./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4114139210
<...>
DUID 00:04:dc:6c:a8:75:19:b8:f7:30:df:f1:e8:1e:24:9d:66:1e
forked to background, child pid 4670
[ 49.318544][ T4671] 8021q: adding VLAN 0 to HW filter on device bond0
[ 49.338468][ T4671] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.63' (ECDSA) to the list of known hosts.
execve("./syz-executor4114139210", ["./syz-executor4114139210"], 0x7ffccee4d340 /* 10 vars */) = 0
brk(NULL) = 0x5555556bf000
brk(0x5555556bfc40) = 0x5555556bfc40
arch_prctl(ARCH_SET_FS, 0x5555556bf300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4114139210", 4096) = 28
brk(0x5555556e0c40) = 0x5555556e0c40
brk(0x5555556e1000) = 0x5555556e1000
mprotect(0x7fadd877f000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 3
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0x81, 0), 0x20000140) = 0
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 4
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0xa0, 0), 0x20000240) = 0
openat(AT_FDCWD, "/dev/iommu", O_RDONLY) = 6
ioctl(6, _IOC(_IOC_NONE, 0x3b, 0x81, 0), 0x20000000) = 0
ioctl(3, _IOC(_IOC_NONE, 0x3b, 0x85, 0), 0x200000c0) = 0
syzkaller login: [ 81.346857][ T5005] ------------[ cut here ]------------
[ 81.352664][ T5005] WARNING: CPU: 1 PID: 5005 at drivers/iommu/iommufd/selftest.c:762 iommufd_test+0x1bed/0x2c20
[ 81.363124][ T5005] Modules linked in:
[ 81.367060][ T5005] CPU: 1 PID: 5005 Comm: syz-executor411 Not tainted 6.3.0-syzkaller-12049-g58390c8ce1bd #0
[ 81.377223][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 81.387395][ T5005] RIP: 0010:iommufd_test+0x1bed/0x2c20
[ 81.392971][ T5005] Code: 48 85 db 0f 88 36 0a 00 00 e8 0f fb ed fc 48 89 de bf 01 00 00 00 e8 42 f7 ed fc 48 83 fb 01 0f 84 51 ff ff ff e8 f3 fa ed fc <0f> 0b 41 bf f2 ff ff ff e8 e6 fa ed fc e8 e1 fa ed fc 48 8b 54 24
[ 81.412702][ T5005] RSP: 0018:ffffc9000398fcd8 EFLAGS: 00010293
[ 81.419044][ T5005] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 81.427048][ T5005] RDX: ffff8880196f0000 RSI: ffffffff849662ad RDI: 0000000000000007
[ 81.435133][ T5005] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000001
[ 81.443183][ T5005] R10: 0000000000000000 R11: 1ffffffff21a07c8 R12: ffffffffffffff7b
[ 81.451264][ T5005] R13: ffff888017a4b410 R14: 0000000000000001 R15: ffffc9000398fd68
[ 81.459316][ T5005] FS: 00005555556bf300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 81.468285][ T5005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 81.475013][ T5005] CR2: 000000000061cca0 CR3: 0000000017fbd000 CR4: 00000000003506e0
[ 81.483090][ T5005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 81.491182][ T5005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 81.499224][ T5005] Call Trace:
[ 81.502515][ T5005]
[ 81.505480][ T5005] ? iommufd_selftest_destroy+0x190/0x190
[ 81.511400][ T5005] iommufd_fops_ioctl+0x317/0x4b0
[ 81.516513][ T5005] ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 81.522428][ T5005] ? lock_downgrade+0x690/0x690
[ 81.527373][ T5005] ? bpf_lsm_file_ioctl+0x9/0x10
[ 81.532445][ T5005] ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 81.538305][ T5005] __x64_sys_ioctl+0x197/0x210
[ 81.543215][ T5005] do_syscall_64+0x39/0xb0
[ 81.547722][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.553740][ T5005] RIP: 0033:0x7fadd8712d79
[ 81.558285][ T5005] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 81.578109][ T5005] RSP: 002b:00007fff30e101f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 81.586615][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadd8712d79
[ 81.594761][ T5005] RDX: 0000000020000280 RSI: 0000000000003ba0 RDI: 0000000000000004
[ 81.602836][ T5005] RBP: 00007fadd86d6f20 R08: 0000000000000000 R09: 0000000000000000
[ 81.610906][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadd86d6fb0
[ 81.618976][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 81.627011][ T5005]
[ 81.630147][ T5005] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 81.637446][ T5005] CPU: 1 PID: 5005 Comm: syz-executor411 Not tainted 6.3.0-syzkaller-12049-g58390c8ce1bd #0
[ 81.647614][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 81.657795][ T5005] Call Trace:
[ 81.661189][ T5005]
[ 81.664137][ T5005] dump_stack_lvl+0xd9/0x150
[ 81.668768][ T5005] panic+0x686/0x730
[ 81.672715][ T5005] ? panic_smp_self_stop+0xa0/0xa0
[ 81.677863][ T5005] ? show_trace_log_lvl+0x285/0x390
[ 81.683116][ T5005] ? iommufd_test+0x1bed/0x2c20
[ 81.687993][ T5005] check_panic_on_warn+0xb1/0xc0
[ 81.692994][ T5005] __warn+0xf2/0x390
[ 81.696935][ T5005] ? iommufd_test+0x1bed/0x2c20
[ 81.701816][ T5005] report_bug+0x2da/0x500
[ 81.706195][ T5005] handle_bug+0x3c/0x70
[ 81.710415][ T5005] exc_invalid_op+0x18/0x50
[ 81.714955][ T5005] asm_exc_invalid_op+0x1a/0x20
[ 81.719845][ T5005] RIP: 0010:iommufd_test+0x1bed/0x2c20
[ 81.725336][ T5005] Code: 48 85 db 0f 88 36 0a 00 00 e8 0f fb ed fc 48 89 de bf 01 00 00 00 e8 42 f7 ed fc 48 83 fb 01 0f 84 51 ff ff ff e8 f3 fa ed fc <0f> 0b 41 bf f2 ff ff ff e8 e6 fa ed fc e8 e1 fa ed fc 48 8b 54 24
[ 81.744978][ T5005] RSP: 0018:ffffc9000398fcd8 EFLAGS: 00010293
[ 81.751157][ T5005] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 81.759148][ T5005] RDX: ffff8880196f0000 RSI: ffffffff849662ad RDI: 0000000000000007
[ 81.767225][ T5005] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000001
[ 81.775216][ T5005] R10: 0000000000000000 R11: 1ffffffff21a07c8 R12: ffffffffffffff7b
[ 81.783208][ T5005] R13: ffff888017a4b410 R14: 0000000000000001 R15: ffffc9000398fd68
[ 81.791230][ T5005] ? iommufd_test+0x1bed/0x2c20
[ 81.796220][ T5005] ? iommufd_test+0x1bed/0x2c20
[ 81.801121][ T5005] ? iommufd_selftest_destroy+0x190/0x190
[ 81.806893][ T5005] iommufd_fops_ioctl+0x317/0x4b0
[ 81.811968][ T5005] ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 81.817822][ T5005] ? lock_downgrade+0x690/0x690
[ 81.822719][ T5005] ? bpf_lsm_file_ioctl+0x9/0x10
[ 81.827704][ T5005] ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 81.833557][ T5005] __x64_sys_ioctl+0x197/0x210
[ 81.838451][ T5005] do_syscall_64+0x39/0xb0
[ 81.842916][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.848848][ T5005] RIP: 0033:0x7fadd8712d79
[ 81.853286][ T5005] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 81.872920][ T5005] RSP: 002b:00007fff30e101f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 81.881536][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadd8712d79
[ 81.889530][ T5005] RDX: 0000000020000280 RSI: 0000000000003ba0 RDI: 0000000000000004
[ 81.897702][ T5005] RBP: 00007fadd86d6f20 R08: 0000000000000000 R09: 0000000000000000
[ 81.905783][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadd86d6fb0
[ 81.913776][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 81.921785][ T5005]
[ 81.925040][ T5005] Kernel Offset: disabled
[ 81.929467][ T5005] Rebooting in 86400 seconds..