[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.608175] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.419154] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 23.797067] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 24.469826] random: sshd: uninitialized urandom read (32 bytes read, 63 bits of entropy available) [ 24.675552] random: sshd: uninitialized urandom read (32 bytes read, 66 bits of entropy available) Warning: Permanently added '10.128.10.21' (ECDSA) to the list of known hosts. [ 30.240419] random: sshd: uninitialized urandom read (32 bytes read, 70 bits of entropy available) executing program [ 30.336683] BUG: unable to handle kernel paging request at ffffeafff8e30008 [ 30.344036] IP: [] page_remove_rmap+0x2e/0x260 [ 30.350282] PGD 0 [ 30.352522] Oops: 0000 [#1] PREEMPT SMP KASAN [ 30.357464] Dumping ftrace buffer: [ 30.360981] (ftrace buffer empty) [ 30.364664] Modules linked in: [ 30.367962] CPU: 1 PID: 3833 Comm: syz-executor622 Not tainted 4.4.148-gf057ff9 #81 [ 30.375731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.385061] task: ffff8801d9779800 task.stack: ffff8801d91a8000 [ 30.391088] RIP: 0010:[] [] page_remove_rmap+0x2e/0x260 [ 30.399761] RSP: 0018:ffff8801d91af9c0 EFLAGS: 00010246 [ 30.405184] RAX: dffffc0000000000 RBX: ffffeafff8e30000 RCX: ffffea00071c8000 [ 30.412440] RDX: 1ffffd5fff1c6001 RSI: ffffffff814bc75f RDI: ffffeafff8e30008 [ 30.419695] RBP: ffff8801d91af9d0 R08: ffffffff85363fb0 R09: 0000000000000000 [ 30.426937] R10: 0000000000000001 R11: ffff8801d9779800 R12: 0000000000000001 [ 30.434179] R13: 1ffff1003b235f3e R14: ffff8801cfbe3810 R15: ffffeafff8e30000 [ 30.441424] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 30.449621] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.455475] CR2: ffffeafff8e30008 CR3: 00000001cd95a000 CR4: 00000000001606f0 [ 30.462719] Stack: [ 30.464845] ffff8801d91afc50 0000000000000001 ffff8801d91afa78 ffffffff8150a1f3 [ 30.472840] 00003ffe38c001a0 00003ffe38c001a0 0000000041b58ab3 ffffffff841ef82f [ 30.480834] ffffffff81509ff0 00000000000004f0 ffff8801d2c7f268 ffff8801d91afa40 [ 30.488814] Call Trace: [ 30.491686] [] zap_huge_pmd+0x203/0x510 [ 30.497289] [] ? __pmd_trans_huge_lock+0x320/0x320 [ 30.503855] [] unmap_single_vma+0xea3/0x1240 [ 30.509915] [] ? vm_normal_page+0x230/0x230 [ 30.515863] [] ? __put_single_page+0x60/0x60 [ 30.521894] [] unmap_vmas+0x81/0xd0 [ 30.527148] [] exit_mmap+0x1c9/0x3a0 [ 30.532489] [] ? SyS_remap_file_pages+0x870/0x870 [ 30.538987] [] ? up_write+0x1a/0x60 [ 30.544247] [] mmput+0xf8/0x2d0 [ 30.549153] [] do_exit+0x8d8/0x26b0 [ 30.554407] [] ? file_map_prot_check+0x193/0x310 [ 30.560786] [] ? release_task.part.17+0x1200/0x1200 [ 30.567443] [] ? SyS_mprotect+0x41e/0x640 [ 30.573220] [] ? up_write+0x1a/0x60 [ 30.578471] [] ? SyS_mprotect+0x423/0x640 [ 30.584244] [] do_group_exit+0x111/0x330 [ 30.589934] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 30.596398] [] SyS_exit_group+0x1d/0x20 [ 30.602000] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 30.608546] Code: e5 41 54 53 48 89 fb e8 e1 77 e9 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 de 01 00 00 43 08 01 0f 84 4e 01 00 00 e8 b3 77 e9 ff f0 83 43 18 ff 78 [ 30.635659] RIP [] page_remove_rmap+0x2e/0x260 [ 30.642004] RSP [ 30.645601] CR2: ffffeafff8e30008 [ 30.649027] ---[ end trace 9ddbf54e40dd9432 ]--- [ 30.653766] Kernel panic - not syncing: Fatal exception [ 30.659410] Dumping ftrace buffer: [ 30.662929] (ftrace buffer empty) [ 30.666615] Kernel Offset: disabled [ 30.670214] Rebooting in 86400 seconds..