./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1710373303 <...> DUID 00:04:2f:bc:f2:2f:e4:1d:55:f7:99:3b:0f:15:66:5c:e9:07 forked to background, child pid 3180 [ 25.124771][ T3181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.138468][ T3181] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. execve("./syz-executor1710373303", ["./syz-executor1710373303"], 0x7ffc38e83970 /* 10 vars */) = 0 brk(NULL) = 0x555556fce000 brk(0x555556fcec40) = 0x555556fcec40 arch_prctl(ARCH_SET_FS, 0x555556fce300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1710373303", 4096) = 28 brk(0x555556fefc40) = 0x555556fefc40 brk(0x555556ff0000) = 0x555556ff0000 mprotect(0x7fc97e784000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_IEEE802154, SOCK_DGRAM, 0) = 3 socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 4 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 5 ioctl(5, KVM_CREATE_VM, 0) = 6 ioctl(6, KVM_CREATE_VCPU, 0) = 7 ioctl(7, KVM_XEN_VCPU_SET_ATTR, 0x20000000) = 0 syzkaller login: [ 48.013566][ T3601] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 48.042196][ T3601] ------------[ cut here ]------------ [ 48.047907][ T3601] ODEBUG: init active (active state 0) object type: hrtimer hint: xen_timer_callback+0x0/0xb0 [ 48.058660][ T3601] WARNING: CPU: 1 PID: 3601 at lib/debugobjects.c:505 __debug_object_init+0xae3/0x1860 [ 48.068419][ T3601] Modules linked in: [ 48.072304][ T3601] CPU: 1 PID: 3601 Comm: syz-executor171 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 48.082774][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 48.093344][ T3601] RIP: 0010:__debug_object_init+0xae3/0x1860 [ 48.099434][ T3601] Code: 89 ff e8 40 6e a5 fd 4d 8b 07 48 c7 c7 60 b0 e9 8a 48 c7 c6 c0 ae e9 8a 48 89 da 44 89 f1 4c 8b 4c 24 18 31 c0 e8 2d d6 1a fd <0f> 0b 4c 8b 64 24 48 ff 05 4c 7f ce 09 48 8b 9c 24 b0 00 00 00 48 [ 48.119189][ T3601] RSP: 0018:ffffc900030df3a0 EFLAGS: 00010246 [ 48.125268][ T3601] RAX: 1a852b5f5a7fcb00 RBX: ffffffff8ae9b1c0 RCX: ffff888027671d80 [ 48.133422][ T3601] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 48.141636][ T3601] RBP: ffffc900030df588 R08: ffffffff816c1ccd R09: fffff5200061bdf1 [ 48.149786][ T3601] R10: fffff5200061bdf1 R11: 1ffff9200061bdf0 R12: ffff88802733af2c [ 48.157990][ T3601] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8a8f8840 [ 48.166046][ T3601] FS: 0000555556fce300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 48.174983][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.181598][ T3601] CR2: 000055e1f0266048 CR3: 000000001fc5d000 CR4: 00000000003526e0 [ 48.189613][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.197608][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.205583][ T3601] Call Trace: [ 48.208920][ T3601] [ 48.211858][ T3601] ? rcu_lock_acquire+0x30/0x30 [ 48.216806][ T3601] ? debug_object_init+0x10/0x10 [ 48.221757][ T3601] ? read_lock_is_recursive+0x10/0x10 [ 48.227540][ T3601] ? kvm_xen_vcpu_set_attr+0x49/0x11a0 [ 48.233025][ T3601] ? mutex_lock_io_nested+0x60/0x60 [ 48.238393][ T3601] ? __might_sleep+0xc0/0xc0 [ 48.243005][ T3601] ? __might_fault+0xb6/0x110 [ 48.247719][ T3601] hrtimer_init+0x20/0x40 [ 48.252056][ T3601] kvm_xen_vcpu_set_attr+0x82c/0x11a0 [ 48.257676][ T3601] kvm_arch_vcpu_ioctl+0x1651/0x2680 [ 48.262970][ T3601] ? kvm_arch_vcpu_put+0x800/0x800 [ 48.268118][ T3601] ? is_bpf_text_address+0x253/0x270 [ 48.273414][ T3601] ? reacquire_held_locks+0x680/0x680 [ 48.278822][ T3601] ? __kernel_text_address+0x9/0x40 [ 48.284029][ T3601] ? unwind_get_return_address+0x48/0x80 [ 48.289713][ T3601] ? arch_stack_walk+0xf8/0x140 [ 48.294581][ T3601] ? stack_trace_save+0x12d/0x1f0 [ 48.299647][ T3601] ? stack_trace_snprint+0xf0/0xf0 [ 48.304765][ T3601] ? __stack_depot_save+0x33/0x490 [ 48.309910][ T3601] ? kfree+0xda/0x210 [ 48.313898][ T3601] ? mark_lock+0x98/0x350 [ 48.318263][ T3601] ? __lock_acquire+0x129a/0x1f80 [ 48.323313][ T3601] ? rcu_read_lock_sched_held+0x89/0x130 [ 48.328976][ T3601] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 48.334962][ T3601] ? trace_raw_output_contention_end+0xd0/0xd0 [ 48.341148][ T3601] ? rcu_lock_release+0x5/0x20 [ 48.345989][ T3601] ? trace_contention_end+0x4b/0x140 [ 48.351276][ T3601] ? __mutex_lock_common+0x45d/0x26c0 [ 48.356689][ T3601] ? kfree+0xda/0x210 [ 48.360694][ T3601] ? tomoyo_path_number_perm+0x657/0x7b0 [ 48.366382][ T3601] ? kvm_vcpu_ioctl+0x1d4/0xcf0 [ 48.371230][ T3601] ? __rwlock_init+0x140/0x140 [ 48.376023][ T3601] ? mutex_lock_io_nested+0x60/0x60 [ 48.381239][ T3601] kvm_vcpu_ioctl+0x6d5/0xcf0 [ 48.385944][ T3601] ? print_irqtrace_events+0x220/0x220 [ 48.391410][ T3601] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 48.397071][ T3601] ? memset+0x1f/0x40 [ 48.401057][ T3601] ? smack_file_ioctl+0x34c/0x3a0 [ 48.406112][ T3601] ? smack_file_alloc_security+0xd0/0xd0 [ 48.411760][ T3601] ? print_irqtrace_events+0x220/0x220 [ 48.417255][ T3601] ? vtime_user_exit+0x2b2/0x3e0 [ 48.422199][ T3601] ? __ct_user_exit+0x81/0xe0 [ 48.426906][ T3601] ? bpf_lsm_file_ioctl+0x5/0x10 [ 48.431847][ T3601] ? security_file_ioctl+0x9d/0xb0 [ 48.436995][ T3601] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 48.442632][ T3601] __se_sys_ioctl+0xfb/0x170 [ 48.447255][ T3601] do_syscall_64+0x2b/0x70 [ 48.451675][ T3601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.457627][ T3601] RIP: 0033:0x7fc97e717e99 [ 48.462051][ T3601] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.481701][ T3601] RSP: 002b:00007ffe56856698 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.490181][ T3601] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc97e717e99 [ 48.498219][ T3601] RDX: 0000000020000000 RSI: 000000004048aecb RDI: 0000000000000007 [ 48.506237][ T3601] RBP: 00007fc97e6dbdb0 R08: 0000000000000012 R09: 0000000000000000 [ 48.514211][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc97e6dbe40 [ 48.522210][ T3601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.530219][ T3601] [ 48.533227][ T3601] Kernel panic - not syncing: panic_on_warn set ... [ 48.539792][ T3601] CPU: 0 PID: 3601 Comm: syz-executor171 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 48.549921][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 48.559957][ T3601] Call Trace: [ 48.563221][ T3601] [ 48.566136][ T3601] dump_stack_lvl+0x1e3/0x2cb [ 48.570807][ T3601] ? io_notif_register+0x5e7/0x5e7 [ 48.575904][ T3601] ? panic+0x76e/0x76e [ 48.579960][ T3601] ? vscnprintf+0x59/0x80 [ 48.584274][ T3601] ? __debug_object_init+0xa90/0x1860 [ 48.589629][ T3601] panic+0x312/0x76e [ 48.593508][ T3601] ? __warn+0x131/0x220 [ 48.597650][ T3601] ? fb_is_primary_device+0xcc/0xcc [ 48.602842][ T3601] ? __debug_object_init+0xae3/0x1860 [ 48.608198][ T3601] __warn+0x1fa/0x220 [ 48.612167][ T3601] ? __debug_object_init+0xae3/0x1860 [ 48.617524][ T3601] report_bug+0x1b3/0x2d0 [ 48.621850][ T3601] handle_bug+0x3d/0x70 [ 48.626002][ T3601] exc_invalid_op+0x16/0x40 [ 48.630502][ T3601] asm_exc_invalid_op+0x16/0x20 [ 48.635343][ T3601] RIP: 0010:__debug_object_init+0xae3/0x1860 [ 48.641490][ T3601] Code: 89 ff e8 40 6e a5 fd 4d 8b 07 48 c7 c7 60 b0 e9 8a 48 c7 c6 c0 ae e9 8a 48 89 da 44 89 f1 4c 8b 4c 24 18 31 c0 e8 2d d6 1a fd <0f> 0b 4c 8b 64 24 48 ff 05 4c 7f ce 09 48 8b 9c 24 b0 00 00 00 48 [ 48.661090][ T3601] RSP: 0018:ffffc900030df3a0 EFLAGS: 00010246 [ 48.667154][ T3601] RAX: 1a852b5f5a7fcb00 RBX: ffffffff8ae9b1c0 RCX: ffff888027671d80 [ 48.675118][ T3601] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 48.683083][ T3601] RBP: ffffc900030df588 R08: ffffffff816c1ccd R09: fffff5200061bdf1 [ 48.691047][ T3601] R10: fffff5200061bdf1 R11: 1ffff9200061bdf0 R12: ffff88802733af2c [ 48.699016][ T3601] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8a8f8840 [ 48.706999][ T3601] ? __wake_up_klogd+0xcd/0x100 [ 48.711854][ T3601] ? rcu_lock_acquire+0x30/0x30 [ 48.716709][ T3601] ? debug_object_init+0x10/0x10 [ 48.721657][ T3601] ? read_lock_is_recursive+0x10/0x10 [ 48.727025][ T3601] ? kvm_xen_vcpu_set_attr+0x49/0x11a0 [ 48.732478][ T3601] ? mutex_lock_io_nested+0x60/0x60 [ 48.737676][ T3601] ? __might_sleep+0xc0/0xc0 [ 48.742261][ T3601] ? __might_fault+0xb6/0x110 [ 48.746936][ T3601] hrtimer_init+0x20/0x40 [ 48.751259][ T3601] kvm_xen_vcpu_set_attr+0x82c/0x11a0 [ 48.756636][ T3601] kvm_arch_vcpu_ioctl+0x1651/0x2680 [ 48.761925][ T3601] ? kvm_arch_vcpu_put+0x800/0x800 [ 48.767032][ T3601] ? is_bpf_text_address+0x253/0x270 [ 48.772316][ T3601] ? reacquire_held_locks+0x680/0x680 [ 48.777680][ T3601] ? __kernel_text_address+0x9/0x40 [ 48.782871][ T3601] ? unwind_get_return_address+0x48/0x80 [ 48.788500][ T3601] ? arch_stack_walk+0xf8/0x140 [ 48.793356][ T3601] ? stack_trace_save+0x12d/0x1f0 [ 48.798375][ T3601] ? stack_trace_snprint+0xf0/0xf0 [ 48.803482][ T3601] ? __stack_depot_save+0x33/0x490 [ 48.808589][ T3601] ? kfree+0xda/0x210 [ 48.812570][ T3601] ? mark_lock+0x98/0x350 [ 48.816899][ T3601] ? __lock_acquire+0x129a/0x1f80 [ 48.821980][ T3601] ? rcu_read_lock_sched_held+0x89/0x130 [ 48.827608][ T3601] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 48.833584][ T3601] ? trace_raw_output_contention_end+0xd0/0xd0 [ 48.839730][ T3601] ? rcu_lock_release+0x5/0x20 [ 48.844491][ T3601] ? trace_contention_end+0x4b/0x140 [ 48.849770][ T3601] ? __mutex_lock_common+0x45d/0x26c0 [ 48.855141][ T3601] ? kfree+0xda/0x210 [ 48.859139][ T3601] ? tomoyo_path_number_perm+0x657/0x7b0 [ 48.864765][ T3601] ? kvm_vcpu_ioctl+0x1d4/0xcf0 [ 48.869605][ T3601] ? __rwlock_init+0x140/0x140 [ 48.874366][ T3601] ? mutex_lock_io_nested+0x60/0x60 [ 48.879573][ T3601] kvm_vcpu_ioctl+0x6d5/0xcf0 [ 48.884677][ T3601] ? print_irqtrace_events+0x220/0x220 [ 48.890137][ T3601] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 48.895762][ T3601] ? memset+0x1f/0x40 [ 48.899736][ T3601] ? smack_file_ioctl+0x34c/0x3a0 [ 48.904758][ T3601] ? smack_file_alloc_security+0xd0/0xd0 [ 48.910391][ T3601] ? print_irqtrace_events+0x220/0x220 [ 48.915858][ T3601] ? vtime_user_exit+0x2b2/0x3e0 [ 48.920790][ T3601] ? __ct_user_exit+0x81/0xe0 [ 48.925462][ T3601] ? bpf_lsm_file_ioctl+0x5/0x10 [ 48.930390][ T3601] ? security_file_ioctl+0x9d/0xb0 [ 48.935511][ T3601] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 48.941139][ T3601] __se_sys_ioctl+0xfb/0x170 [ 48.945723][ T3601] do_syscall_64+0x2b/0x70 [ 48.950144][ T3601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.956030][ T3601] RIP: 0033:0x7fc97e717e99 [ 48.960438][ T3601] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.980034][ T3601] RSP: 002b:00007ffe56856698 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.988455][ T3601] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc97e717e99 [ 48.996420][ T3601] RDX: 0000000020000000 RSI: 000000004048aecb RDI: 0000000000000007 [ 49.004397][ T3601] RBP: 00007fc97e6dbdb0 R08: 0000000000000012 R09: 0000000000000000 [ 49.012358][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc97e6dbe40 [ 49.020322][ T3601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.028297][ T3601] [ 49.031496][ T3601] Kernel Offset: disabled [ 49.035875][ T3601] Rebooting in 86400 seconds..