Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. executing program [ 40.563183][ T3583] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 40.624052][ T3583] [ 40.626867][ T3583] ============================= [ 40.631804][ T3583] WARNING: suspicious RCU usage [ 40.636679][ T3583] 5.15.104-syzkaller #0 Not tainted [ 40.641873][ T3583] ----------------------------- [ 40.646760][ T3583] include/linux/kvm_host.h:880 suspicious rcu_dereference_check() usage! [ 40.655226][ T3583] [ 40.655226][ T3583] other info that might help us debug this: [ 40.655226][ T3583] [ 40.665529][ T3583] [ 40.665529][ T3583] rcu_scheduler_active = 2, debug_locks = 1 [ 40.673702][ T3583] 1 lock held by syz-executor272/3583: [ 40.679194][ T3583] #0: ffff888023cf40c8 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x1d4/0xcf0 [ 40.688585][ T3583] [ 40.688585][ T3583] stack backtrace: [ 40.694531][ T3583] CPU: 1 PID: 3583 Comm: syz-executor272 Not tainted 5.15.104-syzkaller #0 [ 40.703107][ T3583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 40.713167][ T3583] Call Trace: [ 40.716446][ T3583] [ 40.719358][ T3583] dump_stack_lvl+0x1e3/0x2cb [ 40.724032][ T3583] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 40.729662][ T3583] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 40.735189][ T3583] kvm_vcpu_memslots+0x1b7/0x200 [ 40.740109][ T3583] kvm_vcpu_gfn_to_memslot+0x2b/0x390 [ 40.745476][ T3583] ? sync_vmcs02_to_vmcs12+0xdca/0x19c0 [ 40.751009][ T3583] kvm_vcpu_unmap+0x5d/0x80 [ 40.755503][ T3583] nested_vmx_vmexit+0x1451/0x2b50 [ 40.760617][ T3583] ? nested_mark_vmcs12_pages_dirty+0x290/0x290 [ 40.766837][ T3583] ? __lock_acquire+0x1ff0/0x1ff0 [ 40.771841][ T3583] ? kvm_arch_vcpu_load+0x58d/0x780 [ 40.777021][ T3583] vmx_leave_nested+0x7d/0xb0 [ 40.781689][ T3583] kvm_vcpu_ioctl_x86_set_vcpu_events+0x8d8/0x10e0 [ 40.788171][ T3583] kvm_arch_vcpu_ioctl+0x120e/0x1d40 [ 40.793441][ T3583] ? kvm_arch_vcpu_put+0x870/0x870 [ 40.798558][ T3583] ? reacquire_held_locks+0x660/0x660 [ 40.803907][ T3583] ? stack_trace_save+0x113/0x1c0 [ 40.808912][ T3583] ? stack_trace_snprint+0xe0/0xe0 [ 40.814018][ T3583] ? kfree+0xf1/0x270 [ 40.817982][ T3583] ? kasan_set_track+0x62/0x80 [ 40.822737][ T3583] ? kasan_set_track+0x4b/0x80 [ 40.827511][ T3583] ? kasan_set_free_info+0x1f/0x40 [ 40.832627][ T3583] ? ____kasan_slab_free+0xd8/0x120 [ 40.837828][ T3583] ? slab_free_freelist_hook+0xdd/0x160 [ 40.843367][ T3583] ? mark_lock+0x98/0x340 [ 40.847705][ T3583] ? read_lock_is_recursive+0x10/0x10 [ 40.853072][ T3583] ? __mutex_trylock_common+0x17e/0x2e0 [ 40.858615][ T3583] ? __might_sleep+0xc0/0xc0 [ 40.863186][ T3583] ? rcu_lock_release+0x20/0x20 [ 40.868041][ T3583] ? __lock_acquire+0x1ff0/0x1ff0 [ 40.873066][ T3583] ? slab_free_freelist_hook+0xdd/0x160 [ 40.878593][ T3583] ? __mutex_lock_common+0x444/0x25a0 [ 40.883947][ T3583] ? tomoyo_path_number_perm+0x6ab/0x810 [ 40.889560][ T3583] ? kvm_vcpu_ioctl+0x1d4/0xcf0 [ 40.894390][ T3583] ? mutex_lock_io_nested+0x60/0x60 [ 40.899574][ T3583] kvm_vcpu_ioctl+0x6db/0xcf0 [ 40.904232][ T3583] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 40.909933][ T3583] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 40.915913][ T3583] ? print_irqtrace_events+0x210/0x210 [ 40.921371][ T3583] ? vtime_user_exit+0x2d1/0x400 [ 40.926288][ T3583] ? bpf_lsm_file_ioctl+0x5/0x10 [ 40.931218][ T3583] ? security_file_ioctl+0x7d/0xa0 [ 40.936309][ T3583] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 40.941919][ T3583] __se_sys_ioctl+0xf1/0x160 [ 40.946575][ T3583] do_syscall_64+0x3d/0xb0 [ 40.950972][ T3583] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.956867][ T3583] RIP: 0033:0x7feb3d7f9ed9 [ 40.961391][ T3583] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 40.981155][ T3583] RSP: 002b:00007fff7fd5cd28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.989551][ T3583] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb3d7f9ed9 [ 40.997587][ T3583] RDX: 00000000200000c0 RSI: 000000004040aea0 RDI: 0000000000000005 [ 41.005536][ T3583] RBP: 00007feb3d7bd9d0 R08: 0000000000000000 R09: 0000000000000000 [ 41.013667][ T3583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb3d7bda60 [ 41.021630][ T3583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.029618][ T3583]