./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor116206161
<...>
no interfaces have a carrier
forked to background, child pid 3182
[ 27.040393][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.046746][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.227' (ECDSA) to the list of known hosts.
execve("./syz-executor116206161", ["./syz-executor116206161"], 0x7ffd2af504f0 /* 10 vars */) = 0
brk(NULL) = 0x555555b1f000
brk(0x555555b1fc40) = 0x555555b1fc40
arch_prctl(ARCH_SET_FS, 0x555555b1f300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor116206161", 4096) = 27
brk(0x555555b40c40) = 0x555555b40c40
brk(0x555555b41000) = 0x555555b41000
mprotect(0x7fd0690ee000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3
memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4
pwrite64(4, "\xa0", 1, 23395) = 1
fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0
dup(3) = 5
ioctl(5, UDMABUF_CREATE, 0x20000080) = 6
syzkaller login: [ 49.231724][ T3610] ------------[ cut here ]------------
[ 49.231735][ T3610] WARNING: CPU: 1 PID: 3610 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0
[ 49.247178][ T3610] Modules linked in:
[ 49.251088][ T3610] CPU: 0 PID: 3610 Comm: syz-executor116 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 49.261553][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 49.271781][ T3610] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 49.277615][ T3610] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00
[ 49.297348][ T3610] RSP: 0018:ffffc90002f6fd68 EFLAGS: 00010293
[ 49.303528][ T3610] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 49.311592][ T3610] RDX: ffff8880236b3b00 RSI: ffffffff81665c81 RDI: ffff8881485b9408
[ 49.319573][ T3610] RBP: ffff8881485b9000 R08: 0000000000000002 R09: ffff888015f6fd6f
[ 49.327609][ T3610] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001
[ 49.335666][ T3610] R13: ffff88814be34680 R14: 0000000000000002 R15: 0000000000000000
[ 49.343703][ T3610] FS: 0000555555b1f300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 49.352715][ T3610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.359415][ T3610] CR2: 000000000061ba0c CR3: 00000000726d5000 CR4: 00000000003506f0
[ 49.367457][ T3610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.375517][ T3610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.383883][ T3610] Call Trace:
[ 49.387181][ T3610]
[ 49.390134][ T3610] dma_map_sgtable+0x70/0xf0
[ 49.394823][ T3610] get_sg_table.isra.0+0xe0/0x160
[ 49.399945][ T3610] begin_cpu_udmabuf+0x130/0x1d0
[ 49.404985][ T3610] ? map_udmabuf+0xa0/0xa0
[ 49.409419][ T3610] dma_buf_begin_cpu_access+0xfd/0x1d0
[ 49.414959][ T3610] dma_buf_ioctl+0x259/0x2b0
[ 49.419575][ T3610] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 49.425376][ T3610] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 49.431702][ T3610] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 49.437433][ T3610] __x64_sys_ioctl+0x193/0x200
[ 49.442282][ T3610] do_syscall_64+0x35/0xb0
[ 49.446774][ T3610] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 49.452992][ T3610] RIP: 0033:0x7fd069081c19
[ 49.457408][ T3610] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.477195][ T3610] RSP: 002b:00007ffc13631c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.485725][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd069081c19
[ 49.493788][ T3610] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 49.501833][ T3610] RBP: 00007fd069045dc0 R08: 0000000000000000 R09: 0000000000000000
[ 49.509810][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd069045e50
[ 49.517860][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.525895][ T3610]
[ 49.528928][ T3610] Kernel panic - not syncing: panic_on_warn set ...
[ 49.535517][ T3610] CPU: 0 PID: 3610 Comm: syz-executor116 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 49.545682][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 49.555745][ T3610] Call Trace:
[ 49.559028][ T3610]
[ 49.561962][ T3610] dump_stack_lvl+0xcd/0x134
[ 49.566571][ T3610] panic+0x2d7/0x636
[ 49.570481][ T3610] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 49.576484][ T3610] ? __warn.cold+0x1d9/0x2cd
[ 49.581084][ T3610] ? __dma_map_sg_attrs+0x181/0x1f0
[ 49.586295][ T3610] __warn.cold+0x1ea/0x2cd
[ 49.590723][ T3610] ? __dma_map_sg_attrs+0x181/0x1f0
[ 49.595933][ T3610] report_bug+0x1bc/0x210
[ 49.600280][ T3610] handle_bug+0x3c/0x60
[ 49.604449][ T3610] exc_invalid_op+0x14/0x40
[ 49.608966][ T3610] asm_exc_invalid_op+0x1b/0x20
[ 49.613824][ T3610] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 49.619646][ T3610] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00
[ 49.639264][ T3610] RSP: 0018:ffffc90002f6fd68 EFLAGS: 00010293
[ 49.645338][ T3610] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 49.653313][ T3610] RDX: ffff8880236b3b00 RSI: ffffffff81665c81 RDI: ffff8881485b9408
[ 49.661291][ T3610] RBP: ffff8881485b9000 R08: 0000000000000002 R09: ffff888015f6fd6f
[ 49.669268][ T3610] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001
[ 49.677242][ T3610] R13: ffff88814be34680 R14: 0000000000000002 R15: 0000000000000000
[ 49.685224][ T3610] ? __dma_map_sg_attrs+0x62/0x1f0
[ 49.690352][ T3610] ? __dma_map_sg_attrs+0x181/0x1f0
[ 49.695567][ T3610] ? __dma_map_sg_attrs+0x181/0x1f0
[ 49.700777][ T3610] dma_map_sgtable+0x70/0xf0
[ 49.705383][ T3610] get_sg_table.isra.0+0xe0/0x160
[ 49.710428][ T3610] begin_cpu_udmabuf+0x130/0x1d0
[ 49.715377][ T3610] ? map_udmabuf+0xa0/0xa0
[ 49.719807][ T3610] dma_buf_begin_cpu_access+0xfd/0x1d0
[ 49.725277][ T3610] dma_buf_ioctl+0x259/0x2b0
[ 49.729877][ T3610] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 49.735611][ T3610] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 49.741871][ T3610] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 49.747630][ T3610] __x64_sys_ioctl+0x193/0x200
[ 49.752416][ T3610] do_syscall_64+0x35/0xb0
[ 49.756843][ T3610] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 49.762746][ T3610] RIP: 0033:0x7fd069081c19
[ 49.767169][ T3610] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.786791][ T3610] RSP: 002b:00007ffc13631c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.795213][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd069081c19
[ 49.803191][ T3610] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 49.811168][ T3610] RBP: 00007fd069045dc0 R08: 0000000000000000 R09: 0000000000000000
[ 49.819143][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd069045e50
[ 49.827120][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.835114][ T3610]
[ 49.838470][ T3610] Kernel Offset: disabled
[ 49.842820][ T3610] Rebooting in 86400 seconds..