[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.211847] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.958546] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 26.194509] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 26.724198] random: sshd: uninitialized urandom read (32 bytes read, 51 bits of entropy available) [ 47.242990] random: sshd: uninitialized urandom read (32 bytes read, 62 bits of entropy available) Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. [ 52.934073] random: sshd: uninitialized urandom read (32 bytes read, 65 bits of entropy available) executing program [ 53.029722] capability: warning: `syz-executor949' uses 32-bit capabilities (legacy support in use) [ 53.039149] BUG: unable to handle kernel paging request at ffffeafff8968008 [ 53.046470] IP: [] page_remove_rmap+0x2e/0x260 [ 53.052715] PGD 0 [ 53.054966] Oops: 0000 [#1] PREEMPT SMP KASAN [ 53.059902] Dumping ftrace buffer: [ 53.063410] (ftrace buffer empty) [ 53.067094] Modules linked in: [ 53.070387] CPU: 0 PID: 3715 Comm: syz-executor949 Not tainted 4.4.149-gf76bdbd #18 [ 53.078152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.087483] task: ffff8801d22b3000 task.stack: ffff8801cdd60000 [ 53.093511] RIP: 0010:[] [] page_remove_rmap+0x2e/0x260 [ 53.102311] RSP: 0018:ffff8801cdd67948 EFLAGS: 00010246 [ 53.107825] RAX: dffffc0000000000 RBX: ffffeafff8968000 RCX: 0000000000000000 [ 53.115080] RDX: 1ffffd5fff12d001 RSI: ffffffff814bc8bf RDI: ffffeafff8968008 [ 53.122324] RBP: ffff8801cdd67958 R08: ffffffff85363fb0 R09: 0000000000000000 [ 53.129566] R10: 0000000000000001 R11: ffff8801d22b3000 R12: 0000000000000001 [ 53.136820] R13: 1ffff10039bacf2f R14: ffff8801ce69c838 R15: ffffeafff8968000 [ 53.144061] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 53.152316] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 53.158174] CR2: ffffeafff8968008 CR3: 00000001ceb8e000 CR4: 00000000001606f0 [ 53.165419] Stack: [ 53.167539] ffff8801cdd67bd8 0000000000000001 ffff8801cdd67a00 ffffffff8150a443 [ 53.175523] 00003ffe25a001e0 00003ffe25a001e0 0000000041b58ab3 ffffffff841ef837 [ 53.183516] ffffffff8150a240 00000000000004f0 ffff8801cfc09f78 ffff8801cdd679c8 [ 53.191578] Call Trace: [ 53.194146] [] zap_huge_pmd+0x203/0x510 [ 53.199742] [] ? __pmd_trans_huge_lock+0x320/0x320 [ 53.206292] [] unmap_single_vma+0xea3/0x1240 [ 53.212320] [] ? vm_normal_page+0x230/0x230 [ 53.218267] [] ? __put_single_page+0x60/0x60 [ 53.224303] [] unmap_vmas+0x81/0xd0 [ 53.229555] [] exit_mmap+0x1c9/0x3a0 [ 53.234894] [] ? SyS_remap_file_pages+0x870/0x870 [ 53.241387] [] ? up_write+0x1a/0x60 [ 53.246638] [] mmput+0xf8/0x2d0 [ 53.251542] [] do_exit+0x8d8/0x26b0 [ 53.256795] [] ? file_map_prot_check+0x193/0x310 [ 53.263174] [] ? release_task.part.17+0x1200/0x1200 [ 53.269810] [] ? SyS_mprotect+0x41e/0x640 [ 53.275583] [] ? up_write+0x1a/0x60 [ 53.280911] [] ? SyS_mprotect+0x423/0x640 [ 53.286688] [] do_group_exit+0x111/0x330 [ 53.292385] [] ? do_group_exit+0x330/0x330 [ 53.298259] [] SyS_exit_group+0x1d/0x20 [ 53.303860] [] do_fast_syscall_32+0x324/0x8b0 [ 53.309978] [] sysenter_flags_fixed+0xd/0x1a [ 53.316009] Code: e5 41 54 53 48 89 fb e8 e1 77 e9 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 de 01 00 00 43 08 01 0f 84 4e 01 00 00 e8 b3 77 e9 ff f0 83 43 18 ff 78 [ 53.342901] RIP [] page_remove_rmap+0x2e/0x260 [ 53.349246] RSP [ 53.352840] CR2: ffffeafff8968008 [ 53.356272] ---[ end trace eb8c520d4b3d7e49 ]--- [ 53.360998] Kernel panic - not syncing: Fatal exception [ 53.366615] Dumping ftrace buffer: [ 53.370133] (ftrace buffer empty) [ 53.373819] Kernel Offset: disabled [ 53.377434] Rebooting in 86400 seconds..