syzbot


Applied filters: Label=subsystems:kvm (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
WARNING: kmalloc bug in memslot_rmap_alloc kvm C unreliable 3 1081d 1111d 1/28 never KVM: replace large kvmalloc allocation with vmalloc
WARNING in kvm_recalculate_apic_map kvm C done 23 38d 74d 27/28 never 4b7c3f6d04bd KVM: x86: Make x2APIC ID 100% readonly
general protection fault in is_page_fault_stale kvm 3 35d 60d 24/28 never 28cec7f08b8b KVM: x86/mmu: Check that root is valid/loaded when pre-faulting SPTEs
WARNING in __kvm_gpc_refresh (2) kvm C error 2 101d 115d 27/28 37d ebbdf37ce9ab KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN
UBSAN: array-index-out-of-bounds in lock_timer_base bcachefs kvm 4 95d 109d 26/28 73d b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
WARNING: locking bug in srcu_gp_start_if_needed kvm bcachefs 2 100d 101d 26/28 73d f770a6e9a3d7 bcachefs: Fix initialization order for srcu barrier
WARNING: locking bug in __timer_delete_sync kvm bcachefs 6 87d 111d 26/28 73d b79922009214 bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
KASAN: slab-use-after-free Read in vhost_task_fn kvm net virt C done 2661 141d 143d 25/28 107d db5247d9bf5c vhost_task: Handle SIGKILL by flushing work and exiting
WARNING in mmu_free_root_page kvm C 104 153d 175d 25/28 121d 1bc26cb90902 KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
WARNING in clear_dirty_gfn_range kvm C 3 170d 192d 25/28 121d 2673dfb591a3 KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
WARNING in __kvm_gpc_refresh kvm C 178 121d 186d 25/28 121d 5c9ca4ed8908 KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation
KMSAN: uninit-value in em_ret_far kvm C 37 189d 255d 25/28 162d 6fd1e3963f20 KVM: x86: Clean up partially uninitialized integer in emulate_pop()
KMSAN: uninit-value in em_ret_near_imm kvm 2 200d 212d 25/28 162d 6fd1e3963f20 KVM: x86: Clean up partially uninitialized integer in emulate_pop()
KMSAN: uninit-value in em_ret kvm 3 191d 212d 25/28 162d 6fd1e3963f20 KVM: x86: Clean up partially uninitialized integer in emulate_pop()
WARNING in kvm_mmu_notifier_invalidate_range_start (3) kvm C inconclusive done 44 248d 308d 25/28 197d 4cccb6221cae fs/proc/task_mmu: move mmu notification mechanism inside mm lock
WARNING in kvm_mmu_notifier_change_pte kvm C inconclusive 2 272d 282d 25/28 234d 4cccb6221cae fs/proc/task_mmu: move mmu notification mechanism inside mm lock
WARNING in kvm_arch_vcpu_ioctl_run (5) kvm C error 343 378d 466d 23/28 344d 26a0652cb453 KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
general protection fault in vhost_work_queue kvm net virt 1 484d 479d 23/28 444d a284f09effea vhost: Fix crash during early vhost_transport_send_pkt calls
KASAN: slab-use-after-free Read in kvm_tdp_mmu_invalidate_all_roots kvm 3 517d 515d 22/28 470d edbdb43fc96b KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
WARNING in kvm_tdp_mmu_invalidate_all_roots kvm 1658 515d 518d 22/28 470d edbdb43fc96b KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
WARNING in kvm_arch_vcpu_ioctl_run (4) kvm C error 288 470d 554d 22/28 470d 0dc902267cb3 KVM: x86: Suppress pending MMIO write exits if emulator detects exception
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast kvm C 20 782d 815d 22/28 574d 8a414f943f8b KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
WARNING in vcpu_enter_guest (2) kvm C 42 687d 695d 22/28 574d dea0d5a2fde6 KVM: x86: Exempt pending triple fault from event injection sanity check
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff kvm C error 7736 666d 688d 22/28 574d 1cfaac2400c7 x86/kasan: Populate shadow for shared chunk of the CPU entry area
WARNING in vmx_queue_exception (2) kvm C 5 873d 872d 22/28 574d 053d2290c030 KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
kernel BUG in vhost_get_vq_desc kvm net virt C inconclusive 19 938d 951d 22/28 574d a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable kvm C error 28 762d 766d 22/28 574d 4ba4f4194274 KVM: Properly unwind VM creation if creating debugfs fails
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr kvm io-uring C done 4 782d 834d 22/28 574d af735db31285 KVM: x86/xen: Initialize Xen timer only once c03689913635 KVM: x86/xen: Stop Xen timer before changing IRQ
INFO: task hung in vhost_work_dev_flush kvm net virt C error 2 954d 945d 22/28 574d e2ae38cf3d91 vhost: fix hung thread due to erroneous iotlb entries
WARNING in free_loaded_vmcs (3) kvm C inconclusive 2 970d 970d 22/28 574d f7e570780efc KVM: x86: Forcibly leave nested virt when SMM state is toggled
WARNING in kvm_arch_vcpu_ioctl_run (3) kvm C done error 16157 575d 2368d 22/28 574d ec6e4d863258 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
WARNING in kvm_mmu_notifier_invalidate_range_start (2) kvm C done 14 901d 914d 22/28 574d 01e67e04c281 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
memory leak in kvm_vcpu_ioctl_set_cpuid2 kvm C 1 972d 968d 22/28 574d 811f95ff9527 KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
WARNING in vhost_dev_cleanup (2) kvm net virt 79 938d 946d 22/28 574d a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
memory leak in kvm_set_memslot kvm C 1 857d 857d 22/28 574d c87661f855c3 KVM: Free new dirty bitmap if creating a new memslot fails
general protection fault in kvm_arch_vcpu_ioctl kvm C inconclusive 365 774d 812d 22/28 574d f83894b24c2a KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
possible deadlock in scheduler_tick kvm C error 99 1264d 1276d 20/28 919d a83829f56c7c KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken 8228c77d8b56 KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
general protection fault in rcu_segcblist_enqueue kvm C done done 368 1110d 1174d 20/28 927d eb7511bf9182 KVM: x86: Handle SRCU initialization failure during page track init
WARNING in nested_vmx_vmexit kvm C done 101 1003d 1020d 20/28 927d a80dfc025924 KVM: VMX: Always clear vmx->fail on emulation_required
kernel BUG in kvm_read_guest_offset_cached kvm 11 1026d 1033d 20/28 927d 8503fea6761d KVM: VMX: do not use uninitialized gfn_to_hva_cache
WARNING in vmx_queue_exception kvm 8 938d 1000d 20/28 927d fc4fad79fc3d KVM: VMX: Reject KVM_RUN if emulation is required with pending exception
WARNING in kvm_mmu_notifier_invalidate_range_start kvm C done 19 936d 997d 20/28 927d d6aba4c8e20d hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
WARNING in kvm_mmu_uninit_tdp_mmu kvm 3 962d 1045d 20/28 927d 3a0f64de479c KVM: x86/mmu: Don't advance iterator after restart due to yielding
BUG: spinlock bad magic in synchronize_srcu kvm C done done 3254 1089d 1459d 20/28 927d eb7511bf9182 KVM: x86: Handle SRCU initialization failure during page track init
KMSAN: uninit-value in kvm_cpuid kvm C 22 1061d 1085d 20/28 927d e8a747d0884e KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
upstream boot error: WARNING in kvm_wait kvm 233 1281d 1295d 20/28 1046d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
memory leak in kvm_dev_ioctl kvm C 37 1163d 1175d 20/28 1046d 004d62eb4e57 kvm: debugfs: fix memory leak in kvm_create_vm_debugfs
WARNING in exception_type kvm C error 1 1118d 1117d 20/28 1046d e7177339d7b5 Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
usb-testing boot error: WARNING in kvm_wait kvm 3 1289d 1291d 20/28 1046d f4e61f0c9add  x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in kvm_wait kvm C error 119882 1274d 1292d 20/28 1046d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
bpf-next test error: WARNING in kvm_wait kvm 1 1284d 1284d 20/28 1046d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
WARNING in x86_emulate_instruction kvm C done 4 1221d 1217d 20/28 1046d da6393cdd8aa KVM: X86: Fix warning caused by stale emulation context
net test error: WARNING in kvm_wait kvm 1 1287d 1287d 20/28 1046d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
linux-next boot error: WARNING in kvm_wait kvm 9 1280d 1291d 20/28 1046d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
upstream test error: WARNING in kvm_wait kvm 2 1287d 1288d 20/28 1046d f4e61f0c9add x86/kvm: Fix broken irq restoration in kvm_wait
general protection fault in gfn_to_rmap (2) kvm C done 1 1201d 1200d 20/28 1046d 78fcb2c91adf KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
general protection fault in kvm_hv_irq_routing_update kvm C done 33 1296d 1302d 20/28 1260d 919f4ebc5987 KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page kvm syz error 2 2023d 2034d 20/28 1281d 47c42e6b4192 KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
UBSAN: shift-out-of-bounds in intel_pmu_refresh kvm C unreliable 1237 1331d 1381d 19/28 1290d e61ab2a320c3 KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
UBSAN: shift-out-of-bounds in kvm_vcpu_after_set_cpuid kvm 2 1374d 1368d 19/28 1290d 2f80d502d627 KVM: x86: fix shift out of bounds reported by UBSAN
WARNING in handle_exception_nmi kvm C error done 2653 1445d 1450d 15/28 1404d f8e48a3dca06 lockdep: Fix preemption WARN for spurious IRQ-enable
BUG: unable to handle kernel paging request in pvclock_gtod_notify kvm C done done 8 1450d 1469d 15/28 1404d a49145acfb97 fbmem: add margin check to fb_check_caps()
BUG: unable to handle kernel paging request in vmx_vcpu_run kvm C error error 194 2239d 2354d 15/28 1461d 0447378a4a79 kvm: vmx: Nested VM-entry prereqs for event inj.
general protection fault in __apic_accept_irq (2) kvm C done 9 1548d 1544d 15/28 1512d 9d3c447c72fb KVM: X86: Fix async pf caused null-ptr-deref
WARNING in kvm_inject_emulated_page_fault kvm C done 20 1549d 1569d 15/28 1526d 7a35e515a705 KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
BUG: unable to handle kernel NULL pointer dereference in direct_page_fault kvm 1 1556d 1552d 15/28 1526d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: unable to handle kernel NULL pointer dereference in try_async_pf kvm 1 1556d 1552d 15/28 1526d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: unable to handle kernel NULL pointer dereference in kvm_vm_ioctl kvm 1 1556d 1556d 15/28 1526d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! (2) kvm C done 46328 1546d 1578d 15/28 1526d 7d2e8748af62 KVM: x86: Initialize tdp_level during vCPU creation
BUG: unable to handle kernel NULL pointer dereference in kvm_vcpu_gfn_to_memslot kvm 1 1555d 1555d 15/28 1526d 3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: soft lockup in wg_packet_tx_worker kvm 1 1598d 1598d 15/28 1526d df4953e4e997 sch_sfq: validate silly quantum values
KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init kvm C done 1537 1582d 1627d 15/28 1555d b6467ab142b7 KVM: Check validity of resolved slot when searching memslots
BUG: unable to handle kernel NULL pointer dereference in handle_external_interrupt_irqoff kvm C done 6404 1638d 1643d 15/28 1594d 428b8f1d9f92 KVM: VMX: don't allow memory operands for inline asm that modifies SP
WARNING in vcpu_enter_guest kvm syz done 19 1644d 1757d 15/28 1594d d33294541889 KVM: x86: remove bogus user-triggerable WARN_ON
kernel panic: stack is corrupted in vhost_net_ioctl virt kvm net C done 2 1679d 1765d 15/28 1619d 42d84c8490f9 vhost: Check docket sk_family instead of call getname
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! kvm C done 6 1732d 1740d 15/28 1676d 005ba37cb89b mm: thp: KVM: Explicitly check for THP when populating secondary MMU
KASAN: vmalloc-out-of-bounds Write in kvm_dev_ioctl_get_cpuid kvm C 41 1752d 1752d 15/28 1717d 433f4ba19041 KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
general protection fault in kvm_coalesced_mmio_init kvm syz done 48 1773d 1782d 14/28 1757d 8a44119a98be KVM: Fix NULL-ptr deref after kvm_create_vm fails
KASAN: use-after-free Read in __schedule (2) kvm C done 961 2023d 2241d 13/28 1766d 26b471c7e2f7 KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
WARNING in handle_desc kvm C done 6 1827d 1836d 13/28 1802d 3ca94192278c KVM: X86: Fix userspace set invalid CR4
BUG: unable to handle kernel paging request in coalesced_mmio_write kvm C done 10 1909d 1914d 13/28 1802d b60fe990c6b0 KVM: coalesced_mmio: add bounds checking
WARNING in kvm_set_tsc_khz kvm C 5 2235d 2232d 12/28 1880d 3f16a5c31839 KVM: x86: degrade WARN to pr_warn_ratelimited
general protection fault in vcpu_enter_guest (2) kvm C done 11286 1969d 1975d 12/28 1943d b904cb8dff82 KVM: lapic: Check for in-kernel LAPIC before deferencing apic pointer
INFO: task hung in vhost_net_stop_vq kvm net virt C done 136 1983d 2121d 12/28 1943d 813dbeb656d6 vhost: reject zero size iova range
WARNING in free_loaded_vmcs (2) kvm syz done 5 2208d 2229d 11/28 1998d 5bea5123cbf0 KVM: VMX: check nested state and CR4.VMXE against SMM
general protection fault in kvm_lapic_hv_timer_in_use kvm syz done 205 2190d 2232d 11/28 1998d 26b471c7e2f7 KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
WARNING in enter_vmx_operation kvm syz done 8 2201d 2212d 11/28 1998d 5bea5123cbf0 KVM: VMX: check nested state and CR4.VMXE against SMM
KMSAN: kernel-infoleak in kvm_vcpu_write_guest_page kvm C 25 2116d 2144d 11/28 2025d 3a33d030daaa kvm: x86/vmx: Use kzalloc for cached_vmcs12
KMSAN: uninit-value in kvm_clear_dirty_log_protect kvm 6 2025d 2070d 11/28 2025d 98938aa8edd6 KVM: validate userspace input in kvm_clear_dirty_log_protect()
KASAN: slab-out-of-bounds Read in kvm_clear_dirty_log_protect kvm C 54 2077d 2088d 11/28 2025d 98938aa8edd6 KVM: validate userspace input in kvm_clear_dirty_log_protect()
KMSAN: kernel-infoleak in vmx_get_nested_state kvm C 6 2026d 2137d 11/28 2025d 3a33d030daaa kvm: x86/vmx: Use kzalloc for cached_vmcs12
WARNING: refcount bug in kvm_vm_ioctl kvm syz 13 2059d 2172d 11/28 2025d cfa39381173d kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
general protection fault in kvm_ioapic_scan_entry kvm C 148 2119d 2229d 11/28 2032d dcbd3e49c2f0 KVM: X86: Fix NULL deref in vcpu_scan_ioapic
general protection fault in kvm_arch_vcpu_ioctl_run kvm C 12 2101d 2117d 11/28 2079d dcbd3e49c2f0 KVM: X86: Fix NULL deref in vcpu_scan_ioapic
KASAN: use-after-free Read in kvm_put_kvm kvm C 143 2102d 2162d 11/28 2079d 987d1149be7d KVM: fix unregistering coalesced mmio zone from wrong bus
KASAN: use-after-free Read in vhost_transport_send_pkt net virt kvm syz 36 2117d 2244d 11/28 2103d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KASAN: use-after-free Read in vhost_work_queue kvm net virt syz 30 2115d 2215d 11/28 2103d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KASAN: use-after-free Read in vhost_transport_cancel_pkt kvm net virt syz 17 2142d 2186d 11/28 2103d 834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KMSAN: kernel-infoleak in kvm_write_guest_page kvm C 36 2117d 2144d 11/28 2114d bcbfbd8ec210 KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
KMSAN: kernel-infoleak in kvm_arch_vcpu_ioctl kvm C 31 2120d 2135d 11/28 2114d 7f9ad1dfa3c7 KVM: nVMX: Fix kernel info-leak when enabling KVM_CAP_HYPERV_ENLIGHTENED_VMCS more than once
KASAN: use-after-free Read in iotlb_access_ok kvm net virt 1 2240d 2236d 8/28 2215d b13f9c636437 vhost: reset metadata cache when initializing new IOTLB
KASAN: use-after-free Write in irq_bypass_register_consumer kvm C 1632 2256d 2517d 8/28 2219d b5020a8e6b54 KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel.
KMSAN: uninit-value in _copy_to_iter (2) kvm net virt C 226 2297d 2342d 8/28 2265d 670ae9caaca4 vhost: fix info leak due to uninitialized memory
WARNING in __mutex_unlock_slowpath kvm C 2 2333d 2336d 5/28 2297d 7a4deea1aa8b idr: fix invalid ptr dereference on item delete
general protection fault in __radix_tree_delete kvm C 38 2310d 2336d 5/28 2297d 7a4deea1aa8b idr: fix invalid ptr dereference on item delete
INFO: task hung in do_vfs_ioctl kvm 2 2333d 2351d 5/28 2318d 8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
kernel BUG at drivers/vhost/vhost.c:LINE! (2) kvm net virt C 139 2328d 2359d 5/28 2327d d14d2b78090c vhost: fix vhost_vq_access_ok() log check
KASAN: use-after-free Read in perf_trace_lock_acquire (2) kvm net virt C 188 2422d 2494d 5/28 2341d 4cd879515d68 vhost_net: stop device during reset owner
general protection fault in native_write_cr4 kvm C 132300 2362d 2466d 5/28 2359d 8eb3f87d9031 KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
possible deadlock in handle_rx kvm net virt C 4 2371d 2371d 5/28 2359d aaa3149bbee9 vhost_net: add missing lock nesting notation
BUG: corrupted list in remove_wait_queue kvm net virt C 5 2372d 2375d 5/28 2359d dc6455a71c7f vhost: correctly remove wait queue during poll failure
kernel BUG at drivers/vhost/vhost.c:LINE! kvm net virt C 152 2359d 2377d 5/28 2359d d65026c6c62e vhost: validate log when IOTLB is enabled
WARNING in kvm_arch_vcpu_ioctl_run (2) kvm C 61018 2426d 2515d 4/28 2383d c37c28730bb0 KVM: VMX: Fix rflags cache during vCPU reset
WARNING in __x86_set_memory_region kvm C 716 2398d 2516d 4/28 2390d 103c763c72dd KVM/x86: remove WARN_ON() for when vm_munmap() fails
WARNING in handle_ept_misconfig kvm C 238 2398d 2521d 4/28 2390d 95e057e25892 KVM: X86: Fix SMRAM accessing even if VM is shutdown
kernel BUG at arch/x86/kvm/mmu.c:LINE! kvm C 695 2398d 2515d 4/28 2390d b28676bb8ae4 KVM: mmu: Fix overlap between public and private memslots
KASAN: use-after-free Read in __schedule kvm C 145 2464d 2466d 4/28 2410d 8dbfb2bf1bb3 KVM: x86: don't forget vcpu_put() in kvm_arch_vcpu_ioctl_set_sregs()
KASAN: use-after-free Read in __list_add_valid (3) kvm net virt 16 2424d 2430d 4/28 2420d 4cd879515d68 vhost_net: stop device during reset owner
WARNING in vhost_dev_cleanup net virt kvm C 4 2425d 2430d 4/28 2423d 4cd879515d68 vhost_net: stop device during reset owner
possible deadlock in vhost_chr_write_iter kvm net virt C 25952 2430d 2433d 4/28 2426d e9cb4239134c vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()
KASAN: stack-out-of-bounds Read in write_mmio kvm C 3 2475d 2485d 4/28 2428d e39d200fa5bf KVM: Fix stack-out-of-bounds read in write_mmio
WARNING in free_loaded_vmcs kvm C 170 2488d 2495d 4/28 2430d b74558259c51 KVM: VMX: Fix vmx->nested freeing when no SMI handler
KASAN: double-free or invalid-free in kvm_arch_vcpu_uninit kvm 1 2446d 2442d 3/28 2441d d76c68109f37 crypto: pcrypt - fix freeing pcrypt instances
BUG: unable to handle kernel paging request in kvm_arch_vcpu_ioctl_run kvm 1 2480d 2476d 3/28 2452d 7fb983b4dd56 x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss