[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.623329] random: sshd: uninitialized urandom read (32 bytes read) [ 33.986633] audit: type=1400 audit(1536860312.246:6): avc: denied { map } for pid=5505 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.046442] random: sshd: uninitialized urandom read (32 bytes read) [ 34.662454] random: sshd: uninitialized urandom read (32 bytes read) [ 34.889807] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.61' (ECDSA) to the list of known hosts. [ 40.733982] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 40.875579] audit: type=1400 audit(1536860319.136:7): avc: denied { map } for pid=5519 comm="syz-executor876" path="/root/syz-executor876060409" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.880035] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 40.928224] kasan: CONFIG_KASAN_INLINE enabled [ 40.935364] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 40.942727] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 40.948969] CPU: 0 PID: 5519 Comm: syz-executor876 Not tainted 4.19.0-rc3+ #13 [ 40.956320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.965677] RIP: 0010:__schedule+0xfb7/0x1ed0 [ 40.970170] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 0f 85 b9 09 00 00 4d 8b 24 24 4d 85 e4 0f 84 0b f7 ff ff 49 8d 7c 24 10 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 a4 e8 0d f7 03 fa eb 9d 48 89 de 4c 89 ff e8 20 [ 40.989078] RSP: 0018:ffff8801bcb16bd0 EFLAGS: 00010806 [ 40.994439] RAX: 1bd5a00000000022 RBX: ffff8801cb232440 RCX: 1ffff100389c388f [ 41.001704] RDX: 0000000040000000 RSI: 0000000000000000 RDI: dead000000000110 [ 41.008990] RBP: ffff8801bcb16da8 R08: ffff8801c8e0a340 R09: fffff520003cfe47 [ 41.016253] R10: fffff520003cfe47 R11: ffffc90001e7f23b R12: dead000000000100 [ 41.023519] R13: dffffc0000000000 R14: ffff8801dae2cb40 R15: ffff8801c8e0a340 [ 41.030786] FS: 000000000220f880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 41.039003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.044877] CR2: 000000000043ec9e CR3: 000000000946a000 CR4: 00000000001426f0 [ 41.052153] Call Trace: [ 41.054742] ? generic_exec_single+0x5f0/0x5f0 [ 41.059334] ? __sched_text_start+0x8/0x8 [ 41.063488] ? __set_pte_vaddr+0x135/0x1a0 [ 41.067723] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 41.072737] ? find_next_and_bit+0x183/0x1e0 [ 41.077150] ? smp_call_function_many+0x13f/0xb60 [ 41.081996] ? mark_held_locks+0xc7/0x130 [ 41.086141] ? text_poke+0x405/0x5e0 [ 41.089855] ? on_each_cpu+0xdd/0x1e0 [ 41.093650] ? on_each_cpu+0xdd/0x1e0 [ 41.097450] ? recalculate_apic_map+0x12e/0xf50 [ 41.102130] ? lockdep_hardirqs_on+0x421/0x5c0 [ 41.106712] ? preempt_schedule+0x4d/0x60 [ 41.110857] ? recalculate_apic_map+0x12e/0xf50 [ 41.115533] preempt_schedule_common+0x1f/0xd0 [ 41.120115] preempt_schedule+0x4d/0x60 [ 41.124087] ___preempt_schedule+0x16/0x18 [ 41.128321] ? on_each_cpu+0x13b/0x1e0 [ 41.132203] ? on_each_cpu+0x1a6/0x1e0 [ 41.136085] on_each_cpu+0x1ab/0x1e0 [ 41.139798] ? recalculate_apic_map+0x12d/0xf50 [ 41.144467] text_poke_bp+0x12b/0x1de [ 41.148268] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 41.153199] ? poke_int3_handler+0x90/0x90 [ 41.157433] ? wait_for_completion+0x8a0/0x8a0 [ 41.162019] ? recalculate_apic_map+0x12d/0xf50 [ 41.166689] __jump_label_transform.isra.0+0x478/0x8f0 [ 41.171961] ? modules_open+0xa0/0xa0 [ 41.175765] ? kvm_vm_release+0x42/0x50 [ 41.179742] ? get_trap_addr+0x1d0/0x1d0 [ 41.183804] ? do_group_exit+0x177/0x440 [ 41.187890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.193421] ? jump_label_type+0x139/0x1e0 [ 41.197668] arch_jump_label_transform+0x2f/0x40 [ 41.202422] __jump_label_update+0x16e/0x1a0 [ 41.206831] jump_label_update+0x174/0x320 [ 41.211069] __static_key_slow_dec_cpuslocked+0xb8/0x210 [ 41.216527] ? static_key_disable+0x30/0x30 [ 41.220852] ? rcu_read_lock_sched_held+0x108/0x120 [ 41.225867] static_key_slow_dec+0x63/0xa0 [ 41.230099] kvm_arch_vcpu_uninit+0x18e/0x1d0 [ 41.234598] kvm_vcpu_uninit+0x44/0x90 [ 41.238487] vmx_free_vcpu+0x23a/0x300 [ 41.242381] kvm_arch_destroy_vm+0x365/0x7c0 [ 41.246814] ? check_memory_region+0x143/0x1b0 [ 41.251400] ? kvm_arch_sync_events+0x30/0x30 [ 41.255901] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 41.261440] ? mmu_notifier_unregister+0x474/0x600 [ 41.266391] ? kfree+0x107/0x230 [ 41.269766] ? __mmu_notifier_register+0x30/0x30 [ 41.274531] ? __free_pages+0x10a/0x190 [ 41.278510] ? free_unref_page+0x960/0x960 [ 41.282761] kvm_put_kvm+0x6c8/0xff0 [ 41.286487] ? kvm_write_guest_cached+0x40/0x40 [ 41.291164] ? kvm_irqfd_release+0xd1/0x120 [ 41.295492] ? _raw_spin_unlock_irq+0x27/0x80 [ 41.300006] ? _raw_spin_unlock_irq+0x27/0x80 [ 41.304525] ? kasan_check_write+0x14/0x20 [ 41.308761] ? do_raw_spin_lock+0xc1/0x200 [ 41.312997] ? kvm_irqfd_release+0xdd/0x120 [ 41.317313] ? kvm_irqfd_release+0xdd/0x120 [ 41.321639] ? kvm_put_kvm+0xff0/0xff0 [ 41.325526] kvm_vm_release+0x42/0x50 [ 41.329328] __fput+0x385/0xa30 [ 41.332618] ? get_max_files+0x20/0x20 [ 41.336504] ? trace_hardirqs_on+0xbd/0x310 [ 41.340827] ? ___might_sleep+0x1ed/0x300 [ 41.344974] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 41.350420] ? arch_local_save_flags+0x40/0x40 [ 41.355017] ? kasan_check_write+0x14/0x20 [ 41.359250] ? do_raw_spin_lock+0xc1/0x200 [ 41.363483] ____fput+0x15/0x20 [ 41.366767] task_work_run+0x1e8/0x2a0 [ 41.370660] ? task_work_cancel+0x240/0x240 [ 41.374990] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 41.380533] ? switch_task_namespaces+0x9d/0xd0 [ 41.385202] do_exit+0x1ad7/0x2610 [ 41.388772] ? mm_update_next_owner+0x990/0x990 [ 41.393447] ? kvm_vcpu_ioctl+0x29c/0x1150 [ 41.397687] ? rcu_read_lock_sched_held+0x108/0x120 [ 41.402710] ? kfree+0x1fa/0x230 [ 41.406083] ? kvm_vcpu_ioctl+0x2a1/0x1150 [ 41.410332] ? kvm_vcpu_block+0x1030/0x1030 [ 41.414664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.420227] ? avc_has_extended_perms+0xab2/0x15a0 [ 41.425181] ? fpu__prepare_read+0x3b/0x750 [ 41.429515] ? avc_ss_reset+0x190/0x190 [ 41.433507] ? save_stack+0xa9/0xd0 [ 41.437146] ? save_stack+0x43/0xd0 [ 41.440782] ? __kasan_slab_free+0x102/0x150 [ 41.445200] ? kasan_slab_free+0xe/0x10 [ 41.449167] ? putname+0xf2/0x130 [ 41.452633] ? __x64_sys_openat+0x9d/0x100 [ 41.456863] ? do_syscall_64+0x1b9/0x820 [ 41.460920] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.466299] ? ___might_sleep+0x1ed/0x300 [ 41.470467] ? __bpf_trace_initcall_finish+0x2a/0x30 [ 41.475577] ? trace_hardirqs_off+0xb8/0x310 [ 41.479995] ? kvm_vcpu_block+0x1030/0x1030 [ 41.484319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.489879] ? do_vfs_ioctl+0x201/0x1720 [ 41.493938] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 41.499132] ? ioctl_preallocate+0x300/0x300 [ 41.503545] ? selinux_file_mprotect+0x620/0x620 [ 41.508298] ? path_mountpoint+0x34e/0x2190 [ 41.512624] ? rcu_read_lock_sched_held+0x108/0x120 [ 41.517645] ? kmem_cache_free+0x24f/0x290 [ 41.521908] ? putname+0xf7/0x130 [ 41.525372] do_group_exit+0x177/0x440 [ 41.529518] ? trace_hardirqs_on+0xbd/0x310 [ 41.533841] ? __ia32_sys_exit+0x50/0x50 [ 41.537902] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 41.543372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.548916] ? ksys_ioctl+0x81/0xd0 [ 41.552550] __x64_sys_exit_group+0x3e/0x50 [ 41.556872] do_syscall_64+0x1b9/0x820 [ 41.560763] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 41.566133] ? syscall_return_slowpath+0x5e0/0x5e0 [ 41.571062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.575909] ? trace_hardirqs_on_caller+0x310/0x310 [ 41.580925] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 41.585943] ? prepare_exit_to_usermode+0x291/0x3b0 [ 41.590961] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.595812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.601027] RIP: 0033:0x43ecc8 [ 41.604224] Code: Bad RIP value. [ 41.607582] RSP: 002b:00007ffe44260448 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 41.615294] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ecc8 [ 41.622563] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 41.629829] RBP: 00000000004be588 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 41.637337] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000000001 [ 41.644609] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 41.651878] Modules linked in: [ 41.655073] [ 41.655079] ====================================================== [ 41.655085] WARNING: possible circular locking dependency detected [ 41.655089] 4.19.0-rc3+ #13 Not tainted [ 41.655095] ------------------------------------------------------ [ 41.655101] syz-executor876/5519 is trying to acquire lock: [ 41.655104] 000000001dc16598 ((console_sem).lock){-...}, at: down_trylock+0x13/0x70 [ 41.655120] [ 41.655125] but task is already holding lock: [ 41.655128] 00000000e790cd21 (&rq->lock){-.-.}, at: __schedule+0x236/0x1ed0 [ 41.655143] [ 41.655148] which lock already depends on the new lock. [ 41.655151] [ 41.655153] [ 41.655159] the existing dependency chain (in reverse order) is: [ 41.655161] [ 41.655164] -> #2 (&rq->lock){-.-.}: [ 41.655179] _raw_spin_lock+0x2d/0x40 [ 41.655183] task_fork_fair+0xb0/0x6d0 [ 41.655188] sched_fork+0x443/0xba0 [ 41.655192] copy_process+0x2586/0x8780 [ 41.655196] _do_fork+0x1cb/0x11d0 [ 41.655200] kernel_thread+0x34/0x40 [ 41.655204] rest_init+0x22/0xe5 [ 41.655208] start_kernel+0x8f4/0x92f [ 41.655213] x86_64_start_reservations+0x29/0x2b [ 41.655217] x86_64_start_kernel+0x76/0x79 [ 41.655222] secondary_startup_64+0xa4/0xb0 [ 41.655224] [ 41.655227] -> #1 (&p->pi_lock){-.-.}: [ 41.655243] _raw_spin_lock_irqsave+0x99/0xd0 [ 41.655247] try_to_wake_up+0xd2/0x12f0 [ 41.655251] wake_up_process+0x10/0x20 [ 41.655255] __up.isra.1+0x1c0/0x2a0 [ 41.655259] up+0x13c/0x1c0 [ 41.655263] __up_console_sem+0xbe/0x1b0 [ 41.655268] console_unlock+0x524/0x11a0 [ 41.655272] vprintk_emit+0x33d/0x930 [ 41.655276] vprintk_default+0x28/0x30 [ 41.655280] vprintk_func+0x7e/0x181 [ 41.655284] printk+0xa7/0xcf [ 41.655288] load_umh+0x51/0xbd [ 41.655292] do_one_initcall+0x145/0x957 [ 41.655297] kernel_init_freeable+0x4bb/0x5ae [ 41.655301] kernel_init+0x11/0x1b2 [ 41.655305] ret_from_fork+0x3a/0x50 [ 41.655307] [ 41.655310] -> #0 ((console_sem).lock){-...}: [ 41.655325] lock_acquire+0x1ed/0x520 [ 41.655330] _raw_spin_lock_irqsave+0x99/0xd0 [ 41.655334] down_trylock+0x13/0x70 [ 41.655339] __down_trylock_console_sem+0xae/0x200 [ 41.655343] console_trylock+0x15/0xa0 [ 41.655348] vprintk_emit+0x322/0x930 [ 41.655352] vprintk_default+0x28/0x30 [ 41.655364] vprintk_func+0x7e/0x181 [ 41.655368] printk+0xa7/0xcf [ 41.655373] kasan_die_handler.cold.22+0x11/0x30 [ 41.655377] notifier_call_chain+0x17e/0x380 [ 41.655388] atomic_notifier_call_chain+0x96/0x190 [ 41.655392] notify_die+0x1bd/0x2d0 [ 41.655397] do_general_protection+0x248/0x2f0 [ 41.655401] general_protection+0x1e/0x30 [ 41.655405] __schedule+0xfb7/0x1ed0 [ 41.655410] preempt_schedule_common+0x1f/0xd0 [ 41.655415] preempt_schedule+0x4d/0x60 [ 41.655419] ___preempt_schedule+0x16/0x18 [ 41.655423] on_each_cpu+0x1ab/0x1e0 [ 41.655427] text_poke_bp+0x12b/0x1de [ 41.655432] __jump_label_transform.isra.0+0x478/0x8f0 [ 41.655437] arch_jump_label_transform+0x2f/0x40 [ 41.655442] __jump_label_update+0x16e/0x1a0 [ 41.655446] jump_label_update+0x174/0x320 [ 41.655452] __static_key_slow_dec_cpuslocked+0xb8/0x210 [ 41.655456] static_key_slow_dec+0x63/0xa0 [ 41.655461] kvm_arch_vcpu_uninit+0x18e/0x1d0 [ 41.655465] kvm_vcpu_uninit+0x44/0x90 [ 41.655469] vmx_free_vcpu+0x23a/0x300 [ 41.655474] kvm_arch_destroy_vm+0x365/0x7c0 [ 41.655478] kvm_put_kvm+0x6c8/0xff0 [ 41.655482] kvm_vm_release+0x42/0x50 [ 41.655486] __fput+0x385/0xa30 [ 41.655490] ____fput+0x15/0x20 [ 41.655494] task_work_run+0x1e8/0x2a0 [ 41.655498] do_exit+0x1ad7/0x2610 [ 41.655503] do_group_exit+0x177/0x440 [ 41.655507] __x64_sys_exit_group+0x3e/0x50 [ 41.655511] do_syscall_64+0x1b9/0x820 [ 41.655516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.655519] [ 41.655524] other info that might help us debug this: [ 41.655526] [ 41.655529] Chain exists of: [ 41.655532] (console_sem).lock --> &p->pi_lock --> &rq->lock [ 41.655551] [ 41.655556] Possible unsafe locking scenario: [ 41.655558] [ 41.655566] CPU0 CPU1 [ 41.655571] ---- ---- [ 41.655573] lock(&rq->lock); [ 41.655583] lock(&p->pi_lock); [ 41.655596] lock(&rq->lock); [ 41.655605] lock((console_sem).lock); [ 41.655613] [ 41.655617] *** DEADLOCK *** [ 41.655619] [ 41.655624] 5 locks held by syz-executor876/5519: [ 41.655626] #0: 000000004cd5a25d (cpu_hotplug_lock.rw_sem){++++}, at: static_key_slow_dec+0x57/0xa0 [ 41.655646] #1: 0000000087733d28 (jump_label_mutex){+.+.}, at: __static_key_slow_dec_cpuslocked+0x82/0x210 [ 41.655665] #2: 00000000079bf0d9 (text_mutex){+.+.}, at: arch_jump_label_transform+0x1b/0x40 [ 41.655684] #3: 00000000e790cd21 (&rq->lock){-.-.}, at: __schedule+0x236/0x1ed0 [ 41.655702] #4: 000000004c6d1ef2 (rcu_read_lock){....}, at: atomic_notifier_call_chain+0x0/0x190 [ 41.655721] [ 41.655724] stack backtrace: [ 41.655731] CPU: 0 PID: 5519 Comm: syz-executor876 Not tainted 4.19.0-rc3+ #13 [ 41.655738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.655742] Call Trace: [ 41.655746] dump_stack+0x1c4/0x2b4 [ 41.655751] ? dump_stack_print_info.cold.2+0x52/0x52 [ 41.655755] ? vprintk_func+0x85/0x181 [ 41.655760] print_circular_bug.isra.33.cold.54+0x1bd/0x27d [ 41.655764] ? save_trace+0xe0/0x290 [ 41.655769] __lock_acquire+0x33e4/0x4ec0 [ 41.655773] ? mark_held_locks+0x130/0x130 [ 41.655778] ? mark_held_locks+0x130/0x130 [ 41.655782] ? update_load_avg+0x387/0x2470 [ 41.655787] ? __update_load_avg_blocked_se+0x730/0x730 [ 41.655792] ? attach_entity_load_avg+0x860/0x860 [ 41.655796] ? update_load_avg+0x387/0x2470 [ 41.655801] ? __lock_is_held+0xb5/0x140 [ 41.655805] ? attach_entity_load_avg+0x860/0x860 [ 41.655809] ? graph_lock+0x170/0x170 [ 41.655815] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 41.655819] lock_acquire+0x1ed/0x520 [ 41.655823] ? down_trylock+0x13/0x70 [ 41.655827] ? find_held_lock+0x36/0x1c0 [ 41.655832] ? lock_release+0x970/0x970 [ 41.655836] ? trace_hardirqs_off+0xb8/0x310 [ 41.655840] ? vprintk_emit+0x1d3/0x930 [ 41.655845] ? trace_hardirqs_on+0x310/0x310 [ 41.655849] ? trace_hardirqs_off+0xb8/0x310 [ 41.655853] ? log_store+0x344/0x4c0 [ 41.655858] ? vprintk_emit+0x322/0x930 [ 41.655862] _raw_spin_lock_irqsave+0x99/0xd0 [ 41.655866] ? down_trylock+0x13/0x70 [ 41.655870] down_trylock+0x13/0x70 [ 41.655875] __down_trylock_console_sem+0xae/0x200 [ 41.655879] console_trylock+0x15/0xa0 [ 41.655883] vprintk_emit+0x322/0x930 [ 41.655888] ? wake_up_klogd+0x180/0x180 [ 41.655893] ? __lock_acquire+0x7ec/0x4ec0 [ 41.655897] ? mark_held_locks+0x130/0x130 [ 41.655902] vprintk_default+0x28/0x30 [ 41.655906] vprintk_func+0x7e/0x181 [ 41.655909] printk+0xa7/0xcf [ 41.655914] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 41.655919] ? kasan_die_handler.cold.22+0x5/0x30 [ 41.655923] ? kasan_die_handler+0x1a/0x31 [ 41.655928] kasan_die_handler.cold.22+0x11/0x30 [ 41.655932] notifier_call_chain+0x17e/0x380 [ 41.655937] ? unregister_die_notifier+0x20/0x20 [ 41.655942] ? kasan_check_read+0x11/0x20 [ 41.655947] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 41.655951] ? rcu_bh_qs+0xc0/0xc0 [ 41.655955] ? rcu_bh_qs+0xc0/0xc0 [ 41.655960] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 41.655965] atomic_notifier_call_chain+0x96/0x190 [ 41.655969] notify_die+0x1bd/0x2d0 [ 41.655974] ? __atomic_notifier_call_chain+0x1a0/0x1a0 [ 41.655978] ? search_module_extables+0x98/0xe0 [ 41.655982] ? __schedule+0xfb7/0x1ed0 [ 41.655987] ? __schedule+0xfb7/0x1ed0 [ 41.655991] ? search_exception_tables+0x47/0x50 [ 41.655996] do_general_protection+0x248/0x2f0 [ 41.656000] general_protection+0x1e/0x30 [ 41.656005] RIP: 0010:__schedule+0xfb7/0x1ed0 [ 41.656019] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 0f 85 b9 09 00 00 4d 8b 24 24 4d 85 e4 0f 84 0b f7 ff ff 49 8d 7c 24 10 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 a4 e8 0d f7 03 fa eb 9d 48 89 de 4c 89 ff e8 20 [ 41.656024] RSP: 0018:ffff8801bcb16bd0 EFLAGS: 00010806 [ 41.656033] RAX: 1bd5a00000000022 RBX: ffff8801cb232440 RCX: 1ffff100389c388f [ 41.656039] RDX: 0000000040000000 RSI: 0000000000000000 RDI: dead000000000110 [ 41.656046] RBP: ffff8801bcb16da8 R08: ffff8801c8e0a340 R09: fffff520003cfe47 [ 41.656052] R10: fffff520003cfe47 R11: ffffc90001e7f23b R12: dead000000000100 [ 41.656058] R13: dffffc0000000000 R14: ffff8801dae2cb40 R15: ffff8801c8e0a340 [ 41.656063] ? generic_exec_single+0x5f0/0x5f0 [ 41.656067] ? __sched_text_start+0x8/0x8 [ 41.656072] ? __set_pte_vaddr+0x135/0x1a0 [ 41.656077] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 41.656081] ? find_next_and_bit+0x183/0x1e0 [ 41.656086] ? smp_call_function_many+0x13f/0xb60 [ 41.656090] ? mark_held_locks+0xc7/0x130 [ 41.656094] ? text_poke+0x405/0x5e0 [ 41.656099] ? on_each_cpu+0xdd/0x1e0 [ 41.656103] ? on_each_cpu+0xdd/0x1e0 [ 41.656107] ? recalculate_apic_map+0x12e/0xf50 [ 41.656112] ? lockdep_hardirqs_on+0x421/0x5c0 [ 41.656117] ? preempt_schedule+0x4d/0x60 [ 41.656121] ? recalculate_apic_map+0x12e/0xf50 [ 41.656126] preempt_schedule_common+0x1f/0xd0 [ 41.656130] preempt_schedule+0x4d/0x60 [ 41.656134] ___preempt_schedule+0x16/0x18 [ 41.656139] ? on_each_cpu+0x13b/0x1e0 [ 41.656143] ? on_each_cpu+0x1a6/0x1e0 [ 41.656147] on_each_cpu+0x1ab/0x1e0 [ 41.656152] ? recalculate_apic_map+0x12d/0xf50 [ 41.656156] text_poke_bp+0x12b/0x1de [ 41.656161] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 41.656165] ? poke_int3_handler+0x90/0x90 [ 41.656170] ? wait_for_completion+0x8a0/0x8a0 [ 41.656175] ? recalculate_apic_map+0x12d/0xf50 [ 41.656180] __jump_label_transform.isra.0+0x478/0x8f0 [ 41.656184] ? modules_open+0xa0/0xa0 [ 41.656188] ? kvm_vm_release+0x42/0x50 [ 41.656192] ? get_trap_addr+0x1d0/0x1d0 [ 41.656197] ? do_group_exit+0x177/0x440 [ 41.656202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.656206] ? jump_label_type+0x139/0x1e0 [ 41.656211] arch_jump_label_transform+0x2f/0x40 [ 41.656216] __jump_label_update+0x16e/0x1a0 [ 41.656220] jump_label_update+0x174/0x320 [ 41.656225] __static_key_slow_dec_cpuslocked+0xb8/0x210 [ 41.656230] ? static_key_disable+0x30/0x30 [ 41.656235] ? rcu_read_lock_sched_held+0x108/0x120 [ 41.656239] static_key_slow_dec+0x63/0xa0 [ 41.656243] kvm_arch_vcpu_uninit+0x18e/0x1d0 [ 41.656247] kvm_vcpu_uninit+0x44/0x [ 41.656255] Lost 91 message(s)! [ 42.681120] ---[ end trace df0d3516db0053ac ]--- [ 42.685884] RIP: 0010:__schedule+0xfb7/0x1ed0 [ 42.690399] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 0f 85 b9 09 00 00 4d 8b 24 24 4d 85 e4 0f 84 0b f7 ff ff 49 8d 7c 24 10 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 a4 e8 0d f7 03 fa eb 9d 48 89 de 4c 89 ff e8 20 [ 42.709308] RSP: 0018:ffff8801bcb16bd0 EFLAGS: 00010806 [ 42.714671] RAX: 1bd5a00000000022 RBX: ffff8801cb232440 RCX: 1ffff100389c388f [ 42.721934] RDX: 0000000040000000 RSI: 0000000000000000 RDI: dead000000000110 [ 42.729209] RBP: ffff8801bcb16da8 R08: ffff8801c8e0a340 R09: fffff520003cfe47 [ 42.736474] R10: fffff520003cfe47 R11: ffffc90001e7f23b R12: dead000000000100 [ 42.743738] R13: dffffc0000000000 R14: ffff8801dae2cb40 R15: ffff8801c8e0a340 [ 42.751006] FS: 000000000220f880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 42.759236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.765137] CR2: 000000000043ec9e CR3: 000000000946a000 CR4: 00000000001426f0 [ 42.772411] Kernel panic - not syncing: Fatal exception [ 43.954493] Shutting down cpus with NMI [ 43.959381] Kernel Offset: disabled [ 43.963032] Rebooting in 86400 seconds..