[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 34.823999] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 35.378318] random: sshd: uninitialized urandom read (32 bytes read) [ 35.764468] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.184619] random: sshd: uninitialized urandom read (32 bytes read) [ 47.544345] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. [ 53.030516] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/23 00:12:00 parsed 1 programs [ 54.433786] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/23 00:12:03 executed programs: 0 [ 56.141995] IPVS: ftp: loaded support on port[0] = 21 2018/07/23 00:12:08 executed programs: 293 [ 64.332877] list_del corruption. prev->next should be ffff8801bbb10090, but was 00000000bbb10090 [ 64.342079] ------------[ cut here ]------------ [ 64.346850] kernel BUG at lib/list_debug.c:53! [ 64.351540] invalid opcode: 0000 [#1] SMP PTI [ 64.356110] CPU: 1 PID: 4641 Comm: syz-executor0 Not tainted 4.18.0-rc5+ #29 [ 64.363303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.372689] RIP: 0010:__list_del_entry_valid+0x37c/0x440 [ 64.378133] Code: 48 c7 81 80 0c 00 00 00 00 00 00 c7 81 20 03 00 00 00 00 00 00 48 c7 c7 9e fd dc 8a 31 c0 48 8b 75 c0 4c 89 e2 e8 94 aa 2b fd <0f> 0b 66 90 eb fe 44 89 f7 e8 16 5c ae fd e9 88 fd ff ff 48 85 db [ 64.397504] RSP: 0018:ffff8801c0b6f788 EFLAGS: 00010246 [ 64.402898] RAX: 0000000000000054 RBX: 0000000000000000 RCX: fd2e84893d73f200 [ 64.410184] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea000cbef440 [ 64.417493] RBP: ffff8801c0b6f7e0 R08: 0000000000480020 R09: 0000000000000002 [ 64.424780] R10: 0000000000000000 R11: ffffffff8675bad0 R12: 00000000bbb10090 [ 64.432512] R13: ffff8801cdffc4b0 R14: 00000000f50000a5 R15: 00000000d76000a8 [ 64.439832] FS: 000000000193a940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 64.448082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.454009] CR2: 0000000000704914 CR3: 000000019ce9e000 CR4: 00000000001406e0 [ 64.461314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.468606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.475891] Call Trace: [ 64.478531] __free_vmap_area+0x2f5/0x650 [ 64.482718] __purge_vmap_area_lazy+0x2c1/0x3b0 [ 64.487431] free_vmap_area_noflush+0x1fa/0x230 [ 64.492126] remove_vm_area+0x3b9/0x460 [ 64.496133] __vunmap+0x34c/0x5d0 [ 64.499605] vfree+0x79/0x170 [ 64.502728] do_ip6t_get_ctl+0x115f/0x11f0 [ 64.507027] ? compat_do_ip6t_set_ctl+0x3ec0/0x3ec0 [ 64.512115] nf_getsockopt+0x481/0x4e0 [ 64.516049] ipv6_getsockopt+0x268/0x4a0 [ 64.520172] ? compat_ipv6_setsockopt+0x4c0/0x4c0 [ 64.525077] tcp_getsockopt+0x1c6/0x1f0 [ 64.529113] ? tcp_get_timestamping_opt_stats+0x14c0/0x14c0 [ 64.534856] sock_common_getsockopt+0x13f/0x180 [ 64.539542] ? sock_recv_errqueue+0x9d0/0x9d0 [ 64.544097] __sys_getsockopt+0x48c/0x550 [ 64.548320] __x64_sys_getsockopt+0x15d/0x1c0 [ 64.552883] ? __ia32_sys_setsockopt+0x1c0/0x1c0 [ 64.557671] do_syscall_64+0x15b/0x230 [ 64.561656] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 64.566872] RIP: 0033:0x4585aa [ 64.570061] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 1d 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fa 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 64.589417] RSP: 002b:0000000000a3e328 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 64.597158] RAX: ffffffffffffffda RBX: 0000000000a3e350 RCX: 00000000004585aa [ 64.604433] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 64.611705] RBP: 0000000000705d60 R08: 0000000000a3e34c R09: 0000000000004000 [ 64.618980] R10: 0000000000a3e450 R11: 0000000000000212 R12: 0000000000000003 [ 64.626256] R13: 0000000000000000 R14: 0000000000000029 R15: 00000000007056a0 [ 64.633544] Modules linked in: [ 64.636749] Dumping ftrace buffer: [ 64.640285] (ftrace buffer empty) [ 64.644157] ---[ end trace c9dd1de9cc207715 ]--- [ 64.649056] RIP: 0010:__list_del_entry_valid+0x37c/0x440 [ 64.654642] Code: 48 c7 81 80 0c 00 00 00 00 00 00 c7 81 20 03 00 00 00 00 00 00 48 c7 c7 9e fd dc 8a 31 c0 48 8b 75 c0 4c 89 e2 e8 94 aa 2b fd <0f> 0b 66 90 eb fe 44 89 f7 e8 16 5c ae fd e9 88 fd ff ff 48 85 db [ 64.674151] RSP: 0018:ffff8801c0b6f788 EFLAGS: 00010246 [ 64.679592] RAX: 0000000000000054 RBX: 0000000000000000 RCX: fd2e84893d73f200 [ 64.686953] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea000cbef440 [ 64.694340] RBP: ffff8801c0b6f7e0 R08: 0000000000480020 R09: 0000000000000002 [ 64.701721] R10: 0000000000000000 R11: ffffffff8675bad0 R12: 00000000bbb10090 [ 64.709109] R13: ffff8801cdffc4b0 R14: 00000000f50000a5 R15: 00000000d76000a8 [ 64.716514] FS: 000000000193a940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 64.724814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.730784] CR2: 0000000000704914 CR3: 000000019ce9e000 CR4: 00000000001406e0 [ 64.738157] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.745552] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.752909] Kernel panic - not syncing: Fatal exception [ 64.758780] Dumping ftrace buffer: [ 64.762322] (ftrace buffer empty) [ 64.766036] Kernel Offset: disabled [ 64.769685] Rebooting in 86400 seconds..