./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor716434616 <...> DUID 00:04:5a:7a:52:ad:4b:e5:ff:c1:d1:3d:bd:97:7e:8a:4f:1f forked to background, child pid 3183 [ 20.901097][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 20.912012][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. execve("./syz-executor716434616", ["./syz-executor716434616"], 0x7ffe1840b360 /* 10 vars */) = 0 brk(NULL) = 0x555555c6c000 brk(0x555555c6cc40) = 0x555555c6cc40 arch_prctl(ARCH_SET_FS, 0x555555c6c300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor716434616", 4096) = 27 brk(0x555555c8dc40) = 0x555555c8dc40 brk(0x555555c8e000) = 0x555555c8e000 mprotect(0x7fcc8c6a6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 ioctl(3, KVM_CREATE_VM, 0) = 4 syzkaller login: [ 35.835820][ T3604] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 35.856861][ T3604] BUG: unable to handle page fault for address: ffffffffffffffea [ 35.864609][ T3604] #PF: supervisor write access in kernel mode [ 35.870653][ T3604] #PF: error_code(0x0002) - not-present page [ 35.876608][ T3604] PGD bc8f067 P4D bc8f067 PUD bc91067 PMD 0 [ 35.882584][ T3604] Oops: 0002 [#1] PREEMPT SMP KASAN [ 35.887763][ T3604] CPU: 1 PID: 3604 Comm: syz-executor716 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0 [ 35.897805][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 35.907845][ T3604] RIP: 0010:eventfd_ctx_put+0x1e/0x110 [ 35.913298][ T3604] Code: 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 54 55 48 89 fd 53 bb ff ff ff ff e8 8f 64 8f ff be 04 00 00 00 48 89 ef e8 d2 7c dc ff 0f c1 5d 00 bf 01 00 00 00 89 de e8 31 61 8f ff 83 fb 01 74 35 [ 35.932893][ T3604] RSP: 0018:ffffc90003e3f748 EFLAGS: 00010246 [ 35.938946][ T3604] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: ffffffff81ebb2ae [ 35.946900][ T3604] RDX: fffffbfffffffffe RSI: 0000000000000004 RDI: ffffffffffffffea [ 35.954857][ T3604] RBP: ffffffffffffffea R08: 0000000000000001 R09: ffffffffffffffed [ 35.962813][ T3604] R10: fffffbfffffffffd R11: 000000000008c07c R12: 0000000000000020 [ 35.970768][ T3604] R13: ffffffffffffffea R14: ffffc90003ef1000 R15: 00000000ffffffea [ 35.978725][ T3604] FS: 0000555555c6c300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 35.987646][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.994213][ T3604] CR2: ffffffffffffffea CR3: 000000007b193000 CR4: 00000000003526e0 [ 36.002169][ T3604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.010128][ T3604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.018085][ T3604] Call Trace: [ 36.021346][ T3604] [ 36.024263][ T3604] kvm_xen_hvm_set_attr+0x563/0x1610 [ 36.029543][ T3604] ? __kvm_xen_has_interrupt+0x280/0x280 [ 36.035165][ T3604] kvm_arch_vm_ioctl+0xe39/0x18b0 [ 36.040181][ T3604] ? __kvm_set_or_clear_apicv_inhibit+0x2a0/0x2a0 [ 36.046586][ T3604] ? kfree+0xe2/0x580 [ 36.050555][ T3604] ? stack_trace_save+0x8c/0xc0 [ 36.055395][ T3604] ? __stack_depot_save+0x35/0x500 [ 36.060499][ T3604] ? kfree+0xe2/0x580 [ 36.064466][ T3604] ? kasan_save_stack+0x2e/0x40 [ 36.069302][ T3604] ? kasan_save_stack+0x1e/0x40 [ 36.074138][ T3604] ? kasan_set_track+0x21/0x30 [ 36.078888][ T3604] ? kasan_set_free_info+0x20/0x30 [ 36.083993][ T3604] ? ____kasan_slab_free+0x166/0x1c0 [ 36.089270][ T3604] ? slab_free_freelist_hook+0x8b/0x1c0 [ 36.094800][ T3604] ? kfree+0xe2/0x580 [ 36.098765][ T3604] ? tomoyo_path_number_perm+0x413/0x550 [ 36.104385][ T3604] ? security_file_ioctl+0x50/0xb0 [ 36.109480][ T3604] ? __x64_sys_ioctl+0xb3/0x200 [ 36.114315][ T3604] ? do_syscall_64+0x35/0xb0 [ 36.118894][ T3604] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 36.124958][ T3604] ? trace_hardirqs_on+0x2d/0x120 [ 36.130061][ T3604] ? slab_free_freelist_hook+0x8b/0x1c0 [ 36.135591][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 36.141040][ T3604] ? lock_acquire+0x480/0x570 [ 36.145719][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 36.150551][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 36.155474][ T3604] ? tomoyo_supervisor+0x1c2/0xf10 [ 36.160576][ T3604] ? trace_hardirqs_on+0x2d/0x120 [ 36.165590][ T3604] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 36.171385][ T3604] ? debug_check_no_obj_freed+0x20c/0x420 [ 36.177092][ T3604] kvm_vm_ioctl+0x15df/0x2380 [ 36.181757][ T3604] ? lock_release+0x560/0x780 [ 36.186426][ T3604] ? tomoyo_path_number_perm+0x230/0x550 [ 36.192061][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 36.196905][ T3604] ? kvm_unregister_device_ops+0x90/0x90 [ 36.202523][ T3604] ? kfree+0xe2/0x580 [ 36.206496][ T3604] ? tomoyo_path_number_perm+0x162/0x550 [ 36.212118][ T3604] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 36.217916][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 36.223382][ T3604] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 36.229271][ T3604] ? do_vfs_ioctl+0x132/0x15c0 [ 36.234022][ T3604] ? vfs_fileattr_set+0xbe0/0xbe0 [ 36.239044][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 36.244499][ T3604] ? lock_release+0x560/0x780 [ 36.249159][ T3604] ? calibrate_delay+0x563/0x1120 [ 36.254174][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 36.259014][ T3604] ? bpf_lsm_file_ioctl+0x5/0x10 [ 36.263939][ T3604] ? kvm_unregister_device_ops+0x90/0x90 [ 36.269564][ T3604] __x64_sys_ioctl+0x193/0x200 [ 36.274319][ T3604] do_syscall_64+0x35/0xb0 [ 36.278742][ T3604] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 36.284626][ T3604] RIP: 0033:0x7fcc8c639bb9 [ 36.289024][ T3604] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 36.308617][ T3604] RSP: 002b:00007fff36e19048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.317015][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc8c639bb9 [ 36.324974][ T3604] RDX: 00000000200005c0 RSI: 000000004048aec9 RDI: 0000000000000004 [ 36.332929][ T3604] RBP: 00007fcc8c5fdd60 R08: 0000000000000000 R09: 0000000000000000 [ 36.340888][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc8c5fddf0 [ 36.348844][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 36.356802][ T3604] [ 36.359812][ T3604] Modules linked in: [ 36.363688][ T3604] CR2: ffffffffffffffea [ 36.367863][ T3604] ---[ end trace 0000000000000000 ]--- [ 36.373300][ T3604] RIP: 0010:eventfd_ctx_put+0x1e/0x110 [ 36.378752][ T3604] Code: 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 54 55 48 89 fd 53 bb ff ff ff ff e8 8f 64 8f ff be 04 00 00 00 48 89 ef e8 d2 7c dc ff 0f c1 5d 00 bf 01 00 00 00 89 de e8 31 61 8f ff 83 fb 01 74 35 [ 36.398350][ T3604] RSP: 0018:ffffc90003e3f748 EFLAGS: 00010246 [ 36.405011][ T3604] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: ffffffff81ebb2ae [ 36.412971][ T3604] RDX: fffffbfffffffffe RSI: 0000000000000004 RDI: ffffffffffffffea [ 36.420934][ T3604] RBP: ffffffffffffffea R08: 0000000000000001 R09: ffffffffffffffed [ 36.428892][ T3604] R10: fffffbfffffffffd R11: 000000000008c07c R12: 0000000000000020 [ 36.436854][ T3604] R13: ffffffffffffffea R14: ffffc90003ef1000 R15: 00000000ffffffea [ 36.444808][ T3604] FS: 0000555555c6c300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 36.453721][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.460291][ T3604] CR2: ffffffffffffffea CR3: 000000007b193000 CR4: 00000000003526e0 [ 36.468249][ T3604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.476208][ T3604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.484167][ T3604] Kernel panic - not syncing: Fatal exception [ 36.490376][ T3604] Kernel Offset: disabled [ 36.494691][ T3604] Rebooting in 86400 seconds..