INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added 'ci-upstream-mmots-kasan-gce-9,10.128.0.43' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   32.380978] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu
[   32.387835] usercopy: kernel memory overwrite attempt detected to ffff8801d1f59bd4 (kvm_vcpu) (1320 bytes)
[   32.389288] ------------[ cut here ]------------
[   32.389978] kernel BUG at mm/usercopy.c:84!
[   32.390606] invalid opcode: 0000 [#1] SMP KASAN
[   32.391245] Dumping ftrace buffer:
[   32.391720]    (ftrace buffer empty)
[   32.392215] Modules linked in:
[   32.392703] CPU: 0 PID: 2991 Comm: syzkaller131028 Not tainted 4.14.0-rc5-mm1+ #20
[   32.393728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   32.395064] task: ffff8801d292a540 task.stack: ffff8801d1f38000
[   32.395891] RIP: 0010:__check_object_size+0x3a2/0x4f0
[   32.396577] RSP: 0018:ffff8801d1f3f148 EFLAGS: 00010286
[   32.397308] RAX: 000000000000005e RBX: ffffffff8511a100 RCX: 0000000000000000
[   32.398259] RDX: 000000000000005e RSI: 1ffff1003a3e7de9 RDI: ffffed003a3e7e1d
[   32.399251] RBP: ffff8801d1f3f238 R08: 0000000000000001 R09: 0000000000000000
[   32.400215] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8511a0c0
[   32.401169] R13: ffff8801d1f59bd4 R14: 0000000000000528 R15: ffffea000747d600
[   32.408405] FS:  0000000000902880(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
[   32.416598] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   32.422446] CR2: 0000000020ebb000 CR3: 00000001d99f0000 CR4: 00000000001426f0
[   32.429684] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   32.436920] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   32.444154] Call Trace:
[   32.446716]  ? lock_release+0xa40/0xa40
[   32.450660]  ? check_stack_object+0x140/0x140
[   32.455123]  ? check_noncircular+0x20/0x20
[   32.459327]  ? __might_sleep+0x95/0x190
[   32.463275]  kvm_vcpu_ioctl_set_cpuid2+0x75/0x1a0
[   32.468085]  kvm_arch_vcpu_ioctl+0x1718/0x4710
[   32.472634]  ? find_held_lock+0x35/0x1d0
[   32.476661]  ? kvm_arch_vcpu_put+0x3e0/0x3e0
[   32.481034]  ? depot_save_stack+0x3b5/0x490
[   32.485320]  ? lock_downgrade+0x990/0x990
[   32.489445]  ? do_raw_spin_trylock+0x190/0x190
[   32.493996]  ? is_bpf_text_address+0xa4/0x120
[   32.498455]  ? kernel_text_address+0x102/0x140
[   32.503003]  ? __kernel_text_address+0xd/0x40
[   32.507464]  ? unwind_get_return_address+0x61/0xa0
[   32.512361]  ? trace_hardirqs_off+0xd/0x10
[   32.516564]  ? _raw_spin_unlock_irqrestore+0xa6/0xba
[   32.521637]  ? depot_save_stack+0x3b5/0x490
[   32.525926]  ? __vunmap+0x247/0x2e0
[   32.529520]  ? save_stack+0xa3/0xd0
[   32.533115]  ? lock_acquire+0x1d5/0x580
[   32.537055]  ? lock_acquire+0x1d5/0x580
[   32.540994]  ? vcpu_load+0x1c/0x70
[   32.544502]  ? lock_release+0xa40/0xa40
[   32.548445]  ? trace_event_raw_event_sched_switch+0x8a0/0x8a0
[   32.554298]  ? rcu_note_context_switch+0x710/0x710
[   32.559194]  ? __might_sleep+0x95/0x190
[   32.563133]  ? vcpu_load+0x1c/0x70
[   32.566644]  ? __mutex_lock+0x16f/0x19d0
[   32.570668]  ? vcpu_load+0x1c/0x70
[   32.574173]  ? vcpu_load+0x1c/0x70
[   32.577678]  ? trace_hardirqs_off+0xd/0x10
[   32.581879]  ? mutex_lock_io_nested+0x1880/0x1880
[   32.586688]  ? find_held_lock+0x35/0x1d0
[   32.590720]  ? __might_fault+0x110/0x1d0
[   32.594745]  ? lock_downgrade+0x990/0x990
[   32.598858]  ? vmx_vcpu_load+0x9c6/0xdd0
[   32.602889]  ? handle_invept+0x5f0/0x5f0
[   32.606916]  ? __might_sleep+0x95/0x190
[   32.610861]  ? kasan_check_read+0x11/0x20
[   32.614984]  ? _copy_to_user+0xa2/0xc0
[   32.618840]  ? kvm_arch_dev_ioctl+0xc7/0x3b0
[   32.623215]  ? kvm_vm_ioctl_check_extension+0x510/0x510
[   32.628546]  ? kvm_arch_vcpu_load+0x1c1/0x890
[   32.633006]  ? kvm_arch_vcpu_load+0x4b1/0x890
[   32.637465]  ? find_held_lock+0x35/0x1d0
[   32.641492]  ? kvm_arch_dev_ioctl+0x3b0/0x3b0
[   32.645955]  ? __hrtick_start+0x1d0/0x1d0
[   32.650069]  ? avc_has_extended_perms+0x6e5/0x12c0
[   32.654969]  ? vcpu_load+0x4b/0x70
[   32.658475]  kvm_vcpu_ioctl+0x240/0x1010
[   32.662503]  ? __kvm_gfn_to_hva_cache_init+0xbb0/0xbb0
[   32.667745]  ? is_bpf_text_address+0xa4/0x120
[   32.672205]  ? avc_has_extended_perms+0x7fa/0x12c0
[   32.677101]  ? unwind_get_return_address+0x6e/0xa0
[   32.681997]  ? avc_ss_reset+0x110/0x110
[   32.685940]  ? putname+0xee/0x130
[   32.689363]  ? save_stack+0xa3/0xd0
[   32.692955]  ? save_stack+0x43/0xd0
[   32.696546]  ? kasan_slab_free+0x71/0xc0
[   32.700573]  ? kmem_cache_free+0x77/0x280
[   32.704685]  ? putname+0xee/0x130
[   32.708104]  ? do_sys_open+0x31b/0x6d0
[   32.711965]  ? __lock_is_held+0xb6/0x140
[   32.716000]  ? trace_event_raw_event_sched_switch+0x8a0/0x8a0
[   32.721854]  ? rcu_note_context_switch+0x710/0x710
[   32.726747]  ? get_unused_fd_flags+0x190/0x190
[   32.731296]  ? __kvm_gfn_to_hva_cache_init+0xbb0/0xbb0
[   32.736536]  do_vfs_ioctl+0x1b1/0x1520
[   32.740392]  ? _cond_resched+0x14/0x30
[   32.744245]  ? ioctl_preallocate+0x2b0/0x2b0
[   32.748621]  ? selinux_capable+0x40/0x40
[   32.752649]  ? putname+0xf3/0x130
[   32.756074]  ? do_sys_open+0x320/0x6d0
[   32.759934]  ? security_file_ioctl+0x89/0xb0
[   32.764308]  SyS_ioctl+0x8f/0xc0
[   32.767643]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   32.772362] RIP: 0033:0x442f87
[   32.775517] RSP: 002b:00007ffd184312b8 EFLAGS: 00000217 ORIG_RAX: 0000000000000010
[   32.783189] RAX: ffffffffffffffda RBX: 00007ffd18431990 RCX: 0000000000442f87
[   32.790424] RDX: 00007ffd18431990 RSI: 000000004008ae90 RDI: 0000000000000005
[   32.797659] RBP: 0000000000000082 R08: 0000000000000001 R09: ffffffffffffffff
[   32.804894] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004040a0
[   32.812138] R13: 0000000000404130 R14: 0000000000000000 R15: 0000000000000000
[   32.819381] Code: 48 0f 44 da e8 e0 d7 c3 ff 48 8b 85 28 ff ff ff 4d 89 f1 4c 89 e9 4c 89 e2 48 89 de 48 c7 c7 c0 a1 11 85 49 89 c0 e8 33 e3 ad ff <0f> 0b 48 c7 c0 80 9f 11 85 eb 96 48 c7 c0 c0 9f 11 85 eb 8d 48 
[   32.838449] RIP: __check_object_size+0x3a2/0x4f0 RSP: ffff8801d1f3f148
[   32.845171] ---[ end trace 33e1651d792401c5 ]---
[   32.850065] Kernel panic - not syncing: Fatal exception
[   32.855432] Dumping ftrace buffer:
[   32.858939]    (ftrace buffer empty)
[   32.862711] Kernel Offset: disabled
[   32.866308] Rebooting in 86400 seconds..