./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor734519949
<...>
Warning: Permanently added '10.128.1.91' (ECDSA) to the list of known hosts.
execve("./syz-executor734519949", ["./syz-executor734519949"], 0x7ffc5bd1c200 /* 10 vars */) = 0
brk(NULL) = 0x555555f2d000
brk(0x555555f2dc40) = 0x555555f2dc40
arch_prctl(ARCH_SET_FS, 0x555555f2d300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor734519949", 4096) = 27
brk(0x555555f4ec40) = 0x555555f4ec40
brk(0x555555f4f000) = 0x555555f4f000
mprotect(0x7f480cc78000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3
ioctl(3, KVM_CREATE_VM, 0) = 4
ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0
ioctl(4, KVM_CREATE_VCPU, 0) = 5
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x2004c000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x2004d000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x2004e000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x2004f000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20050000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20051000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20052000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20053000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20054000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20055000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20056000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20057000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20058000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x20059000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x2005a000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x2005b000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x2005c000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x2005d000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x2005e000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x2005f000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20060000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20061000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20062000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20063000}) = -1 EBADF (Bad file descriptor)
ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x2004c000}) = -1 EBADF (Bad file descriptor)
ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0
openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6
ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0
ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0
close(6) = 0
ioctl(5, KVM_SET_MSRS, 0x7ffd2eb79a80) = 5
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0
ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0
[ 55.599826][ T5002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=0, selector=0, type=0, present=0, dpl=0, db=0, s=0, l=0, g=0, avl=0}, ...}) = 0
[ 55.662491][ T5002] ------------[ cut here ]------------
[ 55.668062][ T5002] WARNING: CPU: 1 PID: 5002 at arch/x86/kvm/lapic.c:330 kvm_recalculate_apic_map+0x1267/0x14e0
[ 55.678492][ T5002] Modules linked in:
[ 55.682442][ T5002] CPU: 1 PID: 5002 Comm: syz-executor734 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0
[ 55.692433][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 55.702643][ T5002] RIP: 0010:kvm_recalculate_apic_map+0x1267/0x14e0
[ 55.709151][ T5002] Code: 2f 4c a4 00 48 8b 3c 24 ba 01 00 00 00 be 04 00 00 00 e8 ec 9c fb ff 48 c7 44 24 08 00 00 00 00 e9 9b f7 ff ff e8 19 47 6d 00 <0f> 0b e9 d2 f6 ff ff e8 0d 47 6d 00 4c 89 23 e9 c5 f6 ff ff 48 8b
[ 55.728819][ T5002] RSP: 0018:ffffc90003aaf7f0 EFLAGS: 00010293
[ 55.734928][ T5002] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 55.742943][ T5002] RDX: ffff888024e53b80 RSI: ffffffff8116dc97 RDI: 0000000000000004
[ 55.750922][ T5002] RBP: 0000000000000400 R08: 0000000000000004 R09: 0000000000000001
[ 55.759059][ T5002] R10: 0000000000082000 R11: ffffffff8a20008b R12: ffff88802c58c200
[ 55.767190][ T5002] R13: ffff888078c98000 R14: dffffc0000000000 R15: 0000000000082000
[ 55.775200][ T5002] FS: 0000555555f2d300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 55.784183][ T5002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.790756][ T5002] CR2: 000000002004d008 CR3: 00000000759f8000 CR4: 00000000003526e0
[ 55.798765][ T5002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.806789][ T5002] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.814815][ T5002] Call Trace:
[ 55.818106][ T5002]
[ 55.821064][ T5002] ? kvm_can_use_hv_timer+0xf0/0xf0
[ 55.826336][ T5002] ? queue_delayed_work_on+0xbf/0x120
[ 55.831834][ T5002] kvm_apic_set_state+0x468/0xeb0
[ 55.836919][ T5002] kvm_arch_vcpu_ioctl+0x24db/0x4000
[ 55.842274][ T5002] ? __lock_acquire+0x1987/0x5f30
[ 55.847313][ T5002] ? kvm_arch_vcpu_put+0x9f0/0x9f0
[ 55.852466][ T5002] ? print_usage_bug.part.0+0x660/0x660
[ 55.858045][ T5002] ? find_held_lock+0x2d/0x110
[ 55.862866][ T5002] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 55.868868][ T5002] ? debug_check_no_obj_freed+0x210/0x420
[ 55.874646][ T5002] ? lock_downgrade+0x690/0x690
[ 55.879528][ T5002] ? lock_sync+0x190/0x190
[ 55.884006][ T5002] ? rcu_is_watching+0x12/0xb0
[ 55.888781][ T5002] ? trace_lock_acquire+0x12d/0x180
[ 55.894030][ T5002] ? rcu_is_watching+0x12/0xb0
[ 55.898806][ T5002] ? trace_contention_end+0xd8/0x100
[ 55.904132][ T5002] ? __mutex_lock+0x231/0x1350
[ 55.908924][ T5002] ? kvm_vcpu_ioctl+0x1d5/0xea0
[ 55.913835][ T5002] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 55.919411][ T5002] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 55.925391][ T5002] ? kvm_vcpu_ioctl+0x977/0xea0
[ 55.930272][ T5002] kvm_vcpu_ioctl+0x977/0xea0
[ 55.935029][ T5002] ? kvm_vcpu_fault+0x4f0/0x4f0
[ 55.939913][ T5002] ? find_held_lock+0x2d/0x110
[ 55.944785][ T5002] ? calibrate_delay+0x1d8/0x12a0
[ 55.949844][ T5002] ? lock_downgrade+0x690/0x690
[ 55.954774][ T5002] ? bpf_lsm_file_ioctl+0x9/0x10
[ 55.959737][ T5002] ? kvm_vcpu_fault+0x4f0/0x4f0
[ 55.964638][ T5002] __x64_sys_ioctl+0x197/0x210
[ 55.969419][ T5002] do_syscall_64+0x39/0xb0
[ 55.973884][ T5002] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.979800][ T5002] RIP: 0033:0x7f480cc0c109
[ 55.984267][ T5002] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.003913][ T5002] RSP: 002b:00007ffd2eb7b5d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 56.012364][ T5002] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f480cc0c109
[ 56.020345][ T5002] RDX: 0000000020000880 RSI: 000000004400ae8f RDI: 0000000000000005
[ 56.028376][ T5002] RBP: 00007f480cbcfb60 R08: 0000000000000000 R09: 0000000000000000
[ 56.036374][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f480cbcfbf0
[ 56.044393][ T5002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.052407][ T5002]
[ 56.055416][ T5002] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 56.062686][ T5002] CPU: 1 PID: 5002 Comm: syz-executor734 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0
[ 56.072574][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 56.082628][ T5002] Call Trace:
[ 56.086254][ T5002]
[ 56.089183][ T5002] dump_stack_lvl+0xd9/0x150
[ 56.093795][ T5002] panic+0x686/0x730
[ 56.097702][ T5002] ? panic_smp_self_stop+0xa0/0xa0
[ 56.102824][ T5002] ? show_trace_log_lvl+0x285/0x390
[ 56.108051][ T5002] ? kvm_recalculate_apic_map+0x1267/0x14e0
[ 56.113959][ T5002] check_panic_on_warn+0xb1/0xc0
[ 56.118909][ T5002] __warn+0xf2/0x390
[ 56.122817][ T5002] ? kvm_recalculate_apic_map+0x1267/0x14e0
[ 56.128728][ T5002] report_bug+0x2da/0x500
[ 56.133077][ T5002] handle_bug+0x3c/0x70
[ 56.137238][ T5002] exc_invalid_op+0x18/0x50
[ 56.141755][ T5002] asm_exc_invalid_op+0x1a/0x20
[ 56.146619][ T5002] RIP: 0010:kvm_recalculate_apic_map+0x1267/0x14e0
[ 56.153141][ T5002] Code: 2f 4c a4 00 48 8b 3c 24 ba 01 00 00 00 be 04 00 00 00 e8 ec 9c fb ff 48 c7 44 24 08 00 00 00 00 e9 9b f7 ff ff e8 19 47 6d 00 <0f> 0b e9 d2 f6 ff ff e8 0d 47 6d 00 4c 89 23 e9 c5 f6 ff ff 48 8b
[ 56.172752][ T5002] RSP: 0018:ffffc90003aaf7f0 EFLAGS: 00010293
[ 56.178823][ T5002] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 56.186796][ T5002] RDX: ffff888024e53b80 RSI: ffffffff8116dc97 RDI: 0000000000000004
[ 56.194766][ T5002] RBP: 0000000000000400 R08: 0000000000000004 R09: 0000000000000001
[ 56.202739][ T5002] R10: 0000000000082000 R11: ffffffff8a20008b R12: ffff88802c58c200
[ 56.210717][ T5002] R13: ffff888078c98000 R14: dffffc0000000000 R15: 0000000000082000
[ 56.218709][ T5002] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.224798][ T5002] ? kvm_recalculate_apic_map+0x1267/0x14e0
[ 56.230726][ T5002] ? kvm_can_use_hv_timer+0xf0/0xf0
[ 56.235937][ T5002] ? queue_delayed_work_on+0xbf/0x120
[ 56.241331][ T5002] kvm_apic_set_state+0x468/0xeb0
[ 56.246364][ T5002] kvm_arch_vcpu_ioctl+0x24db/0x4000
[ 56.251653][ T5002] ? __lock_acquire+0x1987/0x5f30
[ 56.256692][ T5002] ? kvm_arch_vcpu_put+0x9f0/0x9f0
[ 56.261806][ T5002] ? print_usage_bug.part.0+0x660/0x660
[ 56.267364][ T5002] ? find_held_lock+0x2d/0x110
[ 56.272311][ T5002] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 56.278304][ T5002] ? debug_check_no_obj_freed+0x210/0x420
[ 56.284032][ T5002] ? lock_downgrade+0x690/0x690
[ 56.288903][ T5002] ? lock_sync+0x190/0x190
[ 56.293334][ T5002] ? rcu_is_watching+0x12/0xb0
[ 56.298104][ T5002] ? trace_lock_acquire+0x12d/0x180
[ 56.303315][ T5002] ? rcu_is_watching+0x12/0xb0
[ 56.308084][ T5002] ? trace_contention_end+0xd8/0x100
[ 56.313377][ T5002] ? __mutex_lock+0x231/0x1350
[ 56.318154][ T5002] ? kvm_vcpu_ioctl+0x1d5/0xea0
[ 56.323012][ T5002] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 56.328568][ T5002] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 56.334390][ T5002] ? kvm_vcpu_ioctl+0x977/0xea0
[ 56.339244][ T5002] kvm_vcpu_ioctl+0x977/0xea0
[ 56.343936][ T5002] ? kvm_vcpu_fault+0x4f0/0x4f0
[ 56.348795][ T5002] ? find_held_lock+0x2d/0x110
[ 56.353571][ T5002] ? calibrate_delay+0x1d8/0x12a0
[ 56.358604][ T5002] ? lock_downgrade+0x690/0x690
[ 56.363475][ T5002] ? bpf_lsm_file_ioctl+0x9/0x10
[ 56.368427][ T5002] ? kvm_vcpu_fault+0x4f0/0x4f0
[ 56.373287][ T5002] __x64_sys_ioctl+0x197/0x210
[ 56.378070][ T5002] do_syscall_64+0x39/0xb0
[ 56.382678][ T5002] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.388585][ T5002] RIP: 0033:0x7f480cc0c109
[ 56.393008][ T5002] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.412618][ T5002] RSP: 002b:00007ffd2eb7b5d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 56.421036][ T5002] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f480cc0c109
[ 56.429007][ T5002] RDX: 0000000020000880 RSI: 000000004400ae8f RDI: 0000000000000005
[ 56.436979][ T5002] RBP: 00007f480cbcfb60 R08: 0000000000000000 R09: 0000000000000000
[ 56.444966][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f480cbcfbf0
[ 56.452943][ T5002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.460942][ T5002]
[ 56.464133][ T5002] Kernel Offset: disabled
[ 56.468532][ T5002] Rebooting in 86400 seconds..