./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2376159557
<...>
Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts.
execve("./syz-executor2376159557", ["./syz-executor2376159557"], 0x7ffcfd590180 /* 10 vars */) = 0
brk(NULL) = 0x555557417000
brk(0x555557417c40) = 0x555557417c40
arch_prctl(ARCH_SET_FS, 0x555557417300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2376159557", 4096) = 28
brk(0x555557438c40) = 0x555557438c40
brk(0x555557439000) = 0x555557439000
mprotect(0x7f6b2d2b2000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
io_submit(NULL, 9, [{aio_data=0, aio_lio_opcode=IOCB_CMD_PREAD, aio_reqprio=-5, aio_fildes=-1, aio_buf=0x20000380, aio_nbytes=199, aio_offset=8, aio_resfd=0xffffffff}, {aio_data=0, aio_lio_opcode=IOCB_CMD_FSYNC, aio_reqprio=IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 8), aio_fildes=-1}, NULL, NULL, NULL, NULL, NULL, NULL, NULL]) = -1 EINVAL (Invalid argument)
openat(-1, "cpuacct.stat", O_RDONLY) = -1 EBADF (Bad file descriptor)
openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3
[ 59.859477][ T26] audit: type=1400 audit(1672718644.057:75): avc: denied { execmem } for pid=5057 comm="syz-executor237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 59.865374][ T5057] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 59.879626][ T26] audit: type=1400 audit(1672718644.057:76): avc: denied { read } for pid=5057 comm="syz-executor237" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 59.918713][ T26] audit: type=1400 audit(1672718644.057:77): avc: denied { open } for pid=5057 comm="syz-executor237" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
ioctl(3, KVM_CREATE_VM, 0) = 4
ioctl(4, KVM_CREATE_VCPU, 0) = 5
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=8192, userspace_addr=0x20000000}) = 0
ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xfb, rbp=0, ..., rip=0, rflags=0}) = 0
socketpair(AF_UNIX, SOCK_SEQPACKET, 0, [6, 7]) = 0
sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="", iov_len=0}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor)
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_RUN, 0) = 0
[ 59.942756][ T26] audit: type=1400 audit(1672718644.057:78): avc: denied { ioctl } for pid=5057 comm="syz-executor237" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 59.994061][ T5057] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 60.002262][ T5057] ------------[ cut here ]------------
[ 60.007738][ T5057] WARNING: CPU: 1 PID: 5057 at arch/x86/kvm/x86.c:10896 kvm_arch_vcpu_ioctl_run+0x24da/0x2b90
[ 60.018068][ T5057] Modules linked in:
[ 60.022127][ T5057] CPU: 1 PID: 5057 Comm: syz-executor237 Not tainted 6.2.0-rc2-syzkaller #0
[ 60.030797][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 60.041249][ T5057] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x24da/0x2b90
[ 60.047697][ T5057] Code: e8 7b 17 bb 00 e9 83 dd ff ff 48 8b 7c 24 28 e8 cc 16 bb 00 e9 b8 dc ff ff e8 42 e4 6d 00 0f 0b e9 02 e0 ff ff e8 36 e4 6d 00 <0f> 0b e9 3a e0 ff ff e8 2a e4 6d 00 be 08 00 00 00 65 48 8b 1c 25
[ 60.067352][ T5057] RSP: 0018:ffffc900034dfca8 EFLAGS: 00010293
[ 60.073499][ T5057] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 60.081538][ T5057] RDX: ffff888023e28280 RSI: ffffffff81128f7a RDI: 0000000000000005
[ 60.089537][ T5057] RBP: ffff88802227c040 R08: 0000000000000005 R09: 0000000000000000
[ 60.098284][ T5057] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 60.106317][ T5057] R13: ffffc9000337b478 R14: ffff88801c9b5280 R15: ffff88802227c32c
[ 60.114429][ T5057] FS: 0000555557417300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 60.123410][ T5057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.130010][ T5057] CR2: 0000000000000000 CR3: 000000007b3fb000 CR4: 00000000003526e0
[ 60.138060][ T5057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.146072][ T5057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.154106][ T5057] Call Trace:
[ 60.157394][ T5057]
[ 60.160320][ T5057] kvm_vcpu_ioctl+0x574/0xfc0
[ 60.165043][ T5057] ? kvm_release_pfn_dirty+0x220/0x220
[ 60.170518][ T5057] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400
[ 60.177081][ T5057] ? selinux_inode_getsecctx+0xa0/0xa0
[ 60.182598][ T5057] ? find_held_lock+0x2d/0x110
[ 60.187365][ T5057] ? ptrace_notify+0xfe/0x140
[ 60.192097][ T5057] ? lock_downgrade+0x6e0/0x6e0
[ 60.196990][ T5057] ? selinux_file_ioctl+0xb5/0x280
[ 60.202182][ T5057] ? kvm_release_pfn_dirty+0x220/0x220
[ 60.207667][ T5057] __x64_sys_ioctl+0x197/0x210
[ 60.212523][ T5057] do_syscall_64+0x39/0xb0
[ 60.216967][ T5057] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.222922][ T5057] RIP: 0033:0x7f6b2d245079
[ 60.227347][ T5057] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 60.247037][ T5057] RSP: 002b:00007ffee4078a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 60.255512][ T5057] RAX: ffffffffffffffda RBX: 000000000000002e RCX: 00007f6b2d245079
[ 60.263524][ T5057] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 60.271538][ T5057] RBP: 00007f6b2d209220 R08: 0000000000000000 R09: 0000000000000000
[ 60.279505][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b2d2092b0
[ 60.287517][ T5057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 60.295533][ T5057]
[ 60.298547][ T5057] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 60.305812][ T5057] CPU: 1 PID: 5057 Comm: syz-executor237 Not tainted 6.2.0-rc2-syzkaller #0
[ 60.314471][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 60.324516][ T5057] Call Trace:
[ 60.327784][ T5057]
[ 60.330704][ T5057] dump_stack_lvl+0xd1/0x138
[ 60.335293][ T5057] panic+0x2cc/0x626
[ 60.339182][ T5057] ? panic_print_sys_info.part.0+0x110/0x110
[ 60.345157][ T5057] ? kvm_arch_vcpu_ioctl_run+0x24da/0x2b90
[ 60.350962][ T5057] check_panic_on_warn.cold+0x19/0x35
[ 60.356337][ T5057] __warn+0xf2/0x1a0
[ 60.360245][ T5057] ? kvm_arch_vcpu_ioctl_run+0x24da/0x2b90
[ 60.366085][ T5057] report_bug+0x1c0/0x210
[ 60.370427][ T5057] handle_bug+0x3c/0x70
[ 60.374589][ T5057] exc_invalid_op+0x18/0x50
[ 60.379105][ T5057] asm_exc_invalid_op+0x1a/0x20
[ 60.383965][ T5057] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x24da/0x2b90
[ 60.390398][ T5057] Code: e8 7b 17 bb 00 e9 83 dd ff ff 48 8b 7c 24 28 e8 cc 16 bb 00 e9 b8 dc ff ff e8 42 e4 6d 00 0f 0b e9 02 e0 ff ff e8 36 e4 6d 00 <0f> 0b e9 3a e0 ff ff e8 2a e4 6d 00 be 08 00 00 00 65 48 8b 1c 25
[ 60.410012][ T5057] RSP: 0018:ffffc900034dfca8 EFLAGS: 00010293
[ 60.416086][ T5057] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 60.424058][ T5057] RDX: ffff888023e28280 RSI: ffffffff81128f7a RDI: 0000000000000005
[ 60.432032][ T5057] RBP: ffff88802227c040 R08: 0000000000000005 R09: 0000000000000000
[ 60.440007][ T5057] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 60.447980][ T5057] R13: ffffc9000337b478 R14: ffff88801c9b5280 R15: ffff88802227c32c
[ 60.455958][ T5057] ? kvm_arch_vcpu_ioctl_run+0x24da/0x2b90
[ 60.461807][ T5057] ? kvm_arch_vcpu_ioctl_run+0x24da/0x2b90
[ 60.467667][ T5057] kvm_vcpu_ioctl+0x574/0xfc0
[ 60.472376][ T5057] ? kvm_release_pfn_dirty+0x220/0x220
[ 60.478209][ T5057] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400
[ 60.484732][ T5057] ? selinux_inode_getsecctx+0xa0/0xa0
[ 60.490206][ T5057] ? find_held_lock+0x2d/0x110
[ 60.494990][ T5057] ? ptrace_notify+0xfe/0x140
[ 60.499690][ T5057] ? lock_downgrade+0x6e0/0x6e0
[ 60.504580][ T5057] ? selinux_file_ioctl+0xb5/0x280
[ 60.509729][ T5057] ? kvm_release_pfn_dirty+0x220/0x220
[ 60.515199][ T5057] __x64_sys_ioctl+0x197/0x210
[ 60.519977][ T5057] do_syscall_64+0x39/0xb0
[ 60.524412][ T5057] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.530316][ T5057] RIP: 0033:0x7f6b2d245079
[ 60.534736][ T5057] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 60.554436][ T5057] RSP: 002b:00007ffee4078a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 60.562860][ T5057] RAX: ffffffffffffffda RBX: 000000000000002e RCX: 00007f6b2d245079
[ 60.570835][ T5057] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 60.578814][ T5057] RBP: 00007f6b2d209220 R08: 0000000000000000 R09: 0000000000000000
[ 60.586792][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b2d2092b0
[ 60.594768][ T5057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 60.602759][ T5057]
[ 60.605851][ T5057] Kernel Offset: disabled
[ 60.610238][ T5057] Rebooting in 86400 seconds..