[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.091048] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 27.453972] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 27.752884] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 28.391180] random: sshd: uninitialized urandom read (32 bytes read, 65 bits of entropy available) [ 28.569086] random: sshd: uninitialized urandom read (32 bytes read, 68 bits of entropy available) Warning: Permanently added '10.128.0.46' (ECDSA) to the list of known hosts. [ 34.085156] random: sshd: uninitialized urandom read (32 bytes read, 73 bits of entropy available) executing program [ 34.171263] BUG: unable to handle kernel paging request at ffffeafffd458008 [ 34.178606] IP: [] page_remove_rmap+0x2e/0x260 [ 34.184860] PGD 0 [ 34.187141] Oops: 0000 [#1] PREEMPT SMP KASAN [ 34.192153] Dumping ftrace buffer: [ 34.195667] (ftrace buffer empty) [ 34.199353] Modules linked in: [ 34.202645] CPU: 1 PID: 3838 Comm: syz-executor240 Not tainted 4.4.150-g5541782 #83 [ 34.210409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.219741] task: ffff8801c7383000 task.stack: ffff8800bb2c8000 [ 34.225793] RIP: 0010:[] [] page_remove_rmap+0x2e/0x260 [ 34.234469] RSP: 0018:ffff8800bb2cf9c0 EFLAGS: 00010246 [ 34.239889] RAX: dffffc0000000000 RBX: ffffeafffd458000 RCX: 0000000000000000 [ 34.247132] RDX: 1ffffd5fffa8b001 RSI: ffffffff814bceaf RDI: ffffeafffd458008 [ 34.254376] RBP: ffff8800bb2cf9d0 R08: ffffffff85363fb0 R09: 0000000000000000 [ 34.261644] R10: 0000000000000001 R11: ffff8801c7383000 R12: 0000000000000001 [ 34.268894] R13: 1ffff10017659f3e R14: ffff8800b5b0d800 R15: ffffeafffd458000 [ 34.276159] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 34.284360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.290234] CR2: ffffeafffd458008 CR3: 00000000b5b1b000 CR4: 00000000001606f0 [ 34.297496] Stack: [ 34.299643] ffff8800bb2cfc50 0000000000000001 ffff8800bb2cfa78 ffffffff8150ad13 [ 34.307650] 00003fff516001e0 00003fff516001e0 0000000041b58ab3 ffffffff841ef837 [ 34.315638] ffffffff8150ab10 00000000000004f0 ffff8800bb9240b0 ffff8800bb2cfa40 [ 34.323645] Call Trace: [ 34.326207] [] zap_huge_pmd+0x203/0x510 [ 34.331809] [] ? __pmd_trans_huge_lock+0x320/0x320 [ 34.338362] [] unmap_single_vma+0xea3/0x1240 [ 34.344395] [] ? vm_normal_page+0x280/0x280 [ 34.350343] [] ? __put_single_page+0x60/0x60 [ 34.356375] [] unmap_vmas+0x81/0xd0 [ 34.361629] [] exit_mmap+0x1c9/0x3a0 [ 34.366965] [] ? SyS_remap_file_pages+0x870/0x870 [ 34.373445] [] ? kmem_cache_free+0x2b4/0x340 [ 34.379481] [] mmput+0xf8/0x2d0 [ 34.384386] [] do_exit+0x8d8/0x26b0 [ 34.389638] [] ? file_map_prot_check+0x193/0x310 [ 34.396015] [] ? release_task.part.17+0x1200/0x1200 [ 34.402654] [] ? SyS_mprotect+0x41e/0x640 [ 34.408424] [] ? up_write+0x1a/0x60 [ 34.413673] [] ? SyS_mprotect+0x423/0x640 [ 34.419443] [] do_group_exit+0x111/0x330 [ 34.425138] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 34.431608] [] SyS_exit_group+0x1d/0x20 [ 34.437212] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 34.443777] Code: e5 41 54 53 48 89 fb e8 31 76 e9 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 de 01 00 00 43 08 01 0f 84 4e 01 00 00 e8 03 76 e9 ff f0 83 43 18 ff 78 [ 34.470911] RIP [] page_remove_rmap+0x2e/0x260 [ 34.477255] RSP [ 34.480857] CR2: ffffeafffd458008 [ 34.484284] ---[ end trace a9219c7dc89a6c25 ]--- [ 34.489025] Kernel panic - not syncing: Fatal exception [ 34.494657] Dumping ftrace buffer: [ 34.498184] (ftrace buffer empty) [ 34.501869] Kernel Offset: disabled [ 34.505471] Rebooting in 86400 seconds..