INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-9,10.128.0.42' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 42.482085] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu executing program [ 42.512754] *** Guest State *** [ 42.533120] *** Guest State *** [ 42.533125] CR0: actual=0x0000000080000031, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 42.533129] CR4: actual=0x0000000000002051, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 42.533131] CR3 = 0x00000000fffbc000 [ 42.533133] RSP = 0x000000000000fffa RIP = 0x0000000000000000 [ 42.533136] RFLAGS=0x00033000 DR7 = 0x0000000000000400 [ 42.533141] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 42.533145] CS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.533150] DS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.533156] SS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.533160] ES: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.533166] FS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.533171] GS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.533175] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 42.533180] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 42.533184] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 42.533190] TR: sel=0x0000, attr=0x0008b, limit=0x00002088, base=0x0000000000000000 [ 42.533193] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 42.533196] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 42.533199] Interruptibility = 00000000 ActivityState = 00000000 [ 42.533201] *** Host State *** [ 42.533205] RIP = 0xffffffff811b6397 RSP = 0xffff8801ceaff4c8 [ 42.533212] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 42.533215] FSBase=00007fb85cace700 GSBase=ffff8801db200000 TRBase=ffff8801db222d40 [ 42.533219] GDTBase=ffffffffff577000 IDTBase=ffffffffff57b000 [ 42.533223] CR0=0000000080050033 CR3=00000001cf646000 CR4=00000000001426f0 [ 42.533228] Sysenter RSP=0000000000000000 CS:RIP=0010:ffffffff84d6e5c0 [ 42.533231] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 42.533233] *** Control State *** [ 42.533235] PinBased=0000003f CPUBased=b699edfa SecondaryExec=0000004a [ 42.533237] EntryControls=0000d1ff ExitControls=0023efff [ 42.533241] ExceptionBitmap=ffffbfff PFECmask=00000000 PFECmatch=00000000 [ 42.533243] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 42.533246] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 42.533248] reason=80000021 qualification=0000000000000000 [ 42.533250] IDTVectoring: info=00000000 errcode=00000000 [ 42.533251] TSC Offset = 0xffffffe787860354 [ 42.533254] EPT pointer = 0x00000001ce32401e [ 42.534510] *** Guest State *** [ 42.534515] CR0: actual=0x0000000080000031, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 42.534519] CR4: actual=0x0000000000002051, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 42.534520] CR3 = 0x00000000fffbc000 [ 42.534522] RSP = 0x000000000000fffa RIP = 0x0000000000000000 [ 42.534525] RFLAGS=0x00033000 DR7 = 0x0000000000000400 [ 42.534530] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 42.534533] CS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.534539] DS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.534545] SS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.534550] ES: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.534555] FS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.534561] GS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.534565] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 42.534570] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 42.534574] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 42.534579] TR: sel=0x0000, attr=0x0008b, limit=0x00002088, base=0x0000000000000000 [ 42.534582] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 42.534586] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 42.534589] Interruptibility = 00000000 ActivityState = 00000000 [ 42.534590] *** Host State *** [ 42.534595] RIP = 0xffffffff811b6397 RSP = 0xffff8801ce89f4c8 [ 42.534602] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 42.534605] FSBase=00007fb85cace700 GSBase=ffff8801db200000 TRBase=ffff8801db222d40 [ 42.534608] GDTBase=ffffffffff577000 IDTBase=ffffffffff57b000 [ 42.534613] CR0=0000000080050033 CR3=00000001d2fa4000 CR4=00000000001426f0 [ 42.534617] Sysenter RSP=0000000000000000 CS:RIP=0010:ffffffff84d6e5c0 [ 42.534621] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 42.534622] *** Control State *** [ 42.534625] PinBased=0000003f CPUBased=b699edfa SecondaryExec=0000004a [ 42.534627] EntryControls=0000d1ff ExitControls=0023efff [ 42.534631] ExceptionBitmap=ffffbfff PFECmask=00000000 PFECmatch=00000000 [ 42.534633] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 42.534636] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 42.534638] reason=80000021 qualification=0000000000000000 [ 42.534640] IDTVectoring: info=00000000 errcode=00000000 [ 42.534642] TSC Offset = 0xffffffe7857c1be7 [ 42.534645] EPT pointer = 0x00000001ce74c01e [ 42.537086] *** Guest State *** [ 42.537090] CR0: actual=0x0000000080000031, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 42.537094] CR4: actual=0x0000000000002051, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 42.537096] CR3 = 0x00000000fffbc000 [ 42.537098] RSP = 0x000000000000fffa RIP = 0x0000000000000000 [ 42.537101] RFLAGS=0x00033000 DR7 = 0x0000000000000400 [ 42.537106] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 42.537109] CS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.537115] DS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.537121] SS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.537126] ES: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.537131] FS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.537137] GS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.537141] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 42.537146] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 42.537150] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 42.537155] TR: sel=0x0000, attr=0x0008b, limit=0x00002088, base=0x0000000000000000 [ 42.537158] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 42.537162] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 42.537164] Interruptibility = 00000000 ActivityState = 00000000 [ 42.537166] *** Host State *** [ 42.537170] RIP = 0xffffffff811b6397 RSP = 0xffff8801cf1374c8 [ 42.537177] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 42.537180] FSBase=00007fb8592c8700 GSBase=ffff8801db300000 TRBase=ffff8801db322d40 [ 42.537184] GDTBase=ffffffffff576000 IDTBase=ffffffffff57b000 [ 42.537188] CR0=0000000080050033 CR3=00000001cf26e000 CR4=00000000001426e0 [ 42.537193] Sysenter RSP=0000000000000000 CS:RIP=0010:ffffffff84d6e5c0 [ 42.537196] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 42.537198] *** Control State *** [ 42.537200] PinBased=0000003f CPUBased=b699edfa SecondaryExec=0000004a [ 42.537202] EntryControls=0000d1ff ExitControls=0023efff [ 42.537206] ExceptionBitmap=ffffbfff PFECmask=00000000 PFECmatch=00000000 [ 42.537208] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 42.537211] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 42.537213] reason=80000021 qualification=0000000000000000 [ 42.537215] IDTVectoring: info=00000000 errcode=00000000 [ 42.537217] TSC Offset = 0xffffffe7843da8b5 [ 42.537219] EPT pointer = 0x00000001cdded01e [ 42.538120] *** Guest State *** [ 42.538125] CR0: actual=0x0000000080000031, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 42.538128] CR4: actual=0x0000000000002051, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 42.538130] CR3 = 0x00000000fffbc000 [ 42.538132] RSP = 0x000000000000fffa RIP = 0x0000000000000000 [ 42.538136] RFLAGS=0x00033000 DR7 = 0x0000000000000400 [ 42.538141] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 42.538144] CS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.538150] DS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.538155] SS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.538160] ES: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.538165] FS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.538171] GS: sel=0x0000, attr=0x000f3, limit=0x0000ffff, base=0x0000000000000000 [ 42.538174] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 42.538180] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 42.538184] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 42.538189] TR: sel=0x0000, attr=0x0008b, limit=0x00002088, base=0x0000000000000000 [ 42.538192] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 42.538196] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 42.538198] Interruptibility = 00000000 ActivityState = 00000000 [ 42.538200] *** Host State *** [ 42.538203] RIP = 0xffffffff811b6397 RSP = 0xffff8801cdec74c8 [ 42.538210] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 42.538213] FSBase=00007fb859ac8700 GSBase=ffff8801db200000 TRBase=ffff8801db222d40 [ 42.538217] GDTBase=ffffffffff577000 IDTBase=ffffffffff57b000 [ 42.538221] CR0=0000000080050033 CR3=00000001cf646000 CR4=00000000001426f0 [ 42.538226] Sysenter RSP=0000000000000000 CS:RIP=0010:ffffffff84d6e5c0 [ 42.538229] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 42.538230] *** Control State *** [ 42.538233] PinBased=0000003f CPUBased=b699edfa SecondaryExec=0000004a [ 42.538235] EntryControls=0000d1ff ExitControls=0023efff [ 42.538239] ExceptionBitmap=ffffbfff PFECmask=00000000 PFECmatch=00000000 [ 42.538241] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 42.538243] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 42.538245] reason=80000021 qualification=0000000000000000 [ 42.538247] IDTVectoring: info=00000000 errcode=00000000 [ 42.538249] TSC Offset = 0xffffffe787860354 [ 42.538252] EPT pointer = 0x00000001ce32401e [ 42.538581] ------------[ cut here ]------------ [ 42.538598] WARNING: CPU: 0 PID: 3125 at arch/x86/kvm/x86.c:7224 kvm_arch_vcpu_ioctl_run+0x213/0x58b0 [ 42.538601] Kernel panic - not syncing: panic_on_warn set ... [ 42.538601] [ 42.538608] CPU: 0 PID: 3125 Comm: syzkaller812796 Not tainted 4.13.0-rc5-next-20170816+ #4 [ 42.538610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.538612] Call Trace: [ 42.538623] dump_stack+0x194/0x257 [ 42.538631] ? arch_local_irq_restore+0x53/0x53 [ 42.538650] panic+0x1e4/0x417 [ 42.538655] ? __warn+0x1d9/0x1d9 [ 42.538660] ? show_regs_print_info+0x65/0x65 [ 42.538677] ? kvm_arch_vcpu_ioctl_run+0x213/0x58b0 [ 42.538681] __warn+0x1c4/0x1d9 [ 42.538686] ? kvm_arch_vcpu_ioctl_run+0x213/0x58b0 [ 42.538694] report_bug+0x211/0x2d0 [ 42.538708] fixup_bug+0x40/0x90 [ 42.538714] do_trap+0x260/0x390 [ 42.538725] do_error_trap+0x120/0x390 [ 42.538734] ? do_trap+0x390/0x390 [ 42.538740] ? kvm_arch_vcpu_ioctl_run+0x213/0x58b0 [ 42.538746] ? fpu__activate_curr+0xed/0x650 [ 42.538753] ? fpstate_init+0x160/0x160 [ 42.538764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.538781] do_invalid_op+0x1b/0x20 [ 42.538786] invalid_op+0x1e/0x30 [ 42.538791] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x213/0x58b0 [ 42.538794] RSP: 0018:ffff8801cd997670 EFLAGS: 00010297 [ 42.538798] RAX: ffff8801ce3e67c0 RBX: ffff8801cf15b000 RCX: ffff8801ce5d055c [ 42.538801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801ce5d0360 [ 42.538803] RBP: ffff8801cd997a40 R08: 0000000000000001 R09: 0000000000000000 [ 42.538806] R10: ffff8801cd997a58 R11: 0000000000000000 R12: 0000000000000001 [ 42.538808] R13: 0000000000000000 R14: ffff8801d7661200 R15: ffff8801ce5d0140 [ 42.538830] ? unwind_get_return_address+0x61/0xa0 [ 42.538836] ? __save_stack_trace+0x7e/0xd0 [ 42.538848] ? depot_save_stack+0x12c/0x490 [ 42.538859] ? print_usage_bug+0x480/0x480 [ 42.538865] ? put_pid+0x177/0x1f0 [ 42.538873] ? save_stack+0xa3/0xd0 [ 42.538878] ? kvm_arch_vcpu_runnable+0x520/0x520 [ 42.538881] ? save_stack_trace+0x16/0x20 [ 42.538885] ? save_stack+0x43/0xd0 [ 42.538888] ? kasan_slab_free+0x71/0xc0 [ 42.538892] ? kmem_cache_free+0x77/0x280 [ 42.538895] ? put_pid+0x177/0x1f0 [ 42.538900] ? kvm_vcpu_ioctl+0xd75/0x1010 [ 42.538905] ? do_vfs_ioctl+0x1b1/0x1520 [ 42.538909] ? SyS_ioctl+0x8f/0xc0 [ 42.538916] ? entry_SYSCALL_64_fastpath+0x1f/0xbe [ 42.538922] ? wait_for_completion_interruptible+0x7d0/0x7d0 [ 42.538930] ? __lockdep_init_map+0xe4/0x650 [ 42.538935] ? check_noncircular+0x20/0x20 [ 42.538942] ? lockdep_init_map+0x9/0x10 [ 42.538946] ? __init_waitqueue_head+0x97/0x140 [ 42.538955] ? wake_up_q+0xe0/0xe0 [ 42.538975] ? __lock_is_held+0xb6/0x140 [ 42.538983] ? put_pid+0x177/0x1f0 [ 42.538991] ? put_pid+0x177/0x1f0 [ 42.538998] ? rcu_read_lock_sched_held+0x108/0x120 [ 42.539007] ? put_pid_ns+0xe9/0x120 [ 42.539015] ? put_pid+0x184/0x1f0 [ 42.539020] ? task_active_pid_ns+0xd0/0xd0 [ 42.539028] ? __might_sleep+0x95/0x190 [ 42.539038] kvm_vcpu_ioctl+0x64c/0x1010 [ 42.539041] ? kvm_vcpu_ioctl+0x64c/0x1010 [ 42.539049] ? __kvm_gfn_to_hva_cache_init+0xb80/0xb80 [ 42.539062] ? find_held_lock+0x35/0x1d0 [ 42.539075] ? __fget+0x333/0x570 [ 42.539081] ? lock_downgrade+0x990/0x990 [ 42.539089] ? lock_release+0xa40/0xa40 [ 42.539097] ? __lock_is_held+0xb6/0x140 [ 42.539113] ? __fget+0x35c/0x570 [ 42.539125] ? iterate_fd+0x3f0/0x3f0 [ 42.539135] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 42.539147] ? __kvm_gfn_to_hva_cache_init+0xb80/0xb80 [ 42.539151] do_vfs_ioctl+0x1b1/0x1520 [ 42.539162] ? ioctl_preallocate+0x2b0/0x2b0 [ 42.539171] ? selinux_capable+0x40/0x40 [ 42.539184] ? syscall_return_slowpath+0x2b3/0x500 [ 42.539188] ? finish_task_switch+0x4c9/0x740 [ 42.539201] ? security_file_ioctl+0x7d/0xb0 [ 42.539204] ? security_file_ioctl+0x89/0xb0 [ 42.539215] SyS_ioctl+0x8f/0xc0 [ 42.539228] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 42.539232] RIP: 0033:0x448f39 [ 42.539234] RSP: 002b:00007fb859ac7dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 42.539238] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000448f39 [ 42.539241] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 42.539243] RBP: 0000000000000086 R08: 00007fb859ac8700 R09: 00007fb859ac8700 [ 42.539245] R10: 00007fb859ac8700 R11: 0000000000000202 R12: 0000000000000000 [ 42.539248] R13: 00007ffe01c0af7f R14: 00007fb859ac89c0 R15: 0000000000000000 [ 42.539467] Dumping ftrace buffer: [ 42.539497] (ftrace buffer empty) [ 42.539499] Kernel Offset: disabled [ 43.961989] Rebooting in 86400 seconds..