./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1764329464 <...> forked to background, child pid 3183 no interfaces have a carrier [ 19.960844][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 19.969642][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. execve("./syz-executor1764329464", ["./syz-executor1764329464"], 0x7fff38e6f4d0 /* 10 vars */) = 0 brk(NULL) = 0x555556968000 brk(0x555556968c40) = 0x555556968c40 arch_prctl(ARCH_SET_FS, 0x555556968300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1764329464", 4096) = 28 brk(0x555556989c40) = 0x555556989c40 brk(0x55555698a000) = 0x55555698a000 mprotect(0x7fab6ab9f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3 memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4 pwrite64(4, "\xa0", 1, 23395) = 1 fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0 dup(3) = 5 ioctl(5, UDMABUF_CREATE, 0x20000080) = 6 syzkaller login: [ 34.215301][ T3609] ------------[ cut here ]------------ [ 34.221065][ T3609] WARNING: CPU: 1 PID: 3609 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0 [ 34.230855][ T3609] Modules linked in: [ 34.234921][ T3609] CPU: 1 PID: 3609 Comm: syz-executor176 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 34.245910][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 34.256142][ T3609] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 34.262118][ T3609] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00 [ 34.282100][ T3609] RSP: 0018:ffffc900032bfd68 EFLAGS: 00010293 [ 34.288247][ T3609] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 34.296469][ T3609] RDX: ffff88807e203b00 RSI: ffffffff8166bf31 RDI: ffff888146eb5378 [ 34.304568][ T3609] RBP: ffff888146eb5000 R08: 0000000000000005 R09: 0000000000000002 [ 34.312556][ T3609] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 34.320672][ T3609] R13: ffff8880168dd180 R14: 0000000000000002 R15: 0000000000000000 [ 34.328643][ T3609] FS: 0000555556968300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 34.337607][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.344383][ T3609] CR2: 0000564234f80600 CR3: 00000000251c2000 CR4: 0000000000350ee0 [ 34.352398][ T3609] Call Trace: [ 34.355673][ T3609] [ 34.358589][ T3609] dma_map_sgtable+0x70/0xf0 [ 34.363213][ T3609] get_sg_table.isra.0+0xe0/0x160 [ 34.368261][ T3609] begin_cpu_udmabuf+0x130/0x1d0 [ 34.373312][ T3609] ? map_udmabuf+0xa0/0xa0 [ 34.377992][ T3609] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 34.383480][ T3609] dma_buf_ioctl+0x259/0x2b0 [ 34.388068][ T3609] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 34.393976][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 34.399200][ T3609] ? bpf_lsm_file_ioctl+0x5/0x10 [ 34.404295][ T3609] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 34.410117][ T3609] __x64_sys_ioctl+0x193/0x200 [ 34.415056][ T3609] do_syscall_64+0x35/0xb0 [ 34.419478][ T3609] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 34.425420][ T3609] RIP: 0033:0x7fab6ab32c19 [ 34.429840][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 34.449758][ T3609] RSP: 002b:00007ffff6536b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.458251][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab6ab32c19 [ 34.466257][ T3609] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 34.474276][ T3609] RBP: 00007fab6aaf6dc0 R08: 0000000000000000 R09: 0000000000000000 [ 34.482274][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab6aaf6e50 [ 34.490227][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 34.498251][ T3609] [ 34.501290][ T3609] Kernel panic - not syncing: panic_on_warn set ... [ 34.507872][ T3609] CPU: 0 PID: 3609 Comm: syz-executor176 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 34.518346][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 34.528397][ T3609] Call Trace: [ 34.531744][ T3609] [ 34.534656][ T3609] dump_stack_lvl+0xcd/0x134 [ 34.539235][ T3609] panic+0x2d7/0x636 [ 34.543121][ T3609] ? panic_print_sys_info.part.0+0x10b/0x10b [ 34.549196][ T3609] ? __warn.cold+0x1d1/0x2c5 [ 34.553774][ T3609] ? __dma_map_sg_attrs+0x181/0x1f0 [ 34.558957][ T3609] __warn.cold+0x1e2/0x2c5 [ 34.563365][ T3609] ? __dma_map_sg_attrs+0x181/0x1f0 [ 34.568562][ T3609] report_bug+0x1bc/0x210 [ 34.572894][ T3609] handle_bug+0x3c/0x60 [ 34.577049][ T3609] exc_invalid_op+0x14/0x40 [ 34.581548][ T3609] asm_exc_invalid_op+0x1b/0x20 [ 34.586396][ T3609] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 34.592374][ T3609] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00 [ 34.611975][ T3609] RSP: 0018:ffffc900032bfd68 EFLAGS: 00010293 [ 34.618040][ T3609] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 34.626005][ T3609] RDX: ffff88807e203b00 RSI: ffffffff8166bf31 RDI: ffff888146eb5378 [ 34.633970][ T3609] RBP: ffff888146eb5000 R08: 0000000000000005 R09: 0000000000000002 [ 34.641934][ T3609] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 34.649896][ T3609] R13: ffff8880168dd180 R14: 0000000000000002 R15: 0000000000000000 [ 34.657865][ T3609] ? __dma_map_sg_attrs+0x181/0x1f0 [ 34.663068][ T3609] ? __dma_map_sg_attrs+0x181/0x1f0 [ 34.668264][ T3609] dma_map_sgtable+0x70/0xf0 [ 34.672849][ T3609] get_sg_table.isra.0+0xe0/0x160 [ 34.677874][ T3609] begin_cpu_udmabuf+0x130/0x1d0 [ 34.682809][ T3609] ? map_udmabuf+0xa0/0xa0 [ 34.687217][ T3609] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 34.692681][ T3609] dma_buf_ioctl+0x259/0x2b0 [ 34.697267][ T3609] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 34.702979][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 34.708176][ T3609] ? bpf_lsm_file_ioctl+0x5/0x10 [ 34.713195][ T3609] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 34.718906][ T3609] __x64_sys_ioctl+0x193/0x200 [ 34.723667][ T3609] do_syscall_64+0x35/0xb0 [ 34.728080][ T3609] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 34.733966][ T3609] RIP: 0033:0x7fab6ab32c19 [ 34.738370][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 34.758054][ T3609] RSP: 002b:00007ffff6536b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.766457][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab6ab32c19 [ 34.774421][ T3609] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 34.782382][ T3609] RBP: 00007fab6aaf6dc0 R08: 0000000000000000 R09: 0000000000000000 [ 34.790344][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab6aaf6e50 [ 34.798304][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 34.806365][ T3609] [ 34.810245][ T3609] Kernel Offset: disabled [ 34.814607][ T3609] Rebooting in 86400 seconds..