./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1785398514 <...> Warning: Permanently added '10.128.1.11' (ECDSA) to the list of known hosts. execve("./syz-executor1785398514", ["./syz-executor1785398514"], 0x7ffe8471cbe0 /* 10 vars */) = 0 brk(NULL) = 0x55555600f000 brk(0x55555600fc40) = 0x55555600fc40 arch_prctl(ARCH_SET_FS, 0x55555600f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1785398514", 4096) = 28 brk(0x555556030c40) = 0x555556030c40 brk(0x555556031000) = 0x555556031000 mprotect(0x7ff9dc21e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 ioctl(3, KVM_CREATE_VM, 0) = 4 ioctl(4, KVM_CREATE_VCPU, 0) = 5 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=0, flags=0, guest_phys_addr=0, memory_size=4096, userspace_addr=0x2003d000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=1, flags=0, guest_phys_addr=0x1000, memory_size=4096, userspace_addr=0x2003e000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=2, flags=0, guest_phys_addr=0x2000, memory_size=4096, userspace_addr=0x2003f000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=3, flags=0, guest_phys_addr=0x3000, memory_size=4096, userspace_addr=0x20040000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=4, flags=0, guest_phys_addr=0x4000, memory_size=4096, userspace_addr=0x20041000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=5, flags=0, guest_phys_addr=0x5000, memory_size=4096, userspace_addr=0x20042000}) = 0 [ 80.108512][ T5082] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=6, flags=0, guest_phys_addr=0x6000, memory_size=4096, userspace_addr=0x20043000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=7, flags=0, guest_phys_addr=0x7000, memory_size=4096, userspace_addr=0x20044000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=8, flags=0, guest_phys_addr=0x8000, memory_size=4096, userspace_addr=0x20045000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=9, flags=0, guest_phys_addr=0x9000, memory_size=4096, userspace_addr=0x20046000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=10, flags=0, guest_phys_addr=0xfec00000, memory_size=4096, userspace_addr=0x20047000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=11, flags=0, guest_phys_addr=0xb000, memory_size=4096, userspace_addr=0x20048000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=12, flags=0, guest_phys_addr=0xc000, memory_size=4096, userspace_addr=0x20049000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=13, flags=0, guest_phys_addr=0xd000, memory_size=4096, userspace_addr=0x2004a000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=14, flags=0, guest_phys_addr=0xe000, memory_size=4096, userspace_addr=0x2004b000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=15, flags=0, guest_phys_addr=0xf000, memory_size=4096, userspace_addr=0x2004c000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=16, flags=0, guest_phys_addr=0x10000, memory_size=4096, userspace_addr=0x2004d000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=17, flags=0, guest_phys_addr=0x11000, memory_size=4096, userspace_addr=0x2004e000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=18, flags=0, guest_phys_addr=0x12000, memory_size=4096, userspace_addr=0x2004f000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=19, flags=0, guest_phys_addr=0x13000, memory_size=4096, userspace_addr=0x20050000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=20, flags=0, guest_phys_addr=0x14000, memory_size=4096, userspace_addr=0x20051000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=21, flags=0, guest_phys_addr=0x15000, memory_size=4096, userspace_addr=0x20052000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=22, flags=0, guest_phys_addr=0x16000, memory_size=4096, userspace_addr=0x20053000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=23, flags=0, guest_phys_addr=0x17000, memory_size=4096, userspace_addr=0x20054000}) = 0 ioctl(4, KVM_SET_USER_MEMORY_REGION, {slot=65537, flags=0, guest_phys_addr=0x30000, memory_size=65536, userspace_addr=0x2003d000}) = -1 EINVAL (Invalid argument) ioctl(5, KVM_GET_SREGS, {cs={base=0xffff0000, limit=65535, selector=61440, type=11, present=1, dpl=0, db=0, s=1, l=0, g=0, avl=0}, ...}) = 0 openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 6 ioctl(6, KVM_GET_SUPPORTED_CPUID, {nent=31, entries=[...]}) = 0 ioctl(5, KVM_SET_CPUID2, {nent=31, entries=[...]}) = 0 close(6) = 0 ioctl(5, KVM_SET_MSRS, 0x7ffcad588820) = 5 ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=1048575, selector=48, type=11, present=1, dpl=0, db=1, s=1, l=0, g=0, avl=0}, ...}) = 0 ioctl(5, KVM_SET_REGS, {rax=0, ..., rsp=0xf80, rbp=0, ..., rip=0, rflags=0x2}) = 0 ioctl(5, KVM_RUN, 0) = 0 ioctl(5, KVM_SET_SREGS, {cs={base=0, limit=0, selector=0, type=0, present=0, dpl=0, db=0, s=0, l=0, g=0, avl=0}, ...}) = 0 ioctl(5, KVM_RUN, 0) = 0 [ 80.222198][ T5082] kvm_intel: KVM_SET_TSS_ADDR needs to be called before running vCPU [ 80.234848][ T5082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.244925][ T5082] ------------[ cut here ]------------ [ 80.250500][ T5082] WARNING: CPU: 0 PID: 5082 at arch/x86/kvm/x86.c:11060 kvm_arch_vcpu_ioctl_run+0x2464/0x2af0 [ 80.260924][ T5082] Modules linked in: [ 80.264990][ T5082] CPU: 0 PID: 5082 Comm: syz-executor178 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468 #0 [ 80.275165][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 80.285297][ T5082] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2464/0x2af0 [ 80.291751][ T5082] Code: 74 c3 00 e9 2f de ff ff 48 c7 c7 80 45 78 8e e8 02 74 c3 00 e9 a9 dc ff ff e8 38 f8 71 00 0f 0b e9 6c e0 ff ff e8 2c f8 71 00 <0f> 0b e9 a4 e0 ff ff e8 20 f8 71 00 be 08 00 00 00 65 48 8b 1c 25 [ 80.311680][ T5082] RSP: 0018:ffffc90003b4fcb0 EFLAGS: 00010293 [ 80.317898][ T5082] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 80.326787][ T5082] RDX: ffff8880236e0000 RSI: ffffffff81130274 RDI: 0000000000000005 [ 80.334905][ T5082] RBP: ffff888021798000 R08: 0000000000000005 R09: 0000000000000000 [ 80.342976][ T5082] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 80.351104][ T5082] R13: ffffc90003bfac90 R14: ffff88802319a8c0 R15: ffff8880217982ec [ 80.359204][ T5082] FS: 000055555600f300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 80.368261][ T5082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.374973][ T5082] CR2: 0000000000000000 CR3: 0000000073d95000 CR4: 00000000003526f0 [ 80.382984][ T5082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.391164][ T5082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.399245][ T5082] Call Trace: [ 80.402555][ T5082] [ 80.405599][ T5082] kvm_vcpu_ioctl+0x574/0xfe0 [ 80.410329][ T5082] ? kvm_release_pfn_dirty+0x220/0x220 [ 80.415904][ T5082] ? find_held_lock+0x2d/0x110 [ 80.420735][ T5082] ? ptrace_notify+0xfe/0x140 [ 80.425570][ T5082] ? bpf_lsm_file_ioctl+0x9/0x10 [ 80.430581][ T5082] ? kvm_release_pfn_dirty+0x220/0x220 [ 80.436171][ T5082] __x64_sys_ioctl+0x197/0x210 [ 80.441005][ T5082] do_syscall_64+0x39/0xb0 [ 80.445544][ T5082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.451507][ T5082] RIP: 0033:0x7ff9dc1b2289 [ 80.456036][ T5082] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.475802][ T5082] RSP: 002b:00007ffcad58a378 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.484326][ T5082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9dc1b2289 [ 80.492352][ T5082] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 80.500467][ T5082] RBP: 00007ff9dc175ce0 R08: 0000000000000000 R09: 0000000000000000 [ 80.508714][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9dc175d70 [ 80.516803][ T5082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.524894][ T5082] [ 80.527939][ T5082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.535219][ T5082] CPU: 0 PID: 5082 Comm: syz-executor178 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468 #0 [ 80.545300][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 80.555447][ T5082] Call Trace: [ 80.558743][ T5082] [ 80.561687][ T5082] dump_stack_lvl+0xd9/0x150 [ 80.566315][ T5082] panic+0x61b/0x6c0 [ 80.570226][ T5082] ? panic_smp_self_stop+0x90/0x90 [ 80.575354][ T5082] ? show_trace_log_lvl+0x285/0x390 [ 80.580595][ T5082] ? kvm_arch_vcpu_ioctl_run+0x2464/0x2af0 [ 80.586430][ T5082] check_panic_on_warn+0xb1/0xc0 [ 80.591405][ T5082] __warn+0xf2/0x4f0 [ 80.595359][ T5082] ? kvm_arch_vcpu_ioctl_run+0x2464/0x2af0 [ 80.601197][ T5082] report_bug+0x2da/0x500 [ 80.605567][ T5082] handle_bug+0x3c/0x70 [ 80.609754][ T5082] exc_invalid_op+0x18/0x50 [ 80.614283][ T5082] asm_exc_invalid_op+0x1a/0x20 [ 80.619158][ T5082] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2464/0x2af0 [ 80.625620][ T5082] Code: 74 c3 00 e9 2f de ff ff 48 c7 c7 80 45 78 8e e8 02 74 c3 00 e9 a9 dc ff ff e8 38 f8 71 00 0f 0b e9 6c e0 ff ff e8 2c f8 71 00 <0f> 0b e9 a4 e0 ff ff e8 20 f8 71 00 be 08 00 00 00 65 48 8b 1c 25 [ 80.645250][ T5082] RSP: 0018:ffffc90003b4fcb0 EFLAGS: 00010293 [ 80.651342][ T5082] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 80.659336][ T5082] RDX: ffff8880236e0000 RSI: ffffffff81130274 RDI: 0000000000000005 [ 80.667324][ T5082] RBP: ffff888021798000 R08: 0000000000000005 R09: 0000000000000000 [ 80.675339][ T5082] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 80.683342][ T5082] R13: ffffc90003bfac90 R14: ffff88802319a8c0 R15: ffff8880217982ec [ 80.691362][ T5082] ? kvm_arch_vcpu_ioctl_run+0x2464/0x2af0 [ 80.697216][ T5082] kvm_vcpu_ioctl+0x574/0xfe0 [ 80.701914][ T5082] ? kvm_release_pfn_dirty+0x220/0x220 [ 80.707421][ T5082] ? find_held_lock+0x2d/0x110 [ 80.712219][ T5082] ? ptrace_notify+0xfe/0x140 [ 80.716943][ T5082] ? bpf_lsm_file_ioctl+0x9/0x10 [ 80.721998][ T5082] ? kvm_release_pfn_dirty+0x220/0x220 [ 80.727508][ T5082] __x64_sys_ioctl+0x197/0x210 [ 80.732324][ T5082] do_syscall_64+0x39/0xb0 [ 80.736781][ T5082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.742725][ T5082] RIP: 0033:0x7ff9dc1b2289 [ 80.747194][ T5082] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.766826][ T5082] RSP: 002b:00007ffcad58a378 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.775267][ T5082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9dc1b2289 [ 80.783264][ T5082] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 80.791255][ T5082] RBP: 00007ff9dc175ce0 R08: 0000000000000000 R09: 0000000000000000 [ 80.799353][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9dc175d70 [ 80.807357][ T5082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.815371][ T5082] [ 80.818738][ T5082] Kernel Offset: disabled [ 80.823190][ T5082] Rebooting in 86400 seconds..