./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3491557006

<...>
forked to background, child pid 3185
no interfaces have a carrier
[   25.740650][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.752467][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts.
execve("./syz-executor3491557006", ["./syz-executor3491557006"], 0x7ffe79b2f5e0 /* 10 vars */) = 0
brk(NULL)                               = 0x555556f18000
brk(0x555556f18c40)                     = 0x555556f18c40
arch_prctl(ARCH_SET_FS, 0x555556f18300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3491557006", 4096) = 28
brk(0x555556f39c40)                     = 0x555556f39c40
brk(0x555556f3a000)                     = 0x555556f3a000
mprotect(0x7fa8b38d6000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/kvm", O_RDONLY)  = 3
ioctl(3, KVM_CREATE_VM, 0)              = 4
ioctl(4, KVM_CREATE_VCPU, 0)            = 5
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x20fe8000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x20fe9000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x20fea000}) = 0
syzkaller login: [   48.822371][ T3606] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20feb000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20fec000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20fed000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20fee000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20fef000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20ff0000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20ff1000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20ff2000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20ff3000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20ff4000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x20ff5000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x20ff6000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x20ff7000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x20ff8000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x20ff9000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x20ffa000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20ffb000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20ffc000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20ffd000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20ffe000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20fff000}) = 0
ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x20fe8000}) = 0
ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0
openat(AT_FDCWD, "/dev/kvm", O_RDWR)    = 6
ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=33, entries=[...]}) = 0
ioctl(5, KVM_SET_CPUID2, {nent=33, entries=[...]}) = 0
close(6)                                = 0
ioctl(5, KVM_SET_MSRS, 0x7fffc60d40e0)  = 5
ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0
ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0
ioctl(5, KVM_RUN, 0)                    = 0
ioctl(5, KVM_SET_NESTED_STATE, 0x20000280) = -1 EINVAL (Invalid argument)
[   48.918017][ T3606] ------------[ cut here ]------------
[   48.923709][ T3606] WARNING: CPU: 0 PID: 3606 at arch/x86/kvm/vmx/vmx.c:5136 handle_exception_nmi+0x8e6/0xe00
[   48.933886][ T3606] Modules linked in:
[   48.937963][ T3606] CPU: 0 PID: 3606 Comm: syz-executor349 Not tainted 6.0.0-rc5-syzkaller-00025-g3245cb65fd91 #0
[   48.948431][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[   48.958779][ T3606] RIP: 0010:handle_exception_nmi+0x8e6/0xe00
[   48.964804][ T3606] Code: 60 9f 64 00 0f 0b e9 4a f9 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 87 f7 ff ff e8 84 4b b8 00 e9 7d f7 ff ff e8 3a 9f 64 00 <0f> 0b e9 53 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a4 f8 ff
[   48.984531][ T3606] RSP: 0018:ffffc9000391f488 EFLAGS: 00010293
[   48.990647][ T3606] RAX: ffffffff8124f8c6 RBX: ffff88801de78000 RCX: ffff88801c458000
[   48.998626][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   49.006670][ T3606] RBP: 0000000000000000 R08: ffffffff8124f513 R09: ffffed1003bcf04a
[   49.015266][ T3606] R10: ffffed1003bcf04a R11: 1ffff11003bcf049 R12: 1ffff11003bcf01b
[   49.023705][ T3606] R13: 0000000000000000 R14: 00000000a0000975 R15: dffffc0000000000
[   49.031771][ T3606] FS:  0000555556f18300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[   49.040880][ T3606] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   49.047578][ T3606] CR2: 000055d1be189030 CR3: 0000000073146000 CR4: 00000000003526e0
[   49.055614][ T3606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   49.063627][ T3606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   49.071656][ T3606] Call Trace:
[   49.074960][ T3606]  <TASK>
[   49.077891][ T3606]  vmx_handle_exit+0x26/0x160
[   49.082638][ T3606]  vcpu_enter_guest+0x6bbe/0x95a0
[   49.087689][ T3606]  ? rcu_lock_release+0x5/0x20
[   49.092518][ T3606]  ? validate_chain+0x126/0x6600
[   49.097465][ T3606]  ? trace_kvm_fpu+0x260/0x260
[   49.102272][ T3606]  ? preempt_count_add+0x8d/0x180
[   49.107331][ T3606]  ? is_bpf_text_address+0x253/0x270
[   49.112682][ T3606]  ? reacquire_held_locks+0x680/0x680
[   49.118063][ T3606]  ? unwind_get_return_address+0x48/0x80
[   49.123750][ T3606]  ? arch_stack_walk+0xf8/0x140
[   49.128619][ T3606]  ? stack_trace_save+0x12d/0x1f0
[   49.133692][ T3606]  ? reacquire_held_locks+0x680/0x680
[   49.139142][ T3606]  ? rcu_read_lock_sched_held+0x89/0x130
[   49.144853][ T3606]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[   49.150919][ T3606]  ? kfree+0xda/0x210
[   49.154932][ T3606]  ? emulator_get_cr+0x260/0x360
[   49.159876][ T3606]  ? trace_kvm_mmio+0xeb/0x280
[   49.164687][ T3606]  ? read_prepare+0x97/0x100
[   49.169287][ T3606]  ? emulator_read_write+0x99/0x590
[   49.174525][ T3606]  ? vmx_complete_nested_posted_interrupt+0x690/0x690
[   49.181325][ T3606]  ? segmented_read+0x2dc/0x3c0
[   49.186168][ T3606]  ? memcpy+0x3c/0x60
[   49.190136][ T3606]  ? writeback+0x63a/0xa40
[   49.194583][ T3606]  ? em_xchg+0xe0/0xe0
[   49.198655][ T3606]  ? string_registers_quirk+0x810/0x810
[   49.204248][ T3606]  ? emulator_write_gpr+0xa3/0xc0
[   49.209278][ T3606]  ? x86_emulate_insn+0x45b/0x3780
[   49.214440][ T3606]  ? xorw_ax_dx+0x10/0x10
[   49.218766][ T3606]  ? kvm_pmu_trigger_event+0x58a/0x5c0
[   49.224276][ T3606]  ? kvm_cpu_has_pending_timer+0x80/0x1f0
[   49.230003][ T3606]  vcpu_run+0x50d/0x10e0
[   49.234305][ T3606]  ? complete_emulated_pio+0x70/0x70
[   49.239591][ T3606]  kvm_arch_vcpu_ioctl_run+0x541/0xd10
[   49.245102][ T3606]  kvm_vcpu_ioctl+0x7ef/0xcf0
[   49.249783][ T3606]  ? print_irqtrace_events+0x220/0x220
[   49.255296][ T3606]  ? kvm_create_vcpu_debugfs+0x1a0/0x1a0
[   49.260959][ T3606]  ? memset+0x1f/0x40
[   49.264929][ T3606]  ? smack_file_ioctl+0x34c/0x3a0
[   49.269945][ T3606]  ? smack_file_alloc_security+0xd0/0xd0
[   49.275657][ T3606]  ? print_irqtrace_events+0x220/0x220
[   49.281168][ T3606]  ? vtime_user_exit+0x2b2/0x3e0
[   49.286119][ T3606]  ? __ct_user_exit+0x81/0xe0
[   49.290852][ T3606]  ? bpf_lsm_file_ioctl+0x5/0x10
[   49.295792][ T3606]  ? security_file_ioctl+0x9d/0xb0
[   49.300949][ T3606]  ? kvm_create_vcpu_debugfs+0x1a0/0x1a0
[   49.306605][ T3606]  __se_sys_ioctl+0xfb/0x170
[   49.311246][ T3606]  do_syscall_64+0x2b/0x70
[   49.315664][ T3606]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   49.321611][ T3606] RIP: 0033:0x7fa8b3867d79
[   49.326043][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   49.345710][ T3606] RSP: 002b:00007fffc60d5c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   49.354165][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa8b3867d79
[   49.362208][ T3606] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   49.370183][ T3606] RBP: 00007fa8b382b7d0 R08: 0000000000000000 R09: 0000000000000000
[   49.378211][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8b382b860
[   49.386212][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   49.394236][ T3606]  </TASK>
[   49.397259][ T3606] Kernel panic - not syncing: panic_on_warn set ...
[   49.403827][ T3606] CPU: 1 PID: 3606 Comm: syz-executor349 Not tainted 6.0.0-rc5-syzkaller-00025-g3245cb65fd91 #0
[   49.414225][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[   49.424269][ T3606] Call Trace:
[   49.427541][ T3606]  <TASK>
[   49.430464][ T3606]  dump_stack_lvl+0x1e3/0x2cb
[   49.435137][ T3606]  ? io_alloc_page_table+0x110/0x110
[   49.440411][ T3606]  ? panic+0x76b/0x76b
[   49.444479][ T3606]  ? vscnprintf+0x59/0x80
[   49.448799][ T3606]  ? handle_exception_nmi+0x820/0xe00
[   49.454162][ T3606]  panic+0x316/0x76b
[   49.458074][ T3606]  ? __warn+0x131/0x220
[   49.462222][ T3606]  ? fb_is_primary_device+0xcc/0xcc
[   49.467423][ T3606]  ? handle_exception_nmi+0x8e6/0xe00
[   49.472786][ T3606]  __warn+0x1fa/0x220
[   49.476760][ T3606]  ? handle_exception_nmi+0x8e6/0xe00
[   49.482122][ T3606]  report_bug+0x1b3/0x2d0
[   49.486467][ T3606]  handle_bug+0x3d/0x70
[   49.490622][ T3606]  exc_invalid_op+0x16/0x40
[   49.495121][ T3606]  asm_exc_invalid_op+0x16/0x20
[   49.499972][ T3606] RIP: 0010:handle_exception_nmi+0x8e6/0xe00
[   49.505966][ T3606] Code: 60 9f 64 00 0f 0b e9 4a f9 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 87 f7 ff ff e8 84 4b b8 00 e9 7d f7 ff ff e8 3a 9f 64 00 <0f> 0b e9 53 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a4 f8 ff
[   49.525909][ T3606] RSP: 0018:ffffc9000391f488 EFLAGS: 00010293
[   49.531973][ T3606] RAX: ffffffff8124f8c6 RBX: ffff88801de78000 RCX: ffff88801c458000
[   49.539948][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   49.547911][ T3606] RBP: 0000000000000000 R08: ffffffff8124f513 R09: ffffed1003bcf04a
[   49.555870][ T3606] R10: ffffed1003bcf04a R11: 1ffff11003bcf049 R12: 1ffff11003bcf01b
[   49.563840][ T3606] R13: 0000000000000000 R14: 00000000a0000975 R15: dffffc0000000000
[   49.571827][ T3606]  ? handle_exception_nmi+0x533/0xe00
[   49.577203][ T3606]  ? handle_exception_nmi+0x8e6/0xe00
[   49.582572][ T3606]  ? handle_exception_nmi+0x8e6/0xe00
[   49.587954][ T3606]  vmx_handle_exit+0x26/0x160
[   49.592623][ T3606]  vcpu_enter_guest+0x6bbe/0x95a0
[   49.597655][ T3606]  ? rcu_lock_release+0x5/0x20
[   49.602411][ T3606]  ? validate_chain+0x126/0x6600
[   49.607342][ T3606]  ? trace_kvm_fpu+0x260/0x260
[   49.612095][ T3606]  ? preempt_count_add+0x8d/0x180
[   49.617117][ T3606]  ? is_bpf_text_address+0x253/0x270
[   49.622407][ T3606]  ? reacquire_held_locks+0x680/0x680
[   49.627770][ T3606]  ? unwind_get_return_address+0x48/0x80
[   49.633396][ T3606]  ? arch_stack_walk+0xf8/0x140
[   49.638249][ T3606]  ? stack_trace_save+0x12d/0x1f0
[   49.643264][ T3606]  ? reacquire_held_locks+0x680/0x680
[   49.648637][ T3606]  ? rcu_read_lock_sched_held+0x89/0x130
[   49.654260][ T3606]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[   49.660230][ T3606]  ? kfree+0xda/0x210
[   49.664206][ T3606]  ? emulator_get_cr+0x260/0x360
[   49.669135][ T3606]  ? trace_kvm_mmio+0xeb/0x280
[   49.673905][ T3606]  ? read_prepare+0x97/0x100
[   49.678510][ T3606]  ? emulator_read_write+0x99/0x590
[   49.683704][ T3606]  ? vmx_complete_nested_posted_interrupt+0x690/0x690
[   49.690459][ T3606]  ? segmented_read+0x2dc/0x3c0
[   49.695298][ T3606]  ? memcpy+0x3c/0x60
[   49.699272][ T3606]  ? writeback+0x63a/0xa40
[   49.703692][ T3606]  ? em_xchg+0xe0/0xe0
[   49.707757][ T3606]  ? string_registers_quirk+0x810/0x810
[   49.713297][ T3606]  ? emulator_write_gpr+0xa3/0xc0
[   49.718312][ T3606]  ? x86_emulate_insn+0x45b/0x3780
[   49.723427][ T3606]  ? xorw_ax_dx+0x10/0x10
[   49.727743][ T3606]  ? kvm_pmu_trigger_event+0x58a/0x5c0
[   49.733199][ T3606]  ? kvm_cpu_has_pending_timer+0x80/0x1f0
[   49.738910][ T3606]  vcpu_run+0x50d/0x10e0
[   49.743160][ T3606]  ? complete_emulated_pio+0x70/0x70
[   49.748435][ T3606]  kvm_arch_vcpu_ioctl_run+0x541/0xd10
[   49.753892][ T3606]  kvm_vcpu_ioctl+0x7ef/0xcf0
[   49.758576][ T3606]  ? print_irqtrace_events+0x220/0x220
[   49.764032][ T3606]  ? kvm_create_vcpu_debugfs+0x1a0/0x1a0
[   49.769651][ T3606]  ? memset+0x1f/0x40
[   49.773625][ T3606]  ? smack_file_ioctl+0x34c/0x3a0
[   49.778650][ T3606]  ? smack_file_alloc_security+0xd0/0xd0
[   49.784284][ T3606]  ? print_irqtrace_events+0x220/0x220
[   49.789734][ T3606]  ? vtime_user_exit+0x2b2/0x3e0
[   49.794662][ T3606]  ? __ct_user_exit+0x81/0xe0
[   49.799350][ T3606]  ? bpf_lsm_file_ioctl+0x5/0x10
[   49.804278][ T3606]  ? security_file_ioctl+0x9d/0xb0
[   49.809380][ T3606]  ? kvm_create_vcpu_debugfs+0x1a0/0x1a0
[   49.815001][ T3606]  __se_sys_ioctl+0xfb/0x170
[   49.819607][ T3606]  do_syscall_64+0x2b/0x70
[   49.824018][ T3606]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   49.829905][ T3606] RIP: 0033:0x7fa8b3867d79
[   49.834318][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   49.853912][ T3606] RSP: 002b:00007fffc60d5c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   49.862315][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa8b3867d79
[   49.870277][ T3606] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   49.878237][ T3606] RBP: 00007fa8b382b7d0 R08: 0000000000000000 R09: 0000000000000000
[   49.886199][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8b382b860
[   49.894161][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   49.902138][ T3606]  </TASK>
[   49.905431][ T3606] Kernel Offset: disabled
[   49.909823][ T3606] Rebooting in 86400 seconds..