------------[ cut here ]------------ kernel BUG at arch/x86/kvm/x86.c:357! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 7761 Comm: syz-executor3 Not tainted 5.0.0-rc5-next-20190207 #30 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kvm_spurious_fault+0x9/0x10 arch/x86/kvm/x86.c:357 Code: e8 bc 32 66 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 97 32 66 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 RSP: 0018:ffff8880ae807e80 EFLAGS: 00010006 RAX: ffff888040212400 RBX: ffff8880351db810 RCX: ffffffff81329bda RDX: 0000000000010000 RSI: ffffffff810a14d9 RDI: 0000000000000007 RBP: ffff8880ae807e80 R08: ffff888040212400 R09: ffffed1015d05be1 R10: ffffed1015d05be0 R11: ffff8880ae82df07 R12: 1ffff11015d00fd3 R13: ffff8880993b1000 R14: ffff8880ae807ef8 R15: 0000000000000000 FS: 0000000001fe3940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8880ae807eb8 CR3: 00000000a6758000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vmcs_clear arch/x86/kvm/vmx/ops.h:185 [inline] loaded_vmcs_init+0x95/0x250 arch/x86/kvm/vmx/vmx.c:566 __loaded_vmcs_clear+0x229/0x360 arch/x86/kvm/vmx/vmx.c:633 flush_smp_call_function_queue+0x14a/0x500 kernel/smp.c:243 generic_smp_call_function_single_interrupt+0x13/0x2b kernel/smp.c:192 smp_call_function_single_interrupt+0xa3/0x460 arch/x86/kernel/smp.c:296 call_function_single_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:767 [inline] RIP: 0010:console_unlock+0xb5c/0xeb0 kernel/printk/printk.c:2456 Code: 92 88 48 c1 e8 03 42 80 3c 30 00 0f 85 c9 02 00 00 48 83 3d 25 2d 38 07 00 0f 84 98 01 00 00 e8 5a ec 15 00 48 8b 7d 98 57 9d <0f> 1f 44 00 00 e9 6b ff ff ff e8 45 ec 15 00 48 8b 7d 08 c7 05 a7 RSP: 0018:ffff8880178f6b88 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff04 RAX: ffff888040212400 RBX: 0000000000000200 RCX: 1ffff1100804259e RDX: 0000000000000000 RSI: ffffffff815a5b16 RDI: 0000000000000293 RBP: ffff8880178f6c10 R08: ffff888040212400 R09: ffff888040212cf0 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff841cb5b0 R14: dffffc0000000000 R15: ffffffff88f89eb0 vprintk_emit+0x280/0x6d0 kernel/printk/printk.c:1971 vprintk_default+0x28/0x30 kernel/printk/printk.c:1998 vprintk_func+0x7e/0x189 kernel/printk/printk_safe.c:398 printk+0xba/0xed kernel/printk/printk.c:2031 __netdev_printk+0x257/0x285 net/core/dev.c:9532 netdev_warn+0xd7/0x109 net/core/dev.c:9577 hsr_dev_open.cold+0x1c/0x3b net/hsr/hsr_device.c:184 __dev_open+0x234/0x3d0 net/core/dev.c:1395 __dev_change_flags+0x568/0x6e0 net/core/dev.c:7567 dev_change_flags+0x92/0x170 net/core/dev.c:7638 do_setlink+0x1619/0x3510 net/core/rtnetlink.c:2492 __rtnl_newlink+0xbd1/0x16c0 net/core/rtnetlink.c:3115 rtnl_newlink+0x69/0xa0 net/core/rtnetlink.c:3240 rtnetlink_rcv_msg+0x465/0xb00 net/core/rtnetlink.c:5198 netlink_rcv_skb+0x17a/0x460 net/netlink/af_netlink.c:2485 rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5216 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline] netlink_unicast+0x536/0x720 net/netlink/af_netlink.c:1336 netlink_sendmsg+0x8ae/0xd70 net/netlink/af_netlink.c:1925 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xdd/0x130 net/socket.c:631 __sys_sendto+0x262/0x380 net/socket.c:1808 __do_sys_sendto net/socket.c:1820 [inline] __se_sys_sendto net/socket.c:1816 [inline] __x64_sys_sendto+0xe1/0x1a0 net/socket.c:1816 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x411ea3 Code: ff 0f 83 40 18 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ed 43 64 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 11 18 00 00 c3 48 83 ec 08 e8 87 fa ff ff RSP: 002b:00007ffdf5166098 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000411ea3 RDX: 0000000000000028 RSI: 0000000000a50070 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffdf51660a0 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000003 R14: 00007ffdf5166148 R15: 0000000000000000 Modules linked in: ---[ end trace 7af4de2d4ed75bbd ]--- RIP: 0010:kvm_spurious_fault+0x9/0x10 arch/x86/kvm/x86.c:357 Code: e8 bc 32 66 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 97 32 66 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 RSP: 0018:ffff8880ae807e80 EFLAGS: 00010006 RAX: ffff888040212400 RBX: ffff8880351db810 RCX: ffffffff81329bda RDX: 0000000000010000 RSI: ffffffff810a14d9 RDI: 0000000000000007 RBP: ffff8880ae807e80 R08: ffff888040212400 R09: ffffed1015d05be1 R10: ffffed1015d05be0 R11: ffff8880ae82df07 R12: 1ffff11015d00fd3 R13: ffff8880993b1000 R14: ffff8880ae807ef8 R15: 0000000000000000 FS: 0000000001fe3940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8880ae807eb8 CR3: 00000000a6758000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400