./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2638452652
<...>
Warning: Permanently added '10.128.10.56' (ED25519) to the list of known hosts.
execve("./syz-executor2638452652", ["./syz-executor2638452652"], 0x7fff25254470 /* 10 vars */) = 0
brk(NULL) = 0x5555640f7000
brk(0x5555640f7d00) = 0x5555640f7d00
arch_prctl(ARCH_SET_FS, 0x5555640f7380) = 0
set_tid_address(0x5555640f7650) = 5837
set_robust_list(0x5555640f7660, 24) = 0
rseq(0x5555640f7ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2638452652", 4096) = 28
getrandom("\x19\x11\x40\x2f\x50\xbd\x7f\x45", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555640f7d00
brk(0x555564118d00) = 0x555564118d00
brk(0x555564119000) = 0x555564119000
mprotect(0x7fd7b6a21000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555640f7650) = 5838
./strace-static-x86_64: Process 5838 attached
[pid 5838] set_robust_list(0x5555640f7660, 24) = 0
[pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5838] setpgid(0, 0) = 0
[pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5838] write(3, "1000", 4) = 4
[pid 5838] close(3) = 0
[pid 5838] write(1, "executing program\n", 18executing program
) = 18
[pid 5838] openat(AT_FDCWD, "/dev/kvm", O_RDWR|O_TRUNC|O_NOATIME) = 3
[pid 5838] ioctl(3, KVM_CREATE_VM, 0) = 4
[pid 5838] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0
[pid 5838] ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=40960, userspace_addr=0x200000bff000}) = 0
[pid 5838] ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x30000, memory_size=40960, userspace_addr=0x200000c09000}) = 0
[pid 5838] ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=KVM_MEM_LOG_DIRTY_PAGES, guest_phys_addr=0x41000, memory_size=8192, userspace_addr=0x200000c13000}) = 0
[pid 5838] ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=KVM_MEM_READONLY, guest_phys_addr=0x50000, memory_size=16384, userspace_addr=0x200000c15000}) = 0
[pid 5838] ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=KVM_MEM_READONLY, guest_phys_addr=0x54000, memory_size=16384, userspace_addr=0x200000c19000}) = 0
[pid 5838] ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x58000, memory_size=4096, userspace_addr=0x200000c1d000}) = 0
[pid 5838] ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x200000c1e000}) = 0
[pid 5838] ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x200000, memory_size=4063232, userspace_addr=0x200000c1f000}) = 0
[ 87.779101][ T5838] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[pid 5838] ioctl(4, KVM_CREATE_VCPU, 0) = 5
[pid 5838] ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0
[pid 5838] ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=4294967295, selector=80, type=11, present=1, dpl=0, db=0, s=1, l=1, g=1, avl=0}, ...}) = 0
[pid 5838] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6
[pid 5838] ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0
[pid 5838] ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0
[pid 5838] close(6) = 0
[pid 5838] ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0x54030, rflags=0x2}) = 0
[pid 5838] ioctl(5, KVM_SET_MP_STATE, 0x200000000000) = 0
[pid 5838] ioctl(5, KVM_SET_NESTED_STATE, 0x200000000a80) = -1 EINVAL (Invalid argument)
[pid 5838] ioctl(5, KVM_SET_GUEST_DEBUG, 0x200000000080) = 0
[ 87.972478][ T5838] ------------[ cut here ]------------
[ 87.978027][ T5838] WARNING: CPU: 1 PID: 5838 at arch/x86/kvm/lapic.c:3407 kvm_apic_accept_events+0x341/0x490
[ 87.988219][ T5838] Modules linked in:
[ 87.992253][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor263 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full)
[ 88.004380][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 88.014681][ T5838] RIP: 0010:kvm_apic_accept_events+0x341/0x490
[ 88.020909][ T5838] Code: eb 0c e8 62 7b 72 00 eb 05 e8 5b 7b 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 99 1a 0a cc e8 40 7b 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f
[ 88.040602][ T5838] RSP: 0018:ffffc900042bf5c8 EFLAGS: 00010293
[ 88.046713][ T5838] RAX: ffffffff814de090 RBX: 0000000000000002 RCX: ffff88802f3b8000
[ 88.054778][ T5838] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[ 88.062808][ T5838] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81463863
[ 88.070939][ T5838] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: 0000000000000002
[ 88.078940][ T5838] R13: dffffc0000000000 R14: ffff88814c90d800 R15: ffff8880336f82d8
[ 88.086992][ T5838] FS: 00005555640f7380(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000
[ 88.095990][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 88.102635][ T5838] CR2: 0000200000bfffb0 CR3: 000000007824a000 CR4: 00000000003526f0
[ 88.110750][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 88.118726][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 88.126756][ T5838] Call Trace:
[ 88.130075][ T5838]
[ 88.133146][ T5838] vcpu_run+0x76f/0x6f70
[ 88.137490][ T5838] ? __pfx_vcpu_run+0x10/0x10
[ 88.142235][ T5838] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 88.147988][ T5838] ? rcu_is_watching+0x15/0xb0
[ 88.152819][ T5838] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 88.158416][ T5838] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 88.164233][ T5838] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 88.170292][ T5838] ? __lock_acquire+0xab9/0xd20
[ 88.175256][ T5838] kvm_vcpu_ioctl+0x95c/0xe90
[ 88.179971][ T5838] ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 88.185402][ T5838] ? __pfx_ptrace_notify+0x10/0x10
[ 88.190630][ T5838] ? bpf_lsm_file_ioctl+0x9/0x20
[ 88.195631][ T5838] ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 88.200915][ T5838] __se_sys_ioctl+0xfc/0x170
[ 88.205642][ T5838] do_syscall_64+0xfa/0x3b0
[ 88.210199][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.215474][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.221603][ T5838] ? clear_bhb_loop+0x60/0xb0
[ 88.226304][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.232277][ T5838] RIP: 0033:0x7fd7b69ab2f9
[ 88.236731][ T5838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 88.256412][ T5838] RSP: 002b:00007ffe2196c958 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 88.264886][ T5838] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd7b69ab2f9
[ 88.272910][ T5838] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 88.280942][ T5838] RBP: 0000200000bfe000 R08: 0000000000000000 R09: 0000000000000000
[ 88.288936][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2196c980
[ 88.297008][ T5838] R13: 0000200000bff000 R14: 0000000000000004 R15: 0000000000000001
[ 88.305072][ T5838]
[ 88.308110][ T5838] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 88.315391][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor263 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full)
[ 88.327476][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 88.337534][ T5838] Call Trace:
[ 88.340822][ T5838]
[ 88.343784][ T5838] dump_stack_lvl+0x99/0x250
[ 88.348414][ T5838] ? __asan_memcpy+0x40/0x70
[ 88.353050][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.358295][ T5838] ? __pfx__printk+0x10/0x10
[ 88.362908][ T5838] panic+0x2db/0x790
[ 88.366832][ T5838] ? __pfx_panic+0x10/0x10
[ 88.371269][ T5838] ? show_trace_log_lvl+0x4fb/0x550
[ 88.376529][ T5838] __warn+0x31b/0x4b0
[ 88.380532][ T5838] ? kvm_apic_accept_events+0x341/0x490
[ 88.386103][ T5838] ? kvm_apic_accept_events+0x341/0x490
[ 88.391667][ T5838] report_bug+0x2be/0x4f0
[ 88.396010][ T5838] ? kvm_apic_accept_events+0x341/0x490
[ 88.401596][ T5838] ? kvm_apic_accept_events+0x341/0x490
[ 88.407192][ T5838] ? kvm_apic_accept_events+0x343/0x490
[ 88.412790][ T5838] handle_bug+0x84/0x160
[ 88.417087][ T5838] exc_invalid_op+0x1a/0x50
[ 88.421611][ T5838] asm_exc_invalid_op+0x1a/0x20
[ 88.426486][ T5838] RIP: 0010:kvm_apic_accept_events+0x341/0x490
[ 88.432661][ T5838] Code: eb 0c e8 62 7b 72 00 eb 05 e8 5b 7b 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 99 1a 0a cc e8 40 7b 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f
[ 88.452287][ T5838] RSP: 0018:ffffc900042bf5c8 EFLAGS: 00010293
[ 88.458375][ T5838] RAX: ffffffff814de090 RBX: 0000000000000002 RCX: ffff88802f3b8000
[ 88.466361][ T5838] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[ 88.474340][ T5838] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81463863
[ 88.482317][ T5838] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: 0000000000000002
[ 88.490332][ T5838] R13: dffffc0000000000 R14: ffff88814c90d800 R15: ffff8880336f82d8
[ 88.498415][ T5838] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 88.504164][ T5838] ? kvm_apic_accept_events+0x340/0x490
[ 88.509734][ T5838] ? kvm_apic_accept_events+0x340/0x490
[ 88.515300][ T5838] vcpu_run+0x76f/0x6f70
[ 88.519606][ T5838] ? __pfx_vcpu_run+0x10/0x10
[ 88.524298][ T5838] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 88.530041][ T5838] ? rcu_is_watching+0x15/0xb0
[ 88.534821][ T5838] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 88.540389][ T5838] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 88.546121][ T5838] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 88.552141][ T5838] ? __lock_acquire+0xab9/0xd20
[ 88.557040][ T5838] kvm_vcpu_ioctl+0x95c/0xe90
[ 88.561757][ T5838] ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 88.566984][ T5838] ? __pfx_ptrace_notify+0x10/0x10
[ 88.572126][ T5838] ? bpf_lsm_file_ioctl+0x9/0x20
[ 88.577091][ T5838] ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 88.582298][ T5838] __se_sys_ioctl+0xfc/0x170
[ 88.586915][ T5838] do_syscall_64+0xfa/0x3b0
[ 88.591433][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.596648][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.602727][ T5838] ? clear_bhb_loop+0x60/0xb0
[ 88.607414][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.613322][ T5838] RIP: 0033:0x7fd7b69ab2f9
[ 88.617748][ T5838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 88.637358][ T5838] RSP: 002b:00007ffe2196c958 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 88.645788][ T5838] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd7b69ab2f9
[ 88.653779][ T5838] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 88.661757][ T5838] RBP: 0000200000bfe000 R08: 0000000000000000 R09: 0000000000000000
[ 88.669739][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2196c980
[ 88.677723][ T5838] R13: 0000200000bff000 R14: 0000000000000004 R15: 0000000000000001
[ 88.685714][ T5838]
[ 88.689051][ T5838] Kernel Offset: disabled
[ 88.693386][ T5838] Rebooting in 86400 seconds..