syzbot
WARNING in vmx_handle_exit
Status:
premoderation: reported C repro on 2025/09/16 10:44
Bug presence:
origin:lts
[Documentation on labels]
Reported-by: syzbot+04b630e994a83f1e28bc@syzkaller.appspotmail.com
First crash: 388d, last: 2d03h
▶
▼
Last patch testing requests (6)
Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 529 at arch/x86/kvm/vmx/vmx.c:6460 __vmx_handle_exit arch/x86/kvm/vmx/vmx.c:6460 [inline]
WARNING: CPU: 0 PID: 529 at arch/x86/kvm/vmx/vmx.c:6460 vmx_handle_exit+0x13c3/0x1c00 arch/x86/kvm/vmx/vmx.c:6617
Modules linked in:
CPU: 0 UID: 0 PID: 529 Comm: syz-executor397 Not tainted syzkaller #0 9aa2cb443b149a071e1af4082fbb7f81a961e323
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:__vmx_handle_exit arch/x86/kvm/vmx/vmx.c:6460 [inline]
RIP: 0010:vmx_handle_exit+0x13c3/0x1c00 arch/x86/kvm/vmx/vmx.c:6617
Code: fc ff ff e8 ff 9d 58 00 4c 89 fb 4c 89 ff e8 04 e7 00 00 41 89 c6 e9 5c fc ff ff e8 e7 9d 58 00 e9 73 f4 ff ff e8 dd 9d 58 00 <0f> 0b 43 80 3c 2f 00 49 89 de 74 08 4c 89 f7 e8 19 8a b1 00 49 8b
RSP: 0018:ffffc900028d7448 EFLAGS: 00010293
RAX: ffffffff812edac3 RBX: ffff8881148ca180 RCX: ffff888114672600
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881148ca180
RBP: ffffc900028d7530 R08: ffff8881148ca347 R09: 1ffff11022919468
R10: dffffc0000000000 R11: ffffed1022919469 R12: ffff8881148ca180
R13: dffffc0000000000 R14: ffffc900029c8921 R15: 1ffff11022919430
FS: 00007f5fa3f1f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000114230000 CR4: 00000000003526b0
Call Trace:
<TASK>
vcpu_enter_guest arch/x86/kvm/x86.c:11198 [inline]
vcpu_run+0x4c14/0x7830 arch/x86/kvm/x86.c:11358
kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 arch/x86/kvm/x86.c:11685
kvm_vcpu_ioctl+0xa43/0x1000 virt/kvm/kvm_main.c:4526
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:906 [inline]
__se_sys_ioctl+0x126/0x1b0 fs/ioctl.c:892
__x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:892
x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17
do_syscall_x64 arch/x86/entry/common.c:47 [inline]
do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f5fa3f55569
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5fa3f1f218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f5fa4008b68 RCX: 00007f5fa3f55569
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
RBP: 00007f5fa4008b60 R08: 35203a6b63617473 R09: 35203a6b63617473
R10: 35203a6b63617473 R11: 0000000000000246 R12: 00007f5fa3fd93b8
R13: 0000f90000000000 R14: 0000200000000598 R15: 0000000000001000
</TASK>
---[ end trace 0000000000000000 ]---
* Struck through repros no longer work on HEAD.