./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3109156643 <...> forked to background, child pid 3184 no interfaces have a carrier [ 22.127076][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.136380][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. execve("./syz-executor3109156643", ["./syz-executor3109156643"], 0x7ffdea048b90 /* 10 vars */) = 0 brk(NULL) = 0x5555574dc000 brk(0x5555574dcc40) = 0x5555574dcc40 arch_prctl(ARCH_SET_FS, 0x5555574dc300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3109156643", 4096) = 28 brk(0x5555574fdc40) = 0x5555574fdc40 brk(0x5555574fe000) = 0x5555574fe000 mprotect(0x7f102abed000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3 memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4 pwrite64(4, "\xa0", 1, 23395) = 1 fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0 dup(3) = 5 ioctl(5, UDMABUF_CREATE, 0x20000080) = 6 syzkaller login: [ 41.683684][ T3605] ------------[ cut here ]------------ [ 41.689348][ T3605] WARNING: CPU: 1 PID: 3605 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0 [ 41.699156][ T3605] Modules linked in: [ 41.703161][ T3605] CPU: 1 PID: 3605 Comm: syz-executor310 Not tainted 5.19.0-rc7-syzkaller-00005-gca85855bdcae #0 [ 41.713695][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 41.723774][ T3605] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 41.729619][ T3605] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 90 b2 c2 0d e9 db fe ff ff e8 26 ab 13 00 0f 0b e8 1f ab 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 10 ab 13 00 49 8d 7f 50 48 b8 00 [ 41.749289][ T3605] RSP: 0018:ffffc9000302fd68 EFLAGS: 00010293 [ 41.755415][ T3605] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 41.763422][ T3605] RDX: ffff88807d9c0000 RSI: ffffffff8166c141 RDI: ffff88801e1b9378 [ 41.771454][ T3605] RBP: ffff88801e1b9000 R08: 0000000000000005 R09: 0000000000000002 [ 41.779442][ T3605] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 41.787442][ T3605] R13: ffff888020f91ac0 R14: 0000000000000001 R15: 0000000000000000 [ 41.795432][ T3605] FS: 00005555574dc300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 41.804389][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.810999][ T3605] CR2: 00000000005d84c8 CR3: 0000000077ad8000 CR4: 0000000000350ee0 [ 41.819045][ T3605] Call Trace: [ 41.822347][ T3605] [ 41.825308][ T3605] dma_map_sgtable+0x70/0xf0 [ 41.829984][ T3605] get_sg_table.isra.0+0xe0/0x160 [ 41.835043][ T3605] begin_cpu_udmabuf+0x130/0x1d0 [ 41.840017][ T3605] ? map_udmabuf+0xa0/0xa0 [ 41.844565][ T3605] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 41.850054][ T3605] dma_buf_ioctl+0x259/0x2b0 [ 41.854662][ T3605] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 41.860429][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40 [ 41.865645][ T3605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 41.870622][ T3605] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 41.876555][ T3605] __x64_sys_ioctl+0x193/0x200 [ 41.881380][ T3605] do_syscall_64+0x35/0xb0 [ 41.885816][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.891778][ T3605] RIP: 0033:0x7f102ab80c19 [ 41.896206][ T3605] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.916344][ T3605] RSP: 002b:00007ffe206b49d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.925037][ T3605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f102ab80c19 [ 41.933053][ T3605] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 41.941310][ T3605] RBP: 00007f102ab44dc0 R08: 0000000000000000 R09: 0000000000000000 [ 41.949352][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102ab44e50 [ 41.957356][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.965391][ T3605] [ 41.968409][ T3605] Kernel panic - not syncing: panic_on_warn set ... [ 41.974975][ T3605] CPU: 1 PID: 3605 Comm: syz-executor310 Not tainted 5.19.0-rc7-syzkaller-00005-gca85855bdcae #0 [ 41.985539][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 41.995572][ T3605] Call Trace: [ 41.998827][ T3605] [ 42.001743][ T3605] dump_stack_lvl+0xcd/0x134 [ 42.006331][ T3605] panic+0x2d7/0x636 [ 42.010219][ T3605] ? panic_print_sys_info.part.0+0x10b/0x10b [ 42.016196][ T3605] ? __warn.cold+0x1d1/0x2c5 [ 42.020779][ T3605] ? __dma_map_sg_attrs+0x181/0x1f0 [ 42.025973][ T3605] __warn.cold+0x1e2/0x2c5 [ 42.030379][ T3605] ? __dma_map_sg_attrs+0x181/0x1f0 [ 42.035575][ T3605] report_bug+0x1bc/0x210 [ 42.039902][ T3605] handle_bug+0x3c/0x60 [ 42.044046][ T3605] exc_invalid_op+0x14/0x40 [ 42.048538][ T3605] asm_exc_invalid_op+0x16/0x20 [ 42.053384][ T3605] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 42.059184][ T3605] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 90 b2 c2 0d e9 db fe ff ff e8 26 ab 13 00 0f 0b e8 1f ab 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 10 ab 13 00 49 8d 7f 50 48 b8 00 [ 42.078961][ T3605] RSP: 0018:ffffc9000302fd68 EFLAGS: 00010293 [ 42.085020][ T3605] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 42.092980][ T3605] RDX: ffff88807d9c0000 RSI: ffffffff8166c141 RDI: ffff88801e1b9378 [ 42.100942][ T3605] RBP: ffff88801e1b9000 R08: 0000000000000005 R09: 0000000000000002 [ 42.109079][ T3605] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 42.117300][ T3605] R13: ffff888020f91ac0 R14: 0000000000000001 R15: 0000000000000000 [ 42.125272][ T3605] ? __dma_map_sg_attrs+0x181/0x1f0 [ 42.130487][ T3605] ? __dma_map_sg_attrs+0x181/0x1f0 [ 42.135697][ T3605] dma_map_sgtable+0x70/0xf0 [ 42.140371][ T3605] get_sg_table.isra.0+0xe0/0x160 [ 42.145495][ T3605] begin_cpu_udmabuf+0x130/0x1d0 [ 42.150493][ T3605] ? map_udmabuf+0xa0/0xa0 [ 42.154906][ T3605] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 42.160359][ T3605] dma_buf_ioctl+0x259/0x2b0 [ 42.164938][ T3605] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 42.170647][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40 [ 42.175839][ T3605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 42.180773][ T3605] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 42.186659][ T3605] __x64_sys_ioctl+0x193/0x200 [ 42.191424][ T3605] do_syscall_64+0x35/0xb0 [ 42.195836][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.201896][ T3605] RIP: 0033:0x7f102ab80c19 [ 42.206390][ T3605] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.225986][ T3605] RSP: 002b:00007ffe206b49d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.234479][ T3605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f102ab80c19 [ 42.242443][ T3605] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 42.250403][ T3605] RBP: 00007f102ab44dc0 R08: 0000000000000000 R09: 0000000000000000 [ 42.258364][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102ab44e50 [ 42.266322][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.274381][ T3605] [ 42.278083][ T3605] Kernel Offset: disabled [ 42.282444][ T3605] Rebooting in 86400 seconds..