./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1200343744 <...> Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. execve("./syz-executor1200343744", ["./syz-executor1200343744"], 0x7fff0157b4f0 /* 10 vars */) = 0 brk(NULL) = 0x5555572d6000 brk(0x5555572d6c40) = 0x5555572d6c40 arch_prctl(ARCH_SET_FS, 0x5555572d6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1200343744", 4096) = 28 brk(0x5555572f7c40) = 0x5555572f7c40 brk(0x5555572f8000) = 0x5555572f8000 mprotect(0x7f0464eeb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 ioctl(3, KVM_CREATE_VM, 0) = 4 ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 ioctl(4, KVM_CREATE_VCPU, 1) = 5 ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x20fe8000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x20fe9000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x20fea000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20feb000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20fec000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20fed000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20fee000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20fef000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20ff0000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20ff1000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20ff2000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20ff3000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20ff4000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x20ff5000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x20ff6000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x20ff7000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x20ff8000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x20ff9000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x20ffa000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20ffb000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20ffc000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20ffd000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20ffe000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20fff000}) = -1 EBADF (Bad file descriptor) ioctl(-1, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x20fe8000}) = -1 EBADF (Bad file descriptor) ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0 openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6 ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0 ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0 close(6) = 0 ioctl(5, KVM_SET_MSRS, 0x7ffded8758b0) = 5 ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0 ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0 [ 69.582145][ T5004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. ioctl(5, KVM_SET_LAPIC, 0x20000440) = 0 [ 69.638117][ T5004] kvm: vcpu 1: requested 128 ns lapic timer period limited to 200000 ns [ 69.647029][ T5004] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 69.666740][ T5004] ------------[ cut here ]------------ [ 69.672753][ T5004] WARNING: CPU: 1 PID: 5004 at arch/x86/kvm/x86.c:11099 kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 69.683188][ T5004] Modules linked in: [ 69.687082][ T5004] CPU: 1 PID: 5004 Comm: syz-executor120 Not tainted 6.4.0-rc5-syzkaller-00245-g64569520920a #0 [ 69.697975][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 69.708179][ T5004] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 69.714997][ T5004] Code: fc ff ff e8 19 64 71 00 44 89 e6 48 c7 c7 40 8a 42 8a c6 05 cd e9 51 0d 01 e8 53 1f 39 00 0f 0b e9 2a fc ff ff e8 f7 63 71 00 <0f> 0b e9 26 fb ff ff e8 eb 63 71 00 0f b6 1d aa e9 51 0d 31 ff 89 [ 69.734971][ T5004] RSP: 0018:ffffc90003a8fcb8 EFLAGS: 00010293 [ 69.741104][ T5004] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 69.749268][ T5004] RDX: ffff888015b9d940 RSI: ffffffff8112e2e9 RDI: 0000000000000001 [ 69.758088][ T5004] RBP: ffff88807dae8000 R08: 0000000000000001 R09: 0000000000000000 [ 69.766494][ T5004] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900015a7918 [ 69.775024][ T5004] R13: ffffc900015a7908 R14: 0000000000000000 R15: ffff88807dae82ec [ 69.783891][ T5004] FS: 00005555572d6300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 69.793562][ T5004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.800306][ T5004] CR2: 0000000020fe9008 CR3: 000000007be99000 CR4: 00000000003526e0 [ 69.808683][ T5004] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.816899][ T5004] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.825114][ T5004] Call Trace: [ 69.828726][ T5004] [ 69.831753][ T5004] ? __warn+0xe6/0x390 [ 69.835972][ T5004] ? kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 69.841851][ T5004] ? report_bug+0x2da/0x500 [ 69.846414][ T5004] ? handle_bug+0x3c/0x70 [ 69.850853][ T5004] ? exc_invalid_op+0x18/0x50 [ 69.855722][ T5004] ? asm_exc_invalid_op+0x1a/0x20 [ 69.860812][ T5004] ? kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 69.866657][ T5004] ? kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 69.872553][ T5004] ? kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 69.878828][ T5004] kvm_vcpu_ioctl+0x574/0xea0 [ 69.883510][ T5004] ? kvm_vcpu_kick+0x4c0/0x4c0 [ 69.888366][ T5004] ? find_held_lock+0x2d/0x110 [ 69.893516][ T5004] ? ptrace_notify+0xfe/0x140 [ 69.898261][ T5004] ? lock_downgrade+0x690/0x690 [ 69.903498][ T5004] ? bpf_lsm_file_ioctl+0x9/0x10 [ 69.909323][ T5004] ? kvm_vcpu_kick+0x4c0/0x4c0 [ 69.914228][ T5004] __x64_sys_ioctl+0x197/0x210 [ 69.919184][ T5004] do_syscall_64+0x39/0xb0 [ 69.923719][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.929720][ T5004] RIP: 0033:0x7f0464e7ec99 [ 69.934165][ T5004] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 69.953891][ T5004] RSP: 002b:00007ffded877408 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.963279][ T5004] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0464e7ec99 [ 69.971412][ T5004] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 69.979427][ T5004] RBP: 00007f0464e426f0 R08: 0000000000000000 R09: 0000000000000000 [ 69.987546][ T5004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0464e42780 [ 69.996049][ T5004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.004085][ T5004] [ 70.007191][ T5004] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.015268][ T5004] CPU: 1 PID: 5004 Comm: syz-executor120 Not tainted 6.4.0-rc5-syzkaller-00245-g64569520920a #0 [ 70.026129][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 70.036462][ T5004] Call Trace: [ 70.039821][ T5004] [ 70.042838][ T5004] dump_stack_lvl+0xd9/0x150 [ 70.047423][ T5004] panic+0x686/0x730 [ 70.051575][ T5004] ? panic_smp_self_stop+0xa0/0xa0 [ 70.056700][ T5004] ? show_trace_log_lvl+0x284/0x390 [ 70.062025][ T5004] ? kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 70.068127][ T5004] check_panic_on_warn+0xb1/0xc0 [ 70.073109][ T5004] __warn+0xf2/0x390 [ 70.077087][ T5004] ? kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 70.082910][ T5004] report_bug+0x2da/0x500 [ 70.087265][ T5004] handle_bug+0x3c/0x70 [ 70.091436][ T5004] exc_invalid_op+0x18/0x50 [ 70.096204][ T5004] asm_exc_invalid_op+0x1a/0x20 [ 70.101334][ T5004] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 70.107984][ T5004] Code: fc ff ff e8 19 64 71 00 44 89 e6 48 c7 c7 40 8a 42 8a c6 05 cd e9 51 0d 01 e8 53 1f 39 00 0f 0b e9 2a fc ff ff e8 f7 63 71 00 <0f> 0b e9 26 fb ff ff e8 eb 63 71 00 0f b6 1d aa e9 51 0d 31 ff 89 [ 70.128014][ T5004] RSP: 0018:ffffc90003a8fcb8 EFLAGS: 00010293 [ 70.134192][ T5004] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 70.142200][ T5004] RDX: ffff888015b9d940 RSI: ffffffff8112e2e9 RDI: 0000000000000001 [ 70.150979][ T5004] RBP: ffff88807dae8000 R08: 0000000000000001 R09: 0000000000000000 [ 70.159395][ T5004] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900015a7918 [ 70.168006][ T5004] R13: ffffc900015a7908 R14: 0000000000000000 R15: ffff88807dae82ec [ 70.176515][ T5004] ? kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 70.182860][ T5004] ? kvm_arch_vcpu_ioctl_run+0x2379/0x2820 [ 70.188771][ T5004] kvm_vcpu_ioctl+0x574/0xea0 [ 70.193460][ T5004] ? kvm_vcpu_kick+0x4c0/0x4c0 [ 70.200343][ T5004] ? find_held_lock+0x2d/0x110 [ 70.205224][ T5004] ? ptrace_notify+0xfe/0x140 [ 70.210430][ T5004] ? lock_downgrade+0x690/0x690 [ 70.216216][ T5004] ? bpf_lsm_file_ioctl+0x9/0x10 [ 70.221270][ T5004] ? kvm_vcpu_kick+0x4c0/0x4c0 [ 70.226231][ T5004] __x64_sys_ioctl+0x197/0x210 [ 70.231475][ T5004] do_syscall_64+0x39/0xb0 [ 70.235962][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.241877][ T5004] RIP: 0033:0x7f0464e7ec99 [ 70.246386][ T5004] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.266093][ T5004] RSP: 002b:00007ffded877408 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.274882][ T5004] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0464e7ec99 [ 70.282998][ T5004] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 70.291321][ T5004] RBP: 00007f0464e426f0 R08: 0000000000000000 R09: 0000000000000000 [ 70.299381][ T5004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0464e42780 [ 70.307356][ T5004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.315378][ T5004] [ 70.318620][ T5004] Kernel Offset: disabled [ 70.323053][ T5004] Rebooting in 86400 seconds..