./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor164446982
<...>
no interfaces have a carrier
forked to background, child pid 4648
[ 52.416999][ T4649] 8021q: adding VLAN 0 to HW filter on device bond0
[ 52.437271][ T4649] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts.
execve("./syz-executor164446982", ["./syz-executor164446982"], 0x7ffdb5d31080 /* 10 vars */) = 0
brk(NULL) = 0x555555fe6000
brk(0x555555fe6c40) = 0x555555fe6c40
arch_prctl(ARCH_SET_FS, 0x555555fe6300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor164446982", 4096) = 27
brk(0x555556007c40) = 0x555556007c40
brk(0x555556008000) = 0x555556008000
mprotect(0x7ff054951000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3
ioctl(3, KVM_CREATE_VM, 0) = 4
ioctl(4, KVM_CREATE_VCPU, 0) = 5
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x2003d000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x2003e000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x2003f000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20040000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20041000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20042000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20043000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20044000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20045000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20046000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20047000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20048000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20049000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x2004a000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x2004b000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x2004c000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x2004d000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x2004e000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x2004f000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20050000}) = 0
syzkaller login: [ 77.094135][ T5074] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20051000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20052000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20053000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20054000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x2003d000}) = -1 EINVAL (Invalid argument)
ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0
openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6
ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0
ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0
close(6) = 0
ioctl(5, KVM_SET_MSRS, 0x7ffd21e0bfa0) = 5
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0
ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=0, selector=0, type=0, present=0, dpl=0, db=0, s=0, l=0, g=0, avl=0}, ...}) = 0
ioctl(5, KVM_RUN, 0) = 0
[ 77.175079][ T5074] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu
[ 77.184867][ T5074] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 77.193548][ T5074] ------------[ cut here ]------------
[ 77.199075][ T5074] WARNING: CPU: 0 PID: 5074 at arch/x86/kvm/x86.c:10896 kvm_arch_vcpu_ioctl_run+0x243c/0x2ad0
[ 77.209858][ T5074] Modules linked in:
[ 77.214043][ T5074] CPU: 0 PID: 5074 Comm: syz-executor164 Not tainted 6.2.0-rc8-syzkaller-00015-gf6feea56f66d #0
[ 77.224940][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 77.235239][ T5074] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x243c/0x2ad0
[ 77.241829][ T5074] Code: 8c bc 00 e9 57 de ff ff 48 c7 c7 00 f4 74 8e e8 ba 8c bc 00 e9 d1 dc ff ff e8 60 79 6e 00 0f 0b e9 94 e0 ff ff e8 54 79 6e 00 <0f> 0b e9 cc e0 ff ff e8 48 79 6e 00 be 08 00 00 00 65 48 8b 1c 25
[ 77.261549][ T5074] RSP: 0018:ffffc90003c2fcb0 EFLAGS: 00010293
[ 77.267650][ T5074] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 77.275702][ T5074] RDX: ffff888023dbd7c0 RSI: ffffffff81127ebc RDI: 0000000000000005
[ 77.284010][ T5074] RBP: ffff88807bb50000 R08: 0000000000000005 R09: 0000000000000000
[ 77.292110][ T5074] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 77.300151][ T5074] R13: ffffc90003c3aca0 R14: ffff88802a4d23c0 R15: ffff88807bb502ec
[ 77.308227][ T5074] FS: 0000555555fe6300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 77.317248][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.323910][ T5074] CR2: 00007ffd21e0bff8 CR3: 000000007e857000 CR4: 00000000003526f0
[ 77.331978][ T5074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 77.339989][ T5074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 77.348105][ T5074] Call Trace:
[ 77.351453][ T5074]
[ 77.354441][ T5074] kvm_vcpu_ioctl+0x574/0xfc0
[ 77.359147][ T5074] ? kvm_release_pfn_dirty+0x220/0x220
[ 77.364747][ T5074] ? find_held_lock+0x2d/0x110
[ 77.369605][ T5074] ? ptrace_notify+0xfe/0x140
[ 77.374392][ T5074] ? lock_downgrade+0x6e0/0x6e0
[ 77.379324][ T5074] ? bpf_lsm_file_ioctl+0x9/0x10
[ 77.384357][ T5074] ? kvm_release_pfn_dirty+0x220/0x220
[ 77.389889][ T5074] __x64_sys_ioctl+0x197/0x210
[ 77.394775][ T5074] do_syscall_64+0x39/0xb0
[ 77.399262][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.405275][ T5074] RIP: 0033:0x7ff0548e5279
[ 77.409731][ T5074] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 77.429479][ T5074] RSP: 002b:00007ffd21e0daf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.438025][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff0548e5279
[ 77.446108][ T5074] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 77.454156][ T5074] RBP: 00007ff0548a8cd0 R08: 0000000000000000 R09: 0000000000000000
[ 77.462251][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0548a8d60
[ 77.470298][ T5074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 77.478457][ T5074]
[ 77.481543][ T5074] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.488835][ T5074] CPU: 0 PID: 5074 Comm: syz-executor164 Not tainted 6.2.0-rc8-syzkaller-00015-gf6feea56f66d #0
[ 77.499280][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 77.509356][ T5074] Call Trace:
[ 77.512653][ T5074]
[ 77.515593][ T5074] dump_stack_lvl+0xd1/0x138
[ 77.520216][ T5074] panic+0x2cc/0x626
[ 77.524144][ T5074] ? panic_print_sys_info.part.0+0x110/0x110
[ 77.530164][ T5074] ? kvm_arch_vcpu_ioctl_run+0x243c/0x2ad0
[ 77.536060][ T5074] check_panic_on_warn.cold+0x19/0x35
[ 77.541497][ T5074] __warn+0xf2/0x1a0
[ 77.545445][ T5074] ? kvm_arch_vcpu_ioctl_run+0x243c/0x2ad0
[ 77.551305][ T5074] report_bug+0x1c0/0x210
[ 77.555708][ T5074] handle_bug+0x3c/0x70
[ 77.559945][ T5074] exc_invalid_op+0x18/0x50
[ 77.564484][ T5074] asm_exc_invalid_op+0x1a/0x20
[ 77.569378][ T5074] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x243c/0x2ad0
[ 77.575841][ T5074] Code: 8c bc 00 e9 57 de ff ff 48 c7 c7 00 f4 74 8e e8 ba 8c bc 00 e9 d1 dc ff ff e8 60 79 6e 00 0f 0b e9 94 e0 ff ff e8 54 79 6e 00 <0f> 0b e9 cc e0 ff ff e8 48 79 6e 00 be 08 00 00 00 65 48 8b 1c 25
[ 77.595492][ T5074] RSP: 0018:ffffc90003c2fcb0 EFLAGS: 00010293
[ 77.601591][ T5074] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 77.609585][ T5074] RDX: ffff888023dbd7c0 RSI: ffffffff81127ebc RDI: 0000000000000005
[ 77.618708][ T5074] RBP: ffff88807bb50000 R08: 0000000000000005 R09: 0000000000000000
[ 77.626710][ T5074] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 77.634716][ T5074] R13: ffffc90003c3aca0 R14: ffff88802a4d23c0 R15: ffff88807bb502ec
[ 77.642763][ T5074] ? kvm_arch_vcpu_ioctl_run+0x243c/0x2ad0
[ 77.648744][ T5074] kvm_vcpu_ioctl+0x574/0xfc0
[ 77.653453][ T5074] ? kvm_release_pfn_dirty+0x220/0x220
[ 77.658960][ T5074] ? find_held_lock+0x2d/0x110
[ 77.663781][ T5074] ? ptrace_notify+0xfe/0x140
[ 77.668515][ T5074] ? lock_downgrade+0x6e0/0x6e0
[ 77.673427][ T5074] ? bpf_lsm_file_ioctl+0x9/0x10
[ 77.678573][ T5074] ? kvm_release_pfn_dirty+0x220/0x220
[ 77.684089][ T5074] __x64_sys_ioctl+0x197/0x210
[ 77.688922][ T5074] do_syscall_64+0x39/0xb0
[ 77.693377][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.699330][ T5074] RIP: 0033:0x7ff0548e5279
[ 77.703771][ T5074] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 77.723423][ T5074] RSP: 002b:00007ffd21e0daf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.731862][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff0548e5279
[ 77.739857][ T5074] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 77.747850][ T5074] RBP: 00007ff0548a8cd0 R08: 0000000000000000 R09: 0000000000000000
[ 77.755859][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0548a8d60
[ 77.763864][ T5074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 77.771880][ T5074]
[ 77.775193][ T5074] Kernel Offset: disabled
[ 77.779633][ T5074] Rebooting in 86400 seconds..