./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1797389451
<...>
Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts.
execve("./syz-executor1797389451", ["./syz-executor1797389451"], 0x7ffe126e73f0 /* 10 vars */) = 0
brk(NULL) = 0x555590c26000
brk(0x555590c26d00) = 0x555590c26d00
arch_prctl(ARCH_SET_FS, 0x555590c26380) = 0
set_tid_address(0x555590c26650) = 5836
set_robust_list(0x555590c26660, 24) = 0
rseq(0x555590c26ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1797389451", 4096) = 28
getrandom("\xa5\xc5\x34\x8c\xc9\xab\xc1\x4e", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555590c26d00
brk(0x555590c47d00) = 0x555590c47d00
brk(0x555590c48000) = 0x555590c48000
mprotect(0x7f0dd977e000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
write(1, "executing program\n", 18executing program
) = 18
socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 3
openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_NOFOLLOW) = 4
ioctl(4, KVM_CREATE_VM, 0) = 5
ioctl(5, KVM_CREATE_VCPU, 3) = 6
[ 78.244718][ T5836] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 78.292993][ T5836] ------------[ cut here ]------------
[ 78.298583][ T5836] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1187/0x1310, CPU#0: syz-executor179/5836
[ 78.311233][ T5836] Modules linked in:
[ 78.315414][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz-executor179 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full)
[ 78.327320][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 78.337461][ T5836] RIP: 0010:__kvm_gpc_refresh+0x1187/0x1310
[ 78.343373][ T5836] Code: c6 05 de 0c 6c 0e 01 48 c7 c7 3a 9d a4 8d be 25 04 00 00 48 c7 c2 c0 e7 81 8b e8 a4 94 5d 00 e9 fe f1 ff ff e8 8a 8b 7f 00 90 <0f> 0b 90 bb ea ff ff ff e9 7e fe ff ff e8 77 8b 7f 00 90 0f 0b 90
[ 78.363295][ T5836] RSP: 0018:ffffc90003f571c0 EFLAGS: 00010293
[ 78.369432][ T5836] RAX: ffffffff814080f6 RBX: ffff888000000000 RCX: ffff88802ee03c00
[ 78.377454][ T5836] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000
[ 78.385452][ T5836] RBP: ffffc90003f57348 R08: ffffffff8fc2b637 R09: 1ffffffff1f856c6
[ 78.393427][ T5836] R10: dffffc0000000000 R11: fffffbfff1f856c7 R12: ffff88801ffc53c0
[ 78.401459][ T5836] R13: dffffc0000000000 R14: ffff888000000000 R15: ffffffffffffff01
[ 78.409462][ T5836] FS: 0000555590c26380(0000) GS:ffff8881259e6000(0000) knlGS:0000000000000000
[ 78.418633][ T5836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.425318][ T5836] CR2: 0000562237ad1168 CR3: 00000000718c6000 CR4: 00000000003526f0
[ 78.433318][ T5836] Call Trace:
[ 78.436651][ T5836]
[ 78.439586][ T5836] ? _raw_read_unlock_irqrestore+0x85/0x110
[ 78.445529][ T5836] ? kvm_gpc_refresh+0x31/0x110
[ 78.450392][ T5836] ? __pfx___kvm_gpc_refresh+0x10/0x10
[ 78.455892][ T5836] ? kvm_xen_set_evtchn+0x138/0x230
[ 78.461105][ T5836] kvm_gpc_refresh+0xe1/0x110
[ 78.465825][ T5836] ? kvm_xen_set_evtchn+0x138/0x230
[ 78.471045][ T5836] kvm_xen_set_evtchn+0x164/0x230
[ 78.476228][ T5836] kvm_xen_hvm_evtchn_send+0x120/0x1e0
[ 78.481753][ T5836] kvm_arch_vm_ioctl+0xdaa/0x1630
[ 78.486846][ T5836] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[ 78.492336][ T5836] ? is_bpf_text_address+0x26/0x2b0
[ 78.497596][ T5836] ? __lock_acquire+0xab9/0xd20
[ 78.502463][ T5836] ? __lock_acquire+0xab9/0xd20
[ 78.507365][ T5836] ? is_bpf_text_address+0x26/0x2b0
[ 78.512575][ T5836] ? is_bpf_text_address+0x292/0x2b0
[ 78.517906][ T5836] ? is_bpf_text_address+0x26/0x2b0
[ 78.523116][ T5836] ? kernel_text_address+0xa5/0xe0
[ 78.528690][ T5836] ? __kernel_text_address+0xd/0x40
[ 78.533907][ T5836] ? unwind_get_return_address+0x4d/0x90
[ 78.539766][ T5836] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 78.545960][ T5836] ? arch_stack_walk+0xfc/0x150
[ 78.550816][ T5836] ? stack_trace_save+0x9c/0xe0
[ 78.555721][ T5836] ? stack_depot_save_flags+0x40/0x900
[ 78.561186][ T5836] ? kasan_save_track+0x4f/0x80
[ 78.566067][ T5836] ? kasan_save_track+0x3e/0x80
[ 78.570924][ T5836] ? kasan_save_free_info+0x46/0x50
[ 78.576153][ T5836] ? __kasan_slab_free+0x62/0x70
[ 78.581088][ T5836] ? kfree+0x18e/0x440
[ 78.585185][ T5836] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 78.590817][ T5836] ? security_file_ioctl+0xcb/0x2d0
[ 78.596069][ T5836] ? __se_sys_ioctl+0x47/0x170
[ 78.600830][ T5836] ? do_syscall_64+0xfa/0x3b0
[ 78.605566][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.611655][ T5836] kvm_vm_ioctl+0x85f/0xc60
[ 78.616200][ T5836] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 78.621236][ T5836] ? do_vfs_ioctl+0x12ba/0x1990
[ 78.626154][ T5836] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 78.631250][ T5836] ? kasan_quarantine_put+0xdd/0x220
[ 78.636593][ T5836] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 78.642229][ T5836] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 78.647897][ T5836] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 78.653529][ T5836] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 78.659201][ T5836] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 78.665243][ T5836] ? _raw_spin_lock_irq+0xae/0xf0
[ 78.670301][ T5836] ? __pfx_ptrace_notify+0x10/0x10
[ 78.675472][ T5836] ? bpf_lsm_file_ioctl+0x9/0x20
[ 78.680426][ T5836] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 78.685499][ T5836] __se_sys_ioctl+0xfc/0x170
[ 78.690100][ T5836] do_syscall_64+0xfa/0x3b0
[ 78.694611][ T5836] ? lockdep_hardirqs_on+0x9c/0x150
[ 78.699839][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.705966][ T5836] ? clear_bhb_loop+0x60/0xb0
[ 78.710639][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.716557][ T5836] RIP: 0033:0x7f0dd970b369
[ 78.720990][ T5836] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 78.740629][ T5836] RSP: 002b:00007ffe2c4269b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 78.749082][ T5836] RAX: ffffffffffffffda RBX: 00007ffe2c426b88 RCX: 00007f0dd970b369
[ 78.757083][ T5836] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000005
[ 78.765086][ T5836] RBP: 00007f0dd977e610 R08: 00007ffe2c426b88 R09: 00007ffe2c426b88
[ 78.773142][ T5836] R10: 00007ffe2c426b88 R11: 0000000000000246 R12: 0000000000000001
[ 78.781213][ T5836] R13: 00007ffe2c426b78 R14: 0000000000000001 R15: 0000000000000001
[ 78.789251][ T5836]
[ 78.792263][ T5836] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 78.799523][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz-executor179 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full)
[ 78.811386][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 78.821422][ T5836] Call Trace:
[ 78.824716][ T5836]
[ 78.827651][ T5836] dump_stack_lvl+0x99/0x250
[ 78.832234][ T5836] ? __asan_memcpy+0x40/0x70
[ 78.836817][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10
[ 78.842355][ T5836] ? __pfx__printk+0x10/0x10
[ 78.846943][ T5836] panic+0x2db/0x790
[ 78.850839][ T5836] ? __pfx_panic+0x10/0x10
[ 78.855270][ T5836] __warn+0x334/0x4c0
[ 78.859249][ T5836] ? __kvm_gpc_refresh+0x1187/0x1310
[ 78.864544][ T5836] ? __kvm_gpc_refresh+0x1187/0x1310
[ 78.869833][ T5836] report_bug+0x2be/0x4f0
[ 78.874155][ T5836] ? __kvm_gpc_refresh+0x1187/0x1310
[ 78.879440][ T5836] ? __kvm_gpc_refresh+0x1187/0x1310
[ 78.884734][ T5836] ? __kvm_gpc_refresh+0x1189/0x1310
[ 78.890020][ T5836] handle_bug+0x84/0x160
[ 78.894259][ T5836] exc_invalid_op+0x1a/0x50
[ 78.898758][ T5836] asm_exc_invalid_op+0x1a/0x20
[ 78.903687][ T5836] RIP: 0010:__kvm_gpc_refresh+0x1187/0x1310
[ 78.909580][ T5836] Code: c6 05 de 0c 6c 0e 01 48 c7 c7 3a 9d a4 8d be 25 04 00 00 48 c7 c2 c0 e7 81 8b e8 a4 94 5d 00 e9 fe f1 ff ff e8 8a 8b 7f 00 90 <0f> 0b 90 bb ea ff ff ff e9 7e fe ff ff e8 77 8b 7f 00 90 0f 0b 90
[ 78.929178][ T5836] RSP: 0018:ffffc90003f571c0 EFLAGS: 00010293
[ 78.935238][ T5836] RAX: ffffffff814080f6 RBX: ffff888000000000 RCX: ffff88802ee03c00
[ 78.943194][ T5836] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000
[ 78.951153][ T5836] RBP: ffffc90003f57348 R08: ffffffff8fc2b637 R09: 1ffffffff1f856c6
[ 78.959110][ T5836] R10: dffffc0000000000 R11: fffffbfff1f856c7 R12: ffff88801ffc53c0
[ 78.967064][ T5836] R13: dffffc0000000000 R14: ffff888000000000 R15: ffffffffffffff01
[ 78.975027][ T5836] ? __kvm_gpc_refresh+0x1186/0x1310
[ 78.980314][ T5836] ? _raw_read_unlock_irqrestore+0x85/0x110
[ 78.986193][ T5836] ? kvm_gpc_refresh+0x31/0x110
[ 78.991036][ T5836] ? __pfx___kvm_gpc_refresh+0x10/0x10
[ 78.996496][ T5836] ? kvm_xen_set_evtchn+0x138/0x230
[ 79.001694][ T5836] kvm_gpc_refresh+0xe1/0x110
[ 79.006355][ T5836] ? kvm_xen_set_evtchn+0x138/0x230
[ 79.011548][ T5836] kvm_xen_set_evtchn+0x164/0x230
[ 79.016577][ T5836] kvm_xen_hvm_evtchn_send+0x120/0x1e0
[ 79.022036][ T5836] kvm_arch_vm_ioctl+0xdaa/0x1630
[ 79.027058][ T5836] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[ 79.032520][ T5836] ? is_bpf_text_address+0x26/0x2b0
[ 79.037723][ T5836] ? __lock_acquire+0xab9/0xd20
[ 79.042579][ T5836] ? __lock_acquire+0xab9/0xd20
[ 79.047450][ T5836] ? is_bpf_text_address+0x26/0x2b0
[ 79.052651][ T5836] ? is_bpf_text_address+0x292/0x2b0
[ 79.057928][ T5836] ? is_bpf_text_address+0x26/0x2b0
[ 79.063123][ T5836] ? kernel_text_address+0xa5/0xe0
[ 79.068232][ T5836] ? __kernel_text_address+0xd/0x40
[ 79.073423][ T5836] ? unwind_get_return_address+0x4d/0x90
[ 79.079044][ T5836] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 79.085661][ T5836] ? arch_stack_walk+0xfc/0x150
[ 79.090520][ T5836] ? stack_trace_save+0x9c/0xe0
[ 79.095368][ T5836] ? stack_depot_save_flags+0x40/0x900
[ 79.100829][ T5836] ? kasan_save_track+0x4f/0x80
[ 79.105673][ T5836] ? kasan_save_track+0x3e/0x80
[ 79.110518][ T5836] ? kasan_save_free_info+0x46/0x50
[ 79.115707][ T5836] ? __kasan_slab_free+0x62/0x70
[ 79.120634][ T5836] ? kfree+0x18e/0x440
[ 79.124696][ T5836] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 79.130311][ T5836] ? security_file_ioctl+0xcb/0x2d0
[ 79.135518][ T5836] ? __se_sys_ioctl+0x47/0x170
[ 79.140266][ T5836] ? do_syscall_64+0xfa/0x3b0
[ 79.144932][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.151006][ T5836] kvm_vm_ioctl+0x85f/0xc60
[ 79.155502][ T5836] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 79.160516][ T5836] ? do_vfs_ioctl+0x12ba/0x1990
[ 79.165355][ T5836] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 79.170370][ T5836] ? kasan_quarantine_put+0xdd/0x220
[ 79.175661][ T5836] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 79.181296][ T5836] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 79.186916][ T5836] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 79.192541][ T5836] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 79.198161][ T5836] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 79.204139][ T5836] ? _raw_spin_lock_irq+0xae/0xf0
[ 79.209188][ T5836] ? __pfx_ptrace_notify+0x10/0x10
[ 79.214317][ T5836] ? bpf_lsm_file_ioctl+0x9/0x20
[ 79.219251][ T5836] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 79.224261][ T5836] __se_sys_ioctl+0xfc/0x170
[ 79.228843][ T5836] do_syscall_64+0xfa/0x3b0
[ 79.233338][ T5836] ? lockdep_hardirqs_on+0x9c/0x150
[ 79.238523][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.244578][ T5836] ? clear_bhb_loop+0x60/0xb0
[ 79.249246][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.255128][ T5836] RIP: 0033:0x7f0dd970b369
[ 79.259535][ T5836] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.279302][ T5836] RSP: 002b:00007ffe2c4269b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 79.287708][ T5836] RAX: ffffffffffffffda RBX: 00007ffe2c426b88 RCX: 00007f0dd970b369
[ 79.295667][ T5836] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000005
[ 79.303626][ T5836] RBP: 00007f0dd977e610 R08: 00007ffe2c426b88 R09: 00007ffe2c426b88
[ 79.311594][ T5836] R10: 00007ffe2c426b88 R11: 0000000000000246 R12: 0000000000000001
[ 79.319564][ T5836] R13: 00007ffe2c426b78 R14: 0000000000000001 R15: 0000000000000001
[ 79.327545][ T5836]
[ 79.330782][ T5836] Kernel Offset: disabled
[ 79.335095][ T5836] Rebooting in 86400 seconds..