./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor486164579 <...> Warning: Permanently added '10.128.1.150' (ECDSA) to the list of known hosts. execve("./syz-executor486164579", ["./syz-executor486164579"], 0x7ffeb35bcf80 /* 10 vars */) = 0 brk(NULL) = 0x555556613000 brk(0x555556613d00) = 0x555556613d00 arch_prctl(ARCH_SET_FS, 0x5555566133c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor486164579", 4096) = 27 brk(0x555556634d00) = 0x555556634d00 brk(0x555556635000) = 0x555556635000 mprotect(0x7f281d2f8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f281d24d2d0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f281d24ef30}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f281d24d2d0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f281d24ef30}, NULL, 8) = 0 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 ioctl(3, KVM_CREATE_VM, 0) = 4 ioctl(4, KVM_CREATE_VCPU, 0) = 5 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x2003d000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x2003e000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x2003f000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20040000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20041000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20042000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20043000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20044000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20045000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20046000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20047000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20048000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20049000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x2004a000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x2004b000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x2004c000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x2004d000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x2004e000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x2004f000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20050000}) = 0 [ 57.849606][ T5022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20051000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20052000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20053000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20054000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x2003d000}) = -1 EINVAL (Invalid argument) ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0 openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6 ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0 ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0 close(6) = 0 ioctl(5, KVM_SET_MSRS, 0x7ffced67eed0) = 5 ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0 ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0 ioctl(5, KVM_RUN, 0) = 0 ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=0, selector=0, type=0, present=0, dpl=0, db=0, s=0, l=0, g=0, avl=0}, ...}) = 0 ioctl(5, KVM_RUN, 0) = 0 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 126) = 126 write(6, "\x26\xbe\x3e\x00\x00\x00\x00\x00\x00\x00\x00", 11) = 11 mmap(0x20000000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK, 6, 0) = 0x20000000 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000080} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000081} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000082} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000083} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000084} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000088} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000089} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000008a} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000008b} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000008c} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000008d} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000008e} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000008f} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000090} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000094} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000098} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000099} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000009a} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000009b} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x2000009c} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000b7} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000b8} --- ioctl(5, KVM_SET_VCPU_EVENTS, 0x20000080) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000140} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000148} --- --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000150} --- ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x20031000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x20032000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x20033000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20034000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20035000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20036000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20037000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20038000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20039000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x2003a000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x2003b000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x2003c000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x2003d000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x2003e000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x2003f000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x20040000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x20041000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x20042000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x20043000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20044000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20045000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20046000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20047000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20048000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x20031000}) = -1 EBADF (Bad file descriptor) ioctl(5, KVM_GET_SREGS, {cs={base=0, limit=4294967295, selector=80, type=11, present=1, dpl=0, db=0, s=1, l=1, g=1, avl=0}, ...}) = 0 openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 7 ioctl(7, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0 ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0 close(7) = 0 ioctl(5, KVM_SET_MSRS, 0x7ffced67eed0) = 5 [ 57.947130][ T5022] kvm_intel: KVM_SET_TSS_ADDR needs to be called before running vCPU [ 57.956168][ T5022] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0 ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0 [ 57.990673][ T5022] ------------[ cut here ]------------ [ 57.996237][ T5022] WARNING: CPU: 0 PID: 5022 at arch/x86/kvm/emulate.c:1648 __load_segment_descriptor+0xf89/0x1200 [ 58.006952][ T5022] Modules linked in: [ 58.010855][ T5022] CPU: 0 PID: 5022 Comm: syz-executor486 Not tainted 6.4.0-syzkaller-12454-g1c7873e33645 #0 [ 58.020976][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 58.031089][ T5022] RIP: 0010:__load_segment_descriptor+0xf89/0x1200 [ 58.037640][ T5022] Code: 70 00 44 0f b6 7c 24 37 0f b6 7c 24 30 44 89 fe e8 4c f9 70 00 44 38 7c 24 30 0f 84 96 fb ff ff e9 06 f9 ff ff e8 d7 fd 70 00 <0f> 0b 44 0f b6 7c 24 20 e9 43 f2 ff ff e8 c5 fd 70 00 44 0f b6 7c [ 58.057967][ T5022] RSP: 0018:ffffc90003abf898 EFLAGS: 00010293 [ 58.064103][ T5022] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 58.072118][ T5022] RDX: ffff8880275e5940 RSI: ffffffff8113e3b9 RDI: 0000000000000005 [ 58.080105][ T5022] RBP: ffff8880765e8000 R08: 0000000000000005 R09: 0000000000000000 [ 58.088122][ T5022] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000050 [ 58.096141][ T5022] R13: 0000000000000050 R14: ffff8880765e8030 R15: 0000000000000000 [ 58.104155][ T5022] FS: 00005555566133c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 58.113120][ T5022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.119694][ T5022] CR2: 0000000020032008 CR3: 0000000025f5b000 CR4: 00000000003526f0 [ 58.127711][ T5022] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.135771][ T5022] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.143782][ T5022] Call Trace: [ 58.147065][ T5022] [ 58.149989][ T5022] ? __warn+0xe6/0x390 [ 58.154099][ T5022] ? __load_segment_descriptor+0xf89/0x1200 [ 58.160016][ T5022] ? report_bug+0x2da/0x500 [ 58.164582][ T5022] ? handle_bug+0x3c/0x70 [ 58.168925][ T5022] ? exc_invalid_op+0x18/0x50 [ 58.173640][ T5022] ? asm_exc_invalid_op+0x1a/0x20 [ 58.178682][ T5022] ? __load_segment_descriptor+0xf89/0x1200 [ 58.184630][ T5022] ? __load_segment_descriptor+0xf89/0x1200 [ 58.190543][ T5022] ? __load_segment_descriptor+0xf89/0x1200 [ 58.196514][ T5022] ? em_sti+0x260/0x260 [ 58.200728][ T5022] ? __kvm_read_guest_page+0x1ad/0x200 [ 58.206267][ T5022] ? kvm_read_guest_virt_helper+0x155/0x190 [ 58.212251][ T5022] __emulate_int_real+0x561/0x6f0 [ 58.217362][ T5022] ? em_cmpxchg+0x680/0x680 [ 58.221865][ T5022] ? x86_decode_insn+0x5880/0x5920 [ 58.227081][ T5022] ? perf_trace_kvm_nested_vmexit+0x180/0x530 [ 58.233204][ T5022] ? trace_event_raw_event_kvm_nested_vmexit+0x320/0x320 [ 58.240349][ T5022] ? __lock_acquire+0x1984/0x5e20 [ 58.245442][ T5022] emulate_int_real+0x7d/0xd0 [ 58.250147][ T5022] kvm_inject_realmode_interrupt+0x102/0x340 [ 58.256182][ T5022] vmx_inject_exception+0x33b/0x470 [ 58.261418][ T5022] vcpu_enter_guest+0x386/0x6020 [ 58.266417][ T5022] ? lock_sync+0x190/0x190 [ 58.270857][ T5022] ? kvm_check_nested_events+0xf0/0xf0 [ 58.276353][ T5022] ? mark_held_locks+0x9f/0xe0 [ 58.281136][ T5022] ? __local_bh_enable_ip+0xa4/0x130 [ 58.286460][ T5022] ? lockdep_hardirqs_on+0x7d/0x100 [ 58.291675][ T5022] ? fpu_swap_kvm_fpstate+0x1aa/0x400 [ 58.297091][ T5022] ? __local_bh_enable_ip+0xa4/0x130 [ 58.302424][ T5022] ? kvm_arch_vcpu_ioctl_run+0xa35/0x2820 [ 58.308137][ T5022] kvm_arch_vcpu_ioctl_run+0xa35/0x2820 [ 58.313731][ T5022] kvm_vcpu_ioctl+0x574/0xe90 [ 58.318426][ T5022] ? kvm_vcpu_kick+0x4c0/0x4c0 [ 58.323261][ T5022] ? find_held_lock+0x2d/0x110 [ 58.328056][ T5022] ? ptrace_notify+0xfe/0x140 [ 58.332803][ T5022] ? lock_downgrade+0x690/0x690 [ 58.337696][ T5022] ? bpf_lsm_file_ioctl+0x9/0x10 [ 58.342682][ T5022] ? kvm_vcpu_kick+0x4c0/0x4c0 [ 58.347461][ T5022] __x64_sys_ioctl+0x19d/0x210 [ 58.352274][ T5022] do_syscall_64+0x39/0xb0 [ 58.356718][ T5022] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.362663][ T5022] RIP: 0033:0x7f281d28c749 [ 58.367088][ T5022] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.386744][ T5022] RSP: 002b:00007ffced680a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.395220][ T5022] RAX: ffffffffffffffda RBX: 00007ffced680a78 RCX: 00007f281d28c749 [ 58.403229][ T5022] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 58.411218][ T5022] RBP: 00007ffced680a70 R08: 0000000000000000 R09: 00007f281d24d2d0 [ 58.419226][ T5022] R10: 0000000000009120 R11: 0000000000000246 R12: 0000000000000000 [ 58.427261][ T5022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.435318][ T5022] [ 58.438348][ T5022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.445616][ T5022] CPU: 0 PID: 5022 Comm: syz-executor486 Not tainted 6.4.0-syzkaller-12454-g1c7873e33645 #0 [ 58.455667][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 58.465732][ T5022] Call Trace: [ 58.468999][ T5022] [ 58.471930][ T5022] dump_stack_lvl+0xd9/0x150 [ 58.476529][ T5022] panic+0x686/0x730 [ 58.480431][ T5022] ? panic_smp_self_stop+0xa0/0xa0 [ 58.485533][ T5022] ? show_trace_log_lvl+0x284/0x390 [ 58.490729][ T5022] ? __load_segment_descriptor+0xf89/0x1200 [ 58.496622][ T5022] check_panic_on_warn+0xb1/0xc0 [ 58.501589][ T5022] __warn+0xf2/0x390 [ 58.505521][ T5022] ? __load_segment_descriptor+0xf89/0x1200 [ 58.511428][ T5022] report_bug+0x2da/0x500 [ 58.515774][ T5022] handle_bug+0x3c/0x70 [ 58.519936][ T5022] exc_invalid_op+0x18/0x50 [ 58.524450][ T5022] asm_exc_invalid_op+0x1a/0x20 [ 58.529310][ T5022] RIP: 0010:__load_segment_descriptor+0xf89/0x1200 [ 58.535826][ T5022] Code: 70 00 44 0f b6 7c 24 37 0f b6 7c 24 30 44 89 fe e8 4c f9 70 00 44 38 7c 24 30 0f 84 96 fb ff ff e9 06 f9 ff ff e8 d7 fd 70 00 <0f> 0b 44 0f b6 7c 24 20 e9 43 f2 ff ff e8 c5 fd 70 00 44 0f b6 7c [ 58.555437][ T5022] RSP: 0018:ffffc90003abf898 EFLAGS: 00010293 [ 58.561510][ T5022] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 58.569487][ T5022] RDX: ffff8880275e5940 RSI: ffffffff8113e3b9 RDI: 0000000000000005 [ 58.577466][ T5022] RBP: ffff8880765e8000 R08: 0000000000000005 R09: 0000000000000000 [ 58.585441][ T5022] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000050 [ 58.593417][ T5022] R13: 0000000000000050 R14: ffff8880765e8030 R15: 0000000000000000 [ 58.601403][ T5022] ? __load_segment_descriptor+0xf89/0x1200 [ 58.607334][ T5022] ? __load_segment_descriptor+0xf89/0x1200 [ 58.613254][ T5022] ? em_sti+0x260/0x260 [ 58.617424][ T5022] ? __kvm_read_guest_page+0x1ad/0x200 [ 58.622897][ T5022] ? kvm_read_guest_virt_helper+0x155/0x190 [ 58.628810][ T5022] __emulate_int_real+0x561/0x6f0 [ 58.633856][ T5022] ? em_cmpxchg+0x680/0x680 [ 58.638373][ T5022] ? x86_decode_insn+0x5880/0x5920 [ 58.643502][ T5022] ? perf_trace_kvm_nested_vmexit+0x180/0x530 [ 58.649582][ T5022] ? trace_event_raw_event_kvm_nested_vmexit+0x320/0x320 [ 58.656617][ T5022] ? __lock_acquire+0x1984/0x5e20 [ 58.661663][ T5022] emulate_int_real+0x7d/0xd0 [ 58.666368][ T5022] kvm_inject_realmode_interrupt+0x102/0x340 [ 58.672375][ T5022] vmx_inject_exception+0x33b/0x470 [ 58.677610][ T5022] vcpu_enter_guest+0x386/0x6020 [ 58.682568][ T5022] ? lock_sync+0x190/0x190 [ 58.686990][ T5022] ? kvm_check_nested_events+0xf0/0xf0 [ 58.692456][ T5022] ? mark_held_locks+0x9f/0xe0 [ 58.697234][ T5022] ? __local_bh_enable_ip+0xa4/0x130 [ 58.702531][ T5022] ? lockdep_hardirqs_on+0x7d/0x100 [ 58.707742][ T5022] ? fpu_swap_kvm_fpstate+0x1aa/0x400 [ 58.713124][ T5022] ? __local_bh_enable_ip+0xa4/0x130 [ 58.718418][ T5022] ? kvm_arch_vcpu_ioctl_run+0xa35/0x2820 [ 58.724144][ T5022] kvm_arch_vcpu_ioctl_run+0xa35/0x2820 [ 58.729707][ T5022] kvm_vcpu_ioctl+0x574/0xe90 [ 58.734408][ T5022] ? kvm_vcpu_kick+0x4c0/0x4c0 [ 58.739197][ T5022] ? find_held_lock+0x2d/0x110 [ 58.743974][ T5022] ? ptrace_notify+0xfe/0x140 [ 58.748657][ T5022] ? lock_downgrade+0x690/0x690 [ 58.753529][ T5022] ? bpf_lsm_file_ioctl+0x9/0x10 [ 58.758483][ T5022] ? kvm_vcpu_kick+0x4c0/0x4c0 [ 58.763275][ T5022] __x64_sys_ioctl+0x19d/0x210 [ 58.768059][ T5022] do_syscall_64+0x39/0xb0 [ 58.772493][ T5022] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.778405][ T5022] RIP: 0033:0x7f281d28c749 [ 58.782824][ T5022] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.802443][ T5022] RSP: 002b:00007ffced680a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.810868][ T5022] RAX: ffffffffffffffda RBX: 00007ffced680a78 RCX: 00007f281d28c749 [ 58.818848][ T5022] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 58.826824][ T5022] RBP: 00007ffced680a70 R08: 0000000000000000 R09: 00007f281d24d2d0 [ 58.834797][ T5022] R10: 0000000000009120 R11: 0000000000000246 R12: 0000000000000000 [ 58.842772][ T5022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.850759][ T5022] [ 58.853992][ T5022] Kernel Offset: disabled [ 58.858390][ T5022] Rebooting in 86400 seconds..