./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor819187002
<...>
Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts.
execve("./syz-executor819187002", ["./syz-executor819187002"], 0x7ffc8f7bc450 /* 10 vars */) = 0
brk(NULL) = 0x5555568cb000
brk(0x5555568cbc40) = 0x5555568cbc40
arch_prctl(ARCH_SET_FS, 0x5555568cb300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor819187002", 4096) = 27
brk(0x5555568ecc40) = 0x5555568ecc40
brk(0x5555568ed000) = 0x5555568ed000
mprotect(0x7f8b0f344000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3
[ 56.949909][ T26] audit: type=1400 audit(1680423465.627:75): avc: denied { execmem } for pid=5078 comm="syz-executor819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 56.953198][ T5078] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
ioctl(3, KVM_CREATE_VM, 0) = 4
[ 56.969753][ T26] audit: type=1400 audit(1680423465.627:76): avc: denied { read } for pid=5078 comm="syz-executor819" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 57.010111][ T26] audit: type=1400 audit(1680423465.627:77): avc: denied { open } for pid=5078 comm="syz-executor819" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
ioctl(4, KVM_CREATE_VCPU, 0) = 5
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x2003d000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x2003e000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x2003f000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20040000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20041000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20042000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20043000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20044000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20045000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20046000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20047000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20048000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20049000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x2004a000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x2004b000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x2004c000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x2004d000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x2004e000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x2004f000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20050000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20051000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20052000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20053000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20054000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x2003d000}) = -1 EINVAL (Invalid argument)
ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0
[ 57.034481][ T26] audit: type=1400 audit(1680423465.627:78): avc: denied { ioctl } for pid=5078 comm="syz-executor819" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6
ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0
ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0
close(6) = 0
ioctl(5, KVM_SET_MSRS, 0x7ffe4722e130) = 5
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0
ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=0, selector=0, type=0, present=0, dpl=0, db=0, s=0, l=0, g=0, avl=0}, ...}) = 0
[ 57.101998][ T26] audit: type=1400 audit(1680423465.777:79): avc: denied { write } for pid=5078 comm="syz-executor819" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 57.134372][ T5078] kvm_intel: KVM_SET_TSS_ADDR needs to be called before running vCPU
[ 57.143766][ T5078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
ioctl(5, KVM_RUN, 0) = 0
[ 57.152897][ T5078] ------------[ cut here ]------------
[ 57.158378][ T5078] WARNING: CPU: 1 PID: 5078 at arch/x86/kvm/x86.c:11060 kvm_arch_vcpu_ioctl_run+0x21d0/0x2810
[ 57.168805][ T5078] Modules linked in:
[ 57.172702][ T5078] CPU: 1 PID: 5078 Comm: syz-executor819 Not tainted 6.3.0-rc4-syzkaller-00224-g00c7b5f4ddc5 #0
[ 57.183143][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 57.193231][ T5078] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x21d0/0x2810
[ 57.199691][ T5078] Code: 24 30 e8 63 50 bf 00 e9 92 df ff ff 4c 89 ff e8 56 50 bf 00 e9 75 e0 ff ff e8 cc 2f 6f 00 0f 0b e9 c3 e2 ff ff e8 c0 2f 6f 00 <0f> 0b e9 fb e2 ff ff e8 b4 2f 6f 00 be 08 00 00 00 65 48 8b 1c 25
[ 57.219380][ T5078] RSP: 0018:ffffc9000349fcb8 EFLAGS: 00010293
[ 57.225439][ T5078] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 57.233445][ T5078] RDX: ffff88802b852280 RSI: ffffffff8112c8b0 RDI: 0000000000000005
[ 57.241671][ T5078] RBP: ffff88801e2e8040 R08: 0000000000000005 R09: 0000000000000000
[ 57.249725][ T5078] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 57.257705][ T5078] R13: ffffc9000338ac90 R14: ffff88807d0737c0 R15: ffff88801e2e832c
[ 57.265744][ T5078] FS: 00005555568cb300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 57.274721][ T5078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.281332][ T5078] CR2: 0000000000000000 CR3: 000000007a4ce000 CR4: 00000000003526e0
[ 57.289371][ T5078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.297347][ T5078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.305355][ T5078] Call Trace:
[ 57.308791][ T5078]
[ 57.311763][ T5078] kvm_vcpu_ioctl+0x574/0xea0
[ 57.316452][ T5078] ? kvm_release_pfn_dirty+0x220/0x220
[ 57.322057][ T5078] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400
[ 57.328627][ T5078] ? selinux_bprm_creds_for_exec+0xb40/0xb40
[ 57.334616][ T5078] ? find_held_lock+0x2d/0x110
[ 57.339522][ T5078] ? ptrace_notify+0xfe/0x140
[ 57.344227][ T5078] ? lock_downgrade+0x690/0x690
[ 57.349168][ T5078] ? selinux_file_ioctl+0xba/0x280
[ 57.354307][ T5078] ? kvm_release_pfn_dirty+0x220/0x220
[ 57.359936][ T5078] __x64_sys_ioctl+0x197/0x210
[ 57.364720][ T5078] do_syscall_64+0x39/0xb0
[ 57.369268][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.375210][ T5078] RIP: 0033:0x7f8b0f2d8279
[ 57.379689][ T5078] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.399345][ T5078] RSP: 002b:00007ffe4722fc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 57.407751][ T5078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b0f2d8279
[ 57.415764][ T5078] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 57.423776][ T5078] RBP: 00007f8b0f29bcd0 R08: 0000000000000000 R09: 0000000000000000
[ 57.431819][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b0f29bd60
[ 57.439869][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 57.447854][ T5078]
[ 57.450916][ T5078] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 57.458288][ T5078] CPU: 1 PID: 5078 Comm: syz-executor819 Not tainted 6.3.0-rc4-syzkaller-00224-g00c7b5f4ddc5 #0
[ 57.468688][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 57.478745][ T5078] Call Trace:
[ 57.482186][ T5078]
[ 57.485109][ T5078] dump_stack_lvl+0xd9/0x150
[ 57.489704][ T5078] panic+0x688/0x730
[ 57.493590][ T5078] ? panic_smp_self_stop+0x90/0x90
[ 57.498693][ T5078] ? show_trace_log_lvl+0x285/0x390
[ 57.503887][ T5078] ? kvm_arch_vcpu_ioctl_run+0x21d0/0x2810
[ 57.509682][ T5078] check_panic_on_warn+0xb1/0xc0
[ 57.514628][ T5078] __warn+0xf2/0x390
[ 57.518521][ T5078] ? kvm_arch_vcpu_ioctl_run+0x21d0/0x2810
[ 57.524318][ T5078] report_bug+0x2da/0x500
[ 57.528638][ T5078] handle_bug+0x3c/0x70
[ 57.532785][ T5078] exc_invalid_op+0x18/0x50
[ 57.537292][ T5078] asm_exc_invalid_op+0x1a/0x20
[ 57.542138][ T5078] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x21d0/0x2810
[ 57.548545][ T5078] Code: 24 30 e8 63 50 bf 00 e9 92 df ff ff 4c 89 ff e8 56 50 bf 00 e9 75 e0 ff ff e8 cc 2f 6f 00 0f 0b e9 c3 e2 ff ff e8 c0 2f 6f 00 <0f> 0b e9 fb e2 ff ff e8 b4 2f 6f 00 be 08 00 00 00 65 48 8b 1c 25
[ 57.568626][ T5078] RSP: 0018:ffffc9000349fcb8 EFLAGS: 00010293
[ 57.574702][ T5078] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 57.582692][ T5078] RDX: ffff88802b852280 RSI: ffffffff8112c8b0 RDI: 0000000000000005
[ 57.590680][ T5078] RBP: ffff88801e2e8040 R08: 0000000000000005 R09: 0000000000000000
[ 57.598670][ T5078] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 57.606648][ T5078] R13: ffffc9000338ac90 R14: ffff88807d0737c0 R15: ffff88801e2e832c
[ 57.614634][ T5078] ? kvm_arch_vcpu_ioctl_run+0x21d0/0x2810
[ 57.620459][ T5078] ? kvm_arch_vcpu_ioctl_run+0x21d0/0x2810
[ 57.626268][ T5078] kvm_vcpu_ioctl+0x574/0xea0
[ 57.630962][ T5078] ? kvm_release_pfn_dirty+0x220/0x220
[ 57.636424][ T5078] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400
[ 57.642939][ T5078] ? selinux_bprm_creds_for_exec+0xb40/0xb40
[ 57.648929][ T5078] ? find_held_lock+0x2d/0x110
[ 57.653704][ T5078] ? ptrace_notify+0xfe/0x140
[ 57.658380][ T5078] ? lock_downgrade+0x690/0x690
[ 57.663244][ T5078] ? selinux_file_ioctl+0xba/0x280
[ 57.668368][ T5078] ? kvm_release_pfn_dirty+0x220/0x220
[ 57.673826][ T5078] __x64_sys_ioctl+0x197/0x210
[ 57.678589][ T5078] do_syscall_64+0x39/0xb0
[ 57.683012][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.688933][ T5078] RIP: 0033:0x7f8b0f2d8279
[ 57.693356][ T5078] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.712964][ T5078] RSP: 002b:00007ffe4722fc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 57.721378][ T5078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b0f2d8279
[ 57.729352][ T5078] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 57.737327][ T5078] RBP: 00007f8b0f29bcd0 R08: 0000000000000000 R09: 0000000000000000
[ 57.745296][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b0f29bd60
[ 57.753266][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 57.761250][ T5078]
[ 57.764422][ T5078] Kernel Offset: disabled
[ 57.768811][ T5078] Rebooting in 86400 seconds..