Warning: Permanently added '10.128.1.93' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 53.700320][ T3601] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 53.719445][ T3601] debugfs: out of free dentries, can not create file 'remote_tlb_flush'
executing program
[ 53.800305][ T3605] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests'
executing program
[ 53.889307][ T3608] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests'
executing program
executing program
[ 54.048035][ C0] ==================================================================
[ 54.048043][ T3614] BUG: unable to handle page fault for address: ffffc90003882330
[ 54.048056][ T3614] #PF: supervisor read access in kernel mode
[ 54.056108][ C0] BUG: KASAN: vmalloc-out-of-bounds in kvm_arch_hardware_enable+0x281/0x840
[ 54.063826][ T3614] #PF: error_code(0x0000) - not-present page
[ 54.069787][ C0] Read of size 4 at addr ffffc90003882330 by task kvm/3615
[ 54.079399][ T3614] PGD 11800067
[ 54.085363][ C0]
[ 54.085371][ C0] CPU: 0 PID: 3615 Comm: kvm Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 54.092542][ T3614] P4D 11800067
[ 54.096008][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 54.098315][ T3614] PUD 119c9067
[ 54.107398][ C0] Call Trace:
[ 54.110841][ T3614] PMD 1ce01067
[ 54.120884][ C0]
[ 54.124319][ T3614] PTE 0
[ 54.127598][ C0] dump_stack_lvl+0xcd/0x134
[ 54.131033][ T3614]
[ 54.131039][ T3614] Oops: 0000 [#1] PREEMPT SMP KASAN
[ 54.133860][ C0] ? kvm_arch_hardware_enable+0x281/0x840
[ 54.136606][ T3614] CPU: 1 PID: 3614 Comm: syz-executor217 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 54.141176][ C0] print_report.cold+0x59/0x719
[ 54.143494][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 54.148681][ C0] ? kvm_arch_hardware_enable+0x281/0x840
[ 54.154384][ T3614] RIP: 0010:kvm_arch_hardware_enable+0x2ab/0x840
[ 54.164519][ C0] kasan_report+0xb1/0x1e0
[ 54.169346][ T3614] Code: 48 89 e8 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ed 04 00 00 <41> 8b 95 30 13 00 00 4d 8d b5 40 12 00 00 b9 08 00 00 00 4c 89 fe
[ 54.179385][ C0] ? kvm_arch_hardware_enable+0x281/0x840
[ 54.185080][ T3614] RSP: 0018:ffffc9000387fb28 EFLAGS: 00010086
[ 54.191383][ C0] kasan_check_range+0x13d/0x180
[ 54.195787][ T3614]
[ 54.195793][ T3614] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81120fe0
[ 54.215378][ C0] kvm_arch_hardware_enable+0x281/0x840
[ 54.221093][ T3614] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90003882330
[ 54.227146][ C0] ? kvm_arch_vcpu_destroy+0x330/0x330
[ 54.232072][ T3614] RBP: ffffc90003882330 R08: 0000000000000000 R09: 0000000000000003
[ 54.234380][ C0] ? sched_clock_cpu+0x69/0x2b0
[ 54.242327][ T3614] R10: fffff52000710466 R11: 0000000000000000 R12: 0000000000000000
[ 54.247937][ C0] ? cpuacct_all_seq_show+0x520/0x520
[ 54.255887][ T3614] R13: ffffc90003881000 R14: 0023001000000000 R15: ffffc9000387fb80
[ 54.261323][ C0] hardware_enable_nolock+0xa7/0x140
[ 54.269280][ T3614] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0063) knlGS:00000000577232c0
[ 54.274126][ C0] __flush_smp_call_function_queue+0x205/0x9a0
[ 54.282080][ T3614] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 54.287431][ C0] ? vm_stat_fops_open+0x40/0x40
[ 54.295409][ T3614] CR2: ffffc90003882330 CR3: 000000001cb48000 CR4: 00000000003526e0
[ 54.300677][ C0] __sysvec_call_function_single+0x95/0x3d0
[ 54.309579][ T3614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.315713][ C0] sysvec_call_function_single+0x8e/0xc0
[ 54.322273][ T3614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.327184][ C0]
[ 54.335127][ T3614] Call Trace:
[ 54.335134][ T3614]
[ 54.340993][ C0]
[ 54.341002][ C0] asm_sysvec_call_function_single+0x16/0x20
[ 54.348943][ T3614] ? _flat_send_IPI_mask+0x53/0x60
[ 54.354548][ C0] RIP: 0010:finish_task_switch.isra.0+0x2bf/0xc70
[ 54.362498][ T3614] ? kvm_arch_vcpu_destroy+0x330/0x330
[ 54.365413][ C0] Code: 8b 3a 4c 89 e7 48 c7 02 00 00 00 00 ff d1 4d 85 ff 75 bf 4c 89 e7 e8 60 f8 ff ff e8 1b 45 2f 00 fb 65 48 8b 1c 25 80 6f 02 00 <48> 8d bb 98 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[ 54.368677][ T3614] ? send_call_function_single_ipi+0x1b5/0x320
[ 54.371593][ C0] RSP: 0018:ffffc900038bfd58 EFLAGS: 00000202
[ 54.374506][ T3614] ? sched_ttwu_pending+0x550/0x550
[ 54.380454][ C0]
[ 54.380460][ C0] RAX: 000000000000000d RBX: ffff88807ef58000 RCX: 1ffffffff1bbcaf1
[ 54.385541][ T3614] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 54.391938][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 54.397458][ T3614] hardware_enable_nolock+0xa7/0x140
[ 54.417046][ C0] RBP: ffffc900038bfda0 R08: 0000000000000001 R09: 0000000000000001
[ 54.423187][ T3614] smp_call_function_many_cond+0x10e2/0x1430
[ 54.429220][ C0] R10: ffffed10173473f0 R11: 0000000000000000 R12: ffff8880b9a39f80
[ 54.434395][ T3614] ? vm_stat_fops_open+0x40/0x40
[ 54.436699][ C0] R13: ffffffff8bcbc980 R14: 0000000000000000 R15: ffff8880b9a3a9b8
[ 54.444648][ T3614] ? smp_call_on_cpu+0x270/0x270
[ 54.450436][ C0] ? finish_task_switch.isra.0+0x2b5/0xc70
[ 54.458379][ T3614] ? lockdep_init_map_type+0x21a/0x7f0
[ 54.463638][ C0] ? __switch_to+0x5cc/0x1050
[ 54.471602][ T3614] ? do_raw_spin_lock+0x120/0x2a0
[ 54.477556][ C0] __schedule+0xae7/0x52b0
[ 54.485503][ T3614] ? rwlock_bug.part.0+0x90/0x90
[ 54.490419][ C0] ? kthread+0x150/0x3a0
[ 54.498360][ T3614] ? vm_stat_fops_open+0x40/0x40
[ 54.503272][ C0] ? io_schedule_timeout+0x140/0x140
[ 54.509065][ T3614] on_each_cpu_cond_mask+0x56/0xa0
[ 54.514503][ C0] schedule+0xda/0x1b0
[ 54.519149][ T3614] kvm_dev_ioctl+0x131b/0x1ce0
[ 54.524145][ C0] ? worker_thread+0x1080/0x1080
[ 54.528540][ T3614] ? kvm_stat_data_open+0x380/0x380
[ 54.533442][ C0] schedule_preempt_disabled+0xf/0x20
[ 54.537660][ T3614] ? bpf_lsm_file_ioctl+0x5/0x10
[ 54.542564][ C0] kthread+0x221/0x3a0
[ 54.547817][ T3614] ? kvm_stat_data_open+0x380/0x380
[ 54.552901][ C0] ? kthread_complete_and_exit+0x40/0x40
[ 54.556941][ T3614] __do_compat_sys_ioctl+0x1c7/0x290
[ 54.561677][ C0] ret_from_fork+0x1f/0x30
[ 54.566608][ T3614] __do_fast_syscall_32+0x65/0xf0
[ 54.571782][ C0]
[ 54.577118][ T3614] do_fast_syscall_32+0x2f/0x70
[ 54.582029][ C0]
[ 54.582038][ C0] Memory state around the buggy address:
[ 54.586073][ T3614] entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 54.591249][ C0] ffffc90003882200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 54.596845][ T3614] RIP: 0023:0xf7ead549
[ 54.602108][ C0] ffffc90003882280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 54.606493][ T3614] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 54.611499][ C0] >ffffc90003882300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 54.614491][ T3614] RSP: 002b:00000000ffdce13c EFLAGS: 00000246
[ 54.619312][ C0] ^
[ 54.621612][ T3614] ORIG_RAX: 0000000000000036
[ 54.627217][ C0] ffffc90003882380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 54.633510][ T3614] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[ 54.641546][ C0] ffffc90003882400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 54.645585][ T3614] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000040000
[ 54.653620][ C0] ==================================================================
[ 54.653630][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 54.673198][ T3614] RBP: 000000000000d2c6 R08: 0000000000000000 R09: 0000000000000000
[ 54.681246][ T3614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 54.687315][ T3614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 54.692936][ T3614]
[ 54.697610][ T3614] Modules linked in:
[ 54.713602][ T3614] CR2: ffffc90003882330
[ 54.729591][ T3614] ---[ end trace 0000000000000000 ]---
[ 54.737630][ T3614] RIP: 0010:kvm_arch_hardware_enable+0x2ab/0x840
[ 54.744220][ T3614] Code: 48 89 e8 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ed 04 00 00 <41> 8b 95 30 13 00 00 4d 8d b5 40 12 00 00 b9 08 00 00 00 4c 89 fe
[ 54.752186][ T3614] RSP: 0018:ffffc9000387fb28 EFLAGS: 00010086
[ 54.768092][ T3614] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81120fe0
[ 54.771103][ T3614] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90003882330
[ 54.774983][ T3614] RBP: ffffc90003882330 R08: 0000000000000000 R09: 0000000000000003
[ 54.779122][ T3614] R10: fffff52000710466 R11: 0000000000000000 R12: 0000000000000000
[ 54.784565][ T3614] R13: ffffc90003881000 R14: 0023001000000000 R15: ffffc9000387fb80
[ 54.790877][ T3614] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0063) knlGS:00000000577232c0
[ 54.810487][ T3614] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 54.816546][ T3614] CR2: ffffc90003882330 CR3: 000000001cb48000 CR4: 00000000003526e0
[ 54.824509][ T3614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.832466][ T3614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.736428][ C0] Shutting down cpus with NMI
[ 55.797468][ C0] Kernel Offset: disabled
[ 55.801787][ C0] Rebooting in 86400 seconds..