kvm [7496]: vcpu0, guest rIP: 0x309 disabled perfctr wrmsr: 0xc1 data 0x61000000011 kvm [7496]: vcpu0, guest rIP: 0x309 disabled perfctr wrmsr: 0xc2 data 0x61000000011 kvm [7496]: vcpu0, guest rIP: 0x309 ignored wrmsr: 0x11e data 0x61000000011 kvm [7496]: vcpu0, guest rIP: 0x309 disabled perfctr wrmsr: 0x186 data 0x61000000011 kvm [7496]: vcpu0, guest rIP: 0x309 disabled perfctr wrmsr: 0x187 data 0x61000000011 BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1342 in_atomic(): 0, irqs_disabled(): 1, pid: 7499, name: syz-executor3 1 lock held by syz-executor3/7499: #0: 000000006eaacba5 (&mm->mmap_sem){++++}, at: __do_page_fault+0x381/0xe40 arch/x86/mm/fault.c:1328 irq event stamp: 8032 hardirqs last enabled at (8031): [] do_syscall_64+0x92/0x800 arch/x86/entry/common.c:274 hardirqs last disabled at (8032): [] error_entry+0x76/0xd0 arch/x86/entry/entry_64.S:1262 softirqs last enabled at (7976): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (7961): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (7961): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 7499 Comm: syz-executor3 Not tainted 4.17.0-rc4+ #45 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 ___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188 __might_sleep+0x95/0x190 kernel/sched/core.c:6141 __do_page_fault+0x3ae/0xe40 arch/x86/mm/fault.c:1342 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1474 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160 RIP: 0010:msr_write_intercepted arch/x86/kvm/vmx.c:2126 [inline] RIP: 0010:vmx_vcpu_run+0xa3d/0x25f0 arch/x86/kvm/vmx.c:9869 RSP: 0018:ffff8801833d73b0 EFLAGS: 00010046 RAX: 0000000000000286 RBX: 0000000010000000 RCX: ffffc900034eb000 RDX: 1ffffffff115b400 RSI: ffffffff811f753c RDI: 0000000000000005 RBP: 1ffff1003067aead R08: ffff8801833fc640 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 WARNING: kernel stack regs at 000000001f1c1a95 in syz-executor3:7499 has bad 'bp' value 0000000054146dee unwind stack type:0 next_sp: (null) mask:0x2 graph_idx:0 000000005521311f: ffff8801833d6f18 (0xffff8801833d6f18) 000000002b2c1cc2: ffffffff8129fbf1 (show_trace_log_lvl+0x1dd/0x25c) 0000000016e40dbd: ffffffff811f755d (vmx_vcpu_run+0xa3d/0x25f0) 00000000482c7ebe: ffff8801833d7388 (0xffff8801833d7388) 00000000c750b1ec: 0000000000000002 (0x2) 000000008bb07eae: 0000000000000001 (0x1) 00000000311a3be4: ffff8801833d0000 (0xffff8801833d0000) 000000005779a4eb: ffff8801833d8000 (0xffff8801833d8000) 00000000db8599e6: 0000000000000000 ... 00000000052210cf: ffff8801833d0000 (0xffff8801833d0000) 000000005750e994: ffff8801833d8000 (0xffff8801833d8000) 00000000742fd60e: 0000000000000000 ... 00000000748780e4: 0000000000000002 (0x2) 00000000462907c4: ffff8801833fc640 (0xffff8801833fc640) 00000000267a8487: 0000010100000000 (0x10100000000) 00000000f28ada6f: 0000000000000000 ... 00000000cb5335e7: ffff8801833d6e50 (0xffff8801833d6e50) 00000000efb6e8c8: ffffffff811f755d (vmx_vcpu_run+0xa3d/0x25f0) 0000000025ab2966: ffff8801833d7308 (0xffff8801833d7308) 00000000bc609735: 0000000000000006 (0x6) 00000000d67cb2fe: 0000000000000000 ... 000000007b466cbd: ffffffff88d18b60 (pv_cpu_ops+0x120/0x120) 000000000e83d059: 00000000ffffffff (0xffffffff) 00000000f54a71e1: ffff8801833d6f28 (0xffff8801833d6f28) 0000000026ccfdf9: ffffffff8129fca8 (show_stack+0x38/0x3a) 00000000ea3c6f14: ffff8801833d6fd8 (0xffff8801833d6fd8) 000000001cafc79b: ffffffff8767c715 (dump_stack+0x1b9/0x294) 00000000cb99ded1: fffffbfff11a316c (0xfffffbfff11a316c) 00000000fefa3e25: dffffc0000000000 (0xdffffc0000000000) 00000000cd8a893f: 1ffff1003067adea (0x1ffff1003067adea) 0000000012e0358c: 0000000041b58ab3 (0x41b58ab3) 00000000ddca0205: ffffffff889a4b4c (regoff.33591+0x35b9ec/0x36e2a0) 00000000d50a7f55: ffffffff8767c55c (dump_stack_print_info.cold.2+0x52/0x52) 000000003e452ca7: ffff8801833fce78 (0xffff8801833fce78) 000000007c3944b9: ffff8801833d6f90 (0xffff8801833d6f90) 00000000141f3ad8: ffffffff815d44b4 (print_lock+0xd1/0xd6) 0000000007a12d14: 0000000000001f19 (0x1f19) 00000000a1f0a7e3: ffffffff81476281 (irq_exit+0x1d1/0x200) 000000008591b06e: ffffffff81476281 (irq_exit+0x1d1/0x200) 00000000917a44a2: ffff8801833fc640 (0xffff8801833fc640) 00000000831677bd: ffffed003b5e3eb2 (0xffffed003b5e3eb2) 000000003e188fec: ffff8801833fc640 (0xffff8801833fc640) 000000000b1553a2: 1ffff1003067adfd (0x1ffff1003067adfd) 00000000b02348ac: ffff8801833fc640 (0xffff8801833fc640) 00000000f600378d: 0000000000001d4b (0x1d4b) 000000000c068995: 000000000000053e (0x53e) 00000000841f9716: 0000000000000000 ... 00000000d7b52115: ffff8801833d7068 (0xffff8801833d7068) 00000000b8e47163: ffffffff8153eac1 (___might_sleep.cold.87+0x11f/0x13a) 00000000812490fd: 0000000041b58ab3 (0x41b58ab3) 00000000dea8806a: ffffffff889b4f3f (regoff.33591+0x36bddf/0x36e2a0) 0000000029d2d6a6: ffffffff81525070 (check_same_owner+0x320/0x320) 00000000d801512e: 0000000000000001 (0x1) 00000000ef78cc99: ffffffff815e18a0 (do_raw_spin_trylock+0x1b0/0x1b0) 000000005d76223c: ffff8801833fce70 (0xffff8801833fce70) 000000003610731f: ffff880100000001 (0xffff880100000001) 000000006c5e7e85: ffffffff8128b180 (compat_start_thread+0x80/0x80) 00000000431252f0: ffff8801833fc640 (0xffff8801833fc640) 000000002d9957f3: ffffffff876f1677 (_raw_spin_unlock_irq+0x27/0x70) 00000000fe2fca10: ffff88018556a000 (0xffff88018556a000) 00000000ff87554c: 0000000000000000 ... 00000000180d1702: ffff8801833fc640 (0xffff8801833fc640) 000000006f28c0bc: ffffffff87c78b60 (__func__.46248+0x1e0/0x940) 0000000057b3c0ed: 000000000000053e (0x53e) 000000008135b77d: 0000000000000000 ... 000000007d322c38: ffff8801833d70a8 (0xffff8801833d70a8) 000000004fa94628: ffffffff81525425 (__might_sleep+0x95/0x190) 0000000005f7b7ef: ffffffff815ca1fd (trace_hardirqs_on+0xd/0x10) 00000000bcd30374: 00000000000059c6 (0x59c6) 0000000062561658: 00000000000059c6 (0x59c6) 00000000daf97e3d: ffff8801833d7308 (0xffff8801833d7308) 000000000a3ff524: 0000000000000001 (0x1) 0000000034b7ea9c: 0000000000000000 ... 00000000435438ec: ffff8801833d7190 (0xffff8801833d7190) 0000000010f80335: ffffffff813557ae (__do_page_fault+0x3ae/0xe40) 000000003cfffc96: ffffed003067f9ce (0xffffed003067f9ce) 000000007a5ffdc4: 1ffff1003067ae1a (0x1ffff1003067ae1a) 00000000994a97e4: 0000000000000000 ... 0000000005ce7b62: ffffffff00000000 (0xffffffff00000000) 000000007f8feef2: 000000148151d410 (0x148151d410) 0000000028d99592: 1ffff1003067ae21 (0x1ffff1003067ae21) 000000008bbca36b: ffff8801854140e8 (0xffff8801854140e8) 0000000048381ae1: ffff880185414040 (0xffff880185414040) 000000002d75ba61: ffff8801833fc640 (0xffff8801833fc640) 000000001b8843ef: 0000000041b58ab3 (0x41b58ab3) 000000005da208a2: ffffffff889b645b (regoff.33591+0x36d2fb/0x36e2a0) 00000000ca2e7dcc: ffffffff81355400 (mm_fault_error+0x380/0x380) 000000002feb6ded: ffffffff815c2eb0 (lock_repin_lock+0x410/0x410) 000000006b50fdf8: 0000000000000086 (0x86) 000000000e53c13b: 0000000000000000 ... 00000000a65e51d0: ffff8801daf2c698 (0xffff8801daf2c698) 0000000099e49e0c: 000000000002c680 (0x2c680) 00000000e471bc7b: ffff8801833fc640 (0xffff8801833fc640) 00000000e996c8ff: ffff8801833d7180 (0xffff8801833d7180) 00000000c848ea3a: 0000000000000086 (0x86) 00000000e2bb7342: ffff8801d9ad2340 (0xffff8801d9ad2340) 00000000e0211129: 1ffff1003067ae36 (0x1ffff1003067ae36) 00000000dc0c0f33: ffff8801833d7308 (0xffff8801833d7308) 00000000720471ea: 0000000000000000 ... 000000006c2a12d8: 00000000000059c6 (0x59c6) 0000000005072091: ffff8801833d72d0 (0xffff8801833d72d0) 000000004c34cc5c: ffff8801833d72f8 (0xffff8801833d72f8) 000000000df4b6f8: ffffffff8135635e (do_page_fault+0xee/0x8a7) 000000008fdf651b: ffffffff876da209 (__schedule+0x809/0x1e30) 00000000bee91032: ffff880100000002 (0xffff880100000002) 00000000deebd4df: 0000000041b58ab3 (0x41b58ab3) 00000000eb95df88: ffffffff889a47c8 (regoff.33591+0x35b668/0x36e2a0) 0000000040115077: ffffffff81356270 (vmalloc_sync_all+0x30/0x30) 00000000f65e8d27: ffff8801daf2d0c8 (0xffff8801daf2d0c8) 000000009a4340d8: ffff8801daf2d0a0 (0xffff8801daf2d0a0) 0000000079a904c2: 1ffff1003067ae3e (0x1ffff1003067ae3e) 0000000035e75306: ffff8801833d7310 (0xffff8801833d7310) 0000000064733d8b: ffff8801daf2c680 (0xffff8801daf2c680) 000000005da07c0a: 0000000041b58ab3 (0x41b58ab3) 0000000079eb84be: ffffffff889bdcf0 (K512_4+0x4ab0/0x11bc24) 0000000030622f44: ffffffff876d9a00 (__sched_text_start+0x8/0x8) 00000000e80b32e9: dffffc0000000000 (0xdffffc0000000000) 00000000927d29dc: ffff8801833d7240 (0xffff8801833d7240) 00000000db1fdd4f: ffffffff8768bdfe (plist_check_list+0x7e/0xa0) 00000000d21967a3: 1ffff1003067ae4a (0x1ffff1003067ae4a) 00000000e1b3cd9d: ffffc90000c81cc0 (0xffffc90000c81cc0) 000000003c30f95e: 1ffff1003067ae4e (0x1ffff1003067ae4e) 0000000019a77a87: ffff8801833d77f0 (0xffff8801833d77f0) 00000000127ee2c7: 0000000041b58ab3 (0x41b58ab3) 00000000e14bb041: ffffffff889a3ecf (regoff.33591+0x35ad6f/0x36e2a0) 000000001c7e0b09: ffffffff815c1ce0 (graph_lock+0x170/0x170) 00000000fc2be3af: ffffffff889a48a6 (regoff.33591+0x35b746/0x36e2a0) 00000000b05fc449: ffffffff8768be20 (plist_check_list+0xa0/0xa0) 00000000866ee64b: ffffffff815cb465 (__lock_acquire+0x7f5/0x5140) 00000000f6611714: ffff8801833d77f0 (0xffff8801833d77f0) 00000000af666717: 0000000000000086 (0x86) 00000000378fb7bd: 0000000000000001 (0x1) 0000000087bd5404: 0000000000000000 ... 00000000fb9b0069: ffff8801833d72f0 (0xffff8801833d72f0) 0000000070d5abec: ffffffff81007c50 (trace_hardirqs_off_thunk+0x1a/0x1c) 00000000d36b8004: 0000000000000000 ... 0000000053230500: 0000000087800a07 (0x87800a07) 00000000e6c20fb2: 0000000000000001 (0x1) 00000000b892371a: 0000000000000000 ... 00000000ee7d0b5b: ffff8801833d7309 (0xffff8801833d7309) 00000000e5cea93b: ffffffff87800fce (page_fault+0x1e/0x30) 000000001f1c1a95: 0000000000000000 ... 00000000a963b13d: 1ffff1003067aead (0x1ffff1003067aead) 000000001711fc1a: 0000000010000000 (0x10000000) 00000000595067b2: 0000000000000000 ... 00000000ae3fb977: ffff8801833fc640 (0xffff8801833fc640) 00000000b14849c3: 0000000000000286 (0x286) 00000000bf3ed272: ffffc900034eb000 (0xffffc900034eb000) 0000000013a2ccf4: 1ffffffff115b400 (0x1ffffffff115b400) 0000000011f904f9: ffffffff811f753c (vmx_vcpu_run+0xa1c/0x25f0) 00000000d7000997: 0000000000000005 (0x5) 00000000feebd09f: ffffffffffffffff (0xffffffffffffffff) 0000000069b9c634: ffffffff811f755d (vmx_vcpu_run+0xa3d/0x25f0) 00000000f4cd46b9: 0000000000000010 (0x10) 00000000cae90060: 0000000000010046 (0x10046) 00000000f0519041: ffff8801833d73b0 (0xffff8801833d73b0) 00000000976202de: 0000000000000018 (0x18) 000000002cb6f195: 0000000000000286 (0x286) 0000000036770e5b: ffffffff88ada000 (raw_data+0x2000/0x2000) 000000001ee7e47e: 1ffff1003067ae7d (0x1ffff1003067ae7d) 000000006cc49466: 0000000000000000 ... 0000000023da119c: ffffffff87cc6ae0 (tk_debug_sleep_time_fops+0x2c0/0x940) 0000000039b270a8: ffff8801833d7468 (0xffff8801833d7468) 00000000feca36cd: 0000000000000286 (0x286) 00000000b26d63b2: 0000000041b58ab3 (0x41b58ab3) 000000005aff87fe: ffffffff889b4f3f (regoff.33591+0x36bddf/0x36e2a0) 00000000b1b563e3: ffffffff81525070 (check_same_owner+0x320/0x320) 000000005ce25291: ffffffff815e193e (do_raw_spin_unlock+0x9e/0x2e0) 0000000062945a27: 0000000041b58ab3 (0x41b58ab3) 000000008b3f03c7: ffffffff889a4b4c (regoff.33591+0x35b9ec/0x36e2a0) 000000006316139a: 0000000041b58ab3 (0x41b58ab3) 0000000003f5c0d0: ffffffff889b0e90 (regoff.33591+0x367d30/0x36e2a0) 0000000082546547: ffffffff81650380 (rcu_note_context_switch+0x710/0x710) 000000002025ba55: ffffffff815d1e5c (lock_acquire+0x1dc/0x520) 00000000066b1ef8: 0000000000000000 ... 0000000073b25633: ffff8801833d77f0 (0xffff8801833d77f0) 00000000f77a88e6: ffff8801833fc640 (0xffff8801833fc640) 0000000062492f20: ffffffff87cc6ae0 (tk_debug_sleep_time_fops+0x2c0/0x940) 000000007ece234c: 0000000000000039 (0x39) 00000000e8763660: 0000000000000000 ... 00000000b6ae8145: ffff8801833d74a8 (0xffff8801833d74a8) 00000000d3b925dd: ffffffff81525425 (__might_sleep+0x95/0x190) 000000009fde6e63: ffff8801833d77d8 (0xffff8801833d77d8) 000000008bd5cc83: ffff8801833d77d8 (0xffff8801833d77d8) 000000007516daa5: ffff8801833d7628 (0xffff8801833d7628) 000000006b86f296: ffff8801833d74e8 (0xffff8801833d74e8) 00000000e0f77f74: ffff8801833d74a8 (0xffff8801833d74a8) 00000000ba236837: ffffffff81793ef6 (__sanitizer_cov_trace_const_cmp4+0x16/0x20) 000000001e13d7de: ffff8801833d7650 (0xffff8801833d7650) 00000000bafb7b9e: ffffffff816c0280 (futex_wait_queue_me+0x550/0x820) 00000000a8ad76f0: 0000000000000000 ... 00000000641888c4: 1ffff1003067ae99 (0x1ffff1003067ae99) 0000000090582056: 0000000041b58ab3 (0x41b58ab3) 0000000041aa2e32: ffffffff889c3f68 (K512_4+0xad28/0x11bc24) 000000003ec488c1: ffffffff816bfd30 (refill_pi_state_cache.part.7+0x300/0x300) 0000000075017b15: 0000000000000000 ... 00000000154962e7: ffffc90000000000 (0xffffc90000000000) 0000000050a809d0: ffffc90000c81c90 (0xffffc90000c81c90) 00000000bc3de1b4: ffffc90000c81c98 (0xffffc90000c81c98) 00000000e843e1f2: ffff8801833d7510 (0xffff8801833d7510) 00000000306011ec: ffffffff81b59914 (kasan_check_write+0x14/0x20) 0000000060fd14ff: ffff8801833d7548 (0xffff8801833d7548) 000000005dd38b08: ffffffff815e15b1 (do_raw_spin_lock+0xc1/0x200) 00000000087328aa: ffffc90000c81c88 (0xffffc90000c81c88) 000000003b97063b: 0000000000000000 ... 000000003a82ab6d: ffff8801833d7540 (0xffff8801833d7540) 0000000044767550: ffffffff81793ef6 (__sanitizer_cov_trace_const_cmp4+0x16/0x20) 00000000af2907c1: ffff8801833d7568 (0xffff8801833d7568) 00000000e53a95d2: ffffffff816bf48b (get_futex_value_locked+0xcb/0xf0) 000000005e51bab4: 000000000072bec8 (0x72bec8) 000000008f7170cd: ffff8801833d7568 (0xffff8801833d7568) 000000005d2904df: ffffffff81793e76 (__sanitizer_cov_trace_cmp4+0x16/0x20) 00000000a78245b2: ffffc90000c81cc0 (0xffffc90000c81cc0) 00000000a6961436: ffffffff816c5809 (futex_wait_setup+0x279/0x400) 000000009dbb48dd: ffff8801833fce78 (0xffff8801833fce78) 00000000a4443f04: ffff8801833d7808 (0xffff8801833d7808) 00000000734efae7: 0000000000c79d20 (0xc79d20) 00000000721c3b32: 1ffff1003067aeb9 (0x1ffff1003067aeb9) 000000009cf5067a: dffffc0000000000 (0xdffffc0000000000) 00000000da1540c7: 0000000100000001 (0x100000001) 0000000034d36129: ffff8801833d77e0 (0xffff8801833d77e0) 00000000167d94a3: ffffed003067af01 (0xffffed003067af01) 0000000079d7d3a4: ffff8801833d7810 (0xffff8801833d7810) 00000000c379d806: ffff8801833d77d8 (0xffff8801833d77d8) 000000003ccc99e8: 0000000041b58ab3 (0x41b58ab3) 0000000001189f47: ffffffff889c3eec (K512_4+0xacac/0x11bc24) 0000000094b7d2a6: ffffffff816c5590 (futex_wake+0x750/0x750) 00000000e146bffa: ffff8801833d7720 (0xffff8801833d7720) 00000000d3233465: ffff8801833d77f0 (0xffff8801833d77f0) 00000000738d6f12: 0000000000000000 ... 000000009da7af95: ffff8801833d7630 (0xffff8801833d7630) 00000000216b308f: ffffffff81793f73 (__sanitizer_cov_trace_switch+0x53/0x90) 000000000b41567b: 0000000000000002 (0x2) 00000000edbb7279: ffff880185414040 (0xffff880185414040) 00000000699d4959: ffff8801833d7878 (0xffff8801833d7878) 000000003b78caef: ffff8801833d7630 (0xffff8801833d7630) 0000000007b23b1c: ffffffff81793eba (__sanitizer_cov_trace_const_cmp1+0x1a/0x20) 0000000082082d43: ffff8801833d7650 (0xffff8801833d7650) 00000000c694e921: ffffffff816bf7ad (drop_futex_key_refs.isra.13+0x6d/0xe0) 000000001715f068: ffff8801833d77d8 (0xffff8801833d77d8) 000000004a7e6752: 0000000000000000 ... 00000000c64745d9: ffff8801833d78a0 (0xffff8801833d78a0) 000000004f07f56b: ffffffff816c5f51 (futex_wait+0x5c1/0x9f0) 0000000008b85626: ffff8801833d7718 (0xffff8801833d7718) 00000000948f2a58: 1ffff1003067aed7 (0x1ffff1003067aed7) 000000006b2c6f4f: 0000000000000000 ... 000000001abe7237: ffff8801833d7688 (0xffff8801833d7688) 00000000e2f21f94: 00000000ffffffff (0xffffffff) 000000005ef1bdbe: 000000000072bec8 (0x72bec8) 0000000002c4a47b: ffff8801833d76d8 (0xffff8801833d76d8) 0000000036f8fdfd: ffff8801833d7758 (0xffff8801833d7758) 00000000a3ea1cbb: ffffffff889a4b4c (regoff.33591+0x35b9ec/0x36e2a0) 000000009103ac7f: 0000000000000001 (0x1) 00000000fe361c7c: 0000000000000000 ... 00000000a7df3bc2: 0000000041b58ab3 (0x41b58ab3) 0000000042d9e335: ffffffff889c4148 (K512_4+0xaf08/0x11bc24) 00000000ef15cb49: ffffffff816c5990 (futex_wait_setup+0x400/0x400) 000000008dfea5b8: ffff8801833d76e0 (0xffff8801833d76e0) 000000009a837694: ffffc90000c81c80 (0xffffc90000c81c80) 00000000b636a170: ffff8801833d7718 (0xffff8801833d7718) 00000000cc46daf7: ffffffff81793f73 (__sanitizer_cov_trace_switch+0x53/0x90) 00000000681784fb: 0000000000000002 (0x2) 000000008b4ed6b8: ffff880185414040 (0xffff880185414040) 00000000b2a9d112: dffffc0000000000 (0xdffffc0000000000) 00000000ffad384e: ffff8801833d7718 (0xffff8801833d7718) 00000000f81db2da: ffffffff81793eba (__sanitizer_cov_trace_const_cmp1+0x1a/0x20) 00000000c5e5f66b: 0000000000000000 ... 000000002a34f553: ffffffff816bf7ad (drop_futex_key_refs.isra.13+0x6d/0xe0) 000000005f31881f: ffffc90000c79d28 (0xffffc90000c79d28) 00000000ab31eeb7: ffff8801ac03f7d8 (0xffff8801ac03f7d8) 000000006bf3f09c: ffff8801833d78a0 (0xffff8801833d78a0) 00000000cfd46c07: ffffffff816c5136 (futex_wake+0x2f6/0x750) 0000000045fe8d02: ffff8801833d7840 (0xffff8801833d7840) 00000000fab95b8b: ffffc90000c79d08 (0xffffc90000c79d08) 000000009e74438a: 1ffff1003067aef3 (0x1ffff1003067aef3) 0000000012901c09: ffffffff00000000 (0xffffffff00000000) 0000000086add8d5: 00000000ffffffff (0xffffffff) 0000000040adc8c0: ffffed003067af08 (0xffffed003067af08) 00000000b87c8c80: ffff8801833d77f8 (0xffff8801833d77f8) 00000000e323bd37: ffff8801833d7838 (0xffff8801833d7838) 0000000005f5dbfe: ffffc90000c79d40 (0xffffc90000c79d40) 000000009ed291ee: 0000000001f62000 (0x1f62000) 000000009c3a84b1: 0000000041b58ab3 (0x41b58ab3) 00000000655f841a: ffffffff889c4118 (K512_4+0xaed8/0x11bc24) 00000000c7f0ca6a: ffffffff816c4e40 (get_futex_key+0x1e90/0x1e90) 00000000cbe31bae: ffffffff876e2430 (wait_for_completion+0x870/0x870) 00000000736b2c80: ffffffff00000001 (0xffffffff00000001) 00000000b35c1877: ffff8801833fc640 (0xffff8801833fc640) 00000000e4c36e2a: ffff880182eb0bc0 (0xffff880182eb0bc0) 000000004b875e3c: 0000000041b58ab3 (0x41b58ab3) 0000000004f560d3: 0000000000000064 (0x64) 00000000bb9c562a: ffff8801833d77e0 (0xffff8801833d77e0) 0000000078437add: ffff8801833d77e0 (0xffff8801833d77e0) 000000006333950b: ffff8801833d77f0 (0xffff8801833d77f0) 000000002bcbcf2f: ffff8801833d77f0 (0xffff8801833d77f0) 0000000094134dfe: ffff8801833fc640 (0xffff8801833fc640) 0000000004f9a0a4: 0000000000000000 ... 00000000bde05bb8: 000000000072b000 (0x72b000) 000000009bb389b6: ffff880185414040 (0xffff880185414040) 00000000949dd70b: 0000000000000eca (0xeca) 00000000bbf28835: 0000000000000000 ... 000000006fd2a1cf: 00000000ffffffff (0xffffffff) 00000000970ab528: 0000000000000ece (0xece) 000000009e2fa392: ffffffff88d8e2a0 (rcu_callback_map+0x40/0x40) 00000000a30d475f: 0000000000000286 (0x286) 0000000009eecd39: ffff8801833fc640 (0xffff8801833fc640) 000000005537a802: ffff8801833d78a0 (0xffff8801833d78a0) 00000000f25c75af: ffffffff81793f73 (__sanitizer_cov_trace_switch+0x53/0x90) 0000000028d691d3: 00000000ffffffff (0xffffffff) 00000000ce334fd3: 0000000000000000 ... 0000000019d96413: ffff8801833d7d10 (0xffff8801833d7d10) 00000000c4e2e3fb: ffffffff816ccaa9 (do_futex+0x249/0x27d0) 00000000d56e61e1: ffff8801833d78c8 (0xffff8801833d78c8) 00000000f8ce23c9: ffffffff8163b918 (rcu_read_lock_sched_held+0x108/0x120) 0000000073c16e9a: 0000000000000000 ... 00000000cd7d8f6f: ffff8801833d78f8 (0xffff8801833d78f8) 0000000024d15a79: ffffffff81b57fd9 (kfree+0x1e9/0x260) 00000000346ca8c0: 1ffff1003067af24 (0x1ffff1003067af24) 000000000895142c: 0000000000000001 (0x1) 00000000e3e4312b: 0000000000000000 ... 00000000aa476662: ffff880182eb00d8 (0xffff880182eb00d8) 000000006ce2b864: ffff8801833d7c28 (0xffff8801833d7c28) 000000008f8bbbd6: ffffffff81070392 (kvm_vcpu_ioctl+0x2b2/0x12e0) 00000000d3c53836: 000000008333e600 (0x8333e600) 000000004c20f47c: 0000000000000000 ... 00000000fa45a85c: ffffffff889a8ff8 (regoff.33591+0x35fe98/0x36e2a0) 000000007b14034f: 1ffff1003067af29 (0x1ffff1003067af29) 0000000000cde906: ffff880100000001 (0xffff880100000001) 00000000ee51bf71: 000000000072bec8 (0x72bec8) 000000007bdb19a6: 0000000041b58ab3 (0x41b58ab3) 000000006a9ccc19: ffffffff889c42f0 (K512_4+0xb0b0/0x11bc24) 000000001f4c51a2: ffffffff816cc860 (exit_robust_list+0x290/0x290) 00000000a6b3d0a3: 1ffff1003067af41 (0x1ffff1003067af41) 000000006ebef62f: ffff8801833fce78 (0xffff8801833fce78) 000000000dc99706: ffffffff88d8e320 (rcu_bh_lock_map+0x40/0x40) 00000000e175fde7: ffffffff88d8e320 (rcu_bh_lock_map+0x40/0x40) 000000002ab3b8dd: 0000000000000000 ... 0000000082f89fba: ffff8801833d79d0 (0xffff8801833d79d0) 00000000dea17d8b: ffffffff815c25c6 (find_held_lock+0x36/0x1c0) 0000000015aa780c: 0000000100000001 (0x100000001) 00000000be3f2fc3: ffff8801833d7a28 (0xffff8801833d7a28) 000000001e589e8f: 1ffff1003067af41 (0x1ffff1003067af41) 000000001ddd8f68: ffff8801833d7ae8 (0xffff8801833d7ae8) 00000000a5b8d79f: ffffffff88d8e320 (rcu_bh_lock_map+0x40/0x40) 000000003cae8c51: ffff8801833fc640 (0xffff8801833fc640) 00000000ec0f890e: ffff8801833d7a28 (0xffff8801833d7a28) 00000000df72af51: ffff8801833d7b10 (0xffff8801833d7b10) 000000009454d968: 0000000000000286 (0x286) 00000000a6488a23: 0000000000000000 ... 000000009ecc2ece: ffff8801ffffffff (0xffff8801ffffffff) 0000000040a3aa19: ffff8801833fce70 (0xffff8801833fce70) 0000000023c65ff0: 0000000000000286 (0x286) 0000000017f2565b: ffff8801bd7cc000 (0xffff8801bd7cc000) 00000000eb8cd934: 0000000041b58ab3 (0x41b58ab3) 00000000c24e313f: ffffffff889bf9f8 (K512_4+0x67b8/0x11bc24) 0000000072da5916: ffffffff815d1270 (lock_downgrade+0x8e0/0x8e0) 000000001028f874: ffff8801833d7a50 (0xffff8801833d7a50) 000000009999129f: 0000000000000000 ... 00000000e934deb1: 00000000d61f2080 (0xd61f2080) 00000000a899011c: 1ffff1003067af4f (0x1ffff1003067af4f) 000000004a1b2fdb: ffff8801dae23600 (0xffff8801dae23600) 000000003ab8769e: 1ffff1003067af51 (0x1ffff1003067af51) 00000000da1a8c82: ffff8801dae23600 (0xffff8801dae23600) 00000000d09fc0d4: ffff8801dae23610 (0xffff8801dae23610) 00000000757f58d1: ffff8801833d7a70 (0xffff8801833d7a70) 00000000c48ef6ea: ffff8801d76a7610 (0xffff8801d76a7610) 00000000d3bff48a: ffff8801833d7b10 (0xffff8801833d7b10) 000000005c0faea4: ffffffff81644fe5 (rcu_is_watching+0x85/0x140) 00000000bf76fc5a: ffff8801833d7ad0 (0xffff8801833d7ad0) 00000000b9fdcb8d: 0000000041b58ab3 (0x41b58ab3) 000000009458dadb: ffffffff889a4b4c (regoff.33591+0x35b9ec/0x36e2a0) 000000006ee1ae75: ffffffff81644f60 (rcu_bh_force_quiescent_state+0x20/0x20) 000000004ad142f3: ffffffff88d8e320 (rcu_bh_lock_map+0x40/0x40) 000000000b74d9e4: ffff8801d76a7610 (0xffff8801d76a7610) 0000000041893257: ffff8801833fc640 (0xffff8801833fc640) 000000001c1d0f48: ffffffff88d8e320 (rcu_bh_lock_map+0x40/0x40) 000000008db9a9ba: ffff8801833d7c48 (0xffff8801833d7c48) 000000001bed5cde: ffff8801b4f5a400 (0xffff8801b4f5a400) 00000000d32c417d: ffff8801833d7b00 (0xffff8801833d7b00) 00000000989f4365: 0000000000000286 (0x286) 00000000844072ba: dffffc0000000000 (0xdffffc0000000000) 0000000038ba3b22: 0000000000000001 (0x1) 000000004b718c76: ffff8801be4212f0 (0xffff8801be4212f0) 00000000719f168a: dffffc0000000000 (0xdffffc0000000000) 00000000831aac38: 0000000000000000 ... 0000000040337a24: 0000000000000001 (0x1) 000000008537910d: ffff8801833d7c70 (0xffff8801833d7c70) 000000005026b8e1: ffffffff81c7d13c (__fget+0x40c/0x650) 00000000545fd431: ffff8801833d7bc8 (0xffff8801833d7bc8) 0000000026aebbef: 1ffff1003067af6d (0x1ffff1003067af6d) 00000000f91caf09: 0000001600004000 (0x1600004000) 000000003a852779: ffff8801b4f5a450 (0xffff8801b4f5a450) 00000000b9ce0678: ffff8801be421280 (0xffff8801be421280) 00000000dd86102b: ffff8801b4f5a400 (0xffff8801b4f5a400) 00000000070187b0: 0000000041b58a01 (0x41b58a01) 000000006235a61f: ffff8801833d7c08 (0xffff8801833d7c08) 00000000b459ac47: ffffed003067af79 (0xffffed003067af79) 00000000ee1c336c: 0000000041b58ab3 (0x41b58ab3) 000000007e043a13: ffffffff889a47a0 (regoff.33591+0x35b640/0x36e2a0) 00000000a76fdcfd: ffffffff81c7cd30 (expand_files.part.8+0x9a0/0x9a0) 00000000e5fadc6e: ffffffff88d8e2a0 (rcu_callback_map+0x40/0x40) 000000004e1fcce3: 0000000000000001 (0x1) 00000000c621fdcd: 00000000014000c0 (0x14000c0) 00000000241a9b39: ffff8801833d7bc8 (0xffff8801833d7bc8) 00000000e2251b8c: 0000000000000000 ... 0000000014890502: 0000000041b58ab3 (0x41b58ab3) 00000000098e3f62: 1ffff1003067af7f (0x1ffff1003067af7f) 0000000017844054: 1ffff1003067af7f (0x1ffff1003067af7f) 00000000d138407a: 0000000000000000 ... 0000000058cdf8a9: ffff8801a8977080 (0xffff8801a8977080) 00000000e50f668b: ffff8801833fc640 (0xffff8801833fc640) 00000000f195e9fb: ffff8801833d7be8 (0xffff8801833d7be8) 00000000fe261e15: ffffffff81793eba (__sanitizer_cov_trace_const_cmp1+0x1a/0x20) 00000000703d20c0: ffff880100006a89 (0xffff880100006a89) 000000001d7fcdb6: ffff8801833d7c28 (0xffff8801833d7c28) 00000000f488e7c4: ffffffff81793f73 (__sanitizer_cov_trace_switch+0x53/0x90) 00000000961623a4: ffff8801be421280 (0xffff8801be421280) 000000004fbba908: 1ffff1003067af8e (0x1ffff1003067af8e) 00000000e8e83f7e: ffffffff810700e0 (kvm_uevent_notify_change.part.29+0x440/0x440) 0000000036cff2be: ffff8801833d7c28 (0xffff8801833d7c28) 00000000036b33e9: ffffffff81793ef6 (__sanitizer_cov_trace_const_cmp4+0x16/0x20) 0000000026cf30f1: ffff8801833d7db8 (0xffff8801833d7db8) 00000000718db999: ffffffff81c492f2 (do_vfs_ioctl+0x1f2/0x16a0) 00000000d863138e: fffffbfff11a316e (0xfffffbfff11a316e) 000000009a55a320: 0000000000000008 (0x8) 00000000f3c545f9: 1ffff1003067af93 (0x1ffff1003067af93) 000000009bcffc1a: ffff8801833d7d78 (0xffff8801833d7d78) 000000005413ff37: 0000000000000013 (0x13) 0000000020836cb4: ffff8801833d7c70 (0xffff8801833d7c70) 00000000d244f2dc: ffffffff81b598f1 (kasan_check_read+0x11/0x20) 0000000060d3fa44: ffff8801833d7da0 (0xffff8801833d7da0) 0000000053e1518c: ffffffff81c7d489 (__fget_light+0xc9/0x430) 000000004d33623b: ffffffff81c49100 (ioctl_preallocate+0x2e0/0x2e0) 000000000f3d5ea0: 0000400000000000 (0x400000000000) 0000000033a9ef88: ffff880100000002 (0xffff880100000002) 000000006f1d1052: 0000000041b58ab3 (0x41b58ab3) 000000005532c63a: ffffffff889a6508 (regoff.33591+0x35d3a8/0x36e2a0) 00000000386be97a: ffffffff81c7d3c0 (fget_raw+0x20/0x20) 000000000ae02f9e: ffffffff878009d5 (retint_kernel+0x10/0x10) 000000000bbf442f: 0000000000000002 (0x2) 00000000435b40bb: 0000000000000000 ... 000000006b3f78bc: ffff8801833d7cf0 (0xffff8801833d7cf0) 00000000f4025fb6: ffffffff815ca051 (trace_hardirqs_on_caller+0x421/0x5c0) 00000000359257a2: dfae850377f7ef00 (0xdfae850377f7ef00) 000000009e3e4a90: 1ffff1003067afab (0x1ffff1003067afab) 0000000097dbaa98: 0000000000000000 ... 00000000ba1b2d03: ffff8801833d7e20 (0xffff8801833d7e20) 000000007788b213: ffff8801833d7e20 (0xffff8801833d7e20) 00000000d1c3f11c: ffffffff816cf4a7 (__x64_sys_futex+0x477/0x680) 0000000054c7040b: ffffffff8100aa17 (exit_to_usermode_loop+0x87/0x310) 000000003e7771e1: 000000000072bec8 (0x72bec8) 00000000cd2f73c1: 0000000000000000 ... 00000000a3540a4c: 000000000072bea0 (0x72bea0) 00000000894c14ac: 0000000000000000 ... 00000000def215c3: 0000000041b58ab3 (0x41b58ab3) 00000000405d6b15: ffffffff889c3f0a (K512_4+0xacca/0x11bc24) 000000005ce7b2f5: ffffffff816cf030 (do_futex+0x27d0/0x27d0) 000000007cfbf55e: ffff8801be421280 (0xffff8801be421280) 000000004a12cf61: 0000000000000013 (0x13) 0000000035d15cb2: 1ffff1003067afc8 (0x1ffff1003067afc8) 00000000fbb189ab: 000000008004ae98 (0x8004ae98) 00000000d6488256: 0000000000000013 (0x13) 00000000c39a3f45: 0000000020000500 (0x20000500) 0000000048535f27: ffff8801833d7db8 (0xffff8801833d7db8) 00000000372bb4bb: ffffffff81c7d808 (__fdget+0x18/0x20) 000000005b053419: ffff8801833d7f58 (0xffff8801833d7f58) 000000007861def7: ffff8801833d7df8 (0xffff8801833d7df8) 00000000da154aee: ffffffff81c4a7ca (ksys_ioctl+0x2a/0xd0) 000000005390542d: 8004ae98833fc640 (0x8004ae98833fc640) 00000000bbbdaeeb: ffff8801833d7f58 (0xffff8801833d7f58) 00000000372745c2: 1ffff1003067afc8 (0x1ffff1003067afc8) 000000000776dfa7: ffff8801833d7f20 (0xffff8801833d7f20) 00000000de536839: ffff8801833d7f58 (0xffff8801833d7f58) 0000000074ceeb47: dffffc0000000000 (0xdffffc0000000000) 00000000aaa62b0a: ffff8801833d7e20 (0xffff8801833d7e20) 000000001af1b7c4: ffffffff81c4a8e3 (__x64_sys_ioctl+0x73/0xb0) 00000000053ba506: 1ffff1003067afc8 (0x1ffff1003067afc8) 0000000056171c40: ffff8801833d7e20 (0xffff8801833d7e20) 000000001266e2f1: 0000000000000010 (0x10) 0000000069442dc7: ffff8801833d7f48 (0xffff8801833d7f48) 00000000c23c97f0: ffffffff8100c291 (do_syscall_64+0x1b1/0x800) 0000000008802335: ffffffff8100a990 (syscall_slow_exit_work+0x4f0/0x4f0) 0000000026d7f7a3: 0000000000000000 ... 0000000056e8ac38: 0000000041b58ab3 (0x41b58ab3) 00000000d771f548: ffffffff889a47a0 (regoff.33591+0x35b640/0x36e2a0) 00000000bf91e9c3: ffffffff8100c0e0 (syscall_return_slowpath+0x5c0/0x5c0) 000000005d61dc18: ffff8801833d7e68 (0xffff8801833d7e68) 000000006bf50977: 0000000000000000 ... 0000000006ae9eca: ffff8801833d7f48 (0xffff8801833d7f48) 00000000b34d6442: ffffffff8100be2f (syscall_return_slowpath+0x30f/0x5c0) 000000008470183a: ffff8801833d7f58 (0xffff8801833d7f58) 0000000018e523f7: 1ffff1003067afd8 (0x1ffff1003067afd8) 000000001564ef7c: ffff8801833fc640 (0xffff8801833fc640) 00000000bf0000f2: ffff8801833fce70 (0xffff8801833fce70) 00000000a5d38c1e: ffff8801833d7ea8 (0xffff8801833d7ea8) 000000007a5124cc: 0000000000000000 ... 000000008c7da731: ffff8801833fc640 (0xffff8801833fc640) 00000000ef888d52: ffffffff8780009d (entry_SYSCALL_64_after_hwframe+0x59/0xbe) 000000006b281508: 0000000000000000 ... 000000007b81fb81: 0000000000000086 (0x86) 00000000ec31f299: 0000000000000000 ... 00000000328ed811: ffff8801833d7f48 (0xffff8801833d7f48) 0000000003bbbe94: ffffffff81007c50 (trace_hardirqs_off_thunk+0x1a/0x1c) 00000000145a98fb: 0000000000000000 ... 00000000b9c19a19: ffffffff8780008d (entry_SYSCALL_64_after_hwframe+0x49/0xbe) 00000000336588e4: 0000000000000000 ... 000000007925ff29: 00000000006f79a0 (0x6f79a0) 00000000749d167a: 0000000000000260 (0x260) 00000000a757501f: 00000000ffffffff (0xffffffff) 000000001a50c547: 000000000072bea0 (0x72bea0) 00000000e045060b: 00007f1e553f46d4 (0x7f1e553f46d4) 000000003d10059a: 0000000000000246 (0x246) 0000000020a58e25: 0000000000000000 ... 0000000066629f25: ffffffffffffffda (0xffffffffffffffda) 00000000bc883b48: 0000000000455979 (0x455979) 00000000dce2e5ee: 0000000020000500 (0x20000500) 00000000f4e81ee8: 000000008004ae98 (0x8004ae98) 00000000daacd5cc: 0000000000000013 (0x13) 00000000576304de: 0000000000000010 (0x10) 00000000d7a181f3: 0000000000455979 (0x455979) 00000000e137649c: 0000000000000033 (0x33) 00000000a928b29d: 0000000000000246 (0x246) 0000000015059df2: 00007f1e553f3c68 (0x7f1e553f3c68) 0000000017b8aa2e: 000000000000002b (0x2b) BUG: unable to handle kernel paging request at 00000000000059c6 PGD 1c90b6067 P4D 1c90b6067 PUD 1c829c067 PMD 0 Oops: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 7499 Comm: syz-executor3 Tainted: G W 4.17.0-rc4+ #45 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:msr_write_intercepted arch/x86/kvm/vmx.c:2126 [inline] RIP: 0010:vmx_vcpu_run+0xa3d/0x25f0 arch/x86/kvm/vmx.c:9869 RSP: 0018:ffff8801833d73b0 EFLAGS: 00010046 RAX: 0000000000000286 RBX: 0000000010000000 RCX: ffffc900034eb000 RDX: 1ffffffff115b400 RSI: ffffffff811f753c RDI: 0000000000000005 RBP: 1ffff1003067aead R08: ffff8801833fc640 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f1e553f4700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000000059c6 CR3: 00000001c91ea000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Code: 84 91 00 00 00 e8 94 c8 59 00 48 8b 54 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 36 19 00 00 48 8b 04 24 <48> 8b 98 40 57 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 40 RIP: msr_write_intercepted arch/x86/kvm/vmx.c:2126 [inline] RSP: ffff8801833d73b0 RIP: vmx_vcpu_run+0xa3d/0x25f0 arch/x86/kvm/vmx.c:9869 RSP: ffff8801833d73b0 CR2: 00000000000059c6 ---[ end trace cc2bf6463994dde1 ]---