./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2791352519
<...>
DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d
forked to background, child pid 3190
[ 36.370459][ T3191] 8021q: adding VLAN 0 to HW filter on device bond0
[ 36.374611][ T3191] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.80' (ECDSA) to the list of known hosts.
execve("./syz-executor2791352519", ["./syz-executor2791352519"], 0x7ffcaa174ba0 /* 10 vars */) = 0
brk(NULL) = 0x555555e56000
brk(0x555555e56c40) = 0x555555e56c40
arch_prctl(ARCH_SET_FS, 0x555555e56300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2791352519", 4096) = 28
brk(0x555555e77c40) = 0x555555e77c40
brk(0x555555e78000) = 0x555555e78000
mprotect(0x7fcd82758000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3
memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4
pwrite64(4, "\xa0", 1, 23395) = 1
fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0
dup(3) = 5
ioctl(5, UDMABUF_CREATE, 0x20000080) = 6
syzkaller login: [ 52.904293][ T3619] ------------[ cut here ]------------
[ 52.904310][ T3619] WARNING: CPU: 1 PID: 3619 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0
[ 52.919938][ T3619] Modules linked in:
[ 52.923855][ T3619] CPU: 0 PID: 3619 Comm: syz-executor279 Not tainted 5.18.0-next-20220526-syzkaller #0
[ 52.933759][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 52.943883][ T3619] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 52.949830][ T3619] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d f0 c4 c1 0d e9 db fe ff ff e8 86 a5 13 00 0f 0b e8 7f a5 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 70 a5 13 00 49 8d 7f 50 48 b8 00
[ 52.969555][ T3619] RSP: 0018:ffffc9000300fd68 EFLAGS: 00010293
[ 52.975643][ T3619] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 52.983813][ T3619] RDX: ffff88807def1d80 RSI: ffffffff8166ef21 RDI: ffff8881486a2378
[ 52.992021][ T3619] RBP: ffff8881486a2000 R08: 0000000000000005 R09: 0000000000000002
[ 53.000067][ T3619] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[ 53.008045][ T3619] R13: ffff88801c3d4380 R14: 0000000000000002 R15: 0000000000000000
[ 53.016117][ T3619] FS: 0000555555e56300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 53.025241][ T3619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.031907][ T3619] CR2: 00007ffc13fae020 CR3: 00000000785a3000 CR4: 00000000003506f0
[ 53.039964][ T3619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.047948][ T3619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.056045][ T3619] Call Trace:
[ 53.059341][ T3619]
[ 53.062345][ T3619] dma_map_sgtable+0x70/0xf0
[ 53.066961][ T3619] get_sg_table.isra.0+0xe0/0x160
[ 53.072084][ T3619] begin_cpu_udmabuf+0x130/0x1d0
[ 53.077049][ T3619] ? map_udmabuf+0xa0/0xa0
[ 53.081537][ T3619] dma_buf_begin_cpu_access+0xfd/0x1e0
[ 53.087022][ T3619] dma_buf_ioctl+0x259/0x2b0
[ 53.091706][ T3619] ? dma_buf_begin_cpu_access+0x1e0/0x1e0
[ 53.097443][ T3619] ? bpf_lsm_file_ioctl+0x5/0x10
[ 53.102471][ T3619] ? dma_buf_begin_cpu_access+0x1e0/0x1e0
[ 53.108220][ T3619] __x64_sys_ioctl+0x193/0x200
[ 53.113137][ T3619] do_syscall_64+0x35/0xb0
[ 53.117582][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 53.123580][ T3619] RIP: 0033:0x7fcd826ebc19
[ 53.128182][ T3619] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 53.147943][ T3619] RSP: 002b:00007ffc13e54bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 53.156510][ T3619] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd826ebc19
[ 53.164585][ T3619] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 53.172651][ T3619] RBP: 00007fcd826afdc0 R08: 0000000000000000 R09: 0000000000000000
[ 53.180706][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd826afe50
[ 53.188683][ T3619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 53.196799][ T3619]
[ 53.199913][ T3619] Kernel panic - not syncing: panic_on_warn set ...
[ 53.206498][ T3619] CPU: 0 PID: 3619 Comm: syz-executor279 Not tainted 5.18.0-next-20220526-syzkaller #0
[ 53.216111][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 53.226168][ T3619] Call Trace:
[ 53.229444][ T3619]
[ 53.232374][ T3619] dump_stack_lvl+0xcd/0x134
[ 53.236972][ T3619] panic+0x2d7/0x636
[ 53.240867][ T3619] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 53.246856][ T3619] ? __warn.cold+0x1d9/0x2cd
[ 53.251440][ T3619] ? __dma_map_sg_attrs+0x181/0x1f0
[ 53.256632][ T3619] __warn.cold+0x1ea/0x2cd
[ 53.261064][ T3619] ? __dma_map_sg_attrs+0x181/0x1f0
[ 53.266308][ T3619] report_bug+0x1bc/0x210
[ 53.270671][ T3619] handle_bug+0x3c/0x60
[ 53.274846][ T3619] exc_invalid_op+0x14/0x40
[ 53.279371][ T3619] asm_exc_invalid_op+0x1b/0x20
[ 53.284241][ T3619] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 53.290062][ T3619] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d f0 c4 c1 0d e9 db fe ff ff e8 86 a5 13 00 0f 0b e8 7f a5 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 70 a5 13 00 49 8d 7f 50 48 b8 00
[ 53.309673][ T3619] RSP: 0018:ffffc9000300fd68 EFLAGS: 00010293
[ 53.315832][ T3619] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 53.323806][ T3619] RDX: ffff88807def1d80 RSI: ffffffff8166ef21 RDI: ffff8881486a2378
[ 53.331781][ T3619] RBP: ffff8881486a2000 R08: 0000000000000005 R09: 0000000000000002
[ 53.339753][ T3619] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[ 53.347728][ T3619] R13: ffff88801c3d4380 R14: 0000000000000002 R15: 0000000000000000
[ 53.355712][ T3619] ? __dma_map_sg_attrs+0x181/0x1f0
[ 53.360930][ T3619] ? __dma_map_sg_attrs+0x181/0x1f0
[ 53.366151][ T3619] dma_map_sgtable+0x70/0xf0
[ 53.370754][ T3619] get_sg_table.isra.0+0xe0/0x160
[ 53.375798][ T3619] begin_cpu_udmabuf+0x130/0x1d0
[ 53.380749][ T3619] ? map_udmabuf+0xa0/0xa0
[ 53.385176][ T3619] dma_buf_begin_cpu_access+0xfd/0x1e0
[ 53.390645][ T3619] dma_buf_ioctl+0x259/0x2b0
[ 53.395242][ T3619] ? dma_buf_begin_cpu_access+0x1e0/0x1e0
[ 53.400971][ T3619] ? bpf_lsm_file_ioctl+0x5/0x10
[ 53.405924][ T3619] ? dma_buf_begin_cpu_access+0x1e0/0x1e0
[ 53.411670][ T3619] __x64_sys_ioctl+0x193/0x200
[ 53.416451][ T3619] do_syscall_64+0x35/0xb0
[ 53.420894][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 53.426818][ T3619] RIP: 0033:0x7fcd826ebc19
[ 53.431248][ T3619] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 53.450879][ T3619] RSP: 002b:00007ffc13e54bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 53.459305][ T3619] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd826ebc19
[ 53.467284][ T3619] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 53.475259][ T3619] RBP: 00007fcd826afdc0 R08: 0000000000000000 R09: 0000000000000000
[ 53.483241][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd826afe50
[ 53.491222][ T3619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 53.499220][ T3619]
[ 53.502519][ T3619] Kernel Offset: disabled
[ 53.506879][ T3619] Rebooting in 86400 seconds..