./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4107303590
<...>
forked to background, child pid 4658
[ 38.310637][ T4659] 8021q: adding VLAN 0 to HW filter on device bond0
[ 38.321892][ T4659] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 38.635931][ T4734] sshd (4734) used greatest stack depth: 19824 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.161' (ECDSA) to the list of known hosts.
execve("./syz-executor4107303590", ["./syz-executor4107303590"], 0x7fff0956b4f0 /* 10 vars */) = 0
brk(NULL) = 0x55555727d000
brk(0x55555727dc40) = 0x55555727dc40
arch_prctl(ARCH_SET_FS, 0x55555727d300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4107303590", 4096) = 28
brk(0x55555729ec40) = 0x55555729ec40
brk(0x55555729f000) = 0x55555729f000
mprotect(0x7f0457f44000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 3
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0x81, 0), 0x20000140) = 0
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 4
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0xa0, 0), 0x20000240) = 0
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 6
ioctl(6, _IOC(_IOC_NONE, 0x3b, 0x81, 0), 0x20000000) = 0
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0x85, 0), 0x200000c0) = 0
syzkaller login: [ 70.496875][ T4989] ------------[ cut here ]------------
[ 70.502564][ T4989] WARNING: CPU: 0 PID: 4989 at drivers/iommu/iommufd/selftest.c:762 iommufd_test_check_pages+0x240/0x250
[ 70.513994][ T4989] Modules linked in:
[ 70.517922][ T4989] CPU: 0 PID: 4989 Comm: syz-executor410 Not tainted 6.3.0-syzkaller-11733-g825a0714d2b3 #0
[ 70.528135][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 70.538237][ T4989] RIP: 0010:iommufd_test_check_pages+0x240/0x250
[ 70.544629][ T4989] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 00 00 00 75 21 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 b9 c0 fc <0f> 0b 41 be f2 ff ff ff eb ac e8 b1 28 e4 05 90 f3 0f 1e fa 55 41
[ 70.564290][ T4989] RSP: 0018:ffffc90003a3fb80 EFLAGS: 00010293
[ 70.570378][ T4989] RAX: ffffffff84caf670 RBX: 1ffff92000747f78 RCX: ffff888028a01dc0
[ 70.578393][ T4989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 70.586423][ T4989] RBP: ffffc90003a3fc50 R08: ffffffff84caf556 R09: fffffbfff1caba86
[ 70.594465][ T4989] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffffffff7b
[ 70.602507][ T4989] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90003a3fbe0
[ 70.610514][ T4989] FS: 000055555727d300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 70.619486][ T4989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 70.626153][ T4989] CR2: 0000000020000040 CR3: 0000000075e70000 CR4: 00000000003506f0
[ 70.634184][ T4989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 70.642195][ T4989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 70.650186][ T4989] Call Trace:
[ 70.653506][ T4989]
[ 70.656459][ T4989] ? iommufd_test_access_unmap+0x2e0/0x2e0
[ 70.662321][ T4989] ? __kmalloc_node+0xe8/0x230
[ 70.667118][ T4989] iommufd_test+0x20ae/0x28b0
[ 70.671852][ T4989] ? __lock_acquire+0x2000/0x2000
[ 70.676904][ T4989] ? iommufd_selftest_destroy+0x140/0x140
[ 70.682699][ T4989] ? __might_fault+0xba/0x120
[ 70.687412][ T4989] iommufd_fops_ioctl+0x4c2/0x580
[ 70.692497][ T4989] ? iommufd_ctx_put+0x40/0x40
[ 70.697298][ T4989] ? do_notify_parent+0xf50/0xf50
[ 70.702407][ T4989] ? bpf_lsm_file_ioctl+0x9/0x10
[ 70.707370][ T4989] ? security_file_ioctl+0x81/0xa0
[ 70.712548][ T4989] ? iommufd_ctx_put+0x40/0x40
[ 70.717348][ T4989] __se_sys_ioctl+0xf1/0x160
[ 70.722020][ T4989] do_syscall_64+0x41/0xc0
[ 70.726471][ T4989] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 70.732429][ T4989] RIP: 0033:0x7f0457ed7d79
[ 70.736891][ T4989] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 70.758140][ T4989] RSP: 002b:00007ffeb7c1f6c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 70.766605][ T4989] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0457ed7d79
[ 70.774631][ T4989] RDX: 0000000020000280 RSI: 0000000000003ba0 RDI: 0000000000000004
[ 70.782845][ T4989] RBP: 00007f0457e9bf20 R08: 0000000000000000 R09: 0000000000000000
[ 70.790940][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0457e9bfb0
[ 70.798984][ T4989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 70.807021][ T4989]
[ 70.810042][ T4989] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 70.817320][ T4989] CPU: 0 PID: 4989 Comm: syz-executor410 Not tainted 6.3.0-syzkaller-11733-g825a0714d2b3 #0
[ 70.827390][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 70.837735][ T4989] Call Trace:
[ 70.841030][ T4989]
[ 70.843989][ T4989] dump_stack_lvl+0x1e7/0x2d0
[ 70.848708][ T4989] ? nf_tcp_handle_invalid+0x650/0x650
[ 70.854190][ T4989] ? panic+0x770/0x770
[ 70.858322][ T4989] ? vscnprintf+0x5d/0x80
[ 70.862669][ T4989] panic+0x30f/0x770
[ 70.866579][ T4989] ? __warn+0x171/0x4a0
[ 70.870861][ T4989] ? __memcpy_flushcache+0x2b0/0x2b0
[ 70.876172][ T4989] __warn+0x314/0x4a0
[ 70.880171][ T4989] ? iommufd_test_check_pages+0x240/0x250
[ 70.885908][ T4989] report_bug+0x2b3/0x500
[ 70.890251][ T4989] ? iommufd_test_check_pages+0x240/0x250
[ 70.896027][ T4989] handle_bug+0x3d/0x70
[ 70.900200][ T4989] exc_invalid_op+0x1a/0x50
[ 70.904712][ T4989] asm_exc_invalid_op+0x1a/0x20
[ 70.909578][ T4989] RIP: 0010:iommufd_test_check_pages+0x240/0x250
[ 70.915916][ T4989] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 00 00 00 75 21 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 b9 c0 fc <0f> 0b 41 be f2 ff ff ff eb ac e8 b1 28 e4 05 90 f3 0f 1e fa 55 41
[ 70.935625][ T4989] RSP: 0018:ffffc90003a3fb80 EFLAGS: 00010293
[ 70.941736][ T4989] RAX: ffffffff84caf670 RBX: 1ffff92000747f78 RCX: ffff888028a01dc0
[ 70.949714][ T4989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 70.957693][ T4989] RBP: ffffc90003a3fc50 R08: ffffffff84caf556 R09: fffffbfff1caba86
[ 70.965677][ T4989] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffffffff7b
[ 70.973656][ T4989] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90003a3fbe0
[ 70.981646][ T4989] ? iommufd_test_check_pages+0x126/0x250
[ 70.987549][ T4989] ? iommufd_test_check_pages+0x240/0x250
[ 70.993289][ T4989] ? iommufd_test_access_unmap+0x2e0/0x2e0
[ 70.999106][ T4989] ? __kmalloc_node+0xe8/0x230
[ 71.003890][ T4989] iommufd_test+0x20ae/0x28b0
[ 71.008583][ T4989] ? __lock_acquire+0x2000/0x2000
[ 71.013619][ T4989] ? iommufd_selftest_destroy+0x140/0x140
[ 71.019353][ T4989] ? __might_fault+0xba/0x120
[ 71.024047][ T4989] iommufd_fops_ioctl+0x4c2/0x580
[ 71.029093][ T4989] ? iommufd_ctx_put+0x40/0x40
[ 71.034106][ T4989] ? do_notify_parent+0xf50/0xf50
[ 71.039166][ T4989] ? bpf_lsm_file_ioctl+0x9/0x10
[ 71.044202][ T4989] ? security_file_ioctl+0x81/0xa0
[ 71.049369][ T4989] ? iommufd_ctx_put+0x40/0x40
[ 71.054167][ T4989] __se_sys_ioctl+0xf1/0x160
[ 71.058784][ T4989] do_syscall_64+0x41/0xc0
[ 71.063223][ T4989] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 71.069215][ T4989] RIP: 0033:0x7f0457ed7d79
[ 71.073636][ T4989] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 71.093250][ T4989] RSP: 002b:00007ffeb7c1f6c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 71.101762][ T4989] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0457ed7d79
[ 71.109744][ T4989] RDX: 0000000020000280 RSI: 0000000000003ba0 RDI: 0000000000000004
[ 71.117720][ T4989] RBP: 00007f0457e9bf20 R08: 0000000000000000 R09: 0000000000000000
[ 71.125698][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0457e9bfb0
[ 71.133704][ T4989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 71.141693][ T4989]
[ 71.145038][ T4989] Kernel Offset: disabled
[ 71.149444][ T4989] Rebooting in 86400 seconds..