should be ffff8801a9d8a090, but was 00000000a9d8a090 [ 55.005111] ------------[ cut here ]------------ [ 55.009878] kernel BUG at lib/list_debug.c:53! [ 55.014598] invalid opcode: 0000 [#1] SMP PTI [ 55.019139] CPU: 1 PID: 4604 Comm: syz-executor0 Not tainted 4.18.0-rc4+ #27 [ 55.026325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.035703] RIP: 0010:__list_del_entry_valid+0x37c/0x440 [ 55.041145] Code: 48 c7 81 80 0c 00 00 00 00 00 00 c7 81 20 03 00 00 00 00 00 00 48 c7 c7 ce f6 dc 8a 31 c0 48 8b 75 c0 4c 89 e2 e8 64 ae 2b fd <0f> 0b 66 90 eb fe 44 89 f7 e8 16 60 ae fd e9 88 fd ff ff 48 85 db [ 55.060915] RSP: 0018:ffff8801bdaef780 EFLAGS: 00010246 [ 55.066299] RAX: 0000000000000054 RBX: 0000000000000000 RCX: a965be8df16a4300 [ 55.073573] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea000cbef440 [ 55.080841] RBP: ffff8801bdaef7d8 R08: 0000000000480020 R09: 0000000000000002 [ 55.088120] R10: 0000000000000000 R11: ffffffff8675b2c0 R12: 00000000a9d8a090 [ 55.095395] R13: ffff8801d0286870 R14: 00000000984000a6 R15: 0000000083e000a9 [ 55.102664] FS: 000000000150e940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 55.110888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.116764] CR2: 0000000000702138 CR3: 000000019ce28000 CR4: 00000000001406e0 [ 55.124045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.131326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.138603] Call Trace: [ 55.141211] __free_vmap_area+0x2f5/0x650 [ 55.145364] __purge_vmap_area_lazy+0x2c1/0x3b0 [ 55.150081] free_vmap_area_noflush+0x1fa/0x230 [ 55.154769] remove_vm_area+0x3b9/0x460 [ 55.158763] __vunmap+0x34c/0x5d0 [ 55.162232] vfree+0x79/0x170 [ 55.165367] do_ipt_get_ctl+0x1150/0x11e0 [ 55.169574] ? compat_do_ipt_set_ctl+0x3df0/0x3df0 [ 55.174526] nf_getsockopt+0x481/0x4e0 [ 55.178443] ip_getsockopt+0x297/0x3f0 [ 55.182348] ? compat_ip_setsockopt+0x380/0x380 [ 55.187052] tcp_getsockopt+0x1c6/0x1f0 [ 55.191089] ? tcp_get_timestamping_opt_stats+0x14c0/0x14c0 [ 55.196832] sock_common_getsockopt+0x13f/0x180 [ 55.201515] ? sock_recv_errqueue+0x9d0/0x9d0 [ 55.206036] __sys_getsockopt+0x48c/0x550 [ 55.210225] __x64_sys_getsockopt+0x15d/0x1c0 [ 55.214746] ? __ia32_sys_setsockopt+0x1c0/0x1c0 [ 55.219530] do_syscall_64+0x15b/0x230 [ 55.223435] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 55.228621] RIP: 0033:0x4585aa [ 55.231811] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 1d 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fa 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 55.251187] RSP: 002b:0000000000a3e328 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 55.258902] RAX: ffffffffffffffda RBX: 0000000000a3e350 RCX: 00000000004585aa [ 55.266184] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.273464] RBP: 0000000000707f20 R08: 0000000000a3e34c R09: 0000000000004000 [ 55.280734] R10: 0000000000a3e450 R11: 0000000000000202 R12: 0000000000000003 [ 55.288024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000706420 [ 55.295330] Modules linked in: [ 55.298525] Dumping ftrace buffer: [ 55.302065] (ftrace buffer empty) [ 55.305940] ---[ end trace 8da8d135aeb93b7b ]--- [ 55.310832] RIP: 0010:__list_del_entry_valid+0x37c/0x440 [ 55.316383] Code: 48 c7 81 80 0c 00 00 00 00 00 00 c7 81 20 03 00 00 00 00 00 00 48 c7 c7 ce f6 dc 8a 31 c0 48 8b 75 c0 4c 89 e2 e8 64 ae 2b fd <0f> 0b 66 90 eb fe 44 89 f7 e8 16 60 ae fd e9 88 fd ff ff 48 85 db [ 55.336571] RSP: 0018:ffff8801bdaef780 EFLAGS: 00010246 [ 55.342015] RAX: 0000000000000054 RBX: 0000000000000000 RCX: a965be8df16a4300 [ 55.349428] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea000cbef440 [ 55.356788] RBP: ffff8801bdaef7d8 R08: 0000000000480020 R09: 0000000000000002 [ 55.364150] R10: 0000000000000000 R11: ffffffff8675b2c0 R12: 00000000a9d8a090 [ 55.371514] R13: ffff8801d0286870 R14: 00000000984000a6 R15: 0000000083e000a9 [ 55.378893] FS: 000000000150e940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 55.387233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.393202] CR2: 0000000000702138 CR3: 000000019ce28000 CR4: 00000000001406e0 [ 55.400575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.407938] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.415296] Kernel panic - not syncing: Fatal exception [ 55.421313] Dumping ftrace buffer: [ 55.424865] (ftrace buffer empty) [ 55.428567] Kernel Offset: disabled [ 55.432209] Rebooting in 86400 seconds..