./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4039050908 <...> Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. execve("./syz-executor4039050908", ["./syz-executor4039050908"], 0x7ffd7c91c470 /* 10 vars */) = 0 brk(NULL) = 0x5555630c7000 brk(0x5555630c7d00) = 0x5555630c7d00 arch_prctl(ARCH_SET_FS, 0x5555630c7380) = 0 set_tid_address(0x5555630c7650) = 5090 set_robust_list(0x5555630c7660, 24) = 0 rseq(0x5555630c7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4039050908", 4096) = 28 getrandom("\x80\x72\x5b\x0e\xef\xd4\x67\x12", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555630c7d00 brk(0x5555630e8d00) = 0x5555630e8d00 brk(0x5555630e9000) = 0x5555630e9000 mprotect(0x7f628f37e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 executing program write(1, "executing program\n", 18) = 18 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 ioctl(3, KVM_CREATE_VM, 0) = 4 openat(AT_FDCWD, "/proc/self/ns", O_RDWR) = -1 EISDIR (Is a directory) openat(AT_FDCWD, "/proc/self/ns", O_RDONLY) = 5 openat(5, "./cgroup", O_RDONLY|O_CREAT, 000) = 6 openat(AT_FDCWD, "/dev/usbmon0", O_RDONLY) = 7 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 8 ioctl(8, KVM_CREATE_VM, 0) = 9 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 10 ioctl(10, KVM_CREATE_VM, 0) = 11 [ 54.180317][ T5090] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=3, insns=0x20000040, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL, ...}, 144) = -1 EFAULT (Bad address) ioctl(11, KVM_CREATE_VCPU, 0) = 12 dup(12) = 13 [ 54.252777][ T5090] ------------[ cut here ]------------ [ 54.258457][ T5090] WARNING: CPU: 0 PID: 5090 at arch/x86/kvm/../../../virt/kvm/pfncache.c:259 __kvm_gpc_refresh+0xf17/0x1090 [ 54.270213][ T5090] Modules linked in: [ 54.274135][ T5090] CPU: 0 PID: 5090 Comm: syz-executor403 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 54.284689][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 54.295085][ T5090] RIP: 0010:__kvm_gpc_refresh+0xf17/0x1090 [ 54.300987][ T5090] Code: c6 05 82 51 8a 0e 01 48 c7 c7 40 e6 c1 8b be 03 04 00 00 48 c7 c2 80 e6 c1 8b e8 04 72 65 00 e9 cd f3 ff ff e8 9a d2 88 00 90 <0f> 0b 90 41 bf ea ff ff ff e9 c2 fe ff ff e8 86 d2 88 00 90 0f 0b [ 54.320679][ T5090] RSP: 0018:ffffc90003e57430 EFLAGS: 00010293 [ 54.326817][ T5090] RAX: ffffffff810d43e6 RBX: ffffffffffffff01 RCX: ffff888078a31e00 [ 54.334806][ T5090] RDX: 0000000000000000 RSI: fffffffe00000000 RDI: ffff887fffffffff [ 54.342855][ T5090] RBP: ffff88807e301148 R08: ffffffff810d351f R09: 1ffffffff25f50c9 [ 54.350881][ T5090] R10: dffffc0000000000 R11: fffffbfff25f50ca R12: fffffffe00000000 [ 54.358890][ T5090] R13: ffff88807e3010d0 R14: ffff88807e3010d0 R15: ffff887fffffffff [ 54.366920][ T5090] FS: 00005555630c7380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 54.375867][ T5090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.382502][ T5090] CR2: 00007ffce7710df0 CR3: 000000001f254000 CR4: 00000000003526f0 [ 54.390518][ T5090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.398522][ T5090] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.406532][ T5090] Call Trace: [ 54.409825][ T5090] [ 54.412746][ T5090] ? __warn+0x163/0x4e0 [ 54.416948][ T5090] ? __kvm_gpc_refresh+0xf17/0x1090 [ 54.422161][ T5090] ? report_bug+0x2b3/0x500 [ 54.426707][ T5090] ? __kvm_gpc_refresh+0xf17/0x1090 [ 54.431929][ T5090] ? handle_bug+0x3e/0x70 [ 54.436309][ T5090] ? exc_invalid_op+0x1a/0x50 [ 54.441000][ T5090] ? asm_exc_invalid_op+0x1a/0x20 [ 54.446082][ T5090] ? __kvm_gpc_refresh+0x4f/0x1090 [ 54.451210][ T5090] ? __kvm_gpc_refresh+0xf16/0x1090 [ 54.456462][ T5090] ? __kvm_gpc_refresh+0xf17/0x1090 [ 54.461685][ T5090] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 54.468073][ T5090] ? _raw_write_lock_irq+0xdf/0x120 [ 54.473287][ T5090] ? _raw_write_unlock_irq+0x23/0x50 [ 54.478693][ T5090] ? lockdep_hardirqs_on+0x99/0x150 [ 54.483933][ T5090] __kvm_gpc_activate+0xdc/0x400 [ 54.488916][ T5090] kvm_xen_vcpu_set_attr+0x1c1/0x11c0 [ 54.494309][ T5090] ? __might_fault+0xc6/0x120 [ 54.499022][ T5090] ? kvm_xen_vcpu_set_attr+0x95/0x11c0 [ 54.504497][ T5090] kvm_arch_vcpu_ioctl+0x16b7/0x2cd0 [ 54.509821][ T5090] ? __pfx_lock_release+0x10/0x10 [ 54.514889][ T5090] ? validate_chain+0x11e/0x5900 [ 54.519877][ T5090] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 54.525528][ T5090] ? is_bpf_text_address+0x285/0x2a0 [ 54.530846][ T5090] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 54.537050][ T5090] ? __kernel_text_address+0xd/0x40 [ 54.542247][ T5090] ? unwind_get_return_address+0x91/0xc0 [ 54.547904][ T5090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.553989][ T5090] ? __pfx_validate_chain+0x10/0x10 [ 54.559219][ T5090] ? arch_stack_walk+0x16d/0x1b0 [ 54.564175][ T5090] ? stack_trace_save+0x118/0x1d0 [ 54.569236][ T5090] ? __pfx_stack_trace_save+0x10/0x10 [ 54.574625][ T5090] ? stack_depot_save_flags+0x29/0x830 [ 54.580183][ T5090] ? mark_lock+0x9a/0x350 [ 54.584620][ T5090] ? kfree+0x149/0x360 [ 54.588835][ T5090] ? __lock_acquire+0x1346/0x1fd0 [ 54.593913][ T5090] ? __mutex_trylock_common+0x183/0x2e0 [ 54.599506][ T5090] ? __pfx___might_resched+0x10/0x10 [ 54.604804][ T5090] ? __pfx___mutex_trylock_common+0x10/0x10 [ 54.610731][ T5090] ? rcu_is_watching+0x15/0xb0 [ 54.615516][ T5090] ? trace_contention_end+0x3c/0x120 [ 54.620838][ T5090] ? __mutex_lock+0x2ef/0xd70 [ 54.625536][ T5090] ? tomoyo_path_number_perm+0x71a/0x880 [ 54.631206][ T5090] ? kvm_vcpu_ioctl+0x1d9/0xd00 [ 54.636091][ T5090] ? tomoyo_path_number_perm+0x208/0x880 [ 54.641731][ T5090] kvm_vcpu_ioctl+0x6e0/0xd00 [ 54.646447][ T5090] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 54.651688][ T5090] ? __pfx_ptrace_notify+0x10/0x10 [ 54.656846][ T5090] ? bpf_lsm_file_ioctl+0x9/0x10 [ 54.661796][ T5090] ? security_file_ioctl+0x87/0xb0 [ 54.666937][ T5090] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 54.672148][ T5090] __se_sys_ioctl+0xfc/0x170 [ 54.676772][ T5090] do_syscall_64+0xf3/0x230 [ 54.681285][ T5090] ? clear_bhb_loop+0x35/0x90 [ 54.686004][ T5090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.691905][ T5090] RIP: 0033:0x7f628f30b6e9 [ 54.696384][ T5090] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.716037][ T5090] RSP: 002b:00007fff93337768 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.724469][ T5090] RAX: ffffffffffffffda RBX: 00007fff93337770 RCX: 00007f628f30b6e9 [ 54.732495][ T5090] RDX: 0000000020000040 RSI: 000000004048aecb RDI: 000000000000000d [ 54.740499][ T5090] RBP: 00007f628f37e610 R08: 65732f636f72702f R09: 65732f636f72702f [ 54.748496][ T5090] R10: 65732f636f72702f R11: 0000000000000246 R12: 0000000000000001 [ 54.756497][ T5090] R13: 00007fff933379a8 R14: 0000000000000001 R15: 0000000000000001 [ 54.764464][ T5090] [ 54.767519][ T5090] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.774798][ T5090] CPU: 0 PID: 5090 Comm: syz-executor403 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 54.785296][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 54.795340][ T5090] Call Trace: [ 54.798614][ T5090] [ 54.801532][ T5090] dump_stack_lvl+0x241/0x360 [ 54.806213][ T5090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 54.811403][ T5090] ? __pfx__printk+0x10/0x10 [ 54.815986][ T5090] ? _printk+0xd5/0x120 [ 54.820145][ T5090] ? vscnprintf+0x5d/0x90 [ 54.824461][ T5090] panic+0x349/0x860 [ 54.828344][ T5090] ? __warn+0x172/0x4e0 [ 54.832512][ T5090] ? __pfx_panic+0x10/0x10 [ 54.836919][ T5090] ? show_trace_log_lvl+0x4e6/0x520 [ 54.842134][ T5090] __warn+0x346/0x4e0 [ 54.846115][ T5090] ? __kvm_gpc_refresh+0xf17/0x1090 [ 54.851306][ T5090] report_bug+0x2b3/0x500 [ 54.855636][ T5090] ? __kvm_gpc_refresh+0xf17/0x1090 [ 54.860832][ T5090] handle_bug+0x3e/0x70 [ 54.864983][ T5090] exc_invalid_op+0x1a/0x50 [ 54.869479][ T5090] asm_exc_invalid_op+0x1a/0x20 [ 54.874324][ T5090] RIP: 0010:__kvm_gpc_refresh+0xf17/0x1090 [ 54.880124][ T5090] Code: c6 05 82 51 8a 0e 01 48 c7 c7 40 e6 c1 8b be 03 04 00 00 48 c7 c2 80 e6 c1 8b e8 04 72 65 00 e9 cd f3 ff ff e8 9a d2 88 00 90 <0f> 0b 90 41 bf ea ff ff ff e9 c2 fe ff ff e8 86 d2 88 00 90 0f 0b [ 54.899726][ T5090] RSP: 0018:ffffc90003e57430 EFLAGS: 00010293 [ 54.905787][ T5090] RAX: ffffffff810d43e6 RBX: ffffffffffffff01 RCX: ffff888078a31e00 [ 54.913750][ T5090] RDX: 0000000000000000 RSI: fffffffe00000000 RDI: ffff887fffffffff [ 54.921711][ T5090] RBP: ffff88807e301148 R08: ffffffff810d351f R09: 1ffffffff25f50c9 [ 54.929671][ T5090] R10: dffffc0000000000 R11: fffffbfff25f50ca R12: fffffffe00000000 [ 54.937634][ T5090] R13: ffff88807e3010d0 R14: ffff88807e3010d0 R15: ffff887fffffffff [ 54.945602][ T5090] ? __kvm_gpc_refresh+0x4f/0x1090 [ 54.950704][ T5090] ? __kvm_gpc_refresh+0xf16/0x1090 [ 54.955905][ T5090] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 54.962227][ T5090] ? _raw_write_lock_irq+0xdf/0x120 [ 54.967511][ T5090] ? _raw_write_unlock_irq+0x23/0x50 [ 54.972788][ T5090] ? lockdep_hardirqs_on+0x99/0x150 [ 54.977982][ T5090] __kvm_gpc_activate+0xdc/0x400 [ 54.982918][ T5090] kvm_xen_vcpu_set_attr+0x1c1/0x11c0 [ 54.988289][ T5090] ? __might_fault+0xc6/0x120 [ 54.992963][ T5090] ? kvm_xen_vcpu_set_attr+0x95/0x11c0 [ 54.998418][ T5090] kvm_arch_vcpu_ioctl+0x16b7/0x2cd0 [ 55.003697][ T5090] ? __pfx_lock_release+0x10/0x10 [ 55.008718][ T5090] ? validate_chain+0x11e/0x5900 [ 55.013648][ T5090] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 55.019281][ T5090] ? is_bpf_text_address+0x285/0x2a0 [ 55.024559][ T5090] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 55.030706][ T5090] ? __kernel_text_address+0xd/0x40 [ 55.035902][ T5090] ? unwind_get_return_address+0x91/0xc0 [ 55.041528][ T5090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.047587][ T5090] ? __pfx_validate_chain+0x10/0x10 [ 55.052777][ T5090] ? arch_stack_walk+0x16d/0x1b0 [ 55.057720][ T5090] ? stack_trace_save+0x118/0x1d0 [ 55.062739][ T5090] ? __pfx_stack_trace_save+0x10/0x10 [ 55.068106][ T5090] ? stack_depot_save_flags+0x29/0x830 [ 55.073562][ T5090] ? mark_lock+0x9a/0x350 [ 55.077884][ T5090] ? kfree+0x149/0x360 [ 55.081952][ T5090] ? __lock_acquire+0x1346/0x1fd0 [ 55.086993][ T5090] ? __mutex_trylock_common+0x183/0x2e0 [ 55.092534][ T5090] ? __pfx___might_resched+0x10/0x10 [ 55.097817][ T5090] ? __pfx___mutex_trylock_common+0x10/0x10 [ 55.103708][ T5090] ? rcu_is_watching+0x15/0xb0 [ 55.108475][ T5090] ? trace_contention_end+0x3c/0x120 [ 55.113753][ T5090] ? __mutex_lock+0x2ef/0xd70 [ 55.118426][ T5090] ? tomoyo_path_number_perm+0x71a/0x880 [ 55.124091][ T5090] ? kvm_vcpu_ioctl+0x1d9/0xd00 [ 55.128933][ T5090] ? tomoyo_path_number_perm+0x208/0x880 [ 55.134577][ T5090] kvm_vcpu_ioctl+0x6e0/0xd00 [ 55.139254][ T5090] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.144456][ T5090] ? __pfx_ptrace_notify+0x10/0x10 [ 55.149571][ T5090] ? bpf_lsm_file_ioctl+0x9/0x10 [ 55.154511][ T5090] ? security_file_ioctl+0x87/0xb0 [ 55.159618][ T5090] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.164811][ T5090] __se_sys_ioctl+0xfc/0x170 [ 55.169399][ T5090] do_syscall_64+0xf3/0x230 [ 55.173895][ T5090] ? clear_bhb_loop+0x35/0x90 [ 55.178565][ T5090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.184451][ T5090] RIP: 0033:0x7f628f30b6e9 [ 55.188859][ T5090] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.208477][ T5090] RSP: 002b:00007fff93337768 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.216887][ T5090] RAX: ffffffffffffffda RBX: 00007fff93337770 RCX: 00007f628f30b6e9 [ 55.224852][ T5090] RDX: 0000000020000040 RSI: 000000004048aecb RDI: 000000000000000d [ 55.232814][ T5090] RBP: 00007f628f37e610 R08: 65732f636f72702f R09: 65732f636f72702f [ 55.240781][ T5090] R10: 65732f636f72702f R11: 0000000000000246 R12: 0000000000000001 [ 55.248743][ T5090] R13: 00007fff933379a8 R14: 0000000000000001 R15: 0000000000000001 [ 55.256716][ T5090] [ 55.259850][ T5090] Kernel Offset: disabled [ 55.264283][ T5090] Rebooting in 86400 seconds..