./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1224249316
<...>
DUID 00:04:dc:6c:a8:75:19:b8:f7:30:df:f1:e8:1e:24:9d:66:1e
forked to background, child pid 3182
[ 23.535659][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0
[ 23.547236][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts.
execve("./syz-executor1224249316", ["./syz-executor1224249316"], 0x7ffd877685c0 /* 10 vars */) = 0
brk(NULL) = 0x555556d6e000
brk(0x555556d6ec40) = 0x555556d6ec40
arch_prctl(ARCH_SET_FS, 0x555556d6e300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1224249316", 4096) = 28
brk(0x555556d8fc40) = 0x555556d8fc40
brk(0x555556d90000) = 0x555556d90000
mprotect(0x7f6a64704000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3
ioctl(3, KVM_CREATE_VM, 0) = 4
ioctl(4, KVM_CREATE_VCPU, 0) = 5
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x2003d000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x2003e000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x2003f000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20040000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20041000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20042000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20043000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20044000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20045000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20046000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20047000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20048000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20049000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x2004a000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x2004b000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x2004c000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x2004d000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x2004e000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x2004f000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20050000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20051000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20052000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20053000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20054000}) = 0
syzkaller login: [ 41.272761][ T3603] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x2003d000}) = 0
ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0
openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6
ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=33, entries=[...]}) = 0
ioctl(5, KVM_SET_CPUID2, {nent=33, entries=[...]}) = 0
close(6) = 0
ioctl(5, KVM_SET_MSRS, 0x7fffcf8d4cd0) = 5
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0
ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_SET_VCPU_EVENTS, 0x20000200) = 0
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=0, selector=0, type=0, present=0, dpl=0, db=0, s=0, l=0, g=0, avl=0}, ...}) = 0
[ 41.359133][ T3603] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu
[ 41.368349][ T3603] ------------[ cut here ]------------
[ 41.373858][ T3603] WARNING: CPU: 0 PID: 3603 at arch/x86/kvm/x86.c:10047 vcpu_enter_guest+0x92c/0x5a10
[ 41.383577][ T3603] Modules linked in:
[ 41.387471][ T3603] CPU: 0 PID: 3603 Comm: syz-executor122 Not tainted 6.1.0-rc2-syzkaller-00070-g4dc12f37a8e9 #0
[ 41.398073][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 41.408297][ T3603] RIP: 0010:vcpu_enter_guest+0x92c/0x5a10
[ 41.414076][ T3603] Code: c0 74 06 0f 8e d2 4f 00 00 45 0f b6 b4 24 e8 08 00 00 31 ff 44 89 f6 e8 72 db 6a 00 45 84 f6 0f 84 d4 41 00 00 e8 d4 de 6a 00 <0f> 0b e9 1e 11 00 00 e8 c8 de 6a 00 be 08 00 00 00 4c 89 ff e8 4b
[ 41.433723][ T3603] RSP: 0018:ffffc90003d3fb60 EFLAGS: 00010293
[ 41.439801][ T3603] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 41.447802][ T3603] RDX: ffff888023d8ba80 RSI: ffffffff8111bdac RDI: 0000000000000001
[ 41.455799][ T3603] RBP: ffffc90003d3fc80 R08: 0000000000000001 R09: 0000000000000000
[ 41.463866][ T3603] R10: 0000000000000001 R11: 000000000008c07e R12: ffff88801c784000
[ 41.471868][ T3603] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88801c784038
[ 41.479911][ T3603] FS: 0000555556d6e300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 41.488864][ T3603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.495526][ T3603] CR2: 00007fffcf8d4d68 CR3: 000000007b6d6000 CR4: 00000000003526f0
[ 41.503578][ T3603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.511590][ T3603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.519563][ T3603] Call Trace:
[ 41.522863][ T3603]
[ 41.525793][ T3603] ? vmx_prepare_switch_to_guest+0x7d0/0x7d0
[ 41.531810][ T3603] ? rcu_read_lock_sched_held+0xd/0x70
[ 41.537273][ T3603] ? kvm_check_nested_events+0x100/0x100
[ 41.542931][ T3603] ? kernel_fpu_begin_mask+0x260/0x260
[ 41.548403][ T3603] ? kvm_arch_vcpu_load+0x3a9/0x830
[ 41.553697][ T3603] ? __local_bh_enable_ip+0xa0/0x120
[ 41.558992][ T3603] ? trace_hardirqs_on+0x2d/0x160
[ 41.564040][ T3603] ? fpu_swap_kvm_fpstate+0x1a6/0x400
[ 41.569434][ T3603] ? kvm_arch_vcpu_ioctl_run+0xa5e/0x2b30
[ 41.575190][ T3603] kvm_arch_vcpu_ioctl_run+0xa5e/0x2b30
[ 41.580795][ T3603] kvm_vcpu_ioctl+0x570/0xfc0
[ 41.585490][ T3603] ? kvm_release_pfn_dirty+0x220/0x220
[ 41.590989][ T3603] ? rcu_read_lock_sched_held+0xd/0x70
[ 41.596453][ T3603] ? lock_release+0x5cb/0x810
[ 41.601156][ T3603] ? ptrace_notify+0xfa/0x140
[ 41.605927][ T3603] ? lock_downgrade+0x6e0/0x6e0
[ 41.610814][ T3603] ? bpf_lsm_file_ioctl+0x5/0x10
[ 41.615763][ T3603] ? kvm_release_pfn_dirty+0x220/0x220
[ 41.621257][ T3603] __x64_sys_ioctl+0x193/0x200
[ 41.626034][ T3603] do_syscall_64+0x35/0xb0
[ 41.630446][ T3603] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.636393][ T3603] RIP: 0033:0x7f6a646982b9
[ 41.640831][ T3603] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.660491][ T3603] RSP: 002b:00007fffcf8d6828 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 41.668931][ T3603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a646982b9
[ 41.676980][ T3603] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 41.684989][ T3603] RBP: 00007f6a6465bd10 R08: 0000000000000000 R09: 0000000000000000
[ 41.692983][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a6465bda0
[ 41.700970][ T3603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.709105][ T3603]
[ 41.712164][ T3603] Kernel panic - not syncing: panic_on_warn set ...
[ 41.718750][ T3603] CPU: 0 PID: 3603 Comm: syz-executor122 Not tainted 6.1.0-rc2-syzkaller-00070-g4dc12f37a8e9 #0
[ 41.729146][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 41.739186][ T3603] Call Trace:
[ 41.742457][ T3603]
[ 41.745379][ T3603] dump_stack_lvl+0xcd/0x134
[ 41.749964][ T3603] panic+0x2c8/0x622
[ 41.753858][ T3603] ? panic_print_sys_info.part.0+0x110/0x110
[ 41.759858][ T3603] ? __warn.cold+0x24b/0x350
[ 41.764465][ T3603] ? vcpu_enter_guest+0x92c/0x5a10
[ 41.769594][ T3603] __warn.cold+0x25c/0x350
[ 41.774024][ T3603] ? vcpu_enter_guest+0x92c/0x5a10
[ 41.779168][ T3603] report_bug+0x1bc/0x210
[ 41.783539][ T3603] handle_bug+0x3c/0x70
[ 41.787839][ T3603] exc_invalid_op+0x14/0x40
[ 41.792374][ T3603] asm_exc_invalid_op+0x16/0x20
[ 41.797251][ T3603] RIP: 0010:vcpu_enter_guest+0x92c/0x5a10
[ 41.802996][ T3603] Code: c0 74 06 0f 8e d2 4f 00 00 45 0f b6 b4 24 e8 08 00 00 31 ff 44 89 f6 e8 72 db 6a 00 45 84 f6 0f 84 d4 41 00 00 e8 d4 de 6a 00 <0f> 0b e9 1e 11 00 00 e8 c8 de 6a 00 be 08 00 00 00 4c 89 ff e8 4b
[ 41.822626][ T3603] RSP: 0018:ffffc90003d3fb60 EFLAGS: 00010293
[ 41.828701][ T3603] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 41.836673][ T3603] RDX: ffff888023d8ba80 RSI: ffffffff8111bdac RDI: 0000000000000001
[ 41.844647][ T3603] RBP: ffffc90003d3fc80 R08: 0000000000000001 R09: 0000000000000000
[ 41.852618][ T3603] R10: 0000000000000001 R11: 000000000008c07e R12: ffff88801c784000
[ 41.860588][ T3603] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88801c784038
[ 41.868568][ T3603] ? vcpu_enter_guest+0x92c/0x5a10
[ 41.873703][ T3603] ? vmx_prepare_switch_to_guest+0x7d0/0x7d0
[ 41.879700][ T3603] ? rcu_read_lock_sched_held+0xd/0x70
[ 41.885170][ T3603] ? kvm_check_nested_events+0x100/0x100
[ 41.890820][ T3603] ? kernel_fpu_begin_mask+0x260/0x260
[ 41.896378][ T3603] ? kvm_arch_vcpu_load+0x3a9/0x830
[ 41.901595][ T3603] ? __local_bh_enable_ip+0xa0/0x120
[ 41.906888][ T3603] ? trace_hardirqs_on+0x2d/0x160
[ 41.911915][ T3603] ? fpu_swap_kvm_fpstate+0x1a6/0x400
[ 41.917307][ T3603] ? kvm_arch_vcpu_ioctl_run+0xa5e/0x2b30
[ 41.923047][ T3603] kvm_arch_vcpu_ioctl_run+0xa5e/0x2b30
[ 41.928617][ T3603] kvm_vcpu_ioctl+0x570/0xfc0
[ 41.933316][ T3603] ? kvm_release_pfn_dirty+0x220/0x220
[ 41.938797][ T3603] ? rcu_read_lock_sched_held+0xd/0x70
[ 41.944265][ T3603] ? lock_release+0x5cb/0x810
[ 41.948944][ T3603] ? ptrace_notify+0xfa/0x140
[ 41.953626][ T3603] ? lock_downgrade+0x6e0/0x6e0
[ 41.958487][ T3603] ? bpf_lsm_file_ioctl+0x5/0x10
[ 41.963430][ T3603] ? kvm_release_pfn_dirty+0x220/0x220
[ 41.969177][ T3603] __x64_sys_ioctl+0x193/0x200
[ 41.973977][ T3603] do_syscall_64+0x35/0xb0
[ 41.978424][ T3603] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.984340][ T3603] RIP: 0033:0x7f6a646982b9
[ 41.988755][ T3603] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.008365][ T3603] RSP: 002b:00007fffcf8d6828 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 42.016782][ T3603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a646982b9
[ 42.024754][ T3603] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 42.032723][ T3603] RBP: 00007f6a6465bd10 R08: 0000000000000000 R09: 0000000000000000
[ 42.040694][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a6465bda0
[ 42.048666][ T3603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.056643][ T3603]
[ 42.059882][ T3603] Kernel Offset: disabled
[ 42.064197][ T3603] Rebooting in 86400 seconds..