./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor653438010
<...>
forked to background, child pid 3185
no interfaces have a carri[ 20.321387][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
er
[ 20.334122][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.69' (ECDSA) to the list of known hosts.
execve("./syz-executor653438010", ["./syz-executor653438010"], 0x7ffc21486970 /* 10 vars */) = 0
brk(NULL) = 0x5555558cd000
brk(0x5555558cdc40) = 0x5555558cdc40
arch_prctl(ARCH_SET_FS, 0x5555558cd300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor653438010", 4096) = 27
brk(0x5555558eec40) = 0x5555558eec40
brk(0x5555558ef000) = 0x5555558ef000
mprotect(0x7f21ba96f000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3
memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4
pwrite64(4, "\xa0", 1, 23395) = 1
fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0
dup(3) = 5
ioctl(5, UDMABUF_CREATE, 0x20000080) = 6
syzkaller login: [ 37.121532][ T3606] ------------[ cut here ]------------
[ 37.127117][ T3606] WARNING: CPU: 1 PID: 3606 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0
[ 37.137089][ T3606] Modules linked in:
[ 37.141005][ T3606] CPU: 1 PID: 3606 Comm: syz-executor653 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0
[ 37.151518][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 37.161587][ T3606] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 37.167398][ T3606] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00
[ 37.187226][ T3606] RSP: 0018:ffffc9000325fd68 EFLAGS: 00010293
[ 37.193341][ T3606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 37.201392][ T3606] RDX: ffff888018229d80 RSI: ffffffff8166bf31 RDI: ffff88801e509378
[ 37.209359][ T3606] RBP: ffff88801e509000 R08: 0000000000000005 R09: 0000000000000002
[ 37.217458][ T3606] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[ 37.225473][ T3606] R13: ffff888016d4f880 R14: 0000000000000002 R15: 0000000000000000
[ 37.233465][ T3606] FS: 00005555558cd300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 37.242408][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.248971][ T3606] CR2: 00000000005d84c8 CR3: 000000007cc80000 CR4: 0000000000350ee0
[ 37.256961][ T3606] Call Trace:
[ 37.260249][ T3606]
[ 37.263254][ T3606] dma_map_sgtable+0x70/0xf0
[ 37.267832][ T3606] get_sg_table.isra.0+0xe0/0x160
[ 37.272892][ T3606] begin_cpu_udmabuf+0x130/0x1d0
[ 37.277830][ T3606] ? map_udmabuf+0xa0/0xa0
[ 37.282261][ T3606] dma_buf_begin_cpu_access+0xfd/0x1e0
[ 37.287721][ T3606] dma_buf_ioctl+0x259/0x2b0
[ 37.292328][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0
[ 37.298040][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40
[ 37.303259][ T3606] ? bpf_lsm_file_ioctl+0x5/0x10
[ 37.308202][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0
[ 37.313958][ T3606] __x64_sys_ioctl+0x193/0x200
[ 37.318736][ T3606] do_syscall_64+0x35/0xb0
[ 37.323195][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 37.329100][ T3606] RIP: 0033:0x7f21ba902c19
[ 37.333553][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 37.353187][ T3606] RSP: 002b:00007ffdbf4a6f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 37.361627][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21ba902c19
[ 37.369595][ T3606] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 37.377604][ T3606] RBP: 00007f21ba8c6dc0 R08: 0000000000000000 R09: 0000000000000000
[ 37.385592][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21ba8c6e50
[ 37.393584][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 37.401576][ T3606]
[ 37.404579][ T3606] Kernel panic - not syncing: panic_on_warn set ...
[ 37.411143][ T3606] CPU: 1 PID: 3606 Comm: syz-executor653 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0
[ 37.421617][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 37.432010][ T3606] Call Trace:
[ 37.435269][ T3606]
[ 37.438181][ T3606] dump_stack_lvl+0xcd/0x134
[ 37.442763][ T3606] panic+0x2d7/0x636
[ 37.446637][ T3606] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 37.452599][ T3606] ? __warn.cold+0x1d1/0x2c5
[ 37.457256][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0
[ 37.462464][ T3606] __warn.cold+0x1e2/0x2c5
[ 37.466970][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0
[ 37.472162][ T3606] report_bug+0x1bc/0x210
[ 37.476491][ T3606] handle_bug+0x3c/0x60
[ 37.480642][ T3606] exc_invalid_op+0x14/0x40
[ 37.485138][ T3606] asm_exc_invalid_op+0x1b/0x20
[ 37.489985][ T3606] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 37.495791][ T3606] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00
[ 37.515481][ T3606] RSP: 0018:ffffc9000325fd68 EFLAGS: 00010293
[ 37.521539][ T3606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 37.529673][ T3606] RDX: ffff888018229d80 RSI: ffffffff8166bf31 RDI: ffff88801e509378
[ 37.537635][ T3606] RBP: ffff88801e509000 R08: 0000000000000005 R09: 0000000000000002
[ 37.545683][ T3606] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[ 37.553643][ T3606] R13: ffff888016d4f880 R14: 0000000000000002 R15: 0000000000000000
[ 37.561786][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0
[ 37.567079][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0
[ 37.572359][ T3606] dma_map_sgtable+0x70/0xf0
[ 37.576943][ T3606] get_sg_table.isra.0+0xe0/0x160
[ 37.581963][ T3606] begin_cpu_udmabuf+0x130/0x1d0
[ 37.586899][ T3606] ? map_udmabuf+0xa0/0xa0
[ 37.591308][ T3606] dma_buf_begin_cpu_access+0xfd/0x1e0
[ 37.596761][ T3606] dma_buf_ioctl+0x259/0x2b0
[ 37.601340][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0
[ 37.607047][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40
[ 37.612241][ T3606] ? bpf_lsm_file_ioctl+0x5/0x10
[ 37.617174][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0
[ 37.622884][ T3606] __x64_sys_ioctl+0x193/0x200
[ 37.627646][ T3606] do_syscall_64+0x35/0xb0
[ 37.632061][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 37.637943][ T3606] RIP: 0033:0x7f21ba902c19
[ 37.642348][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 37.662033][ T3606] RSP: 002b:00007ffdbf4a6f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 37.670610][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21ba902c19
[ 37.678568][ T3606] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 37.686529][ T3606] RBP: 00007f21ba8c6dc0 R08: 0000000000000000 R09: 0000000000000000
[ 37.694487][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21ba8c6e50
[ 37.702446][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 37.710414][ T3606]
[ 37.714312][ T3606] Kernel Offset: disabled
[ 37.718658][ T3606] Rebooting in 86400 seconds..