[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 14.063411] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.990659] random: sshd: uninitialized urandom read (32 bytes read) [ 18.318338] random: sshd: uninitialized urandom read (32 bytes read) [ 18.825818] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. [ 24.583880] urandom_read: 1 callbacks suppressed [ 24.583883] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 24.669222] BUG: unable to handle kernel paging request at ffffeafff8dc8020 [ 24.676824] IP: [<ffffffff814f5937>] page_remove_rmap+0x37/0x6d0 [ 24.683068] PGD 0 [ 24.685015] [ 24.686635] Oops: 0000 [#1] PREEMPT SMP KASAN [ 24.691171] Dumping ftrace buffer: [ 24.694694] (ftrace buffer empty) [ 24.698382] Modules linked in: [ 24.701669] CPU: 1 PID: 3798 Comm: syz-executor651 Not tainted 4.9.122-g54068d6 #26 [ 24.709442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.718774] task: ffff8801b6943000 task.stack: ffff8801b6258000 [ 24.724808] RIP: 0010:[<ffffffff814f5937>] [<ffffffff814f5937>] page_remove_rmap+0x37/0x6d0 [ 24.733484] RSP: 0018:ffff8801b625f948 EFLAGS: 00010246 [ 24.738908] RAX: dffffc0000000000 RBX: ffffeafff8dc8000 RCX: 0000000000000000 [ 24.746159] RDX: 1ffffd5fff1b9004 RSI: ffffffff814f5918 RDI: ffffeafff8dc8000 [ 24.753406] RBP: ffff8801b625f970 R08: 0000000000033aa0 R09: 0000000000000001 [ 24.760654] R10: ffff8801b6943000 R11: 0000000000000001 R12: ffff8801b625fc08 [ 24.767950] R13: ffffeafff8dc8020 R14: ffffeafff8dc8000 R15: 0000000000000001 [ 24.775206] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 24.783407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.789267] CR2: ffffeafff8dc8020 CR3: 00000001ca7b9000 CR4: 00000000001606f0 [ 24.796512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.803835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.811086] Stack: [ 24.813212] ffffeafff8dc8020 ffff8801b625fc08 ffff8801c3d0b800 ffffeafff8dc8000 [ 24.821313] ffff8801c5d587e8 ffff8801b625f9c8 ffffffff8154cb8f ffff8801b625fc18 [ 24.829300] ffff8801b625fc10 ffff8801b625fc88 00003ffe372001e0 00000001c3d0b000 [ 24.837301] Call Trace: [ 24.839869] [<ffffffff8154cb8f>] zap_huge_pmd+0x16f/0x860 [ 24.845475] [<ffffffff814cae6d>] unmap_page_range+0x12ad/0x1730 [ 24.851600] [<ffffffff814c9bc0>] ? vm_normal_page_pmd+0x310/0x310 [ 24.857893] [<ffffffff814cb3f1>] unmap_single_vma+0x101/0x260 [ 24.863842] [<ffffffff814cbd32>] unmap_vmas+0x102/0x1d0 [ 24.869268] [<ffffffff814e4834>] exit_mmap+0x214/0x3f0 [ 24.874605] [<ffffffff814e4620>] ? SyS_munmap+0xa0/0xa0 [ 24.880031] [<ffffffff8122e58a>] ? up_write+0x1a/0x60 [ 24.885282] [<ffffffff8112db23>] mmput+0xf3/0x2d0 [ 24.890193] [<ffffffff81143056>] do_exit+0x906/0x27b0 [ 24.895445] [<ffffffff81142750>] ? release_task.part.19+0x1210/0x1210 [ 24.902092] [<ffffffff8122e58a>] ? up_write+0x1a/0x60 [ 24.907346] [<ffffffff814ece0d>] ? do_mprotect_pkey+0x71d/0x890 [ 24.913474] [<ffffffff814ec6f0>] ? mprotect_fixup+0x930/0x930 [ 24.919432] [<ffffffff81149211>] do_group_exit+0x111/0x340 [ 24.925131] [<ffffffff81149440>] ? do_group_exit+0x340/0x340 [ 24.931003] [<ffffffff8114945d>] SyS_exit_group+0x1d/0x20 [ 24.936609] [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 [ 24.942308] [<ffffffff83a00cd3>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 24.949208] Code: 55 41 54 53 48 89 fb e8 58 b4 e6 ff 4c 8d 6b 20 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 b8 05 00 00 <4c> 8b 73 20 49 89 dc 41 f6 c6 01 0f 85 4b 03 00 00 e8 23 b4 e6 [ 24.976106] RIP [<ffffffff814f5937>] page_remove_rmap+0x37/0x6d0 [ 24.982441] RSP <ffff8801b625f948> [ 24.986042] CR2: ffffeafff8dc8020 [ 24.989478] ---[ end trace ac4074133b82af24 ]--- [ 24.994208] Kernel panic - not syncing: Fatal exception [ 24.999997] Dumping ftrace buffer: [ 25.003531] (ftrace buffer empty) [ 25.007223] Kernel Offset: disabled [ 25.010833] Rebooting in 86400 seconds..