jump_label: Fatal kernel bug, unexpected op at kvm_set_cr8+0x25/0xb0 [ffffffff810e44e5] (eb 26 e8 b4 5b != 66 90 0f 1f 00)) size:2 type:1 ------------[ cut here ]------------ kernel BUG at arch/x86/kernel/jump_label.c:73! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 13514 Comm: syz.1.3162 Not tainted 6.1.103-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:__jump_label_patch+0x429/0x440 arch/x86/kernel/jump_label.c:73 Code: 24 08 e9 df fd ff ff 48 c7 c7 c0 68 06 8b 4c 89 fe 4c 89 fa 4c 89 f9 49 89 d8 44 8b 4c 24 08 41 54 e8 9b 21 72 09 48 83 c4 08 <0f> 0b e8 d0 24 74 09 0f 0b 0f 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 RSP: 0018:ffffc9000c11f320 EFLAGS: 00010292 RAX: 0000000000000089 RBX: ffffffff8b0689a1 RCX: e80b0c5f119e3300 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffc9000c11f448 R08: ffffffff816e3d8c R09: fffffbfff20e7245 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 R13: ffffffff90032a80 R14: ffffffff8b0689a1 R15: ffffffff810e44e5 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b3031bffc CR3: 000000007b9a5000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_jump_label_transform_queue+0x4a/0xd0 arch/x86/kernel/jump_label.c:137 __jump_label_update+0x177/0x3a0 kernel/jump_label.c:488 __static_key_slow_dec_cpuslocked+0x246/0x400 kernel/jump_label.c:288 __static_key_slow_dec kernel/jump_label.c:296 [inline] static_key_slow_dec+0x4d/0x90 kernel/jump_label.c:311 kvm_vcpu_destroy virt/kvm/kvm_main.c:495 [inline] kvm_destroy_vcpus+0xf3/0x280 virt/kvm/kvm_main.c:515 kvm_arch_destroy_vm+0x33f/0x430 arch/x86/kvm/x86.c:12651 kvm_destroy_vm virt/kvm/kvm_main.c:1336 [inline] kvm_put_kvm+0xcfc/0x18a0 virt/kvm/kvm_main.c:1370 kvm_vcpu_release+0x53/0x60 virt/kvm/kvm_main.c:3857 __fput+0x3f6/0x8d0 fs/file_table.c:320 task_work_run+0x246/0x300 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0xa73/0x26a0 kernel/exit.c:871 do_group_exit+0x202/0x2b0 kernel/exit.c:1021 get_signal+0x16f7/0x17d0 kernel/signal.c:2870 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fed6ab779f9 Code: Unable to access opcode bytes at 0x7fed6ab779cf. RSP: 002b:00007fed6b8820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007fed6ad05f88 RCX: 00007fed6ab779f9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed6ad05f8c RBP: 00007fed6ad05f80 R08: 0000000000000010 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fed6ad05f8c R13: 0000000000000000 R14: 00007ffdee9030b0 R15: 00007ffdee903198 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__jump_label_patch+0x429/0x440 arch/x86/kernel/jump_label.c:73 Code: 24 08 e9 df fd ff ff 48 c7 c7 c0 68 06 8b 4c 89 fe 4c 89 fa 4c 89 f9 49 89 d8 44 8b 4c 24 08 41 54 e8 9b 21 72 09 48 83 c4 08 <0f> 0b e8 d0 24 74 09 0f 0b 0f 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 RSP: 0018:ffffc9000c11f320 EFLAGS: 00010292 RAX: 0000000000000089 RBX: ffffffff8b0689a1 RCX: e80b0c5f119e3300 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffc9000c11f448 R08: ffffffff816e3d8c R09: fffffbfff20e7245 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 R13: ffffffff90032a80 R14: ffffffff8b0689a1 R15: ffffffff810e44e5 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f49396d3178 CR3: 0000000061a9c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400