./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1521299408
<...>
no interfaces have a carrier
forked to background, child pid 3181
[ 26.806982][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.813566][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.97' (ECDSA) to the list of known hosts.
execve("./syz-executor1521299408", ["./syz-executor1521299408"], 0x7fff6a297ed0 /* 10 vars */) = 0
brk(NULL) = 0x555556f95000
brk(0x555556f95c40) = 0x555556f95c40
arch_prctl(ARCH_SET_FS, 0x555556f95300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1521299408", 4096) = 28
brk(0x555556fb6c40) = 0x555556fb6c40
brk(0x555556fb7000) = 0x555556fb7000
mprotect(0x7fbd82979000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3
memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4
pwrite64(4, "\xa0", 1, 23395) = 1
fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0
dup(3) = 5
ioctl(5, UDMABUF_CREATE, 0x20000080) = 6
syzkaller login: [ 49.803445][ T3609] ------------[ cut here ]------------
[ 49.803452][ T3609] WARNING: CPU: 1 PID: 3609 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0
[ 49.818873][ T3609] Modules linked in:
[ 49.822888][ T3609] CPU: 1 PID: 3609 Comm: syz-executor152 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 49.833279][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 49.843494][ T3609] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 49.849325][ T3609] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00
[ 49.869032][ T3609] RSP: 0018:ffffc90002dbfd68 EFLAGS: 00010293
[ 49.875185][ T3609] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 49.883238][ T3609] RDX: ffff88807e68bb00 RSI: ffffffff81665c81 RDI: ffff88801bf1c408
[ 49.891219][ T3609] RBP: ffff88801bf1c000 R08: 0000000000000002 R09: ffff888016a8116f
[ 49.899265][ T3609] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001
[ 49.907326][ T3609] R13: ffff888015d7d380 R14: 0000000000000002 R15: 0000000000000000
[ 49.915482][ T3609] FS: 0000555556f95300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 49.924521][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.931123][ T3609] CR2: 00000000005d84c8 CR3: 0000000071b3b000 CR4: 00000000003506e0
[ 49.939207][ T3609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.947290][ T3609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.955427][ T3609] Call Trace:
[ 49.958721][ T3609]
[ 49.961673][ T3609] dma_map_sgtable+0x70/0xf0
[ 49.966384][ T3609] get_sg_table.isra.0+0xe0/0x160
[ 49.971449][ T3609] begin_cpu_udmabuf+0x130/0x1d0
[ 49.976452][ T3609] ? map_udmabuf+0xa0/0xa0
[ 49.980886][ T3609] dma_buf_begin_cpu_access+0xfd/0x1d0
[ 49.986434][ T3609] dma_buf_ioctl+0x259/0x2b0
[ 49.991039][ T3609] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 49.996835][ T3609] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 50.003155][ T3609] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.008871][ T3609] __x64_sys_ioctl+0x193/0x200
[ 50.013707][ T3609] do_syscall_64+0x35/0xb0
[ 50.018145][ T3609] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.024332][ T3609] RIP: 0033:0x7fbd8290cc19
[ 50.028750][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.048450][ T3609] RSP: 002b:00007ffc72f2a558 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.056949][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd8290cc19
[ 50.065038][ T3609] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 50.073110][ T3609] RBP: 00007fbd828d0dc0 R08: 0000000000000000 R09: 0000000000000000
[ 50.081102][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd828d0e50
[ 50.089159][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.097239][ T3609]
[ 50.100278][ T3609] Kernel panic - not syncing: panic_on_warn set ...
[ 50.106895][ T3609] CPU: 1 PID: 3609 Comm: syz-executor152 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 50.117030][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.127072][ T3609] Call Trace:
[ 50.130340][ T3609]
[ 50.133259][ T3609] dump_stack_lvl+0xcd/0x134
[ 50.137930][ T3609] panic+0x2d7/0x636
[ 50.141814][ T3609] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.147805][ T3609] ? __warn.cold+0x1d9/0x2cd
[ 50.152385][ T3609] ? __dma_map_sg_attrs+0x181/0x1f0
[ 50.157578][ T3609] __warn.cold+0x1ea/0x2cd
[ 50.161983][ T3609] ? __dma_map_sg_attrs+0x181/0x1f0
[ 50.167171][ T3609] report_bug+0x1bc/0x210
[ 50.171495][ T3609] handle_bug+0x3c/0x60
[ 50.175642][ T3609] exc_invalid_op+0x14/0x40
[ 50.180137][ T3609] asm_exc_invalid_op+0x1b/0x20
[ 50.184978][ T3609] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 50.190778][ T3609] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00
[ 50.210382][ T3609] RSP: 0018:ffffc90002dbfd68 EFLAGS: 00010293
[ 50.216466][ T3609] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 50.224442][ T3609] RDX: ffff88807e68bb00 RSI: ffffffff81665c81 RDI: ffff88801bf1c408
[ 50.232420][ T3609] RBP: ffff88801bf1c000 R08: 0000000000000002 R09: ffff888016a8116f
[ 50.240402][ T3609] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001
[ 50.248376][ T3609] R13: ffff888015d7d380 R14: 0000000000000002 R15: 0000000000000000
[ 50.256365][ T3609] ? __dma_map_sg_attrs+0x62/0x1f0
[ 50.261498][ T3609] ? __dma_map_sg_attrs+0x181/0x1f0
[ 50.266720][ T3609] ? __dma_map_sg_attrs+0x181/0x1f0
[ 50.271938][ T3609] dma_map_sgtable+0x70/0xf0
[ 50.276543][ T3609] get_sg_table.isra.0+0xe0/0x160
[ 50.281588][ T3609] begin_cpu_udmabuf+0x130/0x1d0
[ 50.286544][ T3609] ? map_udmabuf+0xa0/0xa0
[ 50.290974][ T3609] dma_buf_begin_cpu_access+0xfd/0x1d0
[ 50.296446][ T3609] dma_buf_ioctl+0x259/0x2b0
[ 50.301057][ T3609] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.306791][ T3609] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 50.313048][ T3609] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.318780][ T3609] __x64_sys_ioctl+0x193/0x200
[ 50.324081][ T3609] do_syscall_64+0x35/0xb0
[ 50.328517][ T3609] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.334424][ T3609] RIP: 0033:0x7fbd8290cc19
[ 50.338847][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.358463][ T3609] RSP: 002b:00007ffc72f2a558 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.366886][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd8290cc19
[ 50.374877][ T3609] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 50.382869][ T3609] RBP: 00007fbd828d0dc0 R08: 0000000000000000 R09: 0000000000000000
[ 50.390860][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd828d0e50
[ 50.398850][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.406851][ T3609]
[ 50.410163][ T3609] Kernel Offset: disabled
[ 50.414520][ T3609] Rebooting in 86400 seconds..