------------[ cut here ]------------ kernel BUG at arch/x86/kvm/x86.c:357! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 7053 Comm: syz-executor.2 Not tainted 5.0.0-rc6-next-20190215 #36 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kvm_spurious_fault+0x9/0x10 arch/x86/kvm/x86.c:357 Code: e8 0c 4c 66 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 e7 4b 66 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 RSP: 0018:ffff888046b972b0 EFLAGS: 00010212 RAX: 0000000000040000 RBX: ffff88808e718000 RCX: ffffc9000a235000 RDX: 0000000000036afc RSI: ffffffff810a1619 RDI: 0000000000000007 RBP: ffff888046b972b0 R08: ffff88808a410340 R09: fffff52000b4f447 R10: fffff52000b4f446 R11: ffffc90005a7a237 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88808b92b000 R15: ffff88808e71b888 FS: 00007f188a374700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff888046b97360 CR3: 000000004f0ce000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_static_branch arch/x86/include/asm/jump_label.h:23 [inline] vmcs_load arch/x86/kvm/vmx/ops.h:200 [inline] vmx_vcpu_load+0x474/0xed0 arch/x86/kvm/vmx/vmx.c:1253 kvm_arch_vcpu_load+0x1c5/0x890 arch/x86/kvm/x86.c:3207 kvm_sched_in+0x82/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4112 __fire_sched_in_preempt_notifiers kernel/sched/core.c:2533 [inline] fire_sched_in_preempt_notifiers kernel/sched/core.c:2539 [inline] finish_task_switch+0x28f/0x780 kernel/sched/core.c:2731 context_switch kernel/sched/core.c:2880 [inline] __schedule+0x81f/0x1cc0 kernel/sched/core.c:3518 preempt_schedule_notrace kernel/sched/core.c:3716 [inline] preempt_schedule_notrace+0xa0/0x130 kernel/sched/core.c:3687 ___preempt_schedule_notrace+0x16/0x2f rcu_read_unlock_sched_notrace include/linux/rcupdate.h:733 [inline] trace_kvm_emulate_insn arch/x86/kvm/trace.h:730 [inline] trace_kvm_emulate_insn arch/x86/kvm/trace.h:730 [inline] x86_emulate_instruction+0xd91/0x1c80 arch/x86/kvm/x86.c:6410 kvm_mmu_page_fault+0x375/0x1740 arch/x86/kvm/mmu.c:5390 handle_ept_violation+0x1c8/0x500 arch/x86/kvm/vmx/vmx.c:5102 vmx_handle_exit+0x279/0x1640 arch/x86/kvm/vmx/vmx.c:5847 vcpu_enter_guest+0x1261/0x60b0 arch/x86/kvm/x86.c:7916 vcpu_run arch/x86/kvm/x86.c:7980 [inline] kvm_arch_vcpu_ioctl_run+0x425/0x1750 arch/x86/kvm/x86.c:8180 kvm_vcpu_ioctl+0x4dc/0xfa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2678 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457e29 Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f188a373c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f188a3746d4 R13: 00000000004c0d62 R14: 00000000004d2b18 R15: 00000000ffffffff Modules linked in: ---[ end trace bd933ffc7d2d5272 ]--- RIP: 0010:kvm_spurious_fault+0x9/0x10 arch/x86/kvm/x86.c:357 Code: e8 0c 4c 66 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 e7 4b 66 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 RSP: 0018:ffff888046b972b0 EFLAGS: 00010212 RAX: 0000000000040000 RBX: ffff88808e718000 RCX: ffffc9000a235000 RDX: 0000000000036afc RSI: ffffffff810a1619 RDI: 0000000000000007 RBP: ffff888046b972b0 R08: ffff88808a410340 R09: fffff52000b4f447 R10: fffff52000b4f446 R11: ffffc90005a7a237 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88808b92b000 R15: ffff88808e71b888 FS: 00007f188a374700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff888046b97360 CR3: 000000004f0ce000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400