./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3959598665 <...> forked to background, child pid 3184 no interfaces have a carrier [ 20.229553][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 20.239947][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. execve("./syz-executor3959598665", ["./syz-executor3959598665"], 0x7ffd3df5c510 /* 10 vars */) = 0 brk(NULL) = 0x5555573f4000 brk(0x5555573f4c40) = 0x5555573f4c40 arch_prctl(ARCH_SET_FS, 0x5555573f4300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3959598665", 4096) = 28 brk(0x555557415c40) = 0x555557415c40 brk(0x555557416000) = 0x555557416000 mprotect(0x7f677f8dd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3 memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4 pwrite64(4, "\xa0", 1, 23395) = 1 fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0 dup(3) = 5 ioctl(5, UDMABUF_CREATE, 0x20000080) = 6 syzkaller login: [ 36.989559][ T3605] ------------[ cut here ]------------ [ 36.995375][ T3605] WARNING: CPU: 0 PID: 3605 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0 [ 37.005101][ T3605] Modules linked in: [ 37.009015][ T3605] CPU: 0 PID: 3605 Comm: syz-executor395 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 37.019725][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 37.029802][ T3605] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 37.035857][ T3605] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00 [ 37.055807][ T3605] RSP: 0018:ffffc9000334fd68 EFLAGS: 00010293 [ 37.061883][ T3605] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 37.069938][ T3605] RDX: ffff888025f23b00 RSI: ffffffff8166bf31 RDI: ffff88801e03f378 [ 37.080678][ T3605] RBP: ffff88801e03f000 R08: 0000000000000005 R09: 0000000000000002 [ 37.088864][ T3605] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 37.096943][ T3605] R13: ffff88801f5b4280 R14: 0000000000000002 R15: 0000000000000000 [ 37.104914][ T3605] FS: 00005555573f4300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 37.113902][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.120523][ T3605] CR2: 000000002000014c CR3: 00000000746f9000 CR4: 0000000000350ef0 [ 37.128531][ T3605] Call Trace: [ 37.131809][ T3605] [ 37.134724][ T3605] dma_map_sgtable+0x70/0xf0 [ 37.139366][ T3605] get_sg_table.isra.0+0xe0/0x160 [ 37.144450][ T3605] begin_cpu_udmabuf+0x130/0x1d0 [ 37.149419][ T3605] ? map_udmabuf+0xa0/0xa0 [ 37.153938][ T3605] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 37.159443][ T3605] dma_buf_ioctl+0x259/0x2b0 [ 37.164043][ T3605] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 37.169783][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40 [ 37.174990][ T3605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 37.179989][ T3605] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 37.185741][ T3605] __x64_sys_ioctl+0x193/0x200 [ 37.190522][ T3605] do_syscall_64+0x35/0xb0 [ 37.194957][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 37.200895][ T3605] RIP: 0033:0x7f677f870c19 [ 37.205317][ T3605] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.225772][ T3605] RSP: 002b:00007ffcbc379198 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.234170][ T3605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f677f870c19 [ 37.242176][ T3605] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 37.250206][ T3605] RBP: 00007f677f834dc0 R08: 0000000000000000 R09: 0000000000000000 [ 37.258223][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f677f834e50 [ 37.266253][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 37.274305][ T3605] [ 37.277370][ T3605] Kernel panic - not syncing: panic_on_warn set ... [ 37.283954][ T3605] CPU: 0 PID: 3605 Comm: syz-executor395 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 37.294434][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 37.304471][ T3605] Call Trace: [ 37.307734][ T3605] [ 37.310670][ T3605] dump_stack_lvl+0xcd/0x134 [ 37.315250][ T3605] panic+0x2d7/0x636 [ 37.319129][ T3605] ? panic_print_sys_info.part.0+0x10b/0x10b [ 37.325273][ T3605] ? __warn.cold+0x1d1/0x2c5 [ 37.329846][ T3605] ? __dma_map_sg_attrs+0x181/0x1f0 [ 37.335028][ T3605] __warn.cold+0x1e2/0x2c5 [ 37.339432][ T3605] ? __dma_map_sg_attrs+0x181/0x1f0 [ 37.344627][ T3605] report_bug+0x1bc/0x210 [ 37.348958][ T3605] handle_bug+0x3c/0x60 [ 37.353111][ T3605] exc_invalid_op+0x14/0x40 [ 37.357610][ T3605] asm_exc_invalid_op+0x1b/0x20 [ 37.362547][ T3605] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 37.368350][ T3605] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00 [ 37.387958][ T3605] RSP: 0018:ffffc9000334fd68 EFLAGS: 00010293 [ 37.394019][ T3605] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 37.401982][ T3605] RDX: ffff888025f23b00 RSI: ffffffff8166bf31 RDI: ffff88801e03f378 [ 37.409947][ T3605] RBP: ffff88801e03f000 R08: 0000000000000005 R09: 0000000000000002 [ 37.417915][ T3605] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 37.425877][ T3605] R13: ffff88801f5b4280 R14: 0000000000000002 R15: 0000000000000000 [ 37.433848][ T3605] ? __dma_map_sg_attrs+0x181/0x1f0 [ 37.439056][ T3605] ? __dma_map_sg_attrs+0x181/0x1f0 [ 37.444255][ T3605] dma_map_sgtable+0x70/0xf0 [ 37.448842][ T3605] get_sg_table.isra.0+0xe0/0x160 [ 37.453864][ T3605] begin_cpu_udmabuf+0x130/0x1d0 [ 37.458796][ T3605] ? map_udmabuf+0xa0/0xa0 [ 37.463228][ T3605] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 37.468683][ T3605] dma_buf_ioctl+0x259/0x2b0 [ 37.473265][ T3605] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 37.478977][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40 [ 37.484170][ T3605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 37.489106][ T3605] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 37.494820][ T3605] __x64_sys_ioctl+0x193/0x200 [ 37.499582][ T3605] do_syscall_64+0x35/0xb0 [ 37.503993][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 37.509880][ T3605] RIP: 0033:0x7f677f870c19 [ 37.514296][ T3605] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.533897][ T3605] RSP: 002b:00007ffcbc379198 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.542304][ T3605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f677f870c19 [ 37.550269][ T3605] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 37.558230][ T3605] RBP: 00007f677f834dc0 R08: 0000000000000000 R09: 0000000000000000 [ 37.566193][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f677f834e50 [ 37.574156][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 37.582128][ T3605] [ 37.586007][ T3605] Kernel Offset: disabled [ 37.590386][ T3605] Rebooting in 86400 seconds..