[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.861645] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.859588] random: sshd: uninitialized urandom read (32 bytes read) [ 25.213172] random: sshd: uninitialized urandom read (32 bytes read) [ 25.745189] random: sshd: uninitialized urandom read (32 bytes read) [ 28.162944] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. [ 33.908294] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 33.987546] BUG: unable to handle kernel paging request at ffffeafff9058020 [ 33.994957] IP: [] page_remove_rmap+0x37/0x6d0 [ 34.001254] PGD 0 [ 34.003248] [ 34.004880] Oops: 0000 [#1] PREEMPT SMP KASAN [ 34.009354] Dumping ftrace buffer: [ 34.012870] (ftrace buffer empty) [ 34.016562] Modules linked in: [ 34.019924] CPU: 1 PID: 3788 Comm: syz-executor000 Not tainted 4.9.122-g54068d6 #26 [ 34.027704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.037043] task: ffff8801b977e000 task.stack: ffff8801b8760000 [ 34.043088] RIP: 0010:[] [] page_remove_rmap+0x37/0x6d0 [ 34.051784] RSP: 0018:ffff8801b8767948 EFLAGS: 00010246 [ 34.057214] RAX: dffffc0000000000 RBX: ffffeafff9058000 RCX: 0000000000000000 [ 34.064467] RDX: 1ffffd5fff20b004 RSI: ffffffff814f5918 RDI: ffffeafff9058000 [ 34.071722] RBP: ffff8801b8767970 R08: 0000000000033ac0 R09: 0000000000000001 [ 34.079023] R10: ffff8801b977e000 R11: 0000000000000001 R12: ffff8801b8767c08 [ 34.086279] R13: ffffeafff9058020 R14: ffffeafff9058000 R15: 0000000000000001 [ 34.093537] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 34.101832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.107696] CR2: ffffeafff9058020 CR3: 00000001bff3c000 CR4: 00000000001606f0 [ 34.114951] Stack: [ 34.117270] ffffeafff9058020 ffff8801b8767c08 ffff8801bee0e800 ffffeafff9058000 [ 34.125454] ffff8801b8920688 ffff8801b87679c8 ffffffff8154cb8f ffff8801b8767c18 [ 34.133549] ffff8801b8767c10 ffff8801b8767c88 00003ffe416001e0 00000001bee0e000 [ 34.141737] Call Trace: [ 34.144307] [] zap_huge_pmd+0x16f/0x860 [ 34.149988] [] unmap_page_range+0x12ad/0x1730 [ 34.156132] [] ? vm_normal_page_pmd+0x310/0x310 [ 34.162445] [] unmap_single_vma+0x101/0x260 [ 34.168506] [] unmap_vmas+0x102/0x1d0 [ 34.174026] [] exit_mmap+0x214/0x3f0 [ 34.179396] [] ? SyS_munmap+0xa0/0xa0 [ 34.184835] [] ? up_write+0x1a/0x60 [ 34.190099] [] mmput+0xf3/0x2d0 [ 34.195021] [] do_exit+0x906/0x27b0 [ 34.200371] [] ? release_task.part.19+0x1210/0x1210 [ 34.207032] [] ? up_write+0x1a/0x60 [ 34.212299] [] ? do_mprotect_pkey+0x71d/0x890 [ 34.218796] [] ? mprotect_fixup+0x930/0x930 [ 34.224759] [] do_group_exit+0x111/0x340 [ 34.230526] [] ? do_group_exit+0x340/0x340 [ 34.236458] [] SyS_exit_group+0x1d/0x20 [ 34.242349] [] do_syscall_64+0x1a6/0x490 [ 34.248388] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 34.255295] Code: 55 41 54 53 48 89 fb e8 58 b4 e6 ff 4c 8d 6b 20 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 b8 05 00 00 <4c> 8b 73 20 49 89 dc 41 f6 c6 01 0f 85 4b 03 00 00 e8 23 b4 e6 [ 34.282426] RIP [] page_remove_rmap+0x37/0x6d0 [ 34.289582] RSP [ 34.293183] CR2: ffffeafff9058020 [ 34.296614] ---[ end trace b19351af201d8069 ]--- [ 34.301393] Kernel panic - not syncing: Fatal exception [ 34.307113] Dumping ftrace buffer: [ 34.310637] (ftrace buffer empty) [ 34.314419] Kernel Offset: disabled [ 34.318041] Rebooting in 86400 seconds..