program: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x7, 0x605, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x28, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000010000fae480000000f80100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff8500000006000000950000000000000095000000000000001863000003000000000000000500000018520000000000000000000000000000851000000200000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000185b000009000000000000000000000018650000020000000000000004000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000900)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x9}, 0x10}, 0x94) fsync(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x16d042, 0x42) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x7ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x220, &(0x7f0000000880)={0x0, 0x9b8f, 0x800, 0x3, 0x357, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) pipe(&(0x7f0000000800)={0xffffffffffffffff}) r9 = memfd_create(&(0x7f0000000100)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x1) splice(r8, 0x0, r9, 0x0, 0x400c5, 0x5) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x613, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x59}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000080)={0x9, r9, 0xc, {0xfff, 0x7}}, 0x1) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000040)={0x2, 0x40000000, 0x0, 0x0}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl(r11, 0x4048aecb, &(0x7f0000000080)="070000000000000001000000ffffffff") ioctl$KVM_RUN(r11, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) symlink(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_STATS_FD_cpu(r12, 0xaece) [ 95.110427][ T4643] Bluetooth: hci0: command tx timeout [ 95.365875][ T5313] loop0: detected capacity change from 0 to 1024 [ 95.433327][ T5313] EXT4-fs: Ignoring removed bh option [ 95.452739][ T5313] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.461471][ T5313] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 95.475576][ T5313] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.0: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.482017][ T5313] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.482905][ T5313] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 95.490497][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 95.490561][ C0] EXT4-fs (loop0): initial error at time 1787703426: ext4_map_blocks:790: inode 3: block 2 [ 95.490584][ C0] EXT4-fs (loop0): last error at time 1787703426: ext4_map_blocks:790: inode 3: block 2 [ 95.502433][ T5313] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.0: Invalid inode table block 1 in block_group 0 [ 95.509274][ T5313] loop0: lost filesystem error report for type 5 error -117 [ 95.512090][ T5313] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 95.519573][ T5313] loop0: lost filesystem error report for type 5 error -117 [ 95.520235][ T5313] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.0: mark_inode_dirty error [ 95.528207][ T5313] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 95.528422][ T5313] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 95.537540][ T5313] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.0: Failed to acquire dquot type 0 [ 95.542965][ T5313] loop0: lost filesystem error report for type 5 error -117 [ 95.546465][ T5313] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 95.552271][ T5313] loop0: lost filesystem error report for type 5 error -117 [ 95.553847][ T5313] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.0: mark_inode_dirty error [ 95.572994][ T5313] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.573143][ T5313] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 95.583540][ T5313] EXT4-fs (loop0): 1 orphan inode deleted [ 95.587074][ T5313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.598273][ T5313] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 16: comm syz.0.0: lblock 0 mapped to illegal pblock 16 (length 1) [ 95.604605][ T42] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.615498][ T42] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 95.620374][ T42] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u4:3: Failed to release dquot type 0 [ 95.646130][ T5313] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 16: comm syz.0.0: lblock 0 mapped to illegal pblock 16 (length 1) [ 95.656859][ T5313] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 16: comm syz.0.0: lblock 0 mapped to illegal pblock 16 (length 1) [ 95.663536][ T5313] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 16: comm syz.0.0: lblock 0 mapped to illegal pblock 16 (length 1) [ 95.754866][ T5314] ------------[ cut here ]------------ [ 95.757371][ T5314] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 95.757386][ T5314] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.0.0/5314 [ 95.766611][ T5314] Modules linked in: [ 95.768457][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.772439][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.776956][ T5314] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 95.779558][ T5314] Code: c6 05 ab 85 21 0f 01 48 c7 c7 2c 68 44 8e be 3c 04 00 00 48 c7 c2 60 41 02 8c e8 2b 23 62 00 e9 81 ee ff ff e8 71 6b 86 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 95.788268][ T5314] RSP: 0018:ffffc9000e837360 EFLAGS: 00010287 [ 95.791107][ T5314] RAX: ffffffff8140c94f RBX: ffff888000000000 RCX: 0000000000100000 [ 95.794566][ T5314] RDX: ffffc90020001000 RSI: 0000000000000a83 RDI: 0000000000000a84 [ 95.798284][ T5314] RBP: ffffc9000e8374f0 R08: ffffffff9078fa37 R09: 1ffffffff20f1f46 [ 95.802115][ T5314] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 1ffff92001d06e80 [ 95.805646][ T5314] R13: ffff8880509b9b60 R14: ffff888000000000 R15: ffffffffffffff01 [ 95.809224][ T5314] FS: 00007f2bf88546c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 95.813513][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.816460][ T5314] CR2: 00007f2bf7b05380 CR3: 0000000012cb0000 CR4: 0000000000352ef0 [ 95.820355][ T5314] Call Trace: [ 95.821847][ T5314] [ 95.823134][ T5314] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 95.825590][ T5314] ? lock_acquire+0x106/0x350 [ 95.827543][ T5314] ? kvm_gpc_refresh+0x31/0x110 [ 95.829605][ T5314] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 95.832852][ T5314] ? kvm_xen_set_evtchn+0x11e/0x220 [ 95.835281][ T5314] kvm_gpc_refresh+0xe1/0x110 [ 95.837264][ T5314] ? kvm_xen_set_evtchn+0x11e/0x220 [ 95.839853][ T5314] kvm_xen_set_evtchn+0x14f/0x220 [ 95.842322][ T5314] kvm_xen_inject_timer_irqs+0xfd/0x200 [ 95.844865][ T5314] vcpu_run+0x98f/0x7950 [ 95.846865][ T5314] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 95.849778][ T5314] ? check_noncircular+0xda/0x150 [ 95.852075][ T5314] ? __pfx_vcpu_run+0x10/0x10 [ 95.854273][ T5314] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 95.857291][ T5314] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 95.860489][ T5314] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 95.863265][ T5314] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 95.866350][ T5314] ? __pfx_stack_trace_save+0x10/0x10 [ 95.868735][ T5314] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 95.871324][ T5314] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 95.874165][ T5314] ? lockdep_unlock+0x5c/0xd0 [ 95.876255][ T5314] ? __lock_acquire+0x13e8/0x2cf0 [ 95.878512][ T5314] ? do_raw_write_lock+0x11d/0x260 [ 95.881006][ T5314] kvm_vcpu_ioctl+0xa61/0xfd0 [ 95.883050][ T5314] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 95.885366][ T5314] ? hook_file_ioctl+0x1f0/0x5f0 [ 95.887319][ T5314] ? __fget_files+0x2a/0x420 [ 95.889027][ T5314] ? __fget_files+0x2a/0x420 [ 95.891090][ T5314] ? __fget_files+0x3a2/0x420 [ 95.893076][ T5314] ? __fget_files+0x2a/0x420 [ 95.895001][ T5314] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.897104][ T5314] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 95.899282][ T5314] __se_sys_ioctl+0xfc/0x170 [ 95.901494][ T5314] do_syscall_64+0x166/0x520 [ 95.903601][ T5314] ? trace_irq_disable+0x3b/0x140 [ 95.905944][ T5314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.908578][ T5314] ? clear_bhb_loop+0x70/0xc0 [ 95.910680][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.913309][ T5314] RIP: 0033:0x7f2bf799e0d9 [ 95.915612][ T5314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.923786][ T5314] RSP: 002b:00007f2bf8853fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.927967][ T5314] RAX: ffffffffffffffda RBX: 00007f2bf7c26090 RCX: 00007f2bf799e0d9 [ 95.931734][ T5314] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 95.935685][ T5314] RBP: 00007f2bf7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 95.939526][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.943364][ T5314] R13: 00007f2bf7c26128 R14: 00007f2bf7c26090 R15: 00007fff26373e48 [ 95.947219][ T5314] [ 95.948639][ T5314] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.951864][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.955867][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.960218][ T5314] Call Trace: [ 95.961692][ T5314] [ 95.963016][ T5314] vpanic+0x56d/0xa60 [ 95.964832][ T5314] ? __pfx__printk+0x10/0x10 [ 95.966694][ T5314] ? __pfx_vpanic+0x10/0x10 [ 95.968702][ T5314] ? is_bpf_text_address+0x292/0x2b0 [ 95.970876][ T5314] ? is_bpf_text_address+0x26/0x2b0 [ 95.973054][ T5314] panic+0xc5/0xd0 [ 95.974647][ T5314] ? __pfx_panic+0x10/0x10 [ 95.976560][ T5314] __warn+0x315/0x4c0 [ 95.978303][ T5314] ? __kvm_gpc_refresh+0x1510/0x1710 [ 95.980570][ T5314] ? __kvm_gpc_refresh+0x1510/0x1710 [ 95.982833][ T5314] __report_bug+0x276/0x570 [ 95.984781][ T5314] ? __kvm_gpc_refresh+0x1510/0x1710 [ 95.986887][ T5314] ? __pfx___report_bug+0x10/0x10 [ 95.988939][ T5314] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.991068][ T5314] ? irqentry_exit+0x218/0x910 [ 95.993062][ T5314] ? trace_irq_disable+0x3b/0x140 [ 95.995182][ T5314] ? __kvm_gpc_refresh+0x1512/0x1710 [ 95.997386][ T5314] ? __kvm_gpc_refresh+0x1510/0x1710 [ 95.999533][ T5314] report_bug+0x16b/0x220 [ 96.001454][ T5314] ? __kvm_gpc_refresh+0x1510/0x1710 [ 96.003797][ T5314] ? __kvm_gpc_refresh+0x1512/0x1710 [ 96.006189][ T5314] handle_bug+0x9c/0x200 [ 96.008139][ T5314] exc_invalid_op+0x1a/0x50 [ 96.010199][ T5314] asm_exc_invalid_op+0x1a/0x20 [ 96.012344][ T5314] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 96.015005][ T5314] Code: c6 05 ab 85 21 0f 01 48 c7 c7 2c 68 44 8e be 3c 04 00 00 48 c7 c2 60 41 02 8c e8 2b 23 62 00 e9 81 ee ff ff e8 71 6b 86 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 96.023379][ T5314] RSP: 0018:ffffc9000e837360 EFLAGS: 00010287 [ 96.025925][ T5314] RAX: ffffffff8140c94f RBX: ffff888000000000 RCX: 0000000000100000 [ 96.029205][ T5314] RDX: ffffc90020001000 RSI: 0000000000000a83 RDI: 0000000000000a84 [ 96.032484][ T5314] RBP: ffffc9000e8374f0 R08: ffffffff9078fa37 R09: 1ffffffff20f1f46 [ 96.035781][ T5314] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 1ffff92001d06e80 [ 96.039230][ T5314] R13: ffff8880509b9b60 R14: ffff888000000000 R15: ffffffffffffff01 [ 96.042772][ T5314] ? __kvm_gpc_refresh+0x150f/0x1710 [ 96.045659][ T5314] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 96.048796][ T5314] ? lock_acquire+0x106/0x350 [ 96.051380][ T5314] ? kvm_gpc_refresh+0x31/0x110 [ 96.054034][ T5314] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 96.057178][ T5314] ? kvm_xen_set_evtchn+0x11e/0x220 [ 96.059825][ T5314] kvm_gpc_refresh+0xe1/0x110 [ 96.061834][ T5314] ? kvm_xen_set_evtchn+0x11e/0x220 [ 96.063965][ T5314] kvm_xen_set_evtchn+0x14f/0x220 [ 96.066137][ T5314] kvm_xen_inject_timer_irqs+0xfd/0x200 [ 96.068423][ T5314] vcpu_run+0x98f/0x7950 [ 96.070198][ T5314] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 96.072746][ T5314] ? check_noncircular+0xda/0x150 [ 96.074948][ T5314] ? __pfx_vcpu_run+0x10/0x10 [ 96.076993][ T5314] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 96.079185][ T5314] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 96.081343][ T5314] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 96.083611][ T5314] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 96.085944][ T5314] ? __pfx_stack_trace_save+0x10/0x10 [ 96.088027][ T5314] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 96.090180][ T5314] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 96.092682][ T5314] ? lockdep_unlock+0x5c/0xd0 [ 96.094723][ T5314] ? __lock_acquire+0x13e8/0x2cf0 [ 96.096810][ T5314] ? do_raw_write_lock+0x11d/0x260 [ 96.098955][ T5314] kvm_vcpu_ioctl+0xa61/0xfd0 [ 96.101017][ T5314] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 96.103137][ T5314] ? hook_file_ioctl+0x1f0/0x5f0 [ 96.105304][ T5314] ? __fget_files+0x2a/0x420 [ 96.107117][ T5314] ? __fget_files+0x2a/0x420 [ 96.109075][ T5314] ? __fget_files+0x3a2/0x420 [ 96.111077][ T5314] ? __fget_files+0x2a/0x420 [ 96.113062][ T5314] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.115041][ T5314] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 96.117070][ T5314] __se_sys_ioctl+0xfc/0x170 [ 96.119019][ T5314] do_syscall_64+0x166/0x520 [ 96.121121][ T5314] ? trace_irq_disable+0x3b/0x140 [ 96.123300][ T5314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.125921][ T5314] ? clear_bhb_loop+0x70/0xc0 [ 96.127924][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.130275][ T5314] RIP: 0033:0x7f2bf799e0d9 [ 96.132127][ T5314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.140042][ T5314] RSP: 002b:00007f2bf8853fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.143659][ T5314] RAX: ffffffffffffffda RBX: 00007f2bf7c26090 RCX: 00007f2bf799e0d9 [ 96.147008][ T5314] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 96.150258][ T5314] RBP: 00007f2bf7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 96.154328][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.157849][ T5314] R13: 00007f2bf7c26128 R14: 00007f2bf7c26090 R15: 00007fff26373e48 [ 96.161323][ T5314] [ 96.162987][ T5314] Kernel Offset: disabled [ 96.164918][ T5314] Rebooting in 86400 seconds..