------------[ cut here ]------------ kernel BUG at arch/x86/kvm/x86.c:357! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 9965 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #31 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kvm_spurious_fault+0x9/0x10 arch/x86/kvm/x86.c:357 Code: e8 5c 22 76 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 37 22 76 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 RSP: 0018:ffff8880ae607c78 EFLAGS: 00010006 RAX: ffff88809863a700 RBX: ffff88805681f810 RCX: ffffffff8139cb1a RDX: 0000000000010000 RSI: ffffffff810bdcb9 RDI: 0000000000000007 RBP: ffff8880ae607c78 R08: ffff88809863a700 R09: ffffed1015cc5ba9 R10: ffffed1015cc5ba8 R11: ffff8880ae62dd47 R12: 1ffff11015cc0f94 R13: ffff8880ae607cc0 R14: ffff8880ae607d20 R15: ffff8880887fe000 FS: 00007f003dd5a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8880ae607cc0 CR3: 000000008fecd000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vmcs_clear arch/x86/kvm/vmx/ops.h:185 [inline] loaded_vmcs_init+0xcb/0x320 arch/x86/kvm/vmx/vmx.c:565 __loaded_vmcs_clear+0x2c1/0x520 arch/x86/kvm/vmx/vmx.c:632 flush_smp_call_function_queue+0x1bb/0x640 kernel/smp.c:243 generic_smp_call_function_single_interrupt+0x13/0x2b kernel/smp.c:192 smp_call_function_single_interrupt+0x117/0x640 arch/x86/kernel/smp.c:296 call_function_single_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:filter_irq_stacks mm/kasan/common.c:55 [inline] RIP: 0010:save_stack+0xb4/0xd0 mm/kasan/common.c:74 Code: e0 fd ff ff 74 0a 8d 50 ff 48 83 3c d6 ff 74 23 48 8d bd e0 fd ff ff 44 89 e6 e8 47 96 dd 01 48 81 c4 18 02 00 00 41 5c 5d c3 <83> c2 01 39 c2 75 9d eb d3 89 95 e0 fd ff ff eb d5 90 66 2e 0f 1f RSP: 0018:ffff88807e66f3c8 EFLAGS: 00000287 ORIG_RAX: ffffffffffffff04 RAX: 0000000000000010 RBX: ffff88809691e0c0 RCX: ffffffff810f229c RDX: 0000000000000008 RSI: ffff88807e66f3e0 RDI: 0000000000000286 RBP: ffff88807e66f5e8 R08: ffff88809863a700 R09: 0000000000000001 R10: 0000000000000000 R11: ffff8880ae62dc7b R12: 00000000006080c0 R13: ffff88809691e080 R14: 0000000000000000 R15: ffff88812c3f0340 set_track mm/kasan/common.c:85 [inline] __kasan_kmalloc mm/kasan/common.c:496 [inline] __kasan_kmalloc.constprop.0+0xcf/0xe0 mm/kasan/common.c:469 kasan_kmalloc mm/kasan/common.c:504 [inline] kasan_slab_alloc+0xf/0x20 mm/kasan/common.c:411 slab_post_alloc_hook mm/slab.h:444 [inline] slab_alloc_node mm/slab.c:3324 [inline] kmem_cache_alloc_node_trace+0x13c/0x720 mm/slab.c:3650 kmalloc_node include/linux/slab.h:583 [inline] kzalloc_node include/linux/slab.h:751 [inline] __get_vm_area_node+0x12b/0x3a0 mm/vmalloc.c:1389 __vmalloc_node_range+0x191/0x910 mm/vmalloc.c:1745 __vmalloc_node mm/vmalloc.c:1795 [inline] __vmalloc_node_flags mm/vmalloc.c:1809 [inline] vzalloc+0x6b/0x90 mm/vmalloc.c:1848 kvm_dev_ioctl_get_cpuid+0x30c/0xe92 arch/x86/kvm/cpuid.c:805 kvm_arch_dev_ioctl+0x36c/0x5e0 arch/x86/kvm/x86.c:3135 kvm_dev_ioctl+0x177/0x1a60 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3399 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0x107b/0x17d0 fs/ioctl.c:696 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457f07 Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f003dd58098 EFLAGS: 00000203 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f003dd58830 RCX: 0000000000457f07 RDX: 00007f003dd58830 RSI: 00000000c008ae05 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000090 R09: 00000000000000a8 R10: 00000000000000b3 R11: 0000000000000203 R12: 0000000000000003 R13: 0000000020fe8000 R14: 00000000004dba70 R15: 00000000ffffffff Modules linked in: ---[ end trace 4f0391b9e5e24a8c ]--- RIP: 0010:kvm_spurious_fault+0x9/0x10 arch/x86/kvm/x86.c:357 Code: e8 5c 22 76 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 37 22 76 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 RSP: 0018:ffff8880ae607c78 EFLAGS: 00010006 RAX: ffff88809863a700 RBX: ffff88805681f810 RCX: ffffffff8139cb1a RDX: 0000000000010000 RSI: ffffffff810bdcb9 RDI: 0000000000000007 RBP: ffff8880ae607c78 R08: ffff88809863a700 R09: ffffed1015cc5ba9 R10: ffffed1015cc5ba8 R11: ffff8880ae62dd47 R12: 1ffff11015cc0f94 R13: ffff8880ae607cc0 R14: ffff8880ae607d20 R15: ffff8880887fe000 FS: 00007f003dd5a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8880ae607cc0 CR3: 000000008fecd000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400