./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor978145314
<...>
Warning: Permanently added '10.128.1.126' (ECDSA) to the list of known hosts.
execve("./syz-executor978145314", ["./syz-executor978145314"], 0x7fffc90d57d0 /* 10 vars */) = 0
brk(NULL) = 0x5555567c9000
brk(0x5555567c9c40) = 0x5555567c9c40
arch_prctl(ARCH_SET_FS, 0x5555567c9300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor978145314", 4096) = 27
brk(0x5555567eac40) = 0x5555567eac40
brk(0x5555567eb000) = 0x5555567eb000
mprotect(0x7f86b7b83000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3
ioctl(3, KVM_CREATE_VM, 0) = 4
ioctl(4, KVM_CREATE_VCPU, 0) = 5
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x20fe8000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x20fe9000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x20fea000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20feb000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20fec000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20fed000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20fee000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20fef000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20ff0000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20ff1000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20ff2000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20ff3000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20ff4000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x20ff5000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x20ff6000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x20ff7000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x20ff8000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x20ff9000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x20ffa000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20ffb000}) = 0
syzkaller login: [ 39.764437][ T3608] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20ffc000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20ffd000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20ffe000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20fff000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x20fe8000}) = 0
ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0
openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6
ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=33, entries=[...]}) = 0
ioctl(5, KVM_SET_CPUID2, {nent=33, entries=[...]}) = 0
close(6) = 0
ioctl(5, KVM_SET_MSRS, 0x7ffccf006000) = 5
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0
ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0
ioctl(5, KVM_RUN, 0) = 0
ioctl(5, KVM_SET_NESTED_STATE, 0x20000280) = -1 EINVAL (Invalid argument)
[ 39.837344][ T3608] ------------[ cut here ]------------
[ 39.842813][ T3608] WARNING: CPU: 0 PID: 3608 at arch/x86/kvm/vmx/vmx.c:5136 handle_exception_nmi+0xd06/0xe40
[ 39.852922][ T3608] Modules linked in:
[ 39.856854][ T3608] CPU: 0 PID: 3608 Comm: syz-executor978 Not tainted 6.0.0-rc2-next-20220826-syzkaller #0
[ 39.866782][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 39.876861][ T3608] RIP: 0010:handle_exception_nmi+0xd06/0xe40
[ 39.882840][ T3608] Code: 0f 84 11 f6 ff ff e8 39 d3 59 00 48 89 ef c7 85 e4 08 00 00 00 00 00 00 e8 a7 4e ec ff 41 89 c4 e9 f8 f5 ff ff e8 1a d3 59 00 <0f> 0b e9 c9 f7 ff ff e8 0e d3 59 00 be f5 ff ff ff bf 01 00 00 00
[ 39.902565][ T3608] RSP: 0018:ffffc90003bdfaa0 EFLAGS: 00010293
[ 39.908669][ T3608] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 39.916680][ T3608] RDX: ffff88801d033a80 RSI: ffffffff81223046 RDI: 0000000000000001
[ 39.924665][ T3608] RBP: ffff88801e998000 R08: 0000000000000001 R09: 0000000000000000
[ 39.932848][ T3608] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000a0000975
[ 39.940904][ T3608] R13: 0000000000000000 R14: 0000000080000300 R15: ffff88807a6a6000
[ 39.948896][ T3608] FS: 00005555567c9300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 39.957865][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.964438][ T3608] CR2: 00000000a0000975 CR3: 0000000020342000 CR4: 00000000003526f0
[ 39.972434][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.980428][ T3608] DR3: 00000000b8fecd19 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 39.988413][ T3608] Call Trace:
[ 39.991691][ T3608]
[ 39.994611][ T3608] ? vmx_guest_inject_ac+0x160/0x160
[ 39.999939][ T3608] vmx_handle_exit+0x498/0x1970
[ 40.004811][ T3608] vcpu_enter_guest+0x3dab/0x6330
[ 40.009870][ T3608] ? kvm_check_nested_events+0x100/0x100
[ 40.015544][ T3608] ? complete_emulated_mmio+0x397/0x7e0
[ 40.021086][ T3608] ? kvm_arch_vcpu_ioctl_run+0x5b0/0x2560
[ 40.026824][ T3608] kvm_arch_vcpu_ioctl_run+0x5b0/0x2560
[ 40.032394][ T3608] ? __sanitizer_cov_trace_switch+0x50/0x90
[ 40.038337][ T3608] kvm_vcpu_ioctl+0x570/0xf30
[ 40.043155][ T3608] ? kvm_release_pfn_dirty+0x220/0x220
[ 40.048748][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 40.054222][ T3608] ? lock_release+0x560/0x780
[ 40.058937][ T3608] ? ptrace_notify+0xfa/0x140
[ 40.063624][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 40.068500][ T3608] ? bpf_lsm_file_ioctl+0x5/0x10
[ 40.073449][ T3608] ? kvm_release_pfn_dirty+0x220/0x220
[ 40.078964][ T3608] __x64_sys_ioctl+0x193/0x200
[ 40.083738][ T3608] do_syscall_64+0x35/0xb0
[ 40.088186][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.094112][ T3608] RIP: 0033:0x7f86b7b14d79
[ 40.098556][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.118214][ T3608] RSP: 002b:00007ffccf007b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 40.126644][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86b7b14d79
[ 40.134630][ T3608] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 40.142632][ T3608] RBP: 00007f86b7ad87d0 R08: 0000000000000000 R09: 0000000000000000
[ 40.150618][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86b7ad8860
[ 40.158626][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 40.166639][ T3608]
[ 40.169660][ T3608] Kernel panic - not syncing: panic_on_warn set ...
[ 40.176228][ T3608] CPU: 0 PID: 3608 Comm: syz-executor978 Not tainted 6.0.0-rc2-next-20220826-syzkaller #0
[ 40.186103][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 40.196141][ T3608] Call Trace:
[ 40.199408][ T3608]
[ 40.202325][ T3608] dump_stack_lvl+0xcd/0x134
[ 40.206927][ T3608] panic+0x2c8/0x627
[ 40.210812][ T3608] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 40.216786][ T3608] ? __warn.cold+0x248/0x2c4
[ 40.221377][ T3608] ? handle_exception_nmi+0xd06/0xe40
[ 40.226743][ T3608] __warn.cold+0x259/0x2c4
[ 40.231150][ T3608] ? handle_exception_nmi+0xd06/0xe40
[ 40.236508][ T3608] report_bug+0x1bc/0x210
[ 40.240832][ T3608] handle_bug+0x3c/0x60
[ 40.244978][ T3608] exc_invalid_op+0x14/0x40
[ 40.249468][ T3608] asm_exc_invalid_op+0x16/0x20
[ 40.254307][ T3608] RIP: 0010:handle_exception_nmi+0xd06/0xe40
[ 40.260276][ T3608] Code: 0f 84 11 f6 ff ff e8 39 d3 59 00 48 89 ef c7 85 e4 08 00 00 00 00 00 00 e8 a7 4e ec ff 41 89 c4 e9 f8 f5 ff ff e8 1a d3 59 00 <0f> 0b e9 c9 f7 ff ff e8 0e d3 59 00 be f5 ff ff ff bf 01 00 00 00
[ 40.279881][ T3608] RSP: 0018:ffffc90003bdfaa0 EFLAGS: 00010293
[ 40.285955][ T3608] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 40.294028][ T3608] RDX: ffff88801d033a80 RSI: ffffffff81223046 RDI: 0000000000000001
[ 40.302036][ T3608] RBP: ffff88801e998000 R08: 0000000000000001 R09: 0000000000000000
[ 40.310018][ T3608] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000a0000975
[ 40.317996][ T3608] R13: 0000000000000000 R14: 0000000080000300 R15: ffff88807a6a6000
[ 40.326007][ T3608] ? handle_exception_nmi+0xd06/0xe40
[ 40.331410][ T3608] ? vmx_guest_inject_ac+0x160/0x160
[ 40.336705][ T3608] vmx_handle_exit+0x498/0x1970
[ 40.341568][ T3608] vcpu_enter_guest+0x3dab/0x6330
[ 40.346613][ T3608] ? kvm_check_nested_events+0x100/0x100
[ 40.352263][ T3608] ? complete_emulated_mmio+0x397/0x7e0
[ 40.357844][ T3608] ? kvm_arch_vcpu_ioctl_run+0x5b0/0x2560
[ 40.363580][ T3608] kvm_arch_vcpu_ioctl_run+0x5b0/0x2560
[ 40.369149][ T3608] ? __sanitizer_cov_trace_switch+0x50/0x90
[ 40.375071][ T3608] kvm_vcpu_ioctl+0x570/0xf30
[ 40.379774][ T3608] ? kvm_release_pfn_dirty+0x220/0x220
[ 40.385261][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 40.390723][ T3608] ? lock_release+0x560/0x780
[ 40.395408][ T3608] ? ptrace_notify+0xfa/0x140
[ 40.400100][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 40.404980][ T3608] ? bpf_lsm_file_ioctl+0x5/0x10
[ 40.409941][ T3608] ? kvm_release_pfn_dirty+0x220/0x220
[ 40.415417][ T3608] __x64_sys_ioctl+0x193/0x200
[ 40.420193][ T3608] do_syscall_64+0x35/0xb0
[ 40.424621][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.430523][ T3608] RIP: 0033:0x7f86b7b14d79
[ 40.434939][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.454547][ T3608] RSP: 002b:00007ffccf007b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 40.462997][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86b7b14d79
[ 40.470976][ T3608] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 40.478954][ T3608] RBP: 00007f86b7ad87d0 R08: 0000000000000000 R09: 0000000000000000
[ 40.486932][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86b7ad8860
[ 40.494907][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 40.502889][ T3608]
[ 40.506063][ T3608] Kernel Offset: disabled
[ 40.510386][ T3608] Rebooting in 86400 seconds..