[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.001620] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.257440] random: sshd: uninitialized urandom read (32 bytes read) [ 19.603678] random: sshd: uninitialized urandom read (32 bytes read) [ 20.132413] random: sshd: uninitialized urandom read (32 bytes read) [ 25.411187] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.45' (ECDSA) to the list of known hosts. [ 31.065002] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 31.189887] BUG: unable to handle kernel paging request at ffffeafff9108020 [ 31.197282] IP: [] page_remove_rmap+0x37/0x6d0 [ 31.203579] PGD 0 [ 31.205531] [ 31.207155] Oops: 0000 [#1] PREEMPT SMP KASAN [ 31.211630] Dumping ftrace buffer: [ 31.215143] (ftrace buffer empty) [ 31.218834] Modules linked in: [ 31.222133] CPU: 0 PID: 3807 Comm: syz-executor044 Not tainted 4.9.122-g54068d6 #26 [ 31.229910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.239254] task: ffff8801b6ddc800 task.stack: ffff8801bc120000 [ 31.245389] RIP: 0010:[] [] page_remove_rmap+0x37/0x6d0 [ 31.254205] RSP: 0018:ffff8801bc127948 EFLAGS: 00010246 [ 31.259634] RAX: dffffc0000000000 RBX: ffffeafff9108000 RCX: 0000000000000000 [ 31.266887] RDX: 1ffffd5fff221004 RSI: ffffffff814f5918 RDI: ffffeafff9108000 [ 31.274141] RBP: ffff8801bc127970 R08: 0000000000033f40 R09: 0000000000000001 [ 31.281529] R10: ffff8801b6ddc800 R11: 0000000000000001 R12: ffff8801bc127c08 [ 31.288828] R13: ffffeafff9108020 R14: ffffeafff9108000 R15: 0000000000000001 [ 31.296091] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 31.304300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.310210] CR2: ffffeafff9108020 CR3: 00000001b7bf0000 CR4: 00000000001606f0 [ 31.317472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.324769] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.332153] Stack: [ 31.334285] ffffeafff9108020 ffff8801bc127c08 ffff8801ca370800 ffffeafff9108000 [ 31.342295] ffff8801cb1fa738 ffff8801bc1279c8 ffffffff8154cb8f ffff8801bc127c18 [ 31.350292] ffff8801bc127c10 ffff8801bc127c88 00003ffe442001e0 00000001ca370000 [ 31.358336] Call Trace: [ 31.360948] [] zap_huge_pmd+0x16f/0x860 [ 31.366563] [] unmap_page_range+0x12ad/0x1730 [ 31.372701] [] ? vm_normal_page_pmd+0x310/0x310 [ 31.379041] [] unmap_single_vma+0x101/0x260 [ 31.385003] [] unmap_vmas+0x102/0x1d0 [ 31.390519] [] exit_mmap+0x214/0x3f0 [ 31.395866] [] ? SyS_munmap+0xa0/0xa0 [ 31.401296] [] ? up_write+0x1a/0x60 [ 31.406563] [] mmput+0xf3/0x2d0 [ 31.411493] [] do_exit+0x906/0x27b0 [ 31.416768] [] ? check_preemption_disabled+0x3b/0x170 [ 31.423592] [] ? retint_kernel+0x2d/0x2d [ 31.429296] [] ? release_task.part.19+0x1210/0x1210 [ 31.435955] [] ? check_preemption_disabled+0x3b/0x170 [ 31.442781] [] ? retint_kernel+0x2d/0x2d [ 31.448529] [] ? do_group_exit+0x116/0x340 [ 31.454544] [] do_group_exit+0x111/0x340 [ 31.460250] [] ? do_group_exit+0x340/0x340 [ 31.466123] [] SyS_exit_group+0x1d/0x20 [ 31.471787] [] do_syscall_64+0x1a6/0x490 [ 31.477567] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 31.484479] Code: 55 41 54 53 48 89 fb e8 58 b4 e6 ff 4c 8d 6b 20 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 b8 05 00 00 <4c> 8b 73 20 49 89 dc 41 f6 c6 01 0f 85 4b 03 00 00 e8 23 b4 e6 [ 31.511472] RIP [] page_remove_rmap+0x37/0x6d0 [ 31.517808] RSP [ 31.521407] CR2: ffffeafff9108020 [ 31.524859] ---[ end trace b3f996c07f031815 ]--- [ 31.529595] Kernel panic - not syncing: Fatal exception [ 31.535299] Dumping ftrace buffer: [ 31.538816] (ftrace buffer empty) [ 31.542505] Kernel Offset: disabled [ 31.546112] Rebooting in 86400 seconds..