[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.886679] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.029465] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 25.413141] random: sshd: uninitialized urandom read (32 bytes read, 37 bits of entropy available) [ 26.098033] random: sshd: uninitialized urandom read (32 bytes read, 69 bits of entropy available) [ 26.257256] random: sshd: uninitialized urandom read (32 bytes read, 71 bits of entropy available) Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. [ 31.802153] random: sshd: uninitialized urandom read (32 bytes read, 77 bits of entropy available) executing program [ 31.903329] BUG: unable to handle kernel paging request at ffffeafff8d18008 [ 31.910678] IP: [] page_remove_rmap+0x2e/0x260 [ 31.916923] PGD 0 [ 31.919162] Oops: 0000 [#1] PREEMPT SMP KASAN [ 31.924099] Dumping ftrace buffer: [ 31.927613] (ftrace buffer empty) [ 31.931301] Modules linked in: [ 31.934587] CPU: 1 PID: 3836 Comm: syz-executor580 Not tainted 4.4.150-g5541782 #19 [ 31.942351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.951693] task: ffff8800ad271800 task.stack: ffff8801d8c90000 [ 31.957722] RIP: 0010:[] [] page_remove_rmap+0x2e/0x260 [ 31.966412] RSP: 0018:ffff8801d8c97948 EFLAGS: 00010246 [ 31.971831] RAX: dffffc0000000000 RBX: ffffeafff8d18000 RCX: 0000000000000000 [ 31.979076] RDX: 1ffffd5fff1a3001 RSI: ffffffff814bceaf RDI: ffffeafff8d18008 [ 31.986322] RBP: ffff8801d8c97958 R08: ffffffff85363fb0 R09: 0000000000000000 [ 31.993564] R10: 0000000000000001 R11: ffff8800ad271800 R12: 0000000000000001 [ 32.000834] R13: 1ffff1003b192f2f R14: ffff8801da39e800 R15: ffffeafff8d18000 [ 32.008094] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 32.016292] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 32.022146] CR2: ffffeafff8d18008 CR3: 00000001d9082000 CR4: 00000000001606f0 [ 32.029392] Stack: [ 32.031514] ffff8801d8c97bd8 0000000000000001 ffff8801d8c97a00 ffffffff8150ad13 [ 32.039540] 00003ffe346001e0 00003ffe346001e0 0000000041b58ab3 ffffffff841ef837 [ 32.047539] ffffffff8150ab10 00000000000004f0 ffff8801da3de0b0 ffff8801d8c979c8 [ 32.055558] Call Trace: [ 32.058124] [] zap_huge_pmd+0x203/0x510 [ 32.063725] [] ? __pmd_trans_huge_lock+0x320/0x320 [ 32.070278] [] unmap_single_vma+0xea3/0x1240 [ 32.076339] [] ? vm_normal_page+0x280/0x280 [ 32.082284] [] ? __put_single_page+0x60/0x60 [ 32.088316] [] unmap_vmas+0x81/0xd0 [ 32.093567] [] exit_mmap+0x1c9/0x3a0 [ 32.098906] [] ? SyS_remap_file_pages+0x870/0x870 [ 32.105382] [] ? up_write+0x1a/0x60 [ 32.110642] [] mmput+0xf8/0x2d0 [ 32.115551] [] do_exit+0x8d8/0x26b0 [ 32.120821] [] ? file_map_prot_check+0x193/0x310 [ 32.127213] [] ? release_task.part.17+0x1200/0x1200 [ 32.133852] [] ? SyS_mprotect+0x41e/0x640 [ 32.139628] [] ? up_write+0x1a/0x60 [ 32.144879] [] ? SyS_mprotect+0x423/0x640 [ 32.150652] [] do_group_exit+0x111/0x330 [ 32.156359] [] ? do_group_exit+0x330/0x330 [ 32.162216] [] SyS_exit_group+0x1d/0x20 [ 32.167814] [] do_fast_syscall_32+0x324/0x8b0 [ 32.173956] [] sysenter_flags_fixed+0xd/0x1a [ 32.179983] Code: e5 41 54 53 48 89 fb e8 31 76 e9 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 de 01 00 00 43 08 01 0f 84 4e 01 00 00 e8 03 76 e9 ff f0 83 43 18 ff 78 [ 32.206811] RIP [] page_remove_rmap+0x2e/0x260 [ 32.213148] RSP [ 32.216744] CR2: ffffeafff8d18008 [ 32.220168] ---[ end trace f7c00c30ed384de4 ]--- [ 32.224895] Kernel panic - not syncing: Fatal exception [ 32.230554] Dumping ftrace buffer: [ 32.234071] (ftrace buffer empty) [ 32.237759] Kernel Offset: disabled [ 32.241357] Rebooting in 86400 seconds..