./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3557831407 <...> Warning: Permanently added '10.128.1.46' (ECDSA) to the list of known hosts. execve("./syz-executor3557831407", ["./syz-executor3557831407"], 0x7ffc28749ce0 /* 10 vars */) = 0 brk(NULL) = 0x5555567c5000 brk(0x5555567c5c40) = 0x5555567c5c40 arch_prctl(ARCH_SET_FS, 0x5555567c5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3557831407", 4096) = 28 brk(0x5555567e6c40) = 0x5555567e6c40 brk(0x5555567e7000) = 0x5555567e7000 mprotect(0x7fcf5dde8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 ioctl(3, KVM_CREATE_VM, 0) = 4 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=536879104, userspace_addr=0x20000000}) = 0 ioctl(4, KVM_CREATE_VCPU, 0) = 5 ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x20000000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x20001000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x20002000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20003000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20004000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20005000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20006000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20007000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20008000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20009000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x2000a000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x2000b000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x2000c000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x2000d000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x2000e000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x2000f000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x20010000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x20011000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x20012000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20013000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20014000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20015000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20016000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20017000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x20000000}) = -1 EBADF (Bad file descriptor) ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0 openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6 ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0 ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0 close(6) = 0 ioctl(5, KVM_SET_MSRS, 0x7ffe010e96d0) = 5 ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0 [ 56.574893][ T4990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0 modify_ldt(17, {entry_number=1471, base_addr=0x20000800, limit=00000000, seg_32bit=0, contents=0, read_exec_only=0, limit_in_pages=0, seg_not_present=0, useable=0, lm=0}, 16) = 0 [ 56.642273][ T4990] ------------[ cut here ]------------ [ 56.647862][ T4990] WARNING: CPU: 1 PID: 4990 at arch/x86/kvm/vmx/vmx.c:5219 handle_exception_nmi+0xa44/0x1120 [ 56.658433][ T4990] Modules linked in: [ 56.662402][ T4990] CPU: 1 PID: 4990 Comm: syz-executor355 Not tainted 6.4.0-rc3-syzkaller-00008-gae8373a5add4 #0 [ 56.672912][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 56.683041][ T4990] RIP: 0010:handle_exception_nmi+0xa44/0x1120 [ 56.689122][ T4990] Code: 37 bf 00 e9 de f6 ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c af f6 ff ff 48 89 ef e8 86 37 bf 00 e9 a2 f6 ff ff e8 dc 62 67 00 <0f> 0b e9 ba fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bf f7 ff [ 56.708911][ T4990] RSP: 0018:ffffc9000396f658 EFLAGS: 00010293 [ 56.715092][ T4990] RAX: ffffffff812419c4 RBX: 0000000000000000 RCX: ffff88802159bb80 [ 56.723852][ T4990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.731991][ T4990] RBP: 0000000020c2c748 R08: ffffffff81241578 R09: ffffffff812410ee [ 56.740585][ T4990] R10: 0000000000000002 R11: ffff88802159bb80 R12: ffff88807e148000 [ 56.749039][ T4990] R13: 1ffff1100fc2901b R14: dffffc0000000000 R15: 000000008000030e [ 56.757371][ T4990] FS: 00005555567c5300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 56.766477][ T4990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.773764][ T4990] CR2: 0000000000000000 CR3: 0000000076f15000 CR4: 00000000003526e0 [ 56.781787][ T4990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.789933][ T4990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.797937][ T4990] Call Trace: [ 56.801334][ T4990] [ 56.804301][ T4990] ? vmx_handle_intel_pt_intr+0xc0/0xc0 [ 56.809935][ T4990] vmx_handle_exit+0xcc8/0x19c0 [ 56.814854][ T4990] vcpu_run+0x674e/0x82a0 [ 56.819260][ T4990] ? signal_pending+0xa0/0xa0 [ 56.824139][ T4990] ? __local_bh_enable_ip+0x168/0x1f0 [ 56.829581][ T4990] ? lockdep_hardirqs_on+0x98/0x140 [ 56.835439][ T4990] ? read_lock_is_recursive+0x20/0x20 [ 56.841002][ T4990] ? local_bh_enable+0x5/0x20 [ 56.845724][ T4990] ? _local_bh_enable+0xa0/0xa0 [ 56.850669][ T4990] ? kvm_arch_vcpu_load+0x591/0x790 [ 56.856108][ T4990] ? rcu_is_watching+0x15/0xb0 [ 56.861096][ T4990] kvm_arch_vcpu_ioctl_run+0x866/0x1510 [ 56.866700][ T4990] kvm_vcpu_ioctl+0x7f4/0xd00 [ 56.871471][ T4990] ? xa_release+0x50/0x50 [ 56.875900][ T4990] ? smack_file_ioctl+0x346/0x390 [ 56.881090][ T4990] ? smack_file_alloc_security+0xe0/0xe0 [ 56.886749][ T4990] ? do_notify_parent+0xf50/0xf50 [ 56.891934][ T4990] ? print_irqtrace_events+0x220/0x220 [ 56.897471][ T4990] ? bpf_lsm_file_ioctl+0x9/0x10 [ 56.903270][ T4990] ? security_file_ioctl+0x81/0xa0 [ 56.908421][ T4990] ? xa_release+0x50/0x50 [ 56.912848][ T4990] __se_sys_ioctl+0xf1/0x160 [ 56.918156][ T4990] do_syscall_64+0x41/0xc0 [ 56.922681][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.928712][ T4990] RIP: 0033:0x7fcf5dd7bdb9 [ 56.933250][ T4990] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.953302][ T4990] RSP: 002b:00007ffe010eb228 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.962021][ T4990] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcf5dd7bdb9 [ 56.970667][ T4990] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 56.978905][ T4990] RBP: 00007fcf5dd3f810 R08: 0000000000000000 R09: 0000000000000000 [ 56.987165][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5dd3f8a0 [ 56.995306][ T4990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.003402][ T4990] [ 57.006441][ T4990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.013721][ T4990] CPU: 1 PID: 4990 Comm: syz-executor355 Not tainted 6.4.0-rc3-syzkaller-00008-gae8373a5add4 #0 [ 57.024224][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 57.034373][ T4990] Call Trace: [ 57.037655][ T4990] [ 57.040685][ T4990] dump_stack_lvl+0x1e7/0x2d0 [ 57.045478][ T4990] ? nf_tcp_handle_invalid+0x650/0x650 [ 57.052183][ T4990] ? panic+0x770/0x770 [ 57.056334][ T4990] ? vscnprintf+0x5d/0x80 [ 57.060926][ T4990] panic+0x30f/0x770 [ 57.064913][ T4990] ? __warn+0x171/0x4a0 [ 57.069093][ T4990] ? __memcpy_flushcache+0x2b0/0x2b0 [ 57.074663][ T4990] __warn+0x314/0x4a0 [ 57.078749][ T4990] ? handle_exception_nmi+0xa44/0x1120 [ 57.084385][ T4990] report_bug+0x2b3/0x500 [ 57.088977][ T4990] ? handle_exception_nmi+0xa44/0x1120 [ 57.094455][ T4990] handle_bug+0x3d/0x70 [ 57.098765][ T4990] exc_invalid_op+0x1a/0x50 [ 57.103616][ T4990] asm_exc_invalid_op+0x1a/0x20 [ 57.108551][ T4990] RIP: 0010:handle_exception_nmi+0xa44/0x1120 [ 57.114632][ T4990] Code: 37 bf 00 e9 de f6 ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c af f6 ff ff 48 89 ef e8 86 37 bf 00 e9 a2 f6 ff ff e8 dc 62 67 00 <0f> 0b e9 ba fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bf f7 ff [ 57.134764][ T4990] RSP: 0018:ffffc9000396f658 EFLAGS: 00010293 [ 57.140835][ T4990] RAX: ffffffff812419c4 RBX: 0000000000000000 RCX: ffff88802159bb80 [ 57.148817][ T4990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.157168][ T4990] RBP: 0000000020c2c748 R08: ffffffff81241578 R09: ffffffff812410ee [ 57.165240][ T4990] R10: 0000000000000002 R11: ffff88802159bb80 R12: ffff88807e148000 [ 57.173312][ T4990] R13: 1ffff1100fc2901b R14: dffffc0000000000 R15: 000000008000030e [ 57.181372][ T4990] ? handle_exception_nmi+0x16e/0x1120 [ 57.186919][ T4990] ? handle_exception_nmi+0x5f8/0x1120 [ 57.192460][ T4990] ? handle_exception_nmi+0xa44/0x1120 [ 57.197935][ T4990] ? handle_exception_nmi+0xa44/0x1120 [ 57.203666][ T4990] ? vmx_handle_intel_pt_intr+0xc0/0xc0 [ 57.209228][ T4990] vmx_handle_exit+0xcc8/0x19c0 [ 57.214371][ T4990] vcpu_run+0x674e/0x82a0 [ 57.218754][ T4990] ? signal_pending+0xa0/0xa0 [ 57.223433][ T4990] ? __local_bh_enable_ip+0x168/0x1f0 [ 57.228807][ T4990] ? lockdep_hardirqs_on+0x98/0x140 [ 57.234113][ T4990] ? read_lock_is_recursive+0x20/0x20 [ 57.239828][ T4990] ? local_bh_enable+0x5/0x20 [ 57.244603][ T4990] ? _local_bh_enable+0xa0/0xa0 [ 57.249624][ T4990] ? kvm_arch_vcpu_load+0x591/0x790 [ 57.254820][ T4990] ? rcu_is_watching+0x15/0xb0 [ 57.259607][ T4990] kvm_arch_vcpu_ioctl_run+0x866/0x1510 [ 57.265171][ T4990] kvm_vcpu_ioctl+0x7f4/0xd00 [ 57.269851][ T4990] ? xa_release+0x50/0x50 [ 57.274259][ T4990] ? smack_file_ioctl+0x346/0x390 [ 57.279303][ T4990] ? smack_file_alloc_security+0xe0/0xe0 [ 57.285131][ T4990] ? do_notify_parent+0xf50/0xf50 [ 57.290256][ T4990] ? print_irqtrace_events+0x220/0x220 [ 57.295727][ T4990] ? bpf_lsm_file_ioctl+0x9/0x10 [ 57.300840][ T4990] ? security_file_ioctl+0x81/0xa0 [ 57.306984][ T4990] ? xa_release+0x50/0x50 [ 57.311398][ T4990] __se_sys_ioctl+0xf1/0x160 [ 57.316090][ T4990] do_syscall_64+0x41/0xc0 [ 57.320624][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.326546][ T4990] RIP: 0033:0x7fcf5dd7bdb9 [ 57.331402][ T4990] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.351639][ T4990] RSP: 002b:00007ffe010eb228 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.361092][ T4990] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcf5dd7bdb9 [ 57.369406][ T4990] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 57.377716][ T4990] RBP: 00007fcf5dd3f810 R08: 0000000000000000 R09: 0000000000000000 [ 57.386219][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf5dd3f8a0 [ 57.394825][ T4990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.403165][ T4990] [ 57.406677][ T4990] Kernel Offset: disabled [ 57.411464][ T4990] Rebooting in 86400 seconds..