[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 11.666287] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.192970] random: sshd: uninitialized urandom read (32 bytes read) [ 23.562389] random: sshd: uninitialized urandom read (32 bytes read) [ 24.018418] random: sshd: uninitialized urandom read (32 bytes read) [ 33.225574] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. [ 38.682468] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 38.762470] BUG: unable to handle kernel paging request at ffffeafff8e30020 [ 38.769920] IP: [] page_remove_rmap+0x37/0x6d0 [ 38.776184] PGD 0 [ 38.778131] [ 38.779772] Oops: 0000 [#1] PREEMPT SMP KASAN [ 38.784264] Dumping ftrace buffer: [ 38.787789] (ftrace buffer empty) [ 38.791476] Modules linked in: [ 38.794847] CPU: 1 PID: 3708 Comm: syz-executor283 Not tainted 4.9.122-g54068d6 #26 [ 38.802615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.811963] task: ffff8801c1a71800 task.stack: ffff8801c2550000 [ 38.817995] RIP: 0010:[] [] page_remove_rmap+0x37/0x6d0 [ 38.826676] RSP: 0018:ffff8801c2557948 EFLAGS: 00010246 [ 38.832098] RAX: dffffc0000000000 RBX: ffffeafff8e30000 RCX: 0000000000000000 [ 38.839347] RDX: 1ffffd5fff1c6004 RSI: ffffffff814f5918 RDI: ffffeafff8e30000 [ 38.846593] RBP: ffff8801c2557970 R08: 0000000000033c80 R09: 0000000000000001 [ 38.853943] R10: ffff8801c1a71800 R11: 0000000000000001 R12: ffff8801c2557c08 [ 38.861206] R13: ffffeafff8e30020 R14: ffffeafff8e30000 R15: 0000000000000001 [ 38.868455] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 38.876656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.882574] CR2: ffffeafff8e30020 CR3: 00000001c8209000 CR4: 00000000001606f0 [ 38.889945] Stack: [ 38.892074] ffffeafff8e30020 ffff8801c2557c08 ffff8801c7768800 ffffeafff8e30000 [ 38.900119] ffff8801c1b19b58 ffff8801c25579c8 ffffffff8154cb8f ffff8801c2557c18 [ 38.908127] ffff8801c2557c10 ffff8801c2557c88 00003ffe38c001e0 00000001c7768000 [ 38.916123] Call Trace: [ 38.918701] [] zap_huge_pmd+0x16f/0x860 [ 38.924309] [] unmap_page_range+0x12ad/0x1730 [ 38.930435] [] ? vm_normal_page_pmd+0x310/0x310 [ 38.936732] [] unmap_single_vma+0x101/0x260 [ 38.942905] [] unmap_vmas+0x102/0x1d0 [ 38.948336] [] exit_mmap+0x214/0x3f0 [ 38.953699] [] ? SyS_munmap+0xa0/0xa0 [ 38.959129] [] mmput+0xf3/0x2d0 [ 38.964131] [] do_exit+0x906/0x27b0 [ 38.969396] [] ? release_task.part.19+0x1210/0x1210 [ 38.976046] [] ? up_write+0x1a/0x60 [ 38.981300] [] ? do_mprotect_pkey+0x71d/0x890 [ 38.987423] [] ? mprotect_fixup+0x930/0x930 [ 38.993375] [] do_group_exit+0x111/0x340 [ 38.999060] [] ? do_group_exit+0x340/0x340 [ 39.004917] [] SyS_exit_group+0x1d/0x20 [ 39.010532] [] do_syscall_64+0x1a6/0x490 [ 39.016225] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 39.023122] Code: 55 41 54 53 48 89 fb e8 58 b4 e6 ff 4c 8d 6b 20 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 b8 05 00 00 <4c> 8b 73 20 49 89 dc 41 f6 c6 01 0f 85 4b 03 00 00 e8 23 b4 e6 [ 39.050320] RIP [] page_remove_rmap+0x37/0x6d0 [ 39.056671] RSP [ 39.060280] CR2: ffffeafff8e30020 [ 39.063724] ---[ end trace b14295e0ec68cee9 ]--- [ 39.068455] Kernel panic - not syncing: Fatal exception [ 39.074111] Dumping ftrace buffer: [ 39.077636] (ftrace buffer empty) [ 39.081325] Kernel Offset: disabled [ 39.084931] Rebooting in 86400 seconds..