[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 22.614585] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.345571] random: sshd: uninitialized urandom read (32 bytes read) [ 25.614321] random: sshd: uninitialized urandom read (32 bytes read) [ 26.162625] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.23' (ECDSA) to the list of known hosts. [ 31.952828] urandom_read: 1 callbacks suppressed [ 31.952837] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 32.057339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 32.085871] kasan: CONFIG_KASAN_INLINE enabled [ 32.091809] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 32.099151] general protection fault: 0000 [#1] SMP KASAN [ 32.104671] CPU: 1 PID: 4453 Comm: syz-executor871 Not tainted 4.18.0+ #198 [ 32.111783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.121171] RIP: 0010:__schedule+0x1061/0x1ec0 [ 32.125760] Code: 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 ea 08 00 00 4d 8b 6d 00 4d 85 ed 0f 84 6b f6 ff ff 49 8d 7d 10 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 a6 e8 83 e9 05 fb eb 9f 4c 89 e6 48 89 df e8 c6 [ 32.144655] RSP: 0018:ffff8801acdaea80 EFLAGS: 00010806 [ 32.150010] RAX: 1bd5a00000000022 RBX: ffff8801ad3aa440 RCX: 1ffff1003592c88f [ 32.157262] RDX: 0000000040000000 RSI: 0000000000000000 RDI: dead000000000110 [ 32.164512] RBP: ffff8801acdaec50 R08: ffff8801ad3aa440 R09: fffff520003c5a47 [ 32.171770] R10: fffff520003c5a47 R11: ffffc90001e2d23b R12: ffff8801d9f3e480 [ 32.179028] R13: dead000000000100 R14: dffffc0000000000 R15: ffff8801db12ca80 [ 32.186282] FS: 00000000020ef880(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 32.194487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.200348] CR2: 000000000043fcfe CR3: 0000000007e6a000 CR4: 00000000001426e0 [ 32.207598] Call Trace: [ 32.210173] ? __sched_text_start+0x8/0x8 [ 32.214311] ? generic_exec_single+0x1ea/0x5e0 [ 32.218878] ? __lock_is_held+0xb5/0x140 [ 32.222925] ? check_same_owner+0x340/0x340 [ 32.227230] ? check_same_owner+0x340/0x340 [ 32.231534] ? smp_call_function_single+0x2d6/0x5c0 [ 32.236530] ? print_usage_bug+0xc0/0xc0 [ 32.240575] ? add_nops+0x90/0x90 [ 32.244013] ? arch_jump_label_transform+0x1b/0x40 [ 32.248924] preempt_schedule_common+0x22/0x60 [ 32.253506] _cond_resched+0x1d/0x30 [ 32.257209] __mutex_lock+0x13d/0x1700 [ 32.261080] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 32.266602] ? fill_pte+0xd6/0x420 [ 32.270126] ? arch_jump_label_transform+0x1b/0x40 [ 32.275039] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 32.280070] ? find_next_and_bit+0x165/0x1d0 [ 32.284460] ? mutex_trylock+0x2b0/0x2b0 [ 32.288505] ? find_held_lock+0x36/0x1c0 [ 32.292552] ? lock_downgrade+0x8f0/0x8f0 [ 32.296692] ? mark_held_locks+0xc9/0x160 [ 32.300825] ? text_poke+0x3c3/0x5e0 [ 32.304524] ? on_each_cpu+0xf8/0x1d0 [ 32.308309] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.313322] ? trace_hardirqs_on+0xd/0x10 [ 32.317454] ? kasan_check_write+0x14/0x20 [ 32.321672] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 32.326595] ? wait_for_completion+0x8d0/0x8d0 [ 32.331162] ? kvm_x2apic_msr_write+0x43/0x180 [ 32.335729] ? __jump_label_transform.isra.0+0x478/0x8f0 [ 32.341165] ? modules_open+0xa0/0xa0 [ 32.344950] ? kvm_vm_release+0x42/0x50 [ 32.348932] ? get_trap_addr+0x1d0/0x1d0 [ 32.352975] ? do_group_exit+0x177/0x440 [ 32.357022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 32.362544] ? jump_label_type+0x132/0x1d0 [ 32.366773] mutex_lock_nested+0x16/0x20 [ 32.370825] ? mutex_lock_nested+0x16/0x20 [ 32.375042] arch_jump_label_transform+0x1b/0x40 [ 32.379787] __jump_label_update+0x16e/0x1a0 [ 32.384185] jump_label_update+0x151/0x2e0 [ 32.388409] __static_key_slow_dec_cpuslocked+0xb8/0x210 [ 32.393840] ? static_key_disable+0x30/0x30 [ 32.398148] ? rcu_read_lock_sched_held+0x108/0x120 [ 32.403148] static_key_slow_dec+0x63/0xa0 [ 32.407397] kvm_arch_vcpu_uninit+0x18e/0x1d0 [ 32.411876] kvm_vcpu_uninit+0x44/0x90 [ 32.415748] vmx_free_vcpu+0x23a/0x300 [ 32.419632] kvm_arch_destroy_vm+0x365/0x7c0 [ 32.424021] ? check_memory_region+0x143/0x1b0 [ 32.428583] ? kvm_arch_sync_events+0x30/0x30 [ 32.433071] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 32.438589] ? mmu_notifier_unregister+0x474/0x600 [ 32.443516] ? debug_check_no_obj_freed+0x30b/0x595 [ 32.448515] ? __mmu_notifier_register+0x30/0x30 [ 32.453259] ? __free_pages+0x10a/0x190 [ 32.457217] ? free_unref_page+0x9a0/0x9a0 [ 32.461445] ? kfree+0x111/0x260 [ 32.464809] kvm_put_kvm+0x73f/0x1060 [ 32.468594] ? kvm_write_guest_cached+0x40/0x40 [ 32.473257] ? lock_downgrade+0x8f0/0x8f0 [ 32.477407] ? _raw_spin_unlock_irq+0x27/0x70 [ 32.481884] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.486886] ? kvm_irqfd_release+0xdd/0x120 [ 32.491189] ? kvm_put_kvm+0x1060/0x1060 [ 32.495241] kvm_vm_release+0x42/0x50 [ 32.499022] __fput+0x39b/0x860 [ 32.502281] ? file_free_rcu+0x90/0x90 [ 32.506150] ? check_same_owner+0x340/0x340 [ 32.510481] ? _raw_spin_unlock_irq+0x27/0x70 [ 32.514958] ____fput+0x15/0x20 [ 32.518219] task_work_run+0x1e8/0x2a0 [ 32.522085] ? task_work_cancel+0x240/0x240 [ 32.526389] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 32.531907] ? switch_task_namespaces+0xa2/0xd0 [ 32.536570] do_exit+0x1b25/0x2760 [ 32.540089] ? find_held_lock+0x36/0x1c0 [ 32.544138] ? mm_update_next_owner+0x9a0/0x9a0 [ 32.548791] ? lock_downgrade+0x8f0/0x8f0 [ 32.552925] ? kasan_check_read+0x11/0x20 [ 32.557065] ? rcu_is_watching+0x8c/0x150 [ 32.561206] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 32.565855] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 32.570507] ? is_bpf_text_address+0xd7/0x170 [ 32.574982] ? kernel_text_address+0x79/0xf0 [ 32.579371] ? __kernel_text_address+0xd/0x40 [ 32.583846] ? unwind_get_return_address+0x61/0xa0 [ 32.588765] ? __save_stack_trace+0x8d/0xf0 [ 32.593080] ? save_stack+0xa9/0xd0 [ 32.596693] ? save_stack+0x43/0xd0 [ 32.600317] ? __kasan_slab_free+0x11a/0x170 [ 32.604708] ? kasan_slab_free+0xe/0x10 [ 32.608688] ? kmem_cache_free+0x86/0x2d0 [ 32.612825] ? putname+0xf2/0x130 [ 32.616260] ? do_sys_open+0x569/0x760 [ 32.620147] ? do_syscall_64+0x1b9/0x820 [ 32.624190] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 32.629539] ? kasan_check_read+0x11/0x20 [ 32.633669] ? do_raw_spin_unlock+0xa7/0x2f0 [ 32.638068] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 32.642632] ? __fget_light+0x2f7/0x440 [ 32.646589] ? fget_raw+0x20/0x20 [ 32.650028] ? debug_check_no_obj_freed+0x30b/0x595 [ 32.655027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 32.660543] ? kasan_check_read+0x11/0x20 [ 32.664669] ? rcu_is_watching+0x8c/0x150 [ 32.668806] ? rcu_pm_notify+0xc0/0xc0 [ 32.672692] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 32.677702] ? __fget_light+0x2f7/0x440 [ 32.681658] ? fget_raw+0x20/0x20 [ 32.685102] ? sockfd_lookup_light+0xc5/0x160 [ 32.689578] ? __sys_setsockopt+0x257/0x3b0 [ 32.693884] do_group_exit+0x177/0x440 [ 32.697780] ? __ia32_sys_exit+0x50/0x50 [ 32.701836] ? ksys_ioctl+0x81/0xd0 [ 32.705447] ? do_syscall_64+0x9a/0x820 [ 32.709402] __x64_sys_exit_group+0x3e/0x50 [ 32.713709] do_syscall_64+0x1b9/0x820 [ 32.717591] ? syscall_slow_exit_work+0x500/0x500 [ 32.722416] ? syscall_return_slowpath+0x5e0/0x5e0 [ 32.727488] ? syscall_return_slowpath+0x31d/0x5e0 [ 32.732401] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 32.737745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 32.742575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 32.747746] RIP: 0033:0x43fd28 [ 32.750959] Code: Bad RIP value. [ 32.754300] RSP: 002b:00007ffe33f80d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.761988] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043fd28 [ 32.769234] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 32.776480] RBP: 00000000004bf668 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 32.783726] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 32.790976] R13: 00000000006d1180 R14: 0000000000000000 R15: 0000000000000000 [ 32.798224] Modules linked in: [ 32.801397] Dumping ftrace buffer: [ 32.804910] (ftrace buffer empty) [ 32.808602] [ 32.808605] ====================================================== [ 32.808608] WARNING: possible circular locking dependency detected [ 32.808610] 4.18.0+ #198 Not tainted [ 32.808613] ------------------------------------------------------ [ 32.808616] syz-executor871/4453 is trying to acquire lock: [ 32.808617] 00000000899a05bd ((console_sem).lock){-...}, at: down_trylock+0x13/0x70 [ 32.808625] [ 32.808627] but task is already holding lock: [ 32.808629] 0000000014bebdb1 (&rq->lock){-.-.}, at: __schedule+0x24d/0x1ec0 [ 32.808636] [ 32.808639] which lock already depends on the new lock. [ 32.808640] [ 32.808641] [ 32.808644] the existing dependency chain (in reverse order) is: [ 32.808645] [ 32.808646] -> #2 (&rq->lock){-.-.}: [ 32.808653] _raw_spin_lock+0x2a/0x40 [ 32.808655] task_fork_fair+0x93/0x680 [ 32.808657] sched_fork+0x44b/0xbd0 [ 32.808660] copy_process.part.36+0x1c7c/0x7170 [ 32.808662] _do_fork+0x291/0x12a0 [ 32.808664] kernel_thread+0x34/0x40 [ 32.808666] rest_init+0x22/0xe4 [ 32.808668] start_kernel+0x913/0x94e [ 32.808670] x86_64_start_reservations+0x29/0x2b [ 32.808673] x86_64_start_kernel+0x76/0x79 [ 32.808675] secondary_startup_64+0xa4/0xb0 [ 32.808676] [ 32.808677] -> #1 (&p->pi_lock){-.-.}: [ 32.808693] _raw_spin_lock_irqsave+0x96/0xc0 [ 32.808696] try_to_wake_up+0xd2/0x12a0 [ 32.808699] wake_up_process+0x10/0x20 [ 32.808701] __up.isra.1+0x1c0/0x2a0 [ 32.808703] up+0x13c/0x1c0 [ 32.808705] __up_console_sem+0xbe/0x1b0 [ 32.808708] console_unlock+0x506/0x1110 [ 32.808710] do_con_write+0x1375/0x23d0 [ 32.808712] con_write+0x25/0xc0 [ 32.808714] n_tty_write+0x6c1/0x11a0 [ 32.808716] tty_write+0x3f1/0x880 [ 32.808718] __vfs_write+0x117/0x9d0 [ 32.808720] vfs_write+0x1f8/0x560 [ 32.808722] ksys_write+0x101/0x260 [ 32.808724] __x64_sys_write+0x73/0xb0 [ 32.808726] do_syscall_64+0x1b9/0x820 [ 32.808729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 32.808730] [ 32.808731] -> #0 ((console_sem).lock){-...}: [ 32.808739] lock_acquire+0x1e4/0x540 [ 32.808741] _raw_spin_lock_irqsave+0x96/0xc0 [ 32.808743] down_trylock+0x13/0x70 [ 32.808747] __down_trylock_console_sem+0xae/0x200 [ 32.808751] console_trylock+0x15/0xa0 [ 32.808754] vprintk_emit+0x31f/0x910 [ 32.808758] vprintk_default+0x28/0x30 [ 32.808761] vprintk_func+0x7a/0x117 [ 32.808764] printk+0xa7/0xcf [ 32.808769] kasan_die_handler.cold.22+0x11/0x30 [ 32.808773] notifier_call_chain+0x180/0x390 [ 32.808777] atomic_notifier_call_chain+0x98/0x190 [ 32.808780] notify_die+0x1be/0x2e0 [ 32.808784] do_general_protection+0x248/0x2f0 [ 32.808786] general_protection+0x1e/0x30 [ 32.808788] __schedule+0x1061/0x1ec0 [ 32.808791] preempt_schedule_common+0x22/0x60 [ 32.808793] _cond_resched+0x1d/0x30 [ 32.808795] __mutex_lock+0x13d/0x1700 [ 32.808797] mutex_lock_nested+0x16/0x20 [ 32.808799] arch_jump_label_transform+0x1b/0x40 [ 32.808802] __jump_label_update+0x16e/0x1a0 [ 32.808804] jump_label_update+0x151/0x2e0 [ 32.808807] __static_key_slow_dec_cpuslocked+0xb8/0x210 [ 32.808809] static_key_slow_dec+0x63/0xa0 [ 32.808811] kvm_arch_vcpu_uninit+0x18e/0x1d0 [ 32.808814] kvm_vcpu_uninit+0x44/0x90 [ 32.808816] vmx_free_vcpu+0x23a/0x300 [ 32.808818] kvm_arch_destroy_vm+0x365/0x7c0 [ 32.808820] kvm_put_kvm+0x73f/0x1060 [ 32.808822] kvm_vm_release+0x42/0x50 [ 32.808824] __fput+0x39b/0x860 [ 32.808826] ____fput+0x15/0x20 [ 32.808828] task_work_run+0x1e8/0x2a0 [ 32.808830] do_exit+0x1b25/0x2760 [ 32.808832] do_group_exit+0x177/0x440 [ 32.808847] __x64_sys_exit_group+0x3e/0x50 [ 32.808849] do_syscall_64+0x1b9/0x820 [ 32.808852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 32.808853] [ 32.808855] other info that might help us debug this: [ 32.808856] [ 32.808858] Chain exists of: [ 32.808859] (console_sem).lock --> &p->pi_lock --> &rq->lock [ 32.808869] [ 32.808871] Possible unsafe locking scenario: [ 32.808872] [ 32.808875] CPU0 CPU1 [ 32.808877] ---- ---- [ 32.808878] lock(&rq->lock); [ 32.808883] lock(&p->pi_lock); [ 32.808888] lock(&rq->lock); [ 32.808892] lock((console_sem).lock); [ 32.808896] [ 32.808898] *** DEADLOCK *** [ 32.808899] [ 32.808901] 4 locks held by syz-executor871/4453: [ 32.808902] #0: 00000000c39faa41 (cpu_hotplug_lock.rw_sem){++++}, at: static_key_slow_dec+0x57/0xa0 [ 32.808912] #1: 00000000828385d6 (jump_label_mutex){+.+.}, at: __static_key_slow_dec_cpuslocked+0x82/0x210 [ 32.808922] #2: 0000000014bebdb1 (&rq->lock){-.-.}, at: __schedule+0x24d/0x1ec0 [ 32.808931] #3: 000000004775d57a (rcu_read_lock){....}, at: atomic_notifier_call_chain+0x0/0x190 [ 32.808940] [ 32.808942] stack backtrace: [ 32.808945] CPU: 1 PID: 4453 Comm: syz-executor871 Not tainted 4.18.0+ #198 [ 32.808950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.808951] Call Trace: [ 32.808953] dump_stack+0x1c9/0x2b4 [ 32.808956] ? dump_stack_print_info.cold.2+0x52/0x52 [ 32.808958] ? vprintk_func+0x100/0x117 [ 32.808961] print_circular_bug.isra.37.cold.58+0x1bd/0x27d [ 32.808963] ? save_trace+0xe0/0x290 [ 32.808965] __lock_acquire+0x3449/0x5020 [ 32.808967] ? trace_hardirqs_on+0x10/0x10 [ 32.808970] ? trace_hardirqs_on+0x10/0x10 [ 32.808972] ? update_load_avg+0x389/0x27d0 [ 32.808975] ? __update_load_avg_blocked_se+0x730/0x730 [ 32.808977] ? attach_entity_load_avg+0x860/0x860 [ 32.808980] ? attach_entity_load_avg+0x860/0x860 [ 32.808982] ? graph_lock+0x170/0x170 [ 32.808984] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 32.808986] lock_acquire+0x1e4/0x540 [ 32.808989] ? down_trylock+0x13/0x70 [ 32.808991] ? lock_release+0xa30/0xa30 [ 32.808993] ? lock_downgrade+0x8f0/0x8f0 [ 32.808995] ? log_store+0x34f/0x4c0 [ 32.808997] ? vprintk_emit+0x31f/0x910 [ 32.808999] _raw_spin_lock_irqsave+0x96/0xc0 [ 32.809001] ? down_trylock+0x13/0x70 [ 32.809003] down_trylock+0x13/0x70 [ 32.809006] __down_trylock_console_sem+0xae/0x200 [ 32.809008] console_trylock+0x15/0xa0 [ 32.809010] vprintk_emit+0x31f/0x910 [ 32.809012] ? wake_up_klogd+0x110/0x110 [ 32.809014] ? __lock_acquire+0x7fc/0x5020 [ 32.809017] ? trace_hardirqs_on+0x10/0x10 [ 32.809019] vprintk_default+0x28/0x30 [ 32.809021] vprintk_func+0x7a/0x117 [ 32.809023] printk+0xa7/0xcf [ 32.809025] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 32.809028] ? kasan_die_handler.cold.22+0x5/0x30 [ 32.809030] ? kasan_die_handler+0x1a/0x31 [ 32.809032] kasan_die_handler.cold.22+0x11/0x30 [ 32.809034] notifier_call_chain+0x180/0x390 [ 32.809037] ? unregister_die_notifier+0x20/0x20 [ 32.809039] ? rcu_is_watching+0x8c/0x150 [ 32.809042] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 32.809044] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 32.809046] ? cmp_ex_search+0x8c/0xb0 [ 32.809048] atomic_notifier_call_chain+0x98/0x190 [ 32.809050] notify_die+0x1be/0x2e0 [ 32.809053] ? __atomic_notifier_call_chain+0x1a0/0x1a0 [ 32.809056] ? search_module_extables+0x18/0xc0 [ 32.809058] ? __schedule+0x1061/0x1ec0 [ 32.809060] ? __schedule+0x1061/0x1ec0 [ 32.809062] ? search_exception_tables+0x47/0x50 [ 32.809065] do_general_protection+0x248/0x2f0 [ 32.809067] general_protection+0x1e/0x30 [ 32.809069] RIP: 0010:__schedule+0x1061/0x1ec0 [ 32.809077] Code: 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 ea 08 00 00 4d 8b 6d 00 4d 85 ed 0f 84 6b f6 ff ff 49 8d 7d 10 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 a6 e8 83 e9 05 fb eb 9f 4c 89 e6 48 89 df e8 c6 [ 32.809080] RSP: 0018:ffff8801acdaea80 EFLAGS: 00010806 [ 32.809085] RAX: 1bd5a00000000022 RBX: ffff8801ad3aa440 RCX: 1ffff1003592c88f [ 32.809088] RDX: 0000000040000000 RSI: 0000000000000000 RDI: dead000000000110 [ 32.809091] RBP: ffff8801acdaec50 R08: ffff8801ad3aa440 R09: fffff520003c5a47 [ 32.809095] R10: fffff520003c5a47 R11: ffffc90001e2d23b R12: ffff8801d9f3e480 [ 32.809098] R13: dead000000000100 R14: dffffc0000000000 R15: ffff8801db12ca80 [ 32.809100] ? __sched_text_start+0x8/0x8 [ 32.809103] ? generic_exec_single+0x1ea/0x5e0 [ 32.809105] ? __lock_is_held+0xb5/0x140 [ 32.809107] ? check_same_owner+0x340/0x340 [ 32.809109] ? check_same_owner+0x340/0x340 [ 32.809112] ? smp_call_function_single+0x2d6/0x5c0 [ 32.809114] ? print_usage_bug+0xc0/0xc0 [ 32.809116] ? add_nops+0x90/0x90 [ 32.809119] ? arch_jump_label_transform+0x1b/0x40 [ 32.809121] preempt_schedule_common+0x22/0x60 [ 32.809123] _cond_resched+0x1d/0x30 [ 32.809125] __mutex_lock+0x13d/0x1700 [ 32.809128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 32.809130] ? fill_pte+0xd6/0x420 [ 32.809133] ? arch_jump_label_transform+0x1b/0x40 [ 32.809135] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 32.809138] ? find_next_and_bit+0x165/0x1d0 [ 32.809140] ? mutex_trylock+0x2b0/0x2b0 [ 32.809142] ? find_held_lock+0x36/0x1c0 [ 32.809144] ? lock_downgrade+0x8f0/0x8f0 [ 32.809147] ? mark_held_locks+0xc9/0x160 [ 32.809149] ? text_poke+0x3c3/0x5e0 [ 32.809151] ? on_each_cpu+0xf8/0x1d0 [ 32.809153] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.809156] ? trace_hardirqs_on+0xd/0x10 [ 32.809158] ? kasan_check_write+0x14/0x20 [ 32.809160] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 32.809163] ? wait_for_completion+0x8d0/0x8d0 [ 32.809165] ? kvm_x2apic_msr_write+0x43/0x180 [ 32.809168] ? __jump_label_transform.isra.0+0x478/0x8f0 [ 32.809170] ? modules_open+0xa0/0xa0 [ 32.809172] ? kvm_vm_release+0x42/0x50 [ 32.809174] ? get_trap_addr+0x1d0/0x1d0 [ 32.809176] ? do_group_exit+0x177/0x440 [ 32.809179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 32.809181] ? jump_label_type+0x132/0x1d0 [ 32.809183] mutex_lock_nested+0x16/0x20 [ 32.809186] ? mutex_lock_nested+0x16/0x20 [ 32.809188] arch_jump_label_transform+0x1b/0x40 [ 32.809190] __jump_label_update+0x16e/0x1a0 [ 32.809193] jump_label_update+0x151/0x2e0 [ 32.809202] __static_key_slow_dec_cpuslocked+0xb8/0x210 [ 32.809204] ? static_key_disable+0x30/0x30 [ 32.809207] ? rcu_read_lock_sched_held+0x108/0x120 [ 32.809209] static_key_slow_dec+0x63/0xa0 [ 32.809212] kvm_arch_vcpu_uninit+0x18e/0x1d0 [ 32.809214] kvm_vcpu_uninit+0x44/0x90 [ 32.809216] vmx_free_vcpu+0x23a/0x300 [ 32.809218] kvm_arch_destroy_vm+0x365/0x7c0 [ 32.809220] ? check_memory_region+0x143/0x1b0 [ 32.809223] ? kvm_arch_sync_events+0x30/0x30 [ 32.809225] ? __sanitizer_cov_trace_const_cm [ 32.809229] Lost 81 message(s)! [ 33.833915] ---[ end trace fe78ed456bceb4a0 ]--- [ 33.838657] RIP: 0010:__schedule+0x1061/0x1ec0 [ 33.843232] Code: 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 ea 08 00 00 4d 8b 6d 00 4d 85 ed 0f 84 6b f6 ff ff 49 8d 7d 10 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 a6 e8 83 e9 05 fb eb 9f 4c 89 e6 48 89 df e8 c6 [ 33.862193] RSP: 0018:ffff8801acdaea80 EFLAGS: 00010806 [ 33.867561] RAX: 1bd5a00000000022 RBX: ffff8801ad3aa440 RCX: 1ffff1003592c88f [ 33.874813] RDX: 0000000040000000 RSI: 0000000000000000 RDI: dead000000000110 [ 33.882062] RBP: ffff8801acdaec50 R08: ffff8801ad3aa440 R09: fffff520003c5a47 [ 33.889321] R10: fffff520003c5a47 R11: ffffc90001e2d23b R12: ffff8801d9f3e480 [ 33.896569] R13: dead000000000100 R14: dffffc0000000000 R15: ffff8801db12ca80 [ 33.903818] FS: 00000000020ef880(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 33.912023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.917884] CR2: 000000000043fcfe CR3: 0000000007e6a000 CR4: 00000000001426e0 [ 33.925136] Kernel panic - not syncing: Fatal exception [ 33.930834] Dumping ftrace buffer: [ 33.934360] (ftrace buffer empty) [ 33.938048] Kernel Offset: disabled [ 33.941651] Rebooting in 86400 seconds..