INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-9,10.128.0.30' (ECDSA) to the list of known hosts. 2017/09/18 04:55:50 parsed 1 programs 2017/09/18 04:55:50 executed programs: 0 syzkaller login: [ 22.348670] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 22.434395] ------------[ cut here ]------------ [ 22.441390] kernel BUG at arch/x86/kvm/x86.c:7182! [ 22.484159] invalid opcode: 0000 [#1] SMP KASAN [ 22.488847] Dumping ftrace buffer: [ 22.492370] (ftrace buffer empty) [ 22.496065] Modules linked in: [ 22.499257] CPU: 0 PID: 3002 Comm: syz-executor0 Not tainted 4.14.0-rc1+ #89 [ 22.506424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.515764] task: ffff8801ceb662c0 task.stack: ffff8801ceb08000 [ 22.521812] RIP: 0010:complete_emulated_mmio+0x5c2/0x6f0 [ 22.527240] RSP: 0018:ffff8801ceb0f620 EFLAGS: 00010297 [ 22.532588] RAX: ffff8801ceb662c0 RBX: ffff8801bfd48080 RCX: 0000000000000000 [ 22.539840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801bfd482b8 [ 22.547095] RBP: ffff8801ceb0f660 R08: 0000000000000000 R09: ffff8801ceb0ef70 [ 22.554345] R10: ffff8801ceb0fa58 R11: 1ffff10039d6ceeb R12: ffffffff810d57b0 [ 22.561598] R13: ffff8801d0e6d000 R14: ffff8801d2d73900 R15: ffff8801bfd48080 [ 22.568864] FS: 00007f47ba461700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 22.577068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.583005] CR2: 0000000000000000 CR3: 00000001ceaa0000 CR4: 00000000001426f0 [ 22.590243] Call Trace: [ 22.592800] ? __lock_acquire+0x732/0x4620 [ 22.597006] ? refill_pi_state_cache.part.6+0x2f0/0x2f0 [ 22.602338] ? x86_emulate_instruction+0x1ca0/0x1ca0 [ 22.607409] kvm_arch_vcpu_ioctl_run+0x2df5/0x5b90 [ 22.612304] ? find_held_lock+0x39/0x1d0 [ 22.616335] ? mutex_lock_io_nested+0x1740/0x1740 [ 22.621151] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 22.626318] ? kvm_arch_vcpu_runnable+0x560/0x560 [ 22.631127] ? wait_for_completion+0x770/0x770 [ 22.635676] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 22.640744] ? futex_wait+0x6cf/0xa00 [ 22.644515] ? kvm_arch_has_assigned_device+0x57/0xe0 [ 22.649669] ? kvm_arch_end_assignment+0x20/0x20 [ 22.654393] ? futex_wait_setup+0x3d0/0x3d0 [ 22.658683] ? vmx_vcpu_load+0x63f/0xa30 [ 22.662711] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 22.667791] ? handle_invept+0x5f0/0x5f0 [ 22.671820] ? get_futex_key+0x1d50/0x1d50 [ 22.676022] ? kvm_set_memory_region+0x50/0x50 [ 22.680571] ? kvm_arch_vcpu_load+0x4b1/0x890 [ 22.685033] ? check_noncircular+0x20/0x20 [ 22.689234] ? kvm_arch_dev_ioctl+0x3b0/0x3b0 [ 22.693696] ? task_rq_unlock+0x90/0x90 [ 22.697646] kvm_vcpu_ioctl+0x64c/0x1010 [ 22.701674] ? kvm_vcpu_ioctl+0x64c/0x1010 [ 22.705879] ? __kvm_gfn_to_hva_cache_init+0xbb0/0xbb0 [ 22.711141] ? lock_downgrade+0x990/0x990 [ 22.715255] ? exit_robust_list+0x240/0x240 [ 22.719545] ? __fget+0xbb/0x580 [ 22.722882] ? lock_release+0xd70/0xd70 [ 22.726824] ? __lock_is_held+0xbc/0x140 [ 22.730862] ? __fget+0x362/0x580 [ 22.734288] ? iterate_fd+0x3f0/0x3f0 [ 22.738054] ? do_filp_open+0x27d/0x3b0 [ 22.741996] ? get_unused_fd_flags+0x190/0x190 [ 22.746550] ? __kvm_gfn_to_hva_cache_init+0xbb0/0xbb0 [ 22.751794] do_vfs_ioctl+0x1b1/0x1530 [ 22.755648] ? putname+0xee/0x130 [ 22.759071] ? ioctl_preallocate+0x2b0/0x2b0 [ 22.763447] ? selinux_capable+0x40/0x40 [ 22.767476] ? SyS_futex+0x260/0x390 [ 22.771157] ? SyS_futex+0x269/0x390 [ 22.774844] ? security_file_ioctl+0x7d/0xb0 [ 22.779217] ? security_file_ioctl+0x89/0xb0 [ 22.783594] SyS_ioctl+0x8f/0xc0 [ 22.786930] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 22.791663] RIP: 0033:0x451e59 [ 22.794820] RSP: 002b:00007f47ba460c08 EFLAGS: 00000216 ORIG_RAX: 0000000000000010 [ 22.802496] RAX: ffffffffffffffda RBX: 0000000000718000 RCX: 0000000000451e59 [ 22.809734] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 22.816970] RBP: 0000000000000082 R08: 0000000000000000 R09: 0000000000000000 [ 22.824206] R10: 0000000000000000 R11: 0000000000000216 R12: 00000000004b7d9c [ 22.831443] R13: 00000000ffffffff R14: 0000000020000000 R15: 0000000000fe5000 [ 22.838688] Code: 01 00 00 00 48 89 df e8 ad b2 47 00 44 89 e6 4c 89 f7 45 31 e4 e8 cf 55 4d 00 45 85 ed 41 0f 94 c4 e9 5f fc ff ff e8 ae 7a 60 00 <0f> 0b e8 a7 2c 95 00 e9 9c fa ff ff 89 45 c8 e8 9a 2c 95 00 8b [ 22.857778] RIP: complete_emulated_mmio+0x5c2/0x6f0 RSP: ffff8801ceb0f620 [ 22.864788] ---[ end trace 906e7d1156cad69b ]--- [ 22.916181] Kernel panic - not syncing: Fatal exception [ 22.921908] Dumping ftrace buffer: [ 22.925417] (ftrace buffer empty) [ 22.929093] Kernel Offset: disabled [ 22.932687] Rebooting in 86400 seconds..