./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor756436341 <...> Warning: Permanently added '10.128.1.93' (ECDSA) to the list of known hosts. execve("./syz-executor756436341", ["./syz-executor756436341"], 0x7fffbd0e3110 /* 10 vars */) = 0 brk(NULL) = 0x55555597d000 brk(0x55555597dc40) = 0x55555597dc40 arch_prctl(ARCH_SET_FS, 0x55555597d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor756436341", 4096) = 27 brk(0x55555599ec40) = 0x55555599ec40 brk(0x55555599f000) = 0x55555599f000 mprotect(0x7f433c5dd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3 memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4 pwrite64(4, "\xa0", 1, 23395) = 1 fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0 dup(3) = 5 ioctl(5, UDMABUF_CREATE, 0x20000080) = 6 syzkaller login: [ 37.260858][ T3606] ------------[ cut here ]------------ [ 37.266446][ T3606] WARNING: CPU: 0 PID: 3606 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0 [ 37.276144][ T3606] Modules linked in: [ 37.280045][ T3606] CPU: 0 PID: 3606 Comm: syz-executor756 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 37.290788][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 37.300948][ T3606] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 37.306794][ T3606] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00 [ 37.326574][ T3606] RSP: 0018:ffffc900032cfd68 EFLAGS: 00010293 [ 37.332765][ T3606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 37.340747][ T3606] RDX: ffff888021608000 RSI: ffffffff8166bf31 RDI: ffff88801eaf0378 [ 37.348789][ T3606] RBP: ffff88801eaf0000 R08: 0000000000000005 R09: 0000000000000002 [ 37.356818][ T3606] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 37.365123][ T3606] R13: ffff88802570c880 R14: 0000000000000002 R15: 0000000000000000 [ 37.373140][ T3606] FS: 000055555597d300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 37.382087][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.388750][ T3606] CR2: 000000002000014c CR3: 000000007f0a0000 CR4: 0000000000350ef0 [ 37.396767][ T3606] Call Trace: [ 37.400637][ T3606] [ 37.403699][ T3606] dma_map_sgtable+0x70/0xf0 [ 37.408323][ T3606] get_sg_table.isra.0+0xe0/0x160 [ 37.413408][ T3606] begin_cpu_udmabuf+0x130/0x1d0 [ 37.418349][ T3606] ? map_udmabuf+0xa0/0xa0 [ 37.422818][ T3606] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 37.428565][ T3606] dma_buf_ioctl+0x259/0x2b0 [ 37.433200][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 37.439360][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 37.444654][ T3606] ? bpf_lsm_file_ioctl+0x5/0x10 [ 37.450199][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 37.455952][ T3606] __x64_sys_ioctl+0x193/0x200 [ 37.460720][ T3606] do_syscall_64+0x35/0xb0 [ 37.465292][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 37.471195][ T3606] RIP: 0033:0x7f433c570c19 [ 37.475841][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.495608][ T3606] RSP: 002b:00007ffcf0cc9c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.504067][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f433c570c19 [ 37.512257][ T3606] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 37.520290][ T3606] RBP: 00007f433c534dc0 R08: 0000000000000000 R09: 0000000000000000 [ 37.528293][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f433c534e50 [ 37.536386][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 37.544434][ T3606] [ 37.547436][ T3606] Kernel panic - not syncing: panic_on_warn set ... [ 37.554002][ T3606] CPU: 0 PID: 3606 Comm: syz-executor756 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 37.564475][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 37.574505][ T3606] Call Trace: [ 37.577762][ T3606] [ 37.580672][ T3606] dump_stack_lvl+0xcd/0x134 [ 37.585257][ T3606] panic+0x2d7/0x636 [ 37.589145][ T3606] ? panic_print_sys_info.part.0+0x10b/0x10b [ 37.595122][ T3606] ? __warn.cold+0x1d1/0x2c5 [ 37.599706][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0 [ 37.604898][ T3606] __warn.cold+0x1e2/0x2c5 [ 37.609308][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0 [ 37.614498][ T3606] report_bug+0x1bc/0x210 [ 37.618832][ T3606] handle_bug+0x3c/0x60 [ 37.622982][ T3606] exc_invalid_op+0x14/0x40 [ 37.627480][ T3606] asm_exc_invalid_op+0x1b/0x20 [ 37.632323][ T3606] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 37.638126][ T3606] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00 [ 37.657724][ T3606] RSP: 0018:ffffc900032cfd68 EFLAGS: 00010293 [ 37.663780][ T3606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 37.671737][ T3606] RDX: ffff888021608000 RSI: ffffffff8166bf31 RDI: ffff88801eaf0378 [ 37.679699][ T3606] RBP: ffff88801eaf0000 R08: 0000000000000005 R09: 0000000000000002 [ 37.687660][ T3606] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 37.695617][ T3606] R13: ffff88802570c880 R14: 0000000000000002 R15: 0000000000000000 [ 37.703584][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0 [ 37.708781][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0 [ 37.714062][ T3606] dma_map_sgtable+0x70/0xf0 [ 37.718643][ T3606] get_sg_table.isra.0+0xe0/0x160 [ 37.723673][ T3606] begin_cpu_udmabuf+0x130/0x1d0 [ 37.728606][ T3606] ? map_udmabuf+0xa0/0xa0 [ 37.733104][ T3606] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 37.738557][ T3606] dma_buf_ioctl+0x259/0x2b0 [ 37.743136][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 37.748843][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 37.754039][ T3606] ? bpf_lsm_file_ioctl+0x5/0x10 [ 37.758971][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 37.764682][ T3606] __x64_sys_ioctl+0x193/0x200 [ 37.769443][ T3606] do_syscall_64+0x35/0xb0 [ 37.773854][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 37.779741][ T3606] RIP: 0033:0x7f433c570c19 [ 37.784144][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.804179][ T3606] RSP: 002b:00007ffcf0cc9c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.812604][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f433c570c19 [ 37.820567][ T3606] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 37.828533][ T3606] RBP: 00007f433c534dc0 R08: 0000000000000000 R09: 0000000000000000 [ 37.836497][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f433c534e50 [ 37.844456][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 37.852427][ T3606] [ 37.856068][ T3606] Kernel Offset: disabled [ 37.860503][ T3606] Rebooting in 86400 seconds..