[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.832041] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 13.776146] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 14.394528] random: sshd: uninitialized urandom read (32 bytes read) [ 14.886232] random: sshd: uninitialized urandom read (32 bytes read) [ 26.250506] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. [ 32.012547] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 32.096910] BUG: unable to handle kernel paging request at ffffeafff9100020 [ 32.104324] IP: [] page_remove_rmap+0x37/0x6d0 [ 32.110710] PGD 0 [ 32.112767] [ 32.114393] Oops: 0000 [#1] PREEMPT SMP KASAN [ 32.118862] Dumping ftrace buffer: [ 32.122381] (ftrace buffer empty) [ 32.126181] Modules linked in: [ 32.129481] CPU: 0 PID: 3801 Comm: syz-executor039 Not tainted 4.9.122-g54068d6 #78 [ 32.137265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.146750] task: ffff8801b6e33000 task.stack: ffff8801b5b38000 [ 32.152911] RIP: 0010:[] [] page_remove_rmap+0x37/0x6d0 [ 32.161667] RSP: 0018:ffff8801b5b3f948 EFLAGS: 00010246 [ 32.167107] RAX: dffffc0000000000 RBX: ffffeafff9100000 RCX: 0000000000000000 [ 32.174418] RDX: 1ffffd5fff220004 RSI: ffffffff814f5918 RDI: ffffeafff9100000 [ 32.181671] RBP: ffff8801b5b3f970 R08: 00000000000347a0 R09: 0000000000000001 [ 32.188935] R10: ffff8801b6e33000 R11: 0000000000000001 R12: ffff8801b5b3fc08 [ 32.196186] R13: ffffeafff9100020 R14: ffffeafff9100000 R15: 0000000000000001 [ 32.203439] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 32.211646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.217513] CR2: ffffeafff9100020 CR3: 00000001c4979000 CR4: 00000000001606f0 [ 32.224831] Stack: [ 32.226962] ffffeafff9100020 ffff8801b5b3fc08 ffff8801c4973800 ffffeafff9100000 [ 32.235000] ffff8801b6d54e18 ffff8801b5b3f9c8 ffffffff8154cb8f ffff8801b5b3fc18 [ 32.243025] ffff8801b5b3fc10 ffff8801b5b3fc88 00003ffe440001e0 00000001c4973000 [ 32.251016] Call Trace: [ 32.253599] [] zap_huge_pmd+0x16f/0x860 [ 32.259204] [] unmap_page_range+0x12ad/0x1730 [ 32.265330] [] ? vm_normal_page_pmd+0x310/0x310 [ 32.271659] [] unmap_single_vma+0x101/0x260 [ 32.277810] [] unmap_vmas+0x102/0x1d0 [ 32.283354] [] exit_mmap+0x214/0x3f0 [ 32.288710] [] ? SyS_munmap+0xa0/0xa0 [ 32.294201] [] ? up_write+0x1a/0x60 [ 32.299464] [] mmput+0xf3/0x2d0 [ 32.304458] [] do_exit+0x906/0x27b0 [ 32.309712] [] ? release_task.part.19+0x1210/0x1210 [ 32.316495] [] ? up_write+0x1a/0x60 [ 32.321749] [] ? do_mprotect_pkey+0x71d/0x890 [ 32.327914] [] ? mprotect_fixup+0x930/0x930 [ 32.333871] [] do_group_exit+0x111/0x340 [ 32.339667] [] ? do_group_exit+0x340/0x340 [ 32.345545] [] SyS_exit_group+0x1d/0x20 [ 32.351153] [] do_syscall_64+0x1a6/0x490 [ 32.356845] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 32.363829] Code: 55 41 54 53 48 89 fb e8 58 b4 e6 ff 4c 8d 6b 20 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 b8 05 00 00 <4c> 8b 73 20 49 89 dc 41 f6 c6 01 0f 85 4b 03 00 00 e8 23 b4 e6 [ 32.391112] RIP [] page_remove_rmap+0x37/0x6d0 [ 32.397493] RSP [ 32.401092] CR2: ffffeafff9100020 [ 32.404583] ---[ end trace 673938a2fd30afbd ]--- [ 32.409417] Kernel panic - not syncing: Fatal exception [ 32.414821] Dumping ftrace buffer: [ 32.418338] (ftrace buffer empty) [ 32.422079] Kernel Offset: disabled [ 32.425688] Rebooting in 86400 seconds..