./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3894016765
<...>
DUID 00:04:ab:21:30:2a:f6:ad:63:06:1d:ce:9a:68:94:64:4e:95
forked to background, child pid 4666
[ 22.053229][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0
[ 22.062610][ T4667] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.144' (ECDSA) to the list of known hosts.
execve("./syz-executor3894016765", ["./syz-executor3894016765"], 0x7fffdde9ee00 /* 10 vars */) = 0
brk(NULL) = 0x5555569b2000
brk(0x5555569b2c40) = 0x5555569b2c40
arch_prctl(ARCH_SET_FS, 0x5555569b2300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3894016765", 4096) = 28
brk(0x5555569d3c40) = 0x5555569d3c40
brk(0x5555569d4000) = 0x5555569d4000
mprotect(0x7febcce25000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 3
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0x81, 0), 0x20000140) = 0
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 4
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0xa0, 0), 0x20000240) = 0
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 6
ioctl(6, _IOC(_IOC_NONE, 0x3b, 0x81, 0), 0x20000000) = 0
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0x85, 0), 0x200000c0) = 0
syzkaller login: [ 41.289743][ T4997] ------------[ cut here ]------------
[ 41.295372][ T4997] WARNING: CPU: 0 PID: 4997 at drivers/iommu/iommufd/selftest.c:762 iommufd_test+0x1bed/0x2c20
[ 41.306081][ T4997] Modules linked in:
[ 41.310016][ T4997] CPU: 0 PID: 4997 Comm: syz-executor389 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0
[ 41.320499][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 41.330718][ T4997] RIP: 0010:iommufd_test+0x1bed/0x2c20
[ 41.336288][ T4997] Code: 48 85 db 0f 88 36 0a 00 00 e8 df bb ed fc 48 89 de bf 01 00 00 00 e8 12 b8 ed fc 48 83 fb 01 0f 84 51 ff ff ff e8 c3 bb ed fc <0f> 0b 41 bf f2 ff ff ff e8 b6 bb ed fc e8 b1 bb ed fc 48 8b 54 24
[ 41.356002][ T4997] RSP: 0018:ffffc90003a6fcd8 EFLAGS: 00010293
[ 41.362135][ T4997] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 41.370298][ T4997] RDX: ffff8880183c1dc0 RSI: ffffffff84968b1d RDI: 0000000000000007
[ 41.378505][ T4997] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000001
[ 41.386627][ T4997] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffffffffff7b
[ 41.394784][ T4997] R13: ffff888015661410 R14: 0000000000000001 R15: ffffc90003a6fd68
[ 41.402931][ T4997] FS: 00005555569b2300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 41.411968][ T4997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.418613][ T4997] CR2: 0000000020000040 CR3: 0000000072c6f000 CR4: 0000000000350ef0
[ 41.426609][ T4997] Call Trace:
[ 41.430033][ T4997]
[ 41.434009][ T4997] ? __warn+0xe6/0x390
[ 41.438072][ T4997] ? iommufd_test+0x1bed/0x2c20
[ 41.443069][ T4997] ? report_bug+0x2da/0x500
[ 41.447619][ T4997] ? handle_bug+0x3c/0x70
[ 41.452014][ T4997] ? exc_invalid_op+0x18/0x50
[ 41.456728][ T4997] ? asm_exc_invalid_op+0x1a/0x20
[ 41.461817][ T4997] ? iommufd_test+0x1bed/0x2c20
[ 41.466685][ T4997] ? iommufd_test+0x1bed/0x2c20
[ 41.471643][ T4997] ? iommufd_test+0x1bed/0x2c20
[ 41.476531][ T4997] ? iommufd_selftest_destroy+0x190/0x190
[ 41.482328][ T4997] iommufd_fops_ioctl+0x317/0x4b0
[ 41.487591][ T4997] ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 41.493526][ T4997] ? lock_downgrade+0x690/0x690
[ 41.498419][ T4997] ? bpf_lsm_file_ioctl+0x9/0x10
[ 41.503535][ T4997] ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 41.509420][ T4997] __x64_sys_ioctl+0x197/0x210
[ 41.514208][ T4997] do_syscall_64+0x39/0xb0
[ 41.518712][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.524651][ T4997] RIP: 0033:0x7febccdb8d79
[ 41.529148][ T4997] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.549061][ T4997] RSP: 002b:00007ffdab6d9918 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 41.557532][ T4997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febccdb8d79
[ 41.565675][ T4997] RDX: 0000000020000280 RSI: 0000000000003ba0 RDI: 0000000000000004
[ 41.574203][ T4997] RBP: 00007febccd7cf20 R08: 0000000000000000 R09: 0000000000000000
[ 41.582266][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007febccd7cfb0
[ 41.590325][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.598665][ T4997]
[ 41.601832][ T4997] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 41.609190][ T4997] CPU: 0 PID: 4997 Comm: syz-executor389 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0
[ 41.619707][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 41.629796][ T4997] Call Trace:
[ 41.633074][ T4997]
[ 41.636106][ T4997] dump_stack_lvl+0xd9/0x150
[ 41.640695][ T4997] panic+0x686/0x730
[ 41.644854][ T4997] ? panic_smp_self_stop+0xa0/0xa0
[ 41.649979][ T4997] ? show_trace_log_lvl+0x284/0x390
[ 41.655187][ T4997] ? iommufd_test+0x1bed/0x2c20
[ 41.660041][ T4997] check_panic_on_warn+0xb1/0xc0
[ 41.665097][ T4997] __warn+0xf2/0x390
[ 41.669022][ T4997] ? iommufd_test+0x1bed/0x2c20
[ 41.673890][ T4997] report_bug+0x2da/0x500
[ 41.678496][ T4997] handle_bug+0x3c/0x70
[ 41.683890][ T4997] exc_invalid_op+0x18/0x50
[ 41.688403][ T4997] asm_exc_invalid_op+0x1a/0x20
[ 41.693278][ T4997] RIP: 0010:iommufd_test+0x1bed/0x2c20
[ 41.698752][ T4997] Code: 48 85 db 0f 88 36 0a 00 00 e8 df bb ed fc 48 89 de bf 01 00 00 00 e8 12 b8 ed fc 48 83 fb 01 0f 84 51 ff ff ff e8 c3 bb ed fc <0f> 0b 41 bf f2 ff ff ff e8 b6 bb ed fc e8 b1 bb ed fc 48 8b 54 24
[ 41.718467][ T4997] RSP: 0018:ffffc90003a6fcd8 EFLAGS: 00010293
[ 41.724572][ T4997] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 41.732637][ T4997] RDX: ffff8880183c1dc0 RSI: ffffffff84968b1d RDI: 0000000000000007
[ 41.740820][ T4997] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000001
[ 41.748922][ T4997] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffffffffff7b
[ 41.757177][ T4997] R13: ffff888015661410 R14: 0000000000000001 R15: ffffc90003a6fd68
[ 41.765163][ T4997] ? iommufd_test+0x1bed/0x2c20
[ 41.770040][ T4997] ? iommufd_test+0x1bed/0x2c20
[ 41.774938][ T4997] ? iommufd_selftest_destroy+0x190/0x190
[ 41.780675][ T4997] iommufd_fops_ioctl+0x317/0x4b0
[ 41.785703][ T4997] ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 41.791536][ T4997] ? lock_downgrade+0x690/0x690
[ 41.796443][ T4997] ? bpf_lsm_file_ioctl+0x9/0x10
[ 41.801946][ T4997] ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 41.807980][ T4997] __x64_sys_ioctl+0x197/0x210
[ 41.812811][ T4997] do_syscall_64+0x39/0xb0
[ 41.817256][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.823194][ T4997] RIP: 0033:0x7febccdb8d79
[ 41.827642][ T4997] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.847487][ T4997] RSP: 002b:00007ffdab6d9918 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 41.856093][ T4997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febccdb8d79
[ 41.864083][ T4997] RDX: 0000000020000280 RSI: 0000000000003ba0 RDI: 0000000000000004
[ 41.872074][ T4997] RBP: 00007febccd7cf20 R08: 0000000000000000 R09: 0000000000000000
[ 41.880078][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007febccd7cfb0
[ 41.888073][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.896101][ T4997]
[ 41.899883][ T4997] Kernel Offset: disabled
[ 41.904491][ T4997] Rebooting in 86400 seconds..