BUG: unable to handle page fault for address: ffffc90003882330 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 11800067 P4D 11800067 PUD 119c9067 PMD 1ce01067 PTE 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 3614 Comm: syz-executor217 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:29 [inline] RIP: 0010:atomic_read include/linux/atomic/atomic-instrumented.h:28 [inline] RIP: 0010:kvm_arch_hardware_enable+0x2ab/0x840 arch/x86/kvm/x86.c:11847 Code: 48 89 e8 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ed 04 00 00 <41> 8b 95 30 13 00 00 4d 8d b5 40 12 00 00 b9 08 00 00 00 4c 89 fe RSP: 0018:ffffc9000387fb28 EFLAGS: 00010086 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81120fe0 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90003882330 RBP: ffffc90003882330 R08: 0000000000000000 R09: 0000000000000003 R10: fffff52000710466 R11: 0000000000000000 R12: 0000000000000000 R13: ffffc90003881000 R14: 0023001000000000 R15: ffffc9000387fb80 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0063) knlGS:00000000577232c0 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: ffffc90003882330 CR3: 000000001cb48000 CR4: 00000000003526e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hardware_enable_nolock+0xa7/0x140 arch/x86/kvm/../../../virt/kvm/kvm_main.c:5007 smp_call_function_many_cond+0x10e2/0x1430 kernel/smp.c:979 on_each_cpu_cond_mask+0x56/0xa0 kernel/smp.c:1154 on_each_cpu include/linux/smp.h:71 [inline] hardware_enable_all arch/x86/kvm/../../../virt/kvm/kvm_main.c:5069 [inline] kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1202 [inline] kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:4910 [inline] kvm_dev_ioctl+0x131b/0x1ce0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4957 __do_compat_sys_ioctl+0x1c7/0x290 fs/ioctl.c:968 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203 entry_SYSENTER_compat_after_hwframe+0x70/0x82 RIP: 0023:0xf7ead549 Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 RSP: 002b:00000000ffdce13c EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000040000 RBP: 000000000000d2c6 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Modules linked in: CR2: ffffc90003882330 ---[ end trace 0000000000000000 ]--- RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:29 [inline] RIP: 0010:atomic_read include/linux/atomic/atomic-instrumented.h:28 [inline] RIP: 0010:kvm_arch_hardware_enable+0x2ab/0x840 arch/x86/kvm/x86.c:11847 Code: 48 89 e8 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ed 04 00 00 <41> 8b 95 30 13 00 00 4d 8d b5 40 12 00 00 b9 08 00 00 00 4c 89 fe RSP: 0018:ffffc9000387fb28 EFLAGS: 00010086 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81120fe0 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90003882330 RBP: ffffc90003882330 R08: 0000000000000000 R09: 0000000000000003 R10: fffff52000710466 R11: 0000000000000000 R12: 0000000000000000 R13: ffffc90003881000 R14: 0023001000000000 R15: ffffc9000387fb80 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0063) knlGS:00000000577232c0 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: ffffc90003882330 CR3: 000000001cb48000 CR4: 00000000003526e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 48 89 e8 mov %rbp,%rax 3: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx a: fc ff df d: 48 c1 e8 03 shr $0x3,%rax 11: 0f b6 14 08 movzbl (%rax,%rcx,1),%edx 15: 48 89 e8 mov %rbp,%rax 18: 83 e0 07 and $0x7,%eax 1b: 83 c0 03 add $0x3,%eax 1e: 38 d0 cmp %dl,%al 20: 7c 08 jl 0x2a 22: 84 d2 test %dl,%dl 24: 0f 85 ed 04 00 00 jne 0x517 * 2a: 41 8b 95 30 13 00 00 mov 0x1330(%r13),%edx <-- trapping instruction 31: 4d 8d b5 40 12 00 00 lea 0x1240(%r13),%r14 38: b9 08 00 00 00 mov $0x8,%ecx 3d: 4c 89 fe mov %r15,%rsi