./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4279668028
<...>
DUID 00:04:98:96:05:40:f2:aa:0a:66:7a:29:c2:20:2e:76:e0:ec
forked to background, child pid 3183
[ 26.993700][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.003741][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.30' (ECDSA) to the list of known hosts.
execve("./syz-executor4279668028", ["./syz-executor4279668028"], 0x7fff8bb189c0 /* 10 vars */) = 0
brk(NULL) = 0x555556bd4000
brk(0x555556bd4c40) = 0x555556bd4c40
arch_prctl(ARCH_SET_FS, 0x555556bd4300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4279668028", 4096) = 28
brk(0x555556bf5c40) = 0x555556bf5c40
brk(0x555556bf6000) = 0x555556bf6000
mprotect(0x7fb1f13f7000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3
memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4
pwrite64(4, "\xa0", 1, 23395) = 1
fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0
dup(3) = 5
ioctl(5, UDMABUF_CREATE, 0x20000080) = 6
syzkaller login: [ 50.091176][ T3604] ------------[ cut here ]------------
[ 50.091183][ T3604] WARNING: CPU: 0 PID: 3604 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0
[ 50.106738][ T3604] Modules linked in:
[ 50.110631][ T3604] CPU: 0 PID: 3604 Comm: syz-executor427 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 50.120861][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.131018][ T3604] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 50.136932][ T3604] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00
[ 50.156705][ T3604] RSP: 0018:ffffc90002eefd68 EFLAGS: 00010293
[ 50.162773][ T3604] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 50.170811][ T3604] RDX: ffff88807e531d80 RSI: ffffffff81665c81 RDI: ffff88814812c408
[ 50.178862][ T3604] RBP: ffff88814812c000 R08: 0000000000000002 R09: ffff88801683012f
[ 50.186922][ T3604] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001
[ 50.194981][ T3604] R13: ffff88814943bb00 R14: 0000000000000002 R15: 0000000000000000
[ 50.202954][ T3604] FS: 0000555556bd4300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 50.211947][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.218609][ T3604] CR2: 00000000005d84c8 CR3: 000000007052b000 CR4: 00000000003506f0
[ 50.226657][ T3604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.234705][ T3604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.242686][ T3604] Call Trace:
[ 50.246051][ T3604]
[ 50.249050][ T3604] dma_map_sgtable+0x70/0xf0
[ 50.253678][ T3604] get_sg_table.isra.0+0xe0/0x160
[ 50.258830][ T3604] begin_cpu_udmabuf+0x130/0x1d0
[ 50.263785][ T3604] ? map_udmabuf+0xa0/0xa0
[ 50.268364][ T3604] dma_buf_begin_cpu_access+0xfd/0x1d0
[ 50.273845][ T3604] dma_buf_ioctl+0x259/0x2b0
[ 50.278494][ T3604] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.284230][ T3604] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 50.290531][ T3604] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.296343][ T3604] __x64_sys_ioctl+0x193/0x200
[ 50.301110][ T3604] do_syscall_64+0x35/0xb0
[ 50.305587][ T3604] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.311501][ T3604] RIP: 0033:0x7fb1f138ac19
[ 50.316043][ T3604] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.335742][ T3604] RSP: 002b:00007fff3605da28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.344160][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb1f138ac19
[ 50.352188][ T3604] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 50.360234][ T3604] RBP: 00007fb1f134edc0 R08: 0000000000000000 R09: 0000000000000000
[ 50.368305][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1f134ee50
[ 50.376342][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.384351][ T3604]
[ 50.387458][ T3604] Kernel panic - not syncing: panic_on_warn set ...
[ 50.394044][ T3604] CPU: 0 PID: 3604 Comm: syz-executor427 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 50.404182][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.414223][ T3604] Call Trace:
[ 50.417489][ T3604]
[ 50.420413][ T3604] dump_stack_lvl+0xcd/0x134
[ 50.424999][ T3604] panic+0x2d7/0x636
[ 50.428893][ T3604] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.434870][ T3604] ? __warn.cold+0x1d9/0x2cd
[ 50.439450][ T3604] ? __dma_map_sg_attrs+0x181/0x1f0
[ 50.444644][ T3604] __warn.cold+0x1ea/0x2cd
[ 50.449051][ T3604] ? __dma_map_sg_attrs+0x181/0x1f0
[ 50.454247][ T3604] report_bug+0x1bc/0x210
[ 50.458576][ T3604] handle_bug+0x3c/0x60
[ 50.462723][ T3604] exc_invalid_op+0x14/0x40
[ 50.467217][ T3604] asm_exc_invalid_op+0x1b/0x20
[ 50.472057][ T3604] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 50.477856][ T3604] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00
[ 50.497458][ T3604] RSP: 0018:ffffc90002eefd68 EFLAGS: 00010293
[ 50.503543][ T3604] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 50.511521][ T3604] RDX: ffff88807e531d80 RSI: ffffffff81665c81 RDI: ffff88814812c408
[ 50.519503][ T3604] RBP: ffff88814812c000 R08: 0000000000000002 R09: ffff88801683012f
[ 50.527484][ T3604] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001
[ 50.535461][ T3604] R13: ffff88814943bb00 R14: 0000000000000002 R15: 0000000000000000
[ 50.543535][ T3604] ? __dma_map_sg_attrs+0x62/0x1f0
[ 50.548664][ T3604] ? __dma_map_sg_attrs+0x181/0x1f0
[ 50.553882][ T3604] ? __dma_map_sg_attrs+0x181/0x1f0
[ 50.559099][ T3604] dma_map_sgtable+0x70/0xf0
[ 50.563715][ T3604] get_sg_table.isra.0+0xe0/0x160
[ 50.568758][ T3604] begin_cpu_udmabuf+0x130/0x1d0
[ 50.573712][ T3604] ? map_udmabuf+0xa0/0xa0
[ 50.578143][ T3604] dma_buf_begin_cpu_access+0xfd/0x1d0
[ 50.583616][ T3604] dma_buf_ioctl+0x259/0x2b0
[ 50.588219][ T3604] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.593958][ T3604] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 50.600222][ T3604] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.605958][ T3604] __x64_sys_ioctl+0x193/0x200
[ 50.610744][ T3604] do_syscall_64+0x35/0xb0
[ 50.615180][ T3604] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.621089][ T3604] RIP: 0033:0x7fb1f138ac19
[ 50.625515][ T3604] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.645132][ T3604] RSP: 002b:00007fff3605da28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.653555][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb1f138ac19
[ 50.661534][ T3604] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 50.669515][ T3604] RBP: 00007fb1f134edc0 R08: 0000000000000000 R09: 0000000000000000
[ 50.677494][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1f134ee50
[ 50.685478][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.693558][ T3604]
[ 50.696887][ T3604] Kernel Offset: disabled
[ 50.701244][ T3604] Rebooting in 86400 seconds..