INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-6,10.128.15.192' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 32.093369] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu executing program [ 32.116330] *** Guest State *** [ 32.116337] CR0: actual=0x0000000080000031, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 32.116340] CR4: actual=0x0000000000002051, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 32.116342] CR3 = 0x00000000fffbc000 [ 32.116345] RSP = 0x000000000000fffa RIP = 0x0000000000000000 [ 32.116348] RFLAGS=0x00033000 DR7 = 0x0000000000000400 [ 32.116354] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 32.116358] CS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.116364] DS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.116370] SS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.116375] ES: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.116381] FS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.116386] GS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.116391] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 32.116397] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 32.116401] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 32.116406] TR: sel=0x0000, attr=0x0008b, limit=0x00002088, base=0x0000000000000000 [ 32.116410] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 32.116413] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 32.116416] Interruptibility = 00000000 ActivityState = 00000000 [ 32.116418] *** Host State *** [ 32.116423] RIP = 0xffffffff811bc863 RSP = 0xffff8801d47cf4c8 [ 32.116431] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 32.116434] FSBase=00007f012b687700 GSBase=ffff8801db400000 TRBase=ffff8801db423140 [ 32.116438] GDTBase=ffffffffff577000 IDTBase=ffffffffff57b000 [ 32.116443] CR0=0000000080050033 CR3=00000001cd96a000 CR4=00000000001426f0 [ 32.116448] Sysenter RSP=0000000000000000 CS:RIP=0010:ffffffff850fa630 [ 32.116452] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 32.116453] *** Control State *** [ 32.116456] PinBased=0000003f CPUBased=b699edfa SecondaryExec=00000042 [ 32.116458] EntryControls=0000d1ff ExitControls=0023efff [ 32.116462] ExceptionBitmap=ffffbfff PFECmask=00000000 PFECmatch=00000000 [ 32.116464] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 32.116466] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 32.116469] reason=80000021 qualification=0000000000000000 [ 32.116471] IDTVectoring: info=00000000 errcode=00000000 [ 32.116473] TSC Offset = 0xffffffeceb2275e9 [ 32.116476] EPT pointer = 0x00000001ccbd801e [ 32.120136] *** Guest State *** [ 32.120141] CR0: actual=0x0000000080000031, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 32.120146] CR4: actual=0x0000000000002051, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 32.120148] CR3 = 0x00000000fffbc000 [ 32.120150] RSP = 0x000000000000fffa RIP = 0x0000000000000000 [ 32.120153] RFLAGS=0x00033000 DR7 = 0x0000000000000400 [ 32.120159] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 32.120163] CS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.120171] DS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.120177] SS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.120182] ES: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.120188] FS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.120194] GS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 32.120198] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 32.120204] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 32.120208] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 32.120214] TR: sel=0x0000, attr=0x0008b, limit=0x00002088, base=0x0000000000000000 [ 32.120217] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 32.120221] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 32.120224] Interruptibility = 00000000 ActivityState = 00000000 [ 32.120225] *** Host State *** [ 32.120230] RIP = 0xffffffff811bc863 RSP = 0xffff8801d47374c8 [ 32.120238] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 32.120241] FSBase=00007f0127e80700 GSBase=ffff8801db500000 TRBase=ffff8801db523140 [ 32.120245] GDTBase=ffffffffff576000 IDTBase=ffffffffff57b000 [ 32.120250] CR0=0000000080050033 CR3=00000001cdc0c000 CR4=00000000001426e0 [ 32.120255] Sysenter RSP=0000000000000000 CS:RIP=0010:ffffffff850fa630 [ 32.120259] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 32.120260] *** Control State *** [ 32.120263] PinBased=0000003f CPUBased=b699edfa SecondaryExec=00000042 [ 32.120265] EntryControls=0000d1ff ExitControls=0023efff [ 32.120269] ExceptionBitmap=ffffbfff PFECmask=00000000 PFECmatch=00000000 [ 32.120272] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 32.120274] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 32.120277] reason=80000021 qualification=0000000000000000 [ 32.120279] IDTVectoring: info=00000000 errcode=00000000 [ 32.120281] TSC Offset = 0xffffffeceb332fb4 [ 32.120283] EPT pointer = 0x00000001cbcb501e [ 32.153516] ------------[ cut here ]------------ [ 32.153535] WARNING: CPU: 1 PID: 3133 at arch/x86/kvm/x86.c:7293 kvm_arch_vcpu_ioctl_run+0x213/0x5d20 [ 32.153546] Kernel panic - not syncing: panic_on_warn set ... [ 32.153546] [ 32.153552] CPU: 1 PID: 3133 Comm: syzkaller034496 Not tainted 4.14.0-rc8-next-20171109+ #39 [ 32.153555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.153557] Call Trace: [ 32.153567] dump_stack+0x194/0x257 [ 32.153575] ? arch_local_irq_restore+0x53/0x53 [ 32.153587] ? vsnprintf+0x1ed/0x1900 [ 32.153597] panic+0x1e4/0x41c [ 32.153603] ? refcount_error_report+0x214/0x214 [ 32.153610] ? show_regs_print_info+0x65/0x65 [ 32.153621] ? __warn+0x1a9/0x1e0 [ 32.153630] ? kvm_arch_vcpu_ioctl_run+0x213/0x5d20 [ 32.153634] __warn+0x1c4/0x1e0 [ 32.153640] ? kvm_arch_vcpu_ioctl_run+0x213/0x5d20 [ 32.153648] report_bug+0x211/0x2d0 [ 32.153661] fixup_bug+0x40/0x90 [ 32.153667] do_trap+0x260/0x390 [ 32.153682] do_error_trap+0x120/0x390 [ 32.153691] ? do_trap+0x390/0x390 [ 32.153695] ? lock_downgrade+0x990/0x990 [ 32.153701] ? kvm_arch_vcpu_ioctl_run+0x213/0x5d20 [ 32.153708] ? fpu__initialize+0xed/0x650 [ 32.153715] ? fpu__save+0x6a0/0x6a0 [ 32.153726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 32.153736] do_invalid_op+0x1b/0x20 [ 32.153741] invalid_op+0x18/0x20 [ 32.153746] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x213/0x5d20 [ 32.153749] RSP: 0018:ffff8801cc0af670 EFLAGS: 00010293 [ 32.153754] RAX: ffff8801cca1a280 RBX: ffff8801c0005000 RCX: ffffffff810de353 [ 32.153756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801cf348338 [ 32.153759] RBP: ffff8801cc0afa40 R08: 1ffff10039815eff R09: 0000000000000001 [ 32.153761] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 32.153763] R13: 1ffff10039815f72 R14: ffff8801d7f4a700 R15: ffff8801cf348100 [ 32.153776] ? kvm_arch_vcpu_ioctl_run+0x213/0x5d20 [ 32.153788] ? unwind_get_return_address+0x61/0xa0 [ 32.153794] ? __save_stack_trace+0x7e/0xd0 [ 32.153805] ? depot_save_stack+0x12c/0x490 [ 32.153815] ? put_pid+0x176/0x1f0 [ 32.153824] ? save_stack+0xa3/0xd0 [ 32.153829] ? kvm_arch_vcpu_runnable+0x560/0x560 [ 32.153833] ? save_stack+0x43/0xd0 [ 32.153837] ? kasan_slab_free+0x71/0xc0 [ 32.153841] ? kmem_cache_free+0x77/0x280 [ 32.153844] ? put_pid+0x176/0x1f0 [ 32.153850] ? kvm_vcpu_ioctl+0xd75/0x1010 [ 32.153856] ? do_vfs_ioctl+0x1b1/0x1530 [ 32.153860] ? SyS_ioctl+0x8f/0xc0 [ 32.153863] ? entry_SYSCALL_64_fastpath+0x1f/0x96 [ 32.153871] ? __init_waitqueue_head+0x97/0x140 [ 32.153878] ? wake_up_q+0xe0/0xe0 [ 32.153883] ? __lockdep_init_map+0xe4/0x650 [ 32.153888] ? check_noncircular+0x20/0x20 [ 32.153894] ? print_usage_bug+0x3f0/0x3f0 [ 32.153905] ? __wait_rcu_gp+0x25d/0x420 [ 32.153909] ? rcu_gp_is_normal+0x140/0x140 [ 32.153927] ? __lock_is_held+0xbc/0x140 [ 32.153935] ? put_pid+0x176/0x1f0 [ 32.153943] ? put_pid+0x176/0x1f0 [ 32.153948] ? rcu_read_lock_sched_held+0x108/0x120 [ 32.153956] ? put_pid_ns+0xa6/0xc0 [ 32.153963] ? put_pid+0x183/0x1f0 [ 32.153969] ? task_active_pid_ns+0xd0/0xd0 [ 32.153983] kvm_vcpu_ioctl+0x64c/0x1010 [ 32.153987] ? kvm_vcpu_ioctl+0x64c/0x1010 [ 32.153994] ? __kvm_gfn_to_hva_cache_init+0xbb0/0xbb0 [ 32.154004] ? find_held_lock+0x39/0x1d0 [ 32.154027] ? lock_downgrade+0x990/0x990 [ 32.154038] ? __fget+0xbb/0x580 [ 32.154057] ? lock_release+0xd90/0xd90 [ 32.154070] ? __lock_is_held+0xbc/0x140 [ 32.154096] ? __fget+0x362/0x580 [ 32.154117] ? iterate_fd+0x3f0/0x3f0 [ 32.154133] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 32.154155] ? __kvm_gfn_to_hva_cache_init+0xbb0/0xbb0 [ 32.154163] do_vfs_ioctl+0x1b1/0x1530 [ 32.154181] ? ioctl_preallocate+0x2b0/0x2b0 [ 32.154195] ? selinux_capable+0x40/0x40 [ 32.154212] ? lockdep_invariant_state+0xab/0x120 [ 32.154223] ? syscall_return_slowpath+0x2b3/0x510 [ 32.154233] ? finish_task_switch+0x4eb/0x740 [ 32.154253] ? security_file_ioctl+0x89/0xb0 [ 32.154268] SyS_ioctl+0x8f/0xc0 [ 32.154283] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 32.154289] RIP: 0033:0x446009 [ 32.154293] RSP: 002b:00007f0128e81dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 32.154300] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000446009 [ 32.154304] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 32.154308] RBP: 0000000000000086 R08: 00007f0128e82700 R09: 00007f0128e82700 [ 32.154313] R10: 00007f0128e82700 R11: 0000000000000202 R12: 0000000000000000 [ 32.154317] R13: 00007ffcf1bb86af R14: 00007f0128e829c0 R15: 0000000000000000 [ 32.154855] Dumping ftrace buffer: [ 32.154884] (ftrace buffer empty) [ 32.154887] Kernel Offset: disabled [ 33.071138] Rebooting in 86400 seconds..