[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.729423] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.692585] random: sshd: uninitialized urandom read (32 bytes read) [ 17.894931] random: sshd: uninitialized urandom read (32 bytes read) [ 18.393479] random: sshd: uninitialized urandom read (32 bytes read) [ 25.048639] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. [ 30.534388] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 30.612481] BUG: unable to handle kernel paging request at ffffeafff8da0020 [ 30.620015] IP: [] page_remove_rmap+0x37/0x6d0 [ 30.626262] PGD 0 [ 30.628219] [ 30.629839] Oops: 0000 [#1] PREEMPT SMP KASAN [ 30.634311] Dumping ftrace buffer: [ 30.637821] (ftrace buffer empty) [ 30.641506] Modules linked in: [ 30.644794] CPU: 0 PID: 3803 Comm: syz-executor354 Not tainted 4.9.122-g54068d6 #78 [ 30.652560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.661897] task: ffff8801b7e09800 task.stack: ffff8801d9778000 [ 30.667946] RIP: 0010:[] [] page_remove_rmap+0x37/0x6d0 [ 30.676621] RSP: 0018:ffff8801d977f948 EFLAGS: 00010246 [ 30.682054] RAX: dffffc0000000000 RBX: ffffeafff8da0000 RCX: 0000000000000000 [ 30.689301] RDX: 1ffffd5fff1b4004 RSI: ffffffff814f5918 RDI: ffffeafff8da0000 [ 30.696558] RBP: ffff8801d977f970 R08: 0000000000034280 R09: 0000000000000001 [ 30.703803] R10: ffff8801b7e09800 R11: 0000000000000001 R12: ffff8801d977fc08 [ 30.711086] R13: ffffeafff8da0020 R14: ffffeafff8da0000 R15: 0000000000000001 [ 30.718350] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 30.726555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.732409] CR2: ffffeafff8da0020 CR3: 00000001c6da2000 CR4: 00000000001606f0 [ 30.739784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.747048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.754291] Stack: [ 30.756412] ffffeafff8da0020 ffff8801d977fc08 ffff8801c6e7d800 ffffeafff8da0000 [ 30.764408] ffff8801c387f9f8 ffff8801d977f9c8 ffffffff8154cb8f ffff8801d977fc18 [ 30.772395] ffff8801d977fc10 ffff8801d977fc88 00003ffe368001e0 00000001c6e7d000 [ 30.780391] Call Trace: [ 30.782957] [] zap_huge_pmd+0x16f/0x860 [ 30.788554] [] unmap_page_range+0x12ad/0x1730 [ 30.794675] [] ? vm_normal_page_pmd+0x310/0x310 [ 30.800968] [] unmap_single_vma+0x101/0x260 [ 30.806913] [] unmap_vmas+0x102/0x1d0 [ 30.812336] [] exit_mmap+0x214/0x3f0 [ 30.817791] [] ? SyS_munmap+0xa0/0xa0 [ 30.823326] [] ? up_write+0x1a/0x60 [ 30.828577] [] mmput+0xf3/0x2d0 [ 30.833496] [] do_exit+0x906/0x27b0 [ 30.838749] [] ? release_task.part.19+0x1210/0x1210 [ 30.845396] [] ? up_write+0x1a/0x60 [ 30.850661] [] ? do_mprotect_pkey+0x71d/0x890 [ 30.856810] [] ? mprotect_fixup+0x930/0x930 [ 30.862752] [] do_group_exit+0x111/0x340 [ 30.868670] [] ? do_group_exit+0x340/0x340 [ 30.874534] [] SyS_exit_group+0x1d/0x20 [ 30.880245] [] do_syscall_64+0x1a6/0x490 [ 30.885935] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 30.892831] Code: 55 41 54 53 48 89 fb e8 58 b4 e6 ff 4c 8d 6b 20 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 b8 05 00 00 <4c> 8b 73 20 49 89 dc 41 f6 c6 01 0f 85 4b 03 00 00 e8 23 b4 e6 [ 30.919877] RIP [] page_remove_rmap+0x37/0x6d0 [ 30.926221] RSP [ 30.929814] CR2: ffffeafff8da0020 [ 30.933240] ---[ end trace 67c5fe77221777c8 ]--- [ 30.938079] Kernel panic - not syncing: Fatal exception [ 30.943790] Dumping ftrace buffer: [ 30.947306] (ftrace buffer empty) [ 30.950988] Kernel Offset: disabled [ 30.954592] Rebooting in 86400 seconds..