[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.098379] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.056168] random: sshd: uninitialized urandom read (32 bytes read) [ 23.339060] random: sshd: uninitialized urandom read (32 bytes read) [ 24.090819] random: sshd: uninitialized urandom read (32 bytes read) [ 36.388540] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. [ 41.934468] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 42.025462] WARNING: CPU: 1 PID: 4505 at net/ipv4/tcp_input.c:2212 tcp_mark_head_lost+0x8ee/0xa70 [ 42.034594] Kernel panic - not syncing: panic_on_warn set ... [ 42.034594] [ 42.041948] CPU: 1 PID: 4505 Comm: syz-executor340 Not tainted 4.17.0-rc2+ #31 [ 42.049297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.058637] Call Trace: [ 42.061215] dump_stack+0x1b9/0x294 [ 42.064826] ? dump_stack_print_info.cold.2+0x52/0x52 [ 42.070003] ? tcp_mark_head_lost+0x8b0/0xa70 [ 42.074488] panic+0x22f/0x4de [ 42.077669] ? add_taint.cold.5+0x16/0x16 [ 42.081799] ? __warn.cold.8+0x148/0x1b3 [ 42.085842] ? __warn.cold.8+0x117/0x1b3 [ 42.089887] ? tcp_mark_head_lost+0x8ee/0xa70 [ 42.094369] __warn.cold.8+0x163/0x1b3 [ 42.098246] ? tcp_mark_head_lost+0x8ee/0xa70 [ 42.102727] report_bug+0x252/0x2d0 [ 42.106339] do_error_trap+0x1de/0x490 [ 42.110209] ? math_error+0x420/0x420 [ 42.113997] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 42.119516] ? tcp_rate_skb_delivered+0x2d0/0x3a0 [ 42.124346] ? tcp_sacktag_walk+0xc5d/0x14a0 [ 42.128743] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 42.133757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.138596] do_invalid_op+0x1b/0x20 [ 42.142297] invalid_op+0x14/0x20 [ 42.145735] RIP: 0010:tcp_mark_head_lost+0x8ee/0xa70 [ 42.150817] RSP: 0018:ffff8801d96970b0 EFLAGS: 00010293 [ 42.156163] RAX: ffff8801acd82500 RBX: 0000000000000008 RCX: ffffffff864ab53c [ 42.163413] RDX: 0000000000000000 RSI: ffffffff864ab63e RDI: 0000000000000004 [ 42.170667] RBP: ffff8801d9697138 R08: ffff8801acd82500 R09: ffff8801d96974e8 [ 42.177920] R10: 0000000002814086 R11: ffff88021fff8057 R12: 0000000000000007 [ 42.185189] R13: ffff8801c52d4100 R14: dffffc0000000000 R15: 0000000000000005 [ 42.192452] ? tcp_mark_head_lost+0x7ec/0xa70 [ 42.196932] ? tcp_mark_head_lost+0x8ee/0xa70 [ 42.201422] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 42.206962] tcp_fastretrans_alert+0x1ff8/0x2850 [ 42.211703] tcp_ack+0x2c48/0x5510 [ 42.215234] ? tcp_fastretrans_alert+0x2850/0x2850 [ 42.220149] ? skb_scrub_packet+0x580/0x580 [ 42.224453] ? graph_lock+0x170/0x170 [ 42.228236] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.233755] ? ipv4_mtu+0x375/0x580 [ 42.237363] ? kasan_check_write+0x14/0x20 [ 42.241582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.247102] ? tcp_established_options+0x36b/0x5a0 [ 42.252014] ? tcp_select_initial_window+0x3a0/0x3a0 [ 42.257106] ? graph_lock+0x170/0x170 [ 42.260890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.266409] ? tcp_parse_options+0x1c1/0xe30 [ 42.270804] ? sched_clock_cpu+0x1b/0x180 [ 42.274935] tcp_rcv_established+0x5b1/0x2010 [ 42.279418] ? tcp_data_queue+0x45e0/0x45e0 [ 42.283726] ? lock_downgrade+0x8e0/0x8e0 [ 42.287859] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 42.292855] ? ipv4_dst_check+0x1d5/0x260 [ 42.296986] ? ipv4_sysctl_rtcache_flush+0xa0/0xa0 [ 42.301901] ? __local_bh_enable_ip+0x161/0x230 [ 42.306557] tcp_v4_do_rcv+0x615/0x8c0 [ 42.310429] __release_sock+0x12f/0x3a0 [ 42.314386] release_sock+0xa4/0x2b0 [ 42.318082] ? __release_sock+0x3a0/0x3a0 [ 42.322212] ? __local_bh_enable_ip+0x161/0x230 [ 42.326863] ? lock_sock_nested+0xe7/0x120 [ 42.331081] tcp_sendmsg+0x3a/0x50 [ 42.334604] inet_sendmsg+0x19f/0x690 [ 42.338385] ? ipip_gro_receive+0x100/0x100 [ 42.342695] ? security_socket_sendmsg+0x94/0xc0 [ 42.347437] ? ipip_gro_receive+0x100/0x100 [ 42.351758] sock_sendmsg+0xd5/0x120 [ 42.355480] sock_write_iter+0x35a/0x5a0 [ 42.359529] ? sock_sendmsg+0x120/0x120 [ 42.363495] ? __might_sleep+0x95/0x190 [ 42.367453] do_iter_readv_writev+0x859/0xa50 [ 42.371934] ? vfs_dedupe_file_range+0xa00/0xa00 [ 42.376672] ? rw_verify_area+0x118/0x360 [ 42.380801] do_iter_write+0x185/0x5f0 [ 42.384671] ? dup_iter+0x270/0x270 [ 42.388277] ? vfs_writev+0x255/0x330 [ 42.392075] vfs_writev+0x1c7/0x330 [ 42.395708] ? vfs_iter_write+0xb0/0xb0 [ 42.399665] ? lock_downgrade+0x8e0/0x8e0 [ 42.403796] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 42.409317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.414832] ? __fdget_pos+0xd6/0x1e0 [ 42.418612] ? __fdget_raw+0x20/0x20 [ 42.422312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.427833] ? __sys_setsockopt+0x24f/0x390 [ 42.432136] do_writev+0x112/0x2f0 [ 42.435662] ? vfs_writev+0x330/0x330 [ 42.439445] ? __ia32_sys_fallocate+0xf0/0xf0 [ 42.443929] __x64_sys_writev+0x75/0xb0 [ 42.447889] do_syscall_64+0x1b1/0x800 [ 42.451763] ? syscall_return_slowpath+0x5c0/0x5c0 [ 42.456674] ? syscall_return_slowpath+0x30f/0x5c0 [ 42.461587] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 42.466937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.471762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 42.476935] RIP: 0033:0x440219 [ 42.480371] RSP: 002b:00007ffc05b87b98 EFLAGS: 00000217 ORIG_RAX: 0000000000000014 [ 42.488061] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440219 [ 42.495311] RDX: 0000000000000001 RSI: 00000000200006c0 RDI: 0000000000000003 [ 42.502561] RBP: 00000000006cb018 R08: 0000000000000010 R09: 0000000000000010 [ 42.509814] R10: 0000000000000008 R11: 0000000000000217 R12: 0000000000401b40 [ 42.517064] R13: 0000000000401bd0 R14: 0000000000000000 R15: 0000000000000000 [ 42.524868] Dumping ftrace buffer: [ 42.528485] (ftrace buffer empty) [ 42.532192] Kernel Offset: disabled [ 42.535803] Rebooting in 86400 seconds..