./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2564363059
<...>
DUID 00:04:83:15:3d:b3:f9:44:11:d6:e6:e1:d9:1f:49:4d:f4:66
forked to background, child pid 3184
[ 26.104793][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.115722][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.81' (ECDSA) to the list of known hosts.
execve("./syz-executor2564363059", ["./syz-executor2564363059"], 0x7ffd921be820 /* 10 vars */) = 0
brk(NULL) = 0x555556428000
brk(0x555556428c40) = 0x555556428c40
arch_prctl(ARCH_SET_FS, 0x555556428300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2564363059", 4096) = 28
brk(0x555556449c40) = 0x555556449c40
brk(0x55555644a000) = 0x55555644a000
mprotect(0x7ff923f9d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
io_submit(NULL, 9, [{aio_data=0, aio_lio_opcode=IOCB_CMD_PREAD, aio_reqprio=-5, aio_fildes=-1, aio_buf=0x20000380, aio_nbytes=199, aio_offset=8, aio_resfd=0xffffffff}, {aio_data=0, aio_lio_opcode=IOCB_CMD_FSYNC, aio_reqprio=IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 8), aio_fildes=-1}, NULL, NULL, NULL, NULL, NULL, NULL, NULL]) = -1 EINVAL (Invalid argument)
openat(-1, "cpuacct.stat", O_RDONLY) = -1 EBADF (Bad file descriptor)
openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3
ioctl(3, KVM_CREATE_VM, 0) = 4
ioctl(4, KVM_CREATE_VCPU, 0) = 5
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=8192, userspace_addr=0x20000000}) = 0
ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xfb, rbp=0, ..., rip=0, rflags=0}) = 0
socketpair(AF_UNIX, SOCK_SEQPACKET, 0, [6, 7]) = 0
sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="", iov_len=0}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor)
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
syzkaller login: [ 42.837754][ T3612] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
ioctl(5, KVM_RUN, 0) = 0
[ 42.886111][ T3612] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 42.894288][ T3612] ------------[ cut here ]------------
[ 42.900154][ T3612] WARNING: CPU: 0 PID: 3612 at arch/x86/kvm/x86.c:10897 kvm_arch_vcpu_ioctl_run+0x1f22/0x2560
[ 42.910448][ T3612] Modules linked in:
[ 42.914354][ T3612] CPU: 0 PID: 3612 Comm: syz-executor256 Not tainted 6.0.0-rc5-syzkaller-00017-gd1221cea11fc #0
[ 42.924835][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 42.934937][ T3612] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1f22/0x2560
[ 42.941438][ T3612] Code: ff ff e8 c1 e1 b5 00 e9 85 e1 ff ff 4c 89 ff e8 64 e1 b5 00 e9 12 e3 ff ff e8 8a 81 69 00 0f 0b e9 0e e5 ff ff e8 7e 81 69 00 <0f> 0b e9 46 e5 ff ff e8 72 81 69 00 48 8d 7d 38 be 08 00 00 00 e8
[ 42.961088][ T3612] RSP: 0018:ffffc9000381fca8 EFLAGS: 00010293
[ 42.967174][ T3612] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 42.975203][ T3612] RDX: ffff888022235880 RSI: ffffffff811287a2 RDI: 0000000000000005
[ 42.983778][ T3612] RBP: ffff88801c940000 R08: 0000000000000005 R09: 0000000000000000
[ 42.991803][ T3612] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 42.999904][ T3612] R13: ffff88801c940048 R14: ffff88801bd848c0 R15: ffff88801c9402ec
[ 43.007875][ T3612] FS: 0000555556428300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 43.016836][ T3612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.023448][ T3612] CR2: 0000000000000000 CR3: 0000000026789000 CR4: 00000000003526f0
[ 43.031447][ T3612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 43.039445][ T3612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 43.047401][ T3612] Call Trace:
[ 43.050707][ T3612]
[ 43.053643][ T3612] ? __sanitizer_cov_trace_switch+0x50/0x90
[ 43.059608][ T3612] kvm_vcpu_ioctl+0x570/0xf30
[ 43.064315][ T3612] ? kvm_release_pfn_dirty+0x220/0x220
[ 43.069880][ T3612] ? find_held_lock+0x2d/0x110
[ 43.074668][ T3612] ? ptrace_notify+0xfa/0x140
[ 43.079408][ T3612] ? lock_downgrade+0x6e0/0x6e0
[ 43.084289][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.089539][ T3612] ? bpf_lsm_file_ioctl+0x5/0x10
[ 43.094485][ T3612] ? kvm_release_pfn_dirty+0x220/0x220
[ 43.099981][ T3612] __x64_sys_ioctl+0x193/0x200
[ 43.104756][ T3612] do_syscall_64+0x35/0xb0
[ 43.109234][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.115141][ T3612] RIP: 0033:0x7ff923f30079
[ 43.119789][ T3612] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.139456][ T3612] RSP: 002b:00007ffce6f287b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 43.147880][ T3612] RAX: ffffffffffffffda RBX: 000000000000002e RCX: 00007ff923f30079
[ 43.155998][ T3612] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 43.164017][ T3612] RBP: 00007ff923ef4220 R08: 0000000000000000 R09: 0000000000000000
[ 43.172016][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff923ef42b0
[ 43.180017][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.188002][ T3612]
[ 43.191073][ T3612] Kernel panic - not syncing: panic_on_warn set ...
[ 43.197659][ T3612] CPU: 0 PID: 3612 Comm: syz-executor256 Not tainted 6.0.0-rc5-syzkaller-00017-gd1221cea11fc #0
[ 43.208069][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 43.218137][ T3612] Call Trace:
[ 43.221415][ T3612]
[ 43.224351][ T3612] dump_stack_lvl+0xcd/0x134
[ 43.228950][ T3612] panic+0x2c8/0x627
[ 43.232851][ T3612] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 43.238847][ T3612] ? __warn.cold+0x248/0x2c4
[ 43.243445][ T3612] ? kvm_arch_vcpu_ioctl_run+0x1f22/0x2560
[ 43.249328][ T3612] __warn.cold+0x259/0x2c4
[ 43.253749][ T3612] ? kvm_arch_vcpu_ioctl_run+0x1f22/0x2560
[ 43.259561][ T3612] report_bug+0x1bc/0x210
[ 43.263897][ T3612] handle_bug+0x3c/0x60
[ 43.268075][ T3612] exc_invalid_op+0x14/0x40
[ 43.272582][ T3612] asm_exc_invalid_op+0x16/0x20
[ 43.277436][ T3612] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1f22/0x2560
[ 43.283858][ T3612] Code: ff ff e8 c1 e1 b5 00 e9 85 e1 ff ff 4c 89 ff e8 64 e1 b5 00 e9 12 e3 ff ff e8 8a 81 69 00 0f 0b e9 0e e5 ff ff e8 7e 81 69 00 <0f> 0b e9 46 e5 ff ff e8 72 81 69 00 48 8d 7d 38 be 08 00 00 00 e8
[ 43.303467][ T3612] RSP: 0018:ffffc9000381fca8 EFLAGS: 00010293
[ 43.309535][ T3612] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 43.317517][ T3612] RDX: ffff888022235880 RSI: ffffffff811287a2 RDI: 0000000000000005
[ 43.325485][ T3612] RBP: ffff88801c940000 R08: 0000000000000005 R09: 0000000000000000
[ 43.333452][ T3612] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 43.341421][ T3612] R13: ffff88801c940048 R14: ffff88801bd848c0 R15: ffff88801c9402ec
[ 43.349413][ T3612] ? kvm_arch_vcpu_ioctl_run+0x1f22/0x2560
[ 43.355241][ T3612] ? kvm_arch_vcpu_ioctl_run+0x1f22/0x2560
[ 43.361055][ T3612] ? __sanitizer_cov_trace_switch+0x50/0x90
[ 43.366960][ T3612] kvm_vcpu_ioctl+0x570/0xf30
[ 43.371646][ T3612] ? kvm_release_pfn_dirty+0x220/0x220
[ 43.377123][ T3612] ? find_held_lock+0x2d/0x110
[ 43.381892][ T3612] ? ptrace_notify+0xfa/0x140
[ 43.386572][ T3612] ? lock_downgrade+0x6e0/0x6e0
[ 43.391431][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.396633][ T3612] ? bpf_lsm_file_ioctl+0x5/0x10
[ 43.401570][ T3612] ? kvm_release_pfn_dirty+0x220/0x220
[ 43.407034][ T3612] __x64_sys_ioctl+0x193/0x200
[ 43.411803][ T3612] do_syscall_64+0x35/0xb0
[ 43.416224][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.422119][ T3612] RIP: 0033:0x7ff923f30079
[ 43.426533][ T3612] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.446143][ T3612] RSP: 002b:00007ffce6f287b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 43.454558][ T3612] RAX: ffffffffffffffda RBX: 000000000000002e RCX: 00007ff923f30079
[ 43.462537][ T3612] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 43.470511][ T3612] RBP: 00007ff923ef4220 R08: 0000000000000000 R09: 0000000000000000
[ 43.478485][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff923ef42b0
[ 43.486461][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.494456][ T3612]
[ 43.497753][ T3612] Kernel Offset: disabled
[ 43.502139][ T3612] Rebooting in 86400 seconds..