[info] Using makefile-style concurrent boot in runlevel 2. [ 24.268568] audit: type=1800 audit(1540676354.946:21): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2018/10/27 21:39:32 parsed 1 programs 2018/10/27 21:39:34 executed programs: 0 syzkaller login: [ 43.590244] IPVS: ftp: loaded support on port[0] = 21 [ 43.593268] IPVS: ftp: loaded support on port[0] = 21 [ 43.604827] IPVS: ftp: loaded support on port[0] = 21 [ 43.613329] IPVS: ftp: loaded support on port[0] = 21 [ 43.614952] IPVS: ftp: loaded support on port[0] = 21 [ 43.629449] IPVS: ftp: loaded support on port[0] = 21 [ 44.670350] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.676848] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.688722] device bridge_slave_0 entered promiscuous mode [ 44.714551] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.726672] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.740292] device bridge_slave_0 entered promiscuous mode [ 44.764668] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.772054] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.779986] device bridge_slave_0 entered promiscuous mode [ 44.793660] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.806586] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.815081] device bridge_slave_1 entered promiscuous mode [ 44.825112] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.843316] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.851096] device bridge_slave_0 entered promiscuous mode [ 44.860724] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.867242] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.878610] device bridge_slave_0 entered promiscuous mode [ 44.886390] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.893433] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.904408] device bridge_slave_1 entered promiscuous mode [ 44.913551] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.920673] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.928306] device bridge_slave_1 entered promiscuous mode [ 44.938078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.947051] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.957806] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.965981] device bridge_slave_1 entered promiscuous mode [ 44.973627] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.989472] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.996837] device bridge_slave_0 entered promiscuous mode [ 45.004962] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.011820] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.019677] device bridge_slave_1 entered promiscuous mode [ 45.026352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.035862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.049847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.062466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.083649] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.093858] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.101813] device bridge_slave_1 entered promiscuous mode [ 45.111019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.121665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.130658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.139615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.148994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.223261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.247257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.336176] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.364325] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.380848] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.441758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.457752] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.470457] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.482743] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.499949] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.522259] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.535038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.551907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.559961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.569255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.593874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.601992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.610955] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.627970] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.652224] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.865143] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.873748] team0: Port device team_slave_0 added [ 45.879959] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.887362] team0: Port device team_slave_0 added [ 45.920020] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.927410] team0: Port device team_slave_0 added [ 45.978582] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.988764] team0: Port device team_slave_1 added [ 45.998663] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.007431] team0: Port device team_slave_1 added [ 46.017765] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.026515] team0: Port device team_slave_0 added [ 46.035262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.050038] team0: Port device team_slave_0 added [ 46.055585] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.064677] team0: Port device team_slave_0 added [ 46.083627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.100021] team0: Port device team_slave_1 added [ 46.105763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.128338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.147079] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.155309] team0: Port device team_slave_1 added [ 46.164681] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.174035] team0: Port device team_slave_1 added [ 46.183160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.194692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.203531] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.212492] team0: Port device team_slave_1 added [ 46.221523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.236144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.257442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.266753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.278087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.296004] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.310000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.326120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.334355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.342895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.350530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.358216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.368440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.378049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.388061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.397354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.410816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.418835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.427229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.435538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.443975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.452353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.463615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.476116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.498375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.518230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.534367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.543683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.552214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.563879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.571521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.579370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.587094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.594932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.602537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.610460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.621023] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.629248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.637182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.648596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.660410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.671586] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.687097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.700019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.725839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.737457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.745421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.753318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.766124] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.783385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.800270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.816432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.842994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.853116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.347481] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.354024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.361011] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.367396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.382416] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.407854] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.414279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.421004] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.427377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.452581] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.461155] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.467518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.474258] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.480660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.489386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.588852] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.595289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.601996] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.608404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.623278] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.636813] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.643215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.649980] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.656353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.664337] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.674460] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.684173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.690898] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.697262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.705047] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.349290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.356632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.378408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.388001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.395668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.403633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.254187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.350406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.400567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.413055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.518331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.570519] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.620763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.641384] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.661169] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.702314] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.824172] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.841340] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.847662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.860275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.880779] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.886925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.899613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.923050] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.934070] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.957374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.965003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.031069] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.037264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.045568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.133857] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.150555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.157808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.188550] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.205891] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.221919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.229019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.247455] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.285970] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.329803] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.446316] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.461411] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.827745] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 2018/10/27 21:39:43 executed programs: 6 2018/10/27 21:39:48 executed programs: 119 [ 60.396225] ------------[ cut here ]------------ [ 60.401155] kernel BUG at arch/x86/kvm/x86.c:353! [ 60.406223] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 60.408139] kobject: 'kvm' (0000000036bd1e05): kobject_uevent_env [ 60.411599] CPU: 0 PID: 8001 Comm: syz-executor0 Not tainted 4.19.0+ #306 [ 60.411608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.411627] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 60.411641] Code: 45 10 50 e8 79 97 7c 00 58 5a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 67 3d 73 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 49 89 f5 41 54 [ 60.411655] RSP: 0018:ffff8801bd63f550 EFLAGS: 00010293 [ 60.421285] kobject: 'kvm' (0000000036bd1e05): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 60.424809] RAX: ffff8801bf310540 RBX: ffff8801bd63f5c8 RCX: ffffffff8139ec8c [ 60.424819] RDX: 0000000000000000 RSI: ffffffff810bfc59 RDI: ffff8801bd63f588 [ 60.424828] RBP: ffff8801bd63f550 R08: ffff8801bf310540 R09: fffff52000859046 [ 60.424843] R10: fffff52000859046 R11: ffffc900042c8237 R12: 1ffff10037ac7ead [ 60.501298] R13: dffffc0000000000 R14: ffff8801c242b000 R15: 00000001c242b000 [ 60.508568] FS: 00007fc809ba6700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 60.516796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.522674] CR2: ffff8801bd63f588 CR3: 00000001ce25e000 CR4: 00000000001426f0 [ 60.529940] Call Trace: [ 60.532534] kvm_fastop_exception+0x51b/0x5602 [ 60.537121] ? vmcs_load+0x98/0x110 [ 60.540769] ? crash_vmclear_local_loaded_vmcss+0x1a0/0x1a0 [ 60.546490] vmx_vcpu_load+0x496/0x1030 [ 60.550468] ? save_stack+0x43/0xd0 [ 60.554101] ? kasan_kmalloc+0xc7/0xe0 [ 60.557998] ? vmx_set_cr4+0x7c0/0x7c0 [ 60.561896] ? find_held_lock+0x36/0x1c0 [ 60.565958] ? zap_class+0x640/0x640 [ 60.569682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.575250] ? check_preemption_disabled+0x48/0x280 [ 60.580283] kvm_arch_vcpu_load+0x1d4/0x960 [ 60.584608] ? kvm_arch_dev_ioctl+0x620/0x620 [ 60.589108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.594649] ? check_preemption_disabled+0x48/0x280 [ 60.599671] vcpu_load+0x35/0x70 [ 60.603042] kvm_arch_vcpu_ioctl_get_sregs+0x1a/0x40 [ 60.608146] kvm_vcpu_ioctl+0x882/0x1150 [ 60.612212] ? kvm_uevent_notify_change.part.31+0x450/0x450 [ 60.617927] ? find_held_lock+0x36/0x1c0 [ 60.621998] ? __fget+0x4aa/0x740 [ 60.625454] ? lock_downgrade+0x900/0x900 [ 60.629604] ? check_preemption_disabled+0x48/0x280 [ 60.634636] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 60.639571] ? kasan_check_read+0x11/0x20 [ 60.643732] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 60.649019] ? rcu_softirq_qs+0x20/0x20 [ 60.653000] ? __fget+0x4d1/0x740 [ 60.656462] ? ksys_dup3+0x680/0x680 [ 60.660190] ? find_held_lock+0x36/0x1c0 [ 60.664262] ? __do_page_fault+0x620/0xe60 [ 60.668504] ? kvm_uevent_notify_change.part.31+0x450/0x450 [ 60.674216] do_vfs_ioctl+0x1de/0x1720 [ 60.678109] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 60.683391] ? rcu_softirq_qs+0x20/0x20 [ 60.687367] ? ioctl_preallocate+0x300/0x300 [ 60.691866] ? __fget_light+0x2e9/0x430 [ 60.695847] ? fget_raw+0x20/0x20 [ 60.699315] ? kasan_check_write+0x14/0x20 [ 60.703550] ? up_read+0x225/0x2c0 [ 60.707091] ? up_read_non_owner+0x100/0x100 [ 60.711503] ? do_syscall_64+0x9a/0x820 [ 60.715479] ? do_syscall_64+0x9a/0x820 [ 60.719459] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 60.724043] ? security_file_ioctl+0x94/0xc0 [ 60.728462] ksys_ioctl+0xa9/0xd0 [ 60.731922] __x64_sys_ioctl+0x73/0xb0 [ 60.735813] do_syscall_64+0x1b9/0x820 [ 60.739705] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 60.745087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 60.750034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.754881] ? trace_hardirqs_on_caller+0x310/0x310 [ 60.759900] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 60.764921] ? prepare_exit_to_usermode+0x291/0x3b0 [ 60.769942] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.774796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.779985] RIP: 0033:0x4573d7 [ 60.783180] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.802084] RSP: 002b:00007fc809ba4098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.809792] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000004573d7 [ 60.817061] RDX: 00007fc809ba46f0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 60.824330] RBP: 0000000020017000 R08: 0000000000000001 R09: ffffffffffffffff [ 60.831618] R10: 00007fc809ba69d0 R11: 0000000000000246 R12: 00000000fec00000 [ 60.840244] R13: 00000000ffffffff R14: 00000000004d7cf8 R15: 00000000ffffffff [ 60.847535] Modules linked in: [ 60.850781] ------------[ cut here ]------------ [ 60.855536] kernel BUG at arch/x86/kvm/x86.c:353! [ 60.860381] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 60.865758] CPU: 0 PID: 8001 Comm: syz-executor0 Tainted: G D 4.19.0+ #306 [ 60.874069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.883427] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 60.888267] Code: 45 10 50 e8 79 97 7c 00 58 5a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 67 3d 73 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 49 89 f5 41 54 [ 60.907365] RSP: 0018:ffff8801dae07be0 EFLAGS: 00010006 [ 60.912739] RAX: ffff8801bf310540 RBX: 1ffff1003b5c0f7f RCX: ffffffff8139ec8c [ 60.920015] RDX: 0000000000010000 RSI: ffffffff810bfc59 RDI: ffff8801dae07c18 [ 60.927285] RBP: ffff8801dae07be0 R08: ffff8801bf310540 R09: ffffed003b5c5b70 [ 60.934555] R10: ffffed003b5c5b70 R11: ffff8801dae2db87 R12: ffff8801dae07c58 [ 60.941827] R13: dffffc0000000000 R14: ffff8801d22c5000 R15: 00000001d22c5000 [ 60.949100] FS: 00007fc809ba6700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 60.957324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.963202] CR2: ffff8801dae07c18 CR3: 00000001ce25e000 CR4: 00000000001426f0 [ 60.970470] Call Trace: [ 60.973047] [ 60.975211] kvm_fastop_exception+0x503/0x5602 [ 60.979798] ? vmcs_clear+0x8f/0xf0 [ 60.983425] ? kvm_pdptr_read+0x160/0x160 [ 60.987580] __loaded_vmcs_clear+0x2d6/0x690 [ 60.991992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.997530] ? nested_get_vmcs12_pages+0x15b0/0x15b0 [ 61.003039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.008577] ? check_preemption_disabled+0x48/0x280 [ 61.013595] ? nested_get_vmcs12_pages+0x15b0/0x15b0 [ 61.018702] flush_smp_call_function_queue+0x1d2/0x640 [ 61.023993] ? cpumask_weight+0x40/0x40 [ 61.027975] ? kvm_clock_read+0x18/0x30 [ 61.031954] ? kvm_sched_clock_read+0x9/0x20 [ 61.036364] ? sched_clock+0x31/0x50 [ 61.040079] ? sched_clock_cpu+0x1b/0x1b0 [ 61.044227] ? check_preemption_disabled+0x48/0x280 [ 61.049247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.054789] ? check_preemption_disabled+0x48/0x280 [ 61.059810] generic_smp_call_function_single_interrupt+0x13/0x2b [ 61.066048] smp_call_function_single_interrupt+0x12f/0x650 [ 61.071773] ? smp_call_function_interrupt+0x650/0x650 [ 61.077049] ? interrupt_entry+0xb5/0xc0 [ 61.081110] ? trace_hardirqs_off_caller+0xbb/0x310 [ 61.086126] ? trace_hardirqs_off_caller+0xbb/0x310 [ 61.091146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.095990] ? trace_hardirqs_on_caller+0x310/0x310 [ 61.101005] ? trace_hardirqs_on_caller+0x310/0x310 [ 61.106022] ? task_prio+0x50/0x50 [ 61.109564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.115102] ? check_preemption_disabled+0x48/0x280 [ 61.120124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.124975] call_function_single_interrupt+0xf/0x20 [ 61.130070] [ 61.132314] RIP: 0010:oops_end+0x69/0x100 [ 61.136466] Code: 05 98 40 02 08 ff ff ff ff e8 e3 3b 1c 00 83 2d f4 67 01 09 01 74 69 48 83 3d f2 4c 05 08 00 0f 84 8c 00 00 00 48 89 df 57 9d <0f> 1f 44 00 00 e8 7d 43 1c 00 be 02 00 00 00 48 c7 c7 80 17 2e 8a [ 61.155368] RSP: 0018:ffff8801bd63f380 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff04 [ 61.163103] RAX: ffff8801bf310540 RBX: 0000000000000286 RCX: ffffffff8148ebb1 [ 61.170370] RDX: 0000000000000000 RSI: ffffffff8148eb79 RDI: 0000000000000286 [ 61.177636] RBP: ffff8801bd63f398 R08: ffff8801bf310540 R09: fffffbfff13e6372 [ 61.184903] R10: fffffbfff13e6372 R11: ffffffff89f31b97 R12: 000000000000000b [ 61.192169] R13: ffff8801bd63f4a8 R14: 0000000000000000 R15: ffff8801bd63f4a8 [ 61.199447] ? add_taint+0x61/0x70 [ 61.202986] ? add_taint+0x29/0x70 [ 61.206528] die+0x3d/0x46 [ 61.209376] do_trap+0x1ad/0x250 [ 61.212771] do_error_trap+0xd6/0x200 [ 61.216571] ? kvm_spurious_fault+0x9/0x10 [ 61.220808] do_invalid_op+0x36/0x40 [ 61.224521] ? kvm_spurious_fault+0x9/0x10 [ 61.228768] invalid_op+0x14/0x20 [ 61.232221] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 61.237066] Code: 45 10 50 e8 79 97 7c 00 58 5a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 67 3d 73 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 49 89 f5 41 54 [ 61.255970] RSP: 0018:ffff8801bd63f550 EFLAGS: 00010293 [ 61.261356] RAX: ffff8801bf310540 RBX: ffff8801bd63f5c8 RCX: ffffffff8139ec8c [ 61.268622] RDX: 0000000000000000 RSI: ffffffff810bfc59 RDI: ffff8801bd63f588 [ 61.275898] RBP: ffff8801bd63f550 R08: ffff8801bf310540 R09: fffff52000859046 [ 61.283164] R10: fffff52000859046 R11: ffffc900042c8237 R12: 1ffff10037ac7ead [ 61.290436] R13: dffffc0000000000 R14: ffff8801c242b000 R15: 00000001c242b000 [ 61.297712] ? __phys_addr+0x9c/0x120 [ 61.301526] ? kvm_spurious_fault+0x9/0x10 [ 61.305777] kvm_fastop_exception+0x51b/0x5602 [ 61.310360] ? vmcs_load+0x98/0x110 [ 61.313993] ? crash_vmclear_local_loaded_vmcss+0x1a0/0x1a0 [ 61.319718] vmx_vcpu_load+0x496/0x1030 [ 61.323711] ? save_stack+0x43/0xd0 [ 61.327351] ? kasan_kmalloc+0xc7/0xe0 [ 61.331239] ? vmx_set_cr4+0x7c0/0x7c0 [ 61.335135] ? find_held_lock+0x36/0x1c0 [ 61.339214] ? zap_class+0x640/0x640 [ 61.342932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.348469] ? check_preemption_disabled+0x48/0x280 [ 61.353494] kvm_arch_vcpu_load+0x1d4/0x960 [ 61.357819] ? kvm_arch_dev_ioctl+0x620/0x620 [ 61.362334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.367879] ? check_preemption_disabled+0x48/0x280 [ 61.372903] vcpu_load+0x35/0x70 [ 61.376275] kvm_arch_vcpu_ioctl_get_sregs+0x1a/0x40 [ 61.381382] kvm_vcpu_ioctl+0x882/0x1150 [ 61.385446] ? kvm_uevent_notify_change.part.31+0x450/0x450 [ 61.391164] ? find_held_lock+0x36/0x1c0 [ 61.395255] ? __fget+0x4aa/0x740 [ 61.398714] ? lock_downgrade+0x900/0x900 [ 61.402894] ? check_preemption_disabled+0x48/0x280 [ 61.407918] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 61.413126] ? kasan_check_read+0x11/0x20 [ 61.417280] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 61.422560] ? rcu_softirq_qs+0x20/0x20 [ 61.426538] ? __fget+0x4d1/0x740 [ 61.429997] ? ksys_dup3+0x680/0x680 [ 61.433710] ? find_held_lock+0x36/0x1c0 [ 61.437791] ? __do_page_fault+0x620/0xe60 [ 61.442030] ? kvm_uevent_notify_change.part.31+0x450/0x450 [ 61.447752] do_vfs_ioctl+0x1de/0x1720 [ 61.451646] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 61.456924] ? rcu_softirq_qs+0x20/0x20 [ 61.460901] ? ioctl_preallocate+0x300/0x300 [ 61.465313] ? __fget_light+0x2e9/0x430 [ 61.469286] ? fget_raw+0x20/0x20 [ 61.472753] ? kasan_check_write+0x14/0x20 [ 61.476988] ? up_read+0x225/0x2c0 [ 61.480532] ? up_read_non_owner+0x100/0x100 [ 61.484942] ? do_syscall_64+0x9a/0x820 [ 61.488918] ? do_syscall_64+0x9a/0x820 [ 61.492895] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 61.497489] ? security_file_ioctl+0x94/0xc0 [ 61.501904] ksys_ioctl+0xa9/0xd0 [ 61.505357] __x64_sys_ioctl+0x73/0xb0 [ 61.509248] do_syscall_64+0x1b9/0x820 [ 61.513139] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 61.518505] ? syscall_return_slowpath+0x5e0/0x5e0 [ 61.523437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.528284] ? trace_hardirqs_on_caller+0x310/0x310 [ 61.533301] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 61.538318] ? prepare_exit_to_usermode+0x291/0x3b0 [ 61.543337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.548183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.553367] RIP: 0033:0x4573d7 [ 61.556559] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.575473] RSP: 002b:00007fc809ba4098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.583184] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000004573d7 [ 61.590452] RDX: 00007fc809ba46f0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 61.597718] RBP: 0000000020017000 R08: 0000000000000001 R09: ffffffffffffffff [ 61.604997] R10: 00007fc809ba69d0 R11: 0000000000000246 R12: 00000000fec00000 [ 61.612266] R13: 00000000ffffffff R14: 00000000004d7cf8 R15: 00000000ffffffff [ 61.619536] Modules linked in: [ 61.622744] ---[ end trace 7d700889f382de1c ]--- [ 61.627514] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 61.632355] Code: 45 10 50 e8 79 97 7c 00 58 5a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 67 3d 73 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 49 89 f5 41 54 [ 61.651252] RSP: 0018:ffff8801bd63f550 EFLAGS: 00010293 [ 61.656612] RAX: ffff8801bf310540 RBX: ffff8801bd63f5c8 RCX: ffffffff8139ec8c [ 61.663878] RDX: 0000000000000000 RSI: ffffffff810bfc59 RDI: ffff8801bd63f588 [ 61.671176] RBP: ffff8801bd63f550 R08: ffff8801bf310540 R09: fffff52000859046 [ 61.678445] R10: fffff52000859046 R11: ffffc900042c8237 R12: 1ffff10037ac7ead [ 61.685709] R13: dffffc0000000000 R14: ffff8801c242b000 R15: 00000001c242b000 [ 61.692994] FS: 00007fc809ba6700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 61.701218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.707128] CR2: ffff8801dae07c18 CR3: 00000001ce25e000 CR4: 00000000001426f0 [ 61.714411] Kernel panic - not syncing: Fatal exception in interrupt [ 61.721741] Kernel Offset: disabled [ 61.725378] Rebooting in 86400 seconds..