INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-8,10.128.0.20' (ECDSA) to the list of known hosts. 2017/09/28 19:58:48 parsed 1 programs 2017/09/28 19:58:48 executed programs: 0 2017/09/28 19:58:53 executed programs: 526 2017/09/28 19:58:59 executed programs: 1064 2017/09/28 19:59:04 executed programs: 1589 2017/09/28 19:59:09 executed programs: 2127 2017/09/28 19:59:14 executed programs: 2661 2017/09/28 19:59:19 executed programs: 3191 2017/09/28 19:59:24 executed programs: 3733 2017/09/28 19:59:29 executed programs: 4272 2017/09/28 19:59:34 executed programs: 4802 2017/09/28 19:59:39 executed programs: 5336 2017/09/28 19:59:44 executed programs: 5856 2017/09/28 19:59:49 executed programs: 6401 2017/09/28 19:59:54 executed programs: 6941 2017/09/28 19:59:59 executed programs: 7492 2017/09/28 20:00:04 executed programs: 8031 2017/09/28 20:00:09 executed programs: 8573 2017/09/28 20:00:14 executed programs: 9114 2017/09/28 20:00:19 executed programs: 9653 2017/09/28 20:00:24 executed programs: 10188 2017/09/28 20:00:29 executed programs: 10720 2017/09/28 20:00:34 executed programs: 11251 2017/09/28 20:00:39 executed programs: 11789 2017/09/28 20:00:44 executed programs: 12332 2017/09/28 20:00:49 executed programs: 12865 2017/09/28 20:00:54 executed programs: 13392 2017/09/28 20:00:59 executed programs: 13929 2017/09/28 20:01:04 executed programs: 14480 2017/09/28 20:01:09 executed programs: 15028 2017/09/28 20:01:14 executed programs: 15571 2017/09/28 20:01:19 executed programs: 16121 2017/09/28 20:01:24 executed programs: 16666 2017/09/28 20:01:29 executed programs: 17205 2017/09/28 20:01:34 executed programs: 17745 2017/09/28 20:01:39 executed programs: 18287 2017/09/28 20:01:44 executed programs: 18831 2017/09/28 20:01:49 executed programs: 19372 2017/09/28 20:01:54 executed programs: 19921 2017/09/28 20:01:59 executed programs: 20462 2017/09/28 20:02:04 executed programs: 20995 2017/09/28 20:02:09 executed programs: 21547 2017/09/28 20:02:14 executed programs: 22089 2017/09/28 20:02:19 executed programs: 22621 2017/09/28 20:02:24 executed programs: 23158 2017/09/28 20:02:29 executed programs: 23665 2017/09/28 20:02:34 executed programs: 24201 2017/09/28 20:02:39 executed programs: 24742 2017/09/28 20:02:44 executed programs: 25271 2017/09/28 20:02:49 executed programs: 25803 2017/09/28 20:02:54 executed programs: 26337 2017/09/28 20:02:59 executed programs: 26879 2017/09/28 20:03:04 executed programs: 27405 2017/09/28 20:03:09 executed programs: 27932 2017/09/28 20:03:14 executed programs: 28468 2017/09/28 20:03:19 executed programs: 28995 2017/09/28 20:03:24 executed programs: 29532 2017/09/28 20:03:29 executed programs: 30061 2017/09/28 20:03:34 executed programs: 30584 2017/09/28 20:03:39 executed programs: 31124 2017/09/28 20:03:44 executed programs: 31658 2017/09/28 20:03:49 executed programs: 32189 2017/09/28 20:03:54 executed programs: 32742 2017/09/28 20:03:59 executed programs: 33279 2017/09/28 20:04:04 executed programs: 33798 2017/09/28 20:04:09 executed programs: 34332 2017/09/28 20:04:14 executed programs: 34871 2017/09/28 20:04:19 executed programs: 35393 2017/09/28 20:04:24 executed programs: 35911 2017/09/28 20:04:29 executed programs: 36440 2017/09/28 20:04:34 executed programs: 36979 2017/09/28 20:04:39 executed programs: 37509 2017/09/28 20:04:44 executed programs: 38046 2017/09/28 20:04:49 executed programs: 38593 2017/09/28 20:04:54 executed programs: 39126 2017/09/28 20:04:59 executed programs: 39661 2017/09/28 20:05:04 executed programs: 40190 2017/09/28 20:05:09 executed programs: 40737 2017/09/28 20:05:14 executed programs: 41269 syzkaller login: [ 1277.796234] kasan: CONFIG_KASAN_INLINE enabled [ 1277.796281] ------------[ cut here ]------------ [ 1277.796413] WARNING: CPU: 1 PID: 15071 at kernel/futex.c:818 get_pi_state+0x15b/0x190 [ 1277.796424] Kernel panic - not syncing: panic_on_warn set ... [ 1277.796424] [ 1277.796434] CPU: 1 PID: 15071 Comm: syz-executor0 Not tainted 4.14.0-rc2-mm1+ #9 [ 1277.796440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1277.796444] Call Trace: [ 1277.796493] dump_stack+0x194/0x257 [ 1277.796509] ? arch_local_irq_restore+0x53/0x53 [ 1277.796576] panic+0x1e4/0x417 [ 1277.796588] ? __warn+0x1d9/0x1d9 [ 1277.796606] ? show_regs_print_info+0x65/0x65 [ 1277.796638] ? get_pi_state+0x15b/0x190 [ 1277.796647] __warn+0x1c4/0x1d9 [ 1277.796658] ? get_pi_state+0x15b/0x190 [ 1277.796687] report_bug+0x211/0x2d0 [ 1277.796739] fixup_bug+0x40/0x90 [ 1277.796751] do_trap+0x260/0x390 [ 1277.796773] do_error_trap+0x120/0x390 [ 1277.796790] ? do_trap+0x390/0x390 [ 1277.796802] ? get_pi_state+0x15b/0x190 [ 1277.796816] ? find_held_lock+0x39/0x1d0 [ 1277.796877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1277.796897] do_invalid_op+0x1b/0x20 [ 1277.796920] invalid_op+0x18/0x20 [ 1277.796928] RIP: 0010:get_pi_state+0x15b/0x190 [ 1277.796935] RSP: 0018:ffff8801d8d671a8 EFLAGS: 00010297 [ 1277.796947] RAX: ffff8801d52bc280 RBX: 0000000000000000 RCX: 1ffff1003b1ace3a [ 1277.796953] RDX: 0000000000000000 RSI: 1ffff1003aa57969 RDI: ffff8801c3199300 [ 1277.796959] RBP: ffff8801d8d67238 R08: ffff8801d52bd540 R09: 0000000000000000 [ 1277.796965] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b1ace36 [ 1277.796971] R13: ffff8801c3199300 R14: 1ffff1003b1ace3a R15: ffff8801c31993c0 [ 1277.797010] ? get_pi_state+0x15b/0x190 [ 1277.797022] ? futex_wait_queue_me+0x7e0/0x7e0 [ 1277.797039] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1277.797058] exit_pi_state_list+0x543/0x780 [ 1277.797086] ? futex_wait_requeue_pi.constprop.19+0x1300/0x1300 [ 1277.797100] ? lock_release+0xd70/0xd70 [ 1277.797137] ? trace_event_raw_event_sched_switch+0x770/0x770 [ 1277.797148] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 1277.797171] ? __might_sleep+0x95/0x190 [ 1277.797212] ? __might_fault+0x188/0x1d0 [ 1277.797232] ? do_raw_spin_trylock+0x190/0x190 [ 1277.797248] mm_release+0x46d/0x590 [ 1277.797256] ? do_raw_spin_trylock+0x190/0x190 [ 1277.797267] ? mm_access+0x140/0x140 [ 1277.797275] ? _raw_spin_unlock_irq+0x27/0x70 [ 1277.797290] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1277.797302] ? trace_hardirqs_on+0xd/0x10 [ 1277.797311] ? _raw_spin_unlock_irq+0x27/0x70 [ 1277.797336] ? acct_collect+0x637/0x800 [ 1277.797352] do_exit+0x481/0x1b00 [ 1277.797363] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 1277.797377] ? trace_hardirqs_on_caller+0x330/0x5c0 [ 1277.797387] ? mm_update_next_owner+0x930/0x930 [ 1277.797395] ? trace_hardirqs_on+0xd/0x10 [ 1277.797440] ? hrtimer_try_to_cancel+0x9a/0x5c0 [ 1277.797456] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 1277.797468] ? do_raw_spin_trylock+0x190/0x190 [ 1277.797478] ? fault_in_user_writeable+0x90/0x90 [ 1277.797503] ? fixup_pi_state_owner.isra.16+0x980/0x980 [ 1277.797523] ? check_noncircular+0x20/0x20 [ 1277.797533] ? hrtimer_cancel+0x2e/0x40 [ 1277.797545] ? futex_wait_requeue_pi.constprop.19+0x8a8/0x1300 [ 1277.797567] ? futex_requeue+0x2370/0x2370 [ 1277.797594] ? find_held_lock+0x39/0x1d0 [ 1277.797621] ? lock_downgrade+0x990/0x990 [ 1277.797647] ? recalc_sigpending_tsk+0x117/0x150 [ 1277.797661] ? recalc_sigpending+0x103/0x160 [ 1277.797672] ? recalc_sigpending_tsk+0x150/0x150 [ 1277.797680] ? get_signal+0x2b2/0x16d0 [ 1277.797709] do_group_exit+0x149/0x400 [ 1277.797719] ? __lock_is_held+0xbc/0x140 [ 1277.797729] ? SyS_exit+0x30/0x30 [ 1277.797738] ? _raw_spin_unlock_irq+0x27/0x70 [ 1277.797752] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1277.797769] get_signal+0x73f/0x16d0 [ 1277.797794] ? ptrace_notify+0x130/0x130 [ 1277.797817] ? __schedule+0x8f0/0x2070 [ 1277.797838] ? exit_robust_list+0x240/0x240 [ 1277.797859] ? check_noncircular+0x20/0x20 [ 1277.797877] do_signal+0x94/0x1ee0 [ 1277.797898] ? find_held_lock+0x39/0x1d0 [ 1277.797913] ? setup_sigcontext+0x7d0/0x7d0 [ 1277.797933] ? lock_downgrade+0x990/0x990 [ 1277.797969] ? lock_release+0xd70/0xd70 [ 1277.797980] ? trace_event_raw_event_sched_switch+0x770/0x770 [ 1277.797988] ? lock_acquire+0x1d5/0x580 [ 1277.797997] ? finish_task_switch+0x1aa/0x740 [ 1277.798006] ? exit_to_usermode_loop+0x8c/0x310 [ 1277.798028] exit_to_usermode_loop+0x214/0x310 [ 1277.798043] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 1277.798081] ? kasan_check_write+0x14/0x20 [ 1277.798106] syscall_return_slowpath+0x42f/0x510 [ 1277.798120] ? prepare_exit_to_usermode+0x2d0/0x2d0 [ 1277.798131] ? entry_SYSCALL_64_fastpath+0x91/0xbe [ 1277.798145] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1277.798157] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1277.798179] entry_SYSCALL_64_fastpath+0xbc/0xbe [ 1277.798187] RIP: 0033:0x4520a9 [ 1277.798192] RSP: 002b:00007fca1cf26c08 EFLAGS: 00000216 ORIG_RAX: 00000000000000ca [ 1277.798203] RAX: 0000000000000000 RBX: 00000000007180b0 RCX: 00000000004520a9 [ 1277.798209] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc [ 1277.798215] RBP: 00000000000008f0 R08: 0000000020048000 R09: 0000000000000000 [ 1277.798221] R10: 0000000020edfff0 R11: 0000000000000216 R12: 00000000004b77c8 [ 1277.798227] R13: 00000000ffffffff R14: 000000002000cffc R15: 000080000000000b [ 1278.298822] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1278.306149] general protection fault: 0000 [#1] SMP KASAN [ 1278.311652] Dumping ftrace buffer: [ 1278.315156] (ftrace buffer empty) [ 1278.318835] Modules linked in: [ 1278.322003] CPU: 0 PID: 15060 Comm: syz-executor0 Not tainted 4.14.0-rc2-mm1+ #9 [ 1278.329499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.338818] task: ffff8801c1a54300 task.stack: ffff8801cbc48000 [ 1278.344844] RIP: 0010:lock_release+0x233/0xd70 [ 1278.349388] RSP: 0018:ffff8801cbc4ef40 EFLAGS: 00010006 [ 1278.354717] RAX: dffffc0000000000 RBX: 1ffff10039789ded RCX: 1ffff10038633261 [ 1278.361952] RDX: 0000000000000103 RSI: 0000000000000001 RDI: 0000000000000818 [ 1278.369188] RBP: ffff8801cbc4f0f0 R08: 1ffff10038633261 R09: ffff8801cbc4ea60 [ 1278.376425] R10: ffff8801c1a54300 R11: 1ffff1003834aaf3 R12: ffff8801cbc4efc8 [ 1278.383659] R13: ffff8801cbc4f0c8 R14: 00000000000007f8 R15: ffffffff85cc8a80 [ 1278.390897] FS: 00007fca1cf48700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 1278.399086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1278.404932] CR2: 0000000000a6fa18 CR3: 00000001d02bf000 CR4: 00000000001406f0 [ 1278.412169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1278.419405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1278.426639] Call Trace: [ 1278.429196] ? put_pi_state+0x252/0x520 [ 1278.433137] ? lock_downgrade+0x990/0x990 [ 1278.437252] ? try_to_wake_up+0xf9/0x1600 [ 1278.441365] ? lock_acquire+0x1d5/0x580 [ 1278.445306] ? put_pi_state+0xe4/0x520 [ 1278.449161] ? migrate_swap_stop+0x970/0x970 [ 1278.453534] ? lock_release+0xd70/0xd70 [ 1278.457473] ? rt_mutex_adjust_prio+0x146/0x1d0 [ 1278.462107] ? rt_mutex_enqueue_pi+0x290/0x290 [ 1278.466659] ? do_raw_spin_lock+0x151/0x1e0 [ 1278.470947] _raw_spin_unlock_irq+0x1a/0x70 [ 1278.475235] put_pi_state+0x252/0x520 [ 1278.479002] ? attach_to_pi_state+0x3a0/0x3a0 [ 1278.483463] ? wake_up_q+0x8a/0xe0 [ 1278.486969] ? rt_mutex_futex_unlock+0xc0/0x110 [ 1278.491603] ? __rt_mutex_futex_unlock+0x1b0/0x1b0 [ 1278.496502] exit_pi_state_list+0x55c/0x780 [ 1278.500792] ? futex_wait_requeue_pi.constprop.19+0x1300/0x1300 [ 1278.506814] ? lock_release+0xd70/0xd70 [ 1278.510762] ? trace_event_raw_event_sched_switch+0x770/0x770 [ 1278.516613] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 1278.521686] ? __might_sleep+0x95/0x190 [ 1278.525628] ? __might_fault+0x188/0x1d0 [ 1278.529655] ? do_raw_spin_trylock+0x190/0x190 [ 1278.534206] mm_release+0x46d/0x590 [ 1278.537799] ? do_raw_spin_trylock+0x190/0x190 [ 1278.542346] ? mm_access+0x140/0x140 [ 1278.546025] ? _raw_spin_unlock_irq+0x27/0x70 [ 1278.550487] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1278.555476] ? trace_hardirqs_on+0xd/0x10 [ 1278.559590] ? _raw_spin_unlock_irq+0x27/0x70 [ 1278.564050] ? acct_collect+0x637/0x800 [ 1278.567991] do_exit+0x481/0x1b00 [ 1278.571411] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 1278.576479] ? trace_hardirqs_on_caller+0x330/0x5c0 [ 1278.581459] ? mm_update_next_owner+0x930/0x930 [ 1278.586094] ? trace_hardirqs_on+0xd/0x10 [ 1278.590209] ? hrtimer_try_to_cancel+0x9a/0x5c0 [ 1278.594848] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 1278.599746] ? get_futex_value_locked+0xc3/0xf0 [ 1278.604384] ? do_raw_spin_trylock+0x190/0x190 [ 1278.608932] ? futex_wake+0x680/0x680 [ 1278.612700] ? memset+0x31/0x40 [ 1278.615947] ? check_noncircular+0x20/0x20 [ 1278.620160] ? hrtimer_cancel+0x2e/0x40 [ 1278.624099] ? futex_wait_requeue_pi.constprop.19+0x8a8/0x1300 [ 1278.630038] ? futex_requeue+0x2370/0x2370 [ 1278.634243] ? find_held_lock+0x39/0x1d0 [ 1278.638274] ? lock_downgrade+0x990/0x990 [ 1278.642388] ? recalc_sigpending_tsk+0x117/0x150 [ 1278.647110] ? recalc_sigpending+0x103/0x160 [ 1278.651482] ? recalc_sigpending_tsk+0x150/0x150 [ 1278.656201] ? get_signal+0x2b2/0x16d0 [ 1278.660062] do_group_exit+0x149/0x400 [ 1278.663914] ? __lock_is_held+0xbc/0x140 [ 1278.667940] ? SyS_exit+0x30/0x30 [ 1278.671360] ? _raw_spin_unlock_irq+0x27/0x70 [ 1278.675821] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1278.680804] get_signal+0x73f/0x16d0 [ 1278.684488] ? ptrace_notify+0x130/0x130 [ 1278.688550] ? vma_wants_writenotify+0x3b0/0x3b0 [ 1278.693278] ? exit_robust_list+0x240/0x240 [ 1278.697567] ? lock_downgrade+0x990/0x990 [ 1278.701681] ? SyS_brk+0x6f0/0x6f0 [ 1278.705190] do_signal+0x94/0x1ee0 [ 1278.708695] ? arch_get_unmapped_area+0x750/0x750 [ 1278.713501] ? lock_acquire+0x1d5/0x580 [ 1278.717441] ? find_held_lock+0x39/0x1d0 [ 1278.721468] ? setup_sigcontext+0x7d0/0x7d0 [ 1278.725764] ? lock_downgrade+0x990/0x990 [ 1278.729881] ? down_write+0x120/0x120 [ 1278.733647] ? lock_release+0xd70/0xd70 [ 1278.737589] ? trace_event_raw_event_sched_switch+0x770/0x770 [ 1278.743496] ? vm_mmap_pgoff+0x1fc/0x280 [ 1278.747526] ? exit_to_usermode_loop+0x8c/0x310 [ 1278.752163] exit_to_usermode_loop+0x214/0x310 [ 1278.756711] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 1278.762214] ? kasan_check_write+0x14/0x20 [ 1278.766418] syscall_return_slowpath+0x42f/0x510 [ 1278.771141] ? prepare_exit_to_usermode+0x2d0/0x2d0 [ 1278.776122] ? entry_SYSCALL_64_fastpath+0x91/0xbe [ 1278.781020] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1278.786002] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1278.790727] entry_SYSCALL_64_fastpath+0xbc/0xbe [ 1278.795449] RIP: 0033:0x4520a9