INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. syzkaller login: [ 34.606546] BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1342 [ 34.615048] in_atomic(): 0, irqs_disabled(): 1, pid: 4492, name: syzkaller559833 [ 34.622559] 1 lock held by syzkaller559833/4492: [ 34.627289] #0: 00000000d3c337f7 (&mm->mmap_sem){++++}, at: __do_page_fault+0x381/0xe40 [ 34.635520] irq event stamp: 3862 [ 34.638954] hardirqs last enabled at (3861): [] kmem_cache_alloc+0x26f/0x760 [ 34.647767] hardirqs last disabled at (3862): [] error_entry+0x72/0xd0 [ 34.655971] softirqs last enabled at (3800): [] __do_softirq+0x778/0xaf5 [ 34.664446] softirqs last disabled at (3779): [] irq_exit+0x1d1/0x200 [ 34.672566] CPU: 0 PID: 4492 Comm: syzkaller559833 Not tainted 4.16.0+ #19 [ 34.679552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.688878] Call Trace: [ 34.691444] dump_stack+0x1b9/0x294 [ 34.695052] ? dump_stack_print_info.cold.2+0x52/0x52 [ 34.700217] ? print_lock+0xd1/0xd6 [ 34.703820] ? irq_exit+0x1d1/0x200 [ 34.707423] ? irq_exit+0x1d1/0x200 [ 34.711037] ___might_sleep.cold.88+0x11f/0x13a [ 34.715687] ? check_same_owner+0x320/0x320 [ 34.719985] ? kasan_check_read+0x11/0x20 [ 34.724112] ? do_raw_spin_unlock+0x9e/0x2e0 [ 34.728501] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 34.733062] __might_sleep+0x95/0x190 [ 34.736841] __do_page_fault+0x3ae/0xe40 [ 34.740901] ? mm_fault_error+0x380/0x380 [ 34.745034] ? lock_repin_lock+0x410/0x410 [ 34.749258] do_page_fault+0xee/0x8a7 [ 34.753043] ? vmalloc_sync_all+0x30/0x30 [ 34.757179] ? __schedule+0x80f/0x1e40 [ 34.761047] ? __sched_text_start+0x8/0x8 [ 34.765173] ? plist_check_list+0x7e/0xa0 [ 34.769304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.774127] page_fault+0x25/0x50 [ 34.777559] RIP: 0010:vmx_vcpu_run+0x95f/0x25f0 [ 34.782202] RSP: 0018:ffff8801d95b7368 EFLAGS: 00010002 [ 34.787543] RAX: 000000000000118c RBX: ffff8801d90076c0 RCX: 0000000000000282 [ 34.794788] RDX: 0000000000000000 RSI: 00000000000000fc RDI: 00000000014000c0 [ 34.802037] RBP: ffff8801d95b7c18 R08: 0000000000036f48 R09: ffffed003b200ed8 [ 34.809286] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d90076c0 [ 34.816533] R13: ffff8801dad80000 R14: 0000000000000000 R15: ffff8801d90076bf [ 34.823795] ? check_same_owner+0x320/0x320 [ 34.828093] ? do_raw_spin_unlock+0x9e/0x2e0 [ 34.832485] ? rcu_note_context_switch+0x710/0x710 [ 34.837393] ? lock_acquire+0x1dc/0x520 [ 34.841346] ? __might_sleep+0x95/0x190 [ 34.845306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.850819] ? futex_wait_queue_me+0x559/0x820 [ 34.855377] ? refill_pi_state_cache.part.7+0x300/0x300 [ 34.860720] ? kasan_check_write+0x14/0x20 [ 34.864931] ? do_raw_spin_lock+0xc1/0x200 [ 34.869143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.874656] ? get_futex_value_locked+0xcb/0xf0 [ 34.879302] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 34.884294] ? futex_wait_setup+0x279/0x400 [ 34.888596] ? futex_wake+0x750/0x750 [ 34.892377] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 34.897545] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 34.903059] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 34.908139] ? print_usage_bug+0xc0/0xc0 [ 34.912179] ? futex_wait_setup+0x400/0x400 [ 34.916490] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 34.921660] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 34.927176] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 34.932264] ? __lock_acquire+0x7f5/0x5130 [ 34.936479] ? get_futex_key+0x1e90/0x1e90 [ 34.940697] ? wait_for_completion+0x870/0x870 [ 34.945261] ? debug_check_no_locks_freed+0x310/0x310 [ 34.950431] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 34.955599] ? do_futex+0x249/0x27d0 [ 34.959288] ? rcu_read_lock_sched_held+0x108/0x120 [ 34.964281] ? kfree+0x1e9/0x260 [ 34.967625] ? kvm_vcpu_ioctl+0x2b2/0x12e0 [ 34.971840] ? exit_robust_list+0x290/0x290 [ 34.976138] ? find_held_lock+0x36/0x1c0 [ 34.980180] ? graph_lock+0x170/0x170 [ 34.983959] ? lock_downgrade+0x8e0/0x8e0 [ 34.988082] ? __fget+0x40c/0x650 [ 34.991514] ? kasan_check_read+0x11/0x20 [ 34.995641] ? find_held_lock+0x36/0x1c0 [ 34.999689] ? check_same_owner+0x320/0x320 [ 35.003986] ? fget_raw+0x20/0x20 [ 35.007418] ? kasan_unpoison_shadow+0x35/0x50 [ 35.011979] ? kasan_kmalloc+0x7a/0xe0 [ 35.015844] kasan_slab_alloc+0x12/0x20 [ 35.019795] kmem_cache_alloc+0x11b/0x760 [ 35.023921] ? ioctl_preallocate+0x2e0/0x2e0 [ 35.028307] getname_flags+0xd0/0x5a0 [ 35.032087] getname+0x19/0x20 [ 35.035268] do_sys_open+0x38e/0x770 [ 35.038960] ? filp_open+0x80/0x80 [ 35.042488] ? ksys_ioctl+0x81/0xd0 [ 35.046093] SyS_openat+0x30/0x40 [ 35.049532] ? SyS_open+0x40/0x40 [ 35.052965] do_syscall_64+0x29e/0x9d0 [ 35.056829] ? vmalloc_sync_all+0x30/0x30 [ 35.060956] ? kasan_check_write+0x14/0x20 [ 35.065168] ? syscall_return_slowpath+0x5c0/0x5c0 [ 35.070086] ? syscall_return_slowpath+0x30f/0x5c0 [ 35.074995] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 35.080342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.085172] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.090338] RIP: 0033:0x4487c9 [ 35.093504] RSP: 002b:00007f4fe57efda8 EFLAGS: 00000297 ORIG_RAX: 0000000000000101 [ 35.101192] RAX: ffffffffffffffda RBX: 00000000006dec44 RCX: 00000000004487c9 [ 35.108447] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 35.115708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.122954] R10: 0000000000000000 R11: 0000000000000297 R12: 00000000006dec40 [ 35.130199] R13: 0030656c69662f2e R14: 6d766b2f7665642f R15: 000000000000000c [ 35.137489] BUG: unable to handle kernel paging request at 000000000000590a [ 35.144576] PGD 1d9ba4067 P4D 1d9ba4067 PUD 1d9b9a067 PMD 0 [ 35.150361] Oops: 0002 [#1] SMP KASAN [ 35.154138] Dumping ftrace buffer: [ 35.157650] (ftrace buffer empty) [ 35.161333] Modules linked in: [ 35.164507] CPU: 0 PID: 4492 Comm: syzkaller559833 Tainted: G W 4.16.0+ #19 [ 35.172791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.182128] RIP: 0010:vmx_vcpu_run+0x95f/0x25f0 [ 35.186767] RSP: 0018:ffff8801d95b7368 EFLAGS: 00010002 [ 35.192104] RAX: 000000000000118c RBX: ffff8801d90076c0 RCX: 0000000000000282 [ 35.199348] RDX: 0000000000000000 RSI: 00000000000000fc RDI: 00000000014000c0 [ 35.206836] RBP: ffff8801d95b7c18 R08: 0000000000036f48 R09: ffffed003b200ed8 [ 35.214082] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d90076c0 [ 35.221327] R13: ffff8801dad80000 R14: 0000000000000000 R15: ffff8801d90076bf [ 35.228572] FS: 00007f4fe57f0700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 35.236771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.242627] CR2: 000000000000590a CR3: 00000001ad282000 CR4: 00000000001426f0 [ 35.249874] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.257118] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.264359] Call Trace: [ 35.266927] ? check_same_owner+0x320/0x320 [ 35.271224] ? do_raw_spin_unlock+0x9e/0x2e0 [ 35.275608] ? rcu_note_context_switch+0x710/0x710 [ 35.280513] ? lock_acquire+0x1dc/0x520 [ 35.284472] ? __might_sleep+0x95/0x190 [ 35.288423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 35.293935] ? futex_wait_queue_me+0x559/0x820 [ 35.298497] ? refill_pi_state_cache.part.7+0x300/0x300 [ 35.303867] ? kasan_check_write+0x14/0x20 [ 35.308084] ? do_raw_spin_lock+0xc1/0x200 [ 35.312297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 35.317811] ? get_futex_value_locked+0xcb/0xf0 [ 35.322460] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 35.327453] ? futex_wait_setup+0x279/0x400 [ 35.331753] ? futex_wake+0x750/0x750 [ 35.335531] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 35.340698] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 35.346213] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 35.351292] ? print_usage_bug+0xc0/0xc0 [ 35.355330] ? futex_wait_setup+0x400/0x400 [ 35.359634] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 35.364803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 35.370329] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 35.375411] ? __lock_acquire+0x7f5/0x5130 [ 35.379622] ? get_futex_key+0x1e90/0x1e90 [ 35.383835] ? wait_for_completion+0x870/0x870 [ 35.388395] ? debug_check_no_locks_freed+0x310/0x310 [ 35.393560] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 35.398725] ? do_futex+0x249/0x27d0 [ 35.402416] ? rcu_read_lock_sched_held+0x108/0x120 [ 35.407410] ? kfree+0x1e9/0x260 [ 35.410754] ? kvm_vcpu_ioctl+0x2b2/0x12e0 [ 35.414964] ? exit_robust_list+0x290/0x290 [ 35.419271] ? find_held_lock+0x36/0x1c0 [ 35.423309] ? graph_lock+0x170/0x170 [ 35.427084] ? lock_downgrade+0x8e0/0x8e0 [ 35.431210] ? __fget+0x40c/0x650 [ 35.434642] ? kasan_check_read+0x11/0x20 [ 35.438764] ? find_held_lock+0x36/0x1c0 [ 35.442810] ? check_same_owner+0x320/0x320 [ 35.447104] ? fget_raw+0x20/0x20 [ 35.450532] ? kasan_unpoison_shadow+0x35/0x50 [ 35.455090] ? kasan_kmalloc+0x7a/0xe0 [ 35.458955] kasan_slab_alloc+0x12/0x20 [ 35.462907] kmem_cache_alloc+0x11b/0x760 [ 35.467033] ? ioctl_preallocate+0x2e0/0x2e0 [ 35.471417] getname_flags+0xd0/0x5a0 [ 35.475198] getname+0x19/0x20 [ 35.478369] do_sys_open+0x38e/0x770 [ 35.482060] ? filp_open+0x80/0x80 [ 35.485578] ? ksys_ioctl+0x81/0xd0 [ 35.489182] SyS_openat+0x30/0x40 [ 35.492613] ? SyS_open+0x40/0x40 [ 35.496046] do_syscall_64+0x29e/0x9d0 [ 35.499909] ? vmalloc_sync_all+0x30/0x30 [ 35.504042] ? kasan_check_write+0x14/0x20 [ 35.508265] ? syscall_return_slowpath+0x5c0/0x5c0 [ 35.513180] ? syscall_return_slowpath+0x30f/0x5c0 [ 35.518102] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 35.523442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.528260] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.533424] RIP: 0033:0x4487c9 [ 35.536587] RSP: 002b:00007f4fe57efda8 EFLAGS: 00000297 ORIG_RAX: 0000000000000101 [ 35.544280] RAX: ffffffffffffffda RBX: 00000000006dec44 RCX: 00000000004487c9 [ 35.551525] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 35.558769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.566014] R10: 0000000000000000 R11: 0000000000000297 R12: 00000000006dec40 [ 35.573257] R13: 0030656c69662f2e R14: 6d766b2f7665642f R15: 000000000000000c [ 35.580501] Code: 8b a9 68 03 00 00 4c 8b b1 70 03 00 00 4c 8b b9 78 03 00 00 48 8b 89 08 03 00 00 75 05 0f 01 c2 eb 03 0f 01 c3 48 89 4c 24 08 59 <0f> 96 81 88 56 00 00 48 89 81 00 03 00 00 48 89 99 18 03 00 00 [ 35.599632] RIP: vmx_vcpu_run+0x95f/0x25f0 RSP: ffff8801d95b7368 [ 35.605748] CR2: 000000000000590a [ 35.609187] ---[ end trace 752da7ce25dee858 ]--- [ 35.613916] Kernel panic - not syncing: Fatal exception [ 35.619635] Dumping ftrace buffer: [ 35.623149] (ftrace buffer empty) [ 35.626834] Kernel Offset: disabled [ 35.630436] Rebooting in 86400 seconds..