./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3814824239 <...> Warning: Permanently added '10.128.0.149' (ECDSA) to the list of known hosts. execve("./syz-executor3814824239", ["./syz-executor3814824239"], 0x7ffe58f05f10 /* 10 vars */) = 0 brk(NULL) = 0x55555751f000 brk(0x55555751fc40) = 0x55555751fc40 arch_prctl(ARCH_SET_FS, 0x55555751f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3814824239", 4096) = 28 brk(0x555557540c40) = 0x555557540c40 brk(0x555557541000) = 0x555557541000 mprotect(0x7ff7b0a56000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555751f5d0) = 3607 ./strace-static-x86_64: Process 3607 attached [pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3607] setpgid(0, 0) = 0 [pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1000", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3607] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3607] write(4, "47", 2) = 2 [pid 3607] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3607] exit_group(0) = ? syzkaller login: [ 49.700797][ T3607] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [pid 3607] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3607, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3611 attached , child_tidptr=0x55555751f5d0) = 3611 [pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3611] setpgid(0, 0) = 0 [pid 3611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1000", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3611] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3611] write(4, "47", 2) = 2 [pid 3611] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3611] exit_group(0) = ? [ 49.794366][ T3611] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [pid 3611] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3611, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3614 attached , child_tidptr=0x55555751f5d0) = 3614 [pid 3614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3614] setpgid(0, 0) = 0 [pid 3614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3614] write(3, "1000", 4) = 4 [pid 3614] close(3) = 0 [pid 3614] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3614] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3614] write(4, "47", 2) = 2 [pid 3614] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3614] exit_group(0) = ? [ 49.893908][ T3614] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [pid 3614] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3614, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3617 attached , child_tidptr=0x55555751f5d0) = 3617 [pid 3617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3617] setpgid(0, 0) = 0 [pid 3617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1000", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3617] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3617] write(4, "47", 2) = 2 [pid 3617] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3617] exit_group(0) = ? [ 49.984286][ T3617] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [pid 3617] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3617, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555751f5d0) = 3620 ./strace-static-x86_64: Process 3620 attached [pid 3620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3620] setpgid(0, 0) = 0 [pid 3620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3620] write(3, "1000", 4) = 4 [pid 3620] close(3) = 0 [pid 3620] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3620] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3620] write(4, "47", 2) = 2 [pid 3620] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3620] exit_group(0) = ? [ 50.075284][ T3620] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [pid 3620] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3620, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3623 attached , child_tidptr=0x55555751f5d0) = 3623 [pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3623] setpgid(0, 0) = 0 [pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3623] write(3, "1000", 4) = 4 [pid 3623] close(3) = 0 [pid 3623] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3623] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3623] write(4, "47", 2) = 2 [pid 3623] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3623] exit_group(0) = ? [ 50.157594][ T3623] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [pid 3623] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3623, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555751f5d0) = 3626 ./strace-static-x86_64: Process 3626 attached [pid 3626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3626] setpgid(0, 0) = 0 [pid 3626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3626] write(3, "1000", 4) = 4 [pid 3626] close(3) = 0 [pid 3626] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3626] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3626] write(4, "47", 2) = 2 [pid 3626] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3626] exit_group(0) = ? [pid 3626] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3626, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555751f5d0) = 3629 ./strace-static-x86_64: Process 3629 attached [pid 3629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3629] setpgid(0, 0) = 0 [pid 3629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3629] write(3, "1000", 4) = 4 [pid 3629] close(3) = 0 [pid 3629] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3629] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3629] write(4, "47", 2) = 2 [pid 3629] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3629] exit_group(0) = ? [pid 3629] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3629, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 50.375242][ T3629] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555751f5d0) = 3632 ./strace-static-x86_64: Process 3632 attached [pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3632] setpgid(0, 0) = 0 [pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3632] write(3, "1000", 4) = 4 [pid 3632] close(3) = 0 [pid 3632] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3632] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3632] write(4, "47", 2) = 2 [pid 3632] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3632] exit_group(0) = ? [ 50.447532][ T3632] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [pid 3632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3632, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3635 attached , child_tidptr=0x55555751f5d0) = 3635 [pid 3635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3635] setpgid(0, 0) = 0 [pid 3635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3635] write(3, "1000", 4) = 4 [pid 3635] close(3) = 0 [pid 3635] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3635] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3635] write(4, "47", 2) = 2 [pid 3635] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3635] exit_group(0) = ? [ 50.546508][ T3635] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [pid 3635] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3635, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3638 attached , child_tidptr=0x55555751f5d0) = 3638 [pid 3638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3638] setpgid(0, 0) = 0 [pid 3638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3638] write(3, "1000", 4) = 4 [pid 3638] close(3) = 0 [pid 3638] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3638] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3638] write(4, "47", 2) = 2 [pid 3638] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 3638] exit_group(0) = ? [pid 3638] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3638, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 50.632881][ T3638] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3641 attached , child_tidptr=0x55555751f5d0) = 3641 [pid 3641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3641] setpgid(0, 0) = 0 [pid 3641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3641] write(3, "1000", 4) = 4 [pid 3641] close(3) = 0 [pid 3641] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3641] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3641] write(4, "47", 2) = 2 [pid 3641] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 3641] exit_group(0) = ? [pid 3641] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3641, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3644 attached , child_tidptr=0x55555751f5d0) = 3644 [pid 3644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3644] setpgid(0, 0) = 0 [pid 3644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3644] write(3, "1000", 4) = 4 [pid 3644] close(3) = 0 [pid 3644] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW|FASYNC) = 3 [pid 3644] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3644] write(4, "47", 2) = 2 [ 50.753786][ T3644] ================================================================== [ 50.753793][ C1] BUG: unable to handle page fault for address: ffffc90003da2330 [ 50.753806][ C1] #PF: supervisor read access in kernel mode [ 50.761848][ T3644] BUG: KASAN: vmalloc-out-of-bounds in kvm_arch_hardware_enable+0x1bc/0x6d0 [ 50.769542][ C1] #PF: error_code(0x0000) - not-present page [ 50.775493][ T3644] Read of size 4 at addr ffffc90003da2330 by task syz-executor381/3644 [ 50.784134][ C1] PGD 12000067 [ 50.790092][ T3644] [ 50.790100][ T3644] CPU: 0 PID: 3644 Comm: syz-executor381 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 50.798297][ C1] P4D 12000067 [ 50.801726][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 50.804038][ C1] PUD 121c9067 PMD 1470f2067 [ 50.814167][ T3644] Call Trace: [ 50.814177][ T3644] [ 50.817604][ C1] PTE 0 [ 50.827633][ T3644] dump_stack_lvl+0x1e3/0x2cb [ 50.832299][ C1] Oops: 0000 [#1] PREEMPT SMP KASAN [ 50.835563][ T3644] ? io_notif_register+0x5e7/0x5e7 [ 50.838469][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 50.841210][ T3644] ? __wake_up_klogd+0xcd/0x100 [ 50.845856][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 50.851020][ T3644] ? panic+0x76b/0x76b [ 50.856104][ C1] RIP: 0010:kvm_arch_hardware_enable+0x1d1/0x6d0 [ 50.865455][ T3644] ? _printk+0xcf/0x10f [ 50.870281][ C1] Code: 89 5c 24 38 4c 8d 73 f0 4c 89 f7 be 04 00 00 00 e8 a4 44 cc 00 4d 89 f5 49 c1 ed 03 43 0f b6 44 3d 00 84 c0 0f 85 08 02 00 00 <41> 8b 06 ff c8 48 63 d0 4c 89 64 24 10 4c 89 e7 48 8d 74 24 60 b9 [ 50.880313][ T3644] print_address_description+0x65/0x4b0 [ 50.884349][ C1] RSP: 0018:ffffc900001e0e60 EFLAGS: 00010086 [ 50.890645][ T3644] print_report+0x108/0x220 [ 50.894765][ C1] [ 50.894772][ C1] RAX: 0000000000000000 RBX: ffffc90003da2340 RCX: ffffffff8110f0c2 [ 50.914343][ T3644] ? print_irqtrace_events+0x220/0x220 [ 50.919860][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90003da2330 [ 50.925910][ T3644] ? read_lock_is_recursive+0x10/0x10 [ 50.930410][ C1] RBP: ffffc900001e0f30 R08: dffffc0000000000 R09: fffff520007b4466 [ 50.932719][ T3644] ? kvm_arch_hardware_enable+0x1bc/0x6d0 [ 50.940665][ C1] R10: fffff520007b4467 R11: 1ffff920007b4466 R12: ffffc90003da2240 [ 50.946091][ T3644] kasan_report+0xfb/0x130 [ 50.954035][ C1] R13: 1ffff920007b4466 R14: ffffc90003da2330 R15: dffffc0000000000 [ 50.959378][ T3644] ? kvm_arch_hardware_enable+0x1bc/0x6d0 [ 50.967319][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 50.973010][ T3644] kasan_check_range+0x2a7/0x2e0 [ 50.981130][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.985527][ T3644] kvm_arch_hardware_enable+0x1bc/0x6d0 [ 50.993478][ C1] CR2: ffffc90003da2330 CR3: 000000001c905000 CR4: 00000000003526e0 [ 50.999169][ T3644] ? kvm_vcpu_deliver_sipi_vector+0x1a0/0x1a0 [ 51.008079][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.013049][ T3644] ? send_call_function_single_ipi+0x17f/0x1e0 [ 51.019703][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.025218][ T3644] ? ttwu_do_activate+0x2b0/0x2b0 [ 51.033160][ C1] Call Trace: [ 51.033169][ C1] [ 51.039209][ T3644] hardware_enable_nolock+0xa1/0x140 [ 51.047160][ C1] ? kvm_vcpu_deliver_sipi_vector+0x1a0/0x1a0 [ 51.053312][ T3644] smp_call_function_many_cond+0xebc/0x16f0 [ 51.061289][ C1] hardware_enable_nolock+0xa1/0x140 [ 51.066296][ T3644] ? kvm_guest_get_ip+0xd0/0xd0 [ 51.069555][ C1] __flush_smp_call_function_queue+0x2bc/0xcc0 [ 51.072381][ T3644] ? smp_call_function_many+0x30/0x30 [ 51.077645][ C1] ? kvm_guest_get_ip+0xd0/0xd0 [ 51.083676][ T3644] ? lockdep_softirqs_off+0x420/0x420 [ 51.089539][ C1] __sysvec_call_function_single+0x62/0x70 [ 51.094789][ T3644] ? do_raw_spin_lock+0x148/0x360 [ 51.099609][ C1] sysvec_call_function_single+0x8c/0xb0 [ 51.105732][ T3644] ? __rwlock_init+0x140/0x140 [ 51.111080][ C1] [ 51.115999][ T3644] ? kvm_guest_get_ip+0xd0/0xd0 [ 51.121430][ C1] [ 51.121439][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 51.127209][ T3644] on_each_cpu_cond_mask+0x3b/0x80 [ 51.132200][ C1] RIP: 0010:finish_lock_switch+0x90/0x100 [ 51.137798][ T3644] hardware_enable_all+0x77/0x120 [ 51.142528][ C1] Code: 45 31 c9 68 96 9c 5f 81 e8 4d a9 09 00 48 83 c4 08 4c 89 ff e8 f1 c2 fe ff 66 90 4c 89 ff e8 67 ac e1 08 e8 a2 b6 30 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 51.145436][ T3644] kvm_dev_ioctl+0x1076/0x17e0 [ 51.150261][ C1] RSP: 0018:ffffc90000177c38 EFLAGS: 00000286 [ 51.153213][ T3644] ? smack_file_alloc_security+0xd0/0xd0 [ 51.159158][ C1] [ 51.159164][ C1] RAX: 293dc74478502900 RBX: ffff88801eb0d8b4 RCX: ffffffff91793f03 [ 51.164246][ T3644] ? kvm_reboot+0x40/0x40 [ 51.169925][ C1] RDX: dffffc0000000000 RSI: ffffffff8aad75c0 RDI: ffffffff8b0a5460 [ 51.174927][ T3644] ? vtime_user_exit+0x2b2/0x3e0 [ 51.194499][ C1] RBP: ffffc90000177cb0 R08: dffffc0000000000 R09: ffffed1017367381 [ 51.199234][ T3644] ? __ct_user_exit+0x81/0xe0 [ 51.205280][ C1] R10: ffffed1017367381 R11: 1ffff11017367380 R12: dffffc0000000000 [ 51.210885][ T3644] ? bpf_lsm_file_ioctl+0x5/0x10 [ 51.213183][ C1] R13: 1ffff1101736752b R14: ffff8880b9b3a958 R15: ffff8880b9b39c00 [ 51.221124][ T3644] ? security_file_ioctl+0x9d/0xb0 [ 51.225433][ C1] finish_task_switch+0x140/0x610 [ 51.233372][ T3644] ? kvm_reboot+0x40/0x40 [ 51.238277][ C1] ? __switch_to_asm+0x5a/0x80 [ 51.246218][ T3644] __se_sys_ioctl+0xfb/0x170 [ 51.250864][ C1] __schedule+0x95f/0xe20 [ 51.258904][ T3644] do_syscall_64+0x2b/0x70 [ 51.263816][ C1] ? __flush_smp_call_function_queue+0x751/0xcc0 [ 51.271759][ T3644] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.276841][ C1] ? __sched_text_start+0x8/0x8 [ 51.281829][ T3644] RIP: 0033:0x7ff7b09e9059 [ 51.286124][ C1] ? generic_smp_call_function_single_interrupt+0x110/0x110 [ 51.290865][ T3644] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.295420][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 51.299720][ T3644] RSP: 002b:00007ffc7dfb4a68 EFLAGS: 00000246 [ 51.304107][ C1] schedule_idle+0x50/0x90 [ 51.310399][ T3644] ORIG_RAX: 0000000000000010 [ 51.316262][ C1] do_idle+0x5cd/0x620 [ 51.321077][ T3644] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff7b09e9059 [ 51.325464][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 51.332706][ T3644] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 51.352282][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.358315][ T3644] RBP: 00007ffc7dfb4a80 R08: 0000000000000002 R09: 0000000000000001 [ 51.364353][ C1] ? complete+0xb9/0x1c0 [ 51.368738][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.373387][ C1] cpu_startup_entry+0x15/0x20 [ 51.377433][ T3644] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 51.385394][ C1] start_secondary+0xe4/0xf0 [ 51.390577][ T3644] [ 51.398512][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 51.404384][ T3644] [ 51.404393][ T3644] Memory state around the buggy address: [ 51.412333][ C1] [ 51.416542][ T3644] ffffc90003da2200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 51.424476][ C1] Modules linked in: [ 51.429224][ T3644] ffffc90003da2280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 51.437174][ C1] CR2: ffffc90003da2330 [ 51.441768][ T3644] >ffffc90003da2300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 51.444763][ C1] ---[ end trace 0000000000000000 ]--- [ 51.450625][ T3644] ^ [ 51.452928][ C1] RIP: 0010:kvm_arch_hardware_enable+0x1d1/0x6d0 [ 51.458529][ T3644] ffffc90003da2380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 51.461520][ C1] Code: 89 5c 24 38 4c 8d 73 f0 4c 89 f7 be 04 00 00 00 e8 a4 44 cc 00 4d 89 f5 49 c1 ed 03 43 0f b6 44 3d 00 84 c0 0f 85 08 02 00 00 <41> 8b 06 ff c8 48 63 d0 4c 89 64 24 10 4c 89 e7 48 8d 74 24 60 b9 [ 51.469552][ T3644] ffffc90003da2400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 51.473413][ C1] RSP: 0018:ffffc900001e0e60 EFLAGS: 00010086 [ 51.481440][ T3644] ================================================================== [ 51.485571][ C1] [ 51.485578][ C1] RAX: 0000000000000000 RBX: ffffc90003da2340 RCX: ffffffff8110f0c2 [ 51.493604][ T3644] Kernel panic - not syncing: panic_on_warn set ... [ 51.499031][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90003da2330 [ 51.504641][ C1] RBP: ffffc900001e0f30 R08: dffffc0000000000 R09: fffff520007b4466 [ 51.510944][ C1] R10: fffff520007b4467 R11: 1ffff920007b4466 R12: ffffc90003da2240 [ 51.518992][ C1] R13: 1ffff920007b4466 R14: ffffc90003da2330 R15: dffffc0000000000 [ 51.538579][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 51.546627][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.552672][ C1] CR2: ffffc90003da2330 CR3: 000000001c905000 CR4: 00000000003526e0 [ 51.560980][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.563297][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.604658][ T3644] Shutting down cpus with NMI [ 52.688183][ T3644] Kernel Offset: disabled [ 52.692499][ T3644] Rebooting in 86400 seconds..