[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.750036] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.718621] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [ 25.232932] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 25.885379] random: sshd: uninitialized urandom read (32 bytes read, 59 bits of entropy available) [ 34.342808] random: sshd: uninitialized urandom read (32 bytes read, 68 bits of entropy available) Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. [ 39.825257] random: sshd: uninitialized urandom read (32 bytes read, 74 bits of entropy available) executing program [ 39.917210] BUG: unable to handle kernel paging request at ffffeafffd330008 [ 39.924813] IP: [] page_remove_rmap+0x2e/0x260 [ 39.931065] PGD 0 [ 39.933307] Oops: 0000 [#1] PREEMPT SMP KASAN [ 39.938412] Dumping ftrace buffer: [ 39.941928] (ftrace buffer empty) [ 39.945617] Modules linked in: [ 39.949043] CPU: 1 PID: 3806 Comm: syz-executor312 Not tainted 4.4.150-g5541782 #83 [ 39.956808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.966141] task: ffff8801c9ffe000 task.stack: ffff8800ae8a0000 [ 39.972178] RIP: 0010:[] [] page_remove_rmap+0x2e/0x260 [ 39.980946] RSP: 0018:ffff8800ae8a79c0 EFLAGS: 00010246 [ 39.986372] RAX: dffffc0000000000 RBX: ffffeafffd330000 RCX: 0000000000000000 [ 39.993617] RDX: 1ffffd5fffa66001 RSI: ffffffff814bceaf RDI: ffffeafffd330008 [ 40.000858] RBP: ffff8800ae8a79d0 R08: ffffffff85363fb0 R09: 0000000000000000 [ 40.008168] R10: 0000000000000001 R11: ffff8801c9ffe000 R12: 0000000000000001 [ 40.015538] R13: 1ffff10015d14f3e R14: ffff8800b3d19800 R15: ffffeafffd330000 [ 40.022789] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 40.031100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.036964] CR2: ffffeafffd330008 CR3: 00000000b2ce1000 CR4: 00000000001606f0 [ 40.044216] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.051463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.058708] Stack: [ 40.060835] ffff8800ae8a7c50 0000000000000001 ffff8800ae8a7a78 ffffffff8150ad13 [ 40.068957] 00003fff4cc001e0 00003fff4cc001e0 0000000041b58ab3 ffffffff841ef837 [ 40.076953] ffffffff8150ab10 00000000000004f0 ffff8801ca5c8898 ffff8800ae8a7a40 [ 40.085079] Call Trace: [ 40.087647] [] zap_huge_pmd+0x203/0x510 [ 40.093248] [] ? __pmd_trans_huge_lock+0x320/0x320 [ 40.099800] [] unmap_single_vma+0xea3/0x1240 [ 40.105833] [] ? vm_normal_page+0x280/0x280 [ 40.111838] [] ? __put_single_page+0x60/0x60 [ 40.117950] [] unmap_vmas+0x81/0xd0 [ 40.123214] [] exit_mmap+0x1c9/0x3a0 [ 40.128554] [] ? SyS_remap_file_pages+0x870/0x870 [ 40.135024] [] ? up_write+0x1a/0x60 [ 40.140286] [] mmput+0xf8/0x2d0 [ 40.145193] [] do_exit+0x8d8/0x26b0 [ 40.150650] [] ? file_map_prot_check+0x193/0x310 [ 40.157061] [] ? release_task.part.17+0x1200/0x1200 [ 40.163706] [] ? SyS_mprotect+0x41e/0x640 [ 40.169478] [] ? up_write+0x1a/0x60 [ 40.174729] [] ? SyS_mprotect+0x423/0x640 [ 40.180549] [] do_group_exit+0x111/0x330 [ 40.186243] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 40.192713] [] SyS_exit_group+0x1d/0x20 [ 40.198321] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 40.204876] Code: e5 41 54 53 48 89 fb e8 31 76 e9 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 de 01 00 00 43 08 01 0f 84 4e 01 00 00 e8 03 76 e9 ff f0 83 43 18 ff 78 [ 40.232033] RIP [] page_remove_rmap+0x2e/0x260 [ 40.238368] RSP [ 40.241969] CR2: ffffeafffd330008 [ 40.245398] ---[ end trace fa3f64b95c6aa079 ]--- [ 40.250131] Kernel panic - not syncing: Fatal exception [ 40.255764] Dumping ftrace buffer: [ 40.259283] (ftrace buffer empty) [ 40.262976] Kernel Offset: disabled [ 40.266575] Rebooting in 86400 seconds..