./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2069936192 <...> Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. execve("./syz-executor2069936192", ["./syz-executor2069936192"], 0x7ffcb4e06e40 /* 10 vars */) = 0 brk(NULL) = 0x555574b49000 brk(0x555574b49d00) = 0x555574b49d00 arch_prctl(ARCH_SET_FS, 0x555574b49380) = 0 set_tid_address(0x555574b49650) = 376 set_robust_list(0x555574b49660, 24) = 0 rseq(0x555574b49ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2069936192", 4096) = 28 getrandom("\xf5\x08\xc7\x09\x57\x36\x1a\x14", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555574b49d00 brk(0x555574b6ad00) = 0x555574b6ad00 brk(0x555574b6b000) = 0x555574b6b000 mprotect(0x7febf21fe000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.A7ydYI", 0700) = 0 chmod("./syzkaller.A7ydYI", 0777) = 0 chdir("./syzkaller.A7ydYI") = 0 write(1, "executing program\n", 18executing program ) = 18 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [ 43.961373][ T23] audit: type=1400 audit(1738009253.820:66): avc: denied { execmem } for pid=376 comm="syz-executor206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.983685][ T23] audit: type=1400 audit(1738009253.840:67): avc: denied { read } for pid=376 comm="syz-executor206" name="kvm" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 ioctl(3, KVM_CREATE_VM, 0) = 4 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=8192, userspace_addr=0x20000000}) = 0 [ 44.001815][ T376] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 44.006808][ T23] audit: type=1400 audit(1738009253.840:68): avc: denied { open } for pid=376 comm="syz-executor206" path="/dev/kvm" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 ioctl(4, KVM_CREATE_VCPU, 0) = 5 [ 44.045412][ T23] audit: type=1400 audit(1738009253.860:69): avc: denied { ioctl } for pid=376 comm="syz-executor206" path="/dev/kvm" dev="devtmpfs" ino=93 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 44.079267][ T376] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 44.086879][ T376] #PF: supervisor instruction fetch in kernel mode [ 44.093216][ T376] #PF: error_code(0x0010) - not-present page [ 44.099027][ T376] PGD 1f38cb067 P4D 1f38cb067 PUD 1f51f4067 PMD 0 [ 44.105363][ T376] Oops: 0010 [#1] PREEMPT SMP KASAN [ 44.110405][ T376] CPU: 0 PID: 376 Comm: syz-executor206 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 44.120375][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.130429][ T376] RIP: 0010:0x86 [ 44.133786][ T376] Code: Bad RIP value. [ 44.137687][ T376] RSP: 0018:ffff8881ee007308 EFLAGS: 00010086 [ 44.143591][ T376] RAX: ffff8881ee007338 RBX: dffffc0000000000 RCX: ffff8881f31e4ec0 [ 44.151422][ T376] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 44.159215][ T376] RBP: 0000000000000fd0 R08: ffffffff8231c921 R09: ffffffff811c8f95 [ 44.167023][ T376] R10: ffff8881f31e4ec0 R11: 0000000000000002 R12: ffffffff846015d0 [ 44.174837][ T376] R13: fffffe0000000fd8 R14: ffff8881ee510000 R15: fffffe0000000fdb [ 44.182648][ T376] FS: 0000555574b49380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 44.191415][ T376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.197834][ T376] CR2: 000000000000005c CR3: 00000001dd589000 CR4: 00000000003426b0 [ 44.205646][ T376] Call Trace: [ 44.208791][ T376] ? __die+0xb4/0x100 [ 44.212619][ T376] ? no_context+0xac7/0xd20 [ 44.216935][ T376] ? is_prefetch+0x4b0/0x4b0 [ 44.221360][ T376] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 44.226740][ T376] ? __do_page_fault+0xa72/0xbb0 [ 44.231515][ T376] ? vmx_spec_ctrl_restore_host+0x83/0xfd [ 44.237160][ T376] ? __bad_area_nosemaphore+0xc0/0x470 [ 44.242450][ T376] ? page_fault+0x2f/0x40 [ 44.246618][ T376] ? call_function_interrupt+0x20/0x20 [ 44.251914][ T376] ? vmx_handle_exit_irqoff+0x45/0x220 [ 44.257206][ T376] ? check_preemption_disabled+0x91/0x320 [ 44.262761][ T376] ? handle_external_interrupt_irqoff+0x148/0x2f0 [ 44.269018][ T376] ? handle_external_interrupt_irqoff+0x12a/0x2f0 [ 44.275260][ T376] ? call_function_interrupt+0x20/0x20 [ 44.280554][ T376] ? vcpu_enter_guest+0x2d06/0x9f70 [ 44.285606][ T376] ? check_preemption_disabled+0x9f/0x320 [ 44.291143][ T376] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 44.296522][ T376] ? check_preemption_disabled+0x9f/0x320 [ 44.302090][ T376] ? _raw_spin_lock+0x1b0/0x1b0 [ 44.306764][ T376] ? debug_smp_processor_id+0x20/0x20 [ 44.311975][ T376] ? local_bh_enable+0x20/0x20 [ 44.316572][ T376] ? internal_add_timer+0x34b/0x430 [ 44.321608][ T376] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 44.327246][ T376] ? __mod_timer+0x72b/0x13e0 [ 44.331763][ T376] ? mod_timer_pending+0x20/0x20 [ 44.336536][ T376] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 44.341851][ T376] ? read_msr+0x40/0x40 [ 44.345823][ T376] ? check_preemption_disabled+0x9f/0x320 [ 44.351380][ T376] ? __fd_install+0x119/0x230 [ 44.355892][ T376] ? update_load_avg+0x40f/0x1210 [ 44.360754][ T376] ? check_preemption_disabled+0x9f/0x320 [ 44.366304][ T376] ? debug_smp_processor_id+0x20/0x20 [ 44.371513][ T376] ? resched_curr+0x9b/0x200 [ 44.375940][ T376] ? check_preempt_wakeup+0x4f6/0x9f0 [ 44.381168][ T376] ? vmx_vcpu_load_vmcs+0x655/0x8b0 [ 44.386179][ T376] ? common_interrupt+0xa/0xf [ 44.390695][ T376] ? check_preemption_disabled+0x9f/0x320 [ 44.396248][ T376] ? debug_smp_processor_id+0x20/0x20 [ 44.401544][ T376] ? check_preemption_disabled+0x75/0x320 [ 44.407143][ T376] ? check_preemption_disabled+0x9f/0x320 [ 44.412656][ T376] ? __local_bh_enable_ip+0x70/0x70 [ 44.417689][ T376] ? kvm_arch_vcpu_ioctl_run+0x748/0x18d0 [ 44.423251][ T376] ? kvm_vcpu_ioctl+0x7f9/0xd10 [ 44.427946][ T376] ? create_vcpu_fd+0x120/0x120 [ 44.432620][ T376] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 44.437652][ T376] ? _raw_spin_lock_irqsave+0x210/0x210 [ 44.443045][ T376] ? cgroup_update_frozen+0x157/0xab0 [ 44.448236][ T376] ? cgroup_update_frozen+0x157/0xab0 [ 44.453587][ T376] ? cgroup_leave_frozen+0x13c/0x290 [ 44.458655][ T376] ? ptrace_stop+0x6ee/0xa30 [ 44.463082][ T376] ? create_vcpu_fd+0x120/0x120 [ 44.467765][ T376] ? do_vfs_ioctl+0x742/0x1720 [ 44.472370][ T376] ? ioctl_preallocate+0x250/0x250 [ 44.477426][ T376] ? check_preemption_disabled+0x153/0x320 [ 44.483066][ T376] ? syscall_trace_enter+0x650/0x940 [ 44.488179][ T376] ? do_syscall_64+0x1c0/0x1c0 [ 44.492779][ T376] ? switch_fpu_return+0x1d4/0x410 [ 44.497730][ T376] ? security_file_ioctl+0x7d/0xa0 [ 44.502668][ T376] ? __x64_sys_ioctl+0xd4/0x110 [ 44.507443][ T376] ? do_syscall_64+0xca/0x1c0 [ 44.511957][ T376] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 44.517851][ T376] Modules linked in: [ 44.521601][ T376] CR2: 0000000000000086 [ 44.525585][ T376] ---[ end trace bca0757e7f19ae7e ]--- [ 44.530883][ T376] RIP: 0010:0x86 [ 44.534262][ T376] Code: Bad RIP value. [ 44.538172][ T376] RSP: 0018:ffff8881ee007308 EFLAGS: 00010086 [ 44.544085][ T376] RAX: ffff8881ee007338 RBX: dffffc0000000000 RCX: ffff8881f31e4ec0 [ 44.551875][ T376] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 44.559688][ T376] RBP: 0000000000000fd0 R08: ffffffff8231c921 R09: ffffffff811c8f95 [ 44.567499][ T376] R10: ffff8881f31e4ec0 R11: 0000000000000002 R12: ffffffff846015d0 [ 44.575405][ T376] R13: fffffe0000000fd8 R14: ffff8881ee510000 R15: fffffe0000000fdb [ 44.583217][ T376] FS: 0000555574b49380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 44.591995][ T376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.598399][ T376] CR2: 000000000000005c CR3: 00000001dd589000 CR4: 00000000003426b0 [ 44.606211][ T376] Kernel panic - not syncing: Fatal exception [ 44.612394][ T376] Kernel Offset: disabled [ 44.616523][ T376] Rebooting in 86400 seconds..