./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2919404705 <...> Warning: Permanently added '10.128.0.188' (ECDSA) to the list of known hosts. execve("./syz-executor2919404705", ["./syz-executor2919404705"], 0x7ffc60a0cdf0 /* 10 vars */) = 0 brk(NULL) = 0x555557506000 brk(0x555557506c40) = 0x555557506c40 arch_prctl(ARCH_SET_FS, 0x555557506300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2919404705", 4096) = 28 brk(0x555557527c40) = 0x555557527c40 brk(0x555557528000) = 0x555557528000 mprotect(0x7f0c7d01c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3 memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4 pwrite64(4, "\xa0", 1, 23395) = 1 fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0 dup(3) = 5 ioctl(5, UDMABUF_CREATE, 0x20000080) = 6 syzkaller login: [ 56.542979][ T3603] ------------[ cut here ]------------ [ 56.542989][ T3603] WARNING: CPU: 1 PID: 3603 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0 [ 56.558448][ T3603] Modules linked in: [ 56.562333][ T3603] CPU: 1 PID: 3603 Comm: syz-executor291 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 56.572586][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.582925][ T3603] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 56.588889][ T3603] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00 [ 56.608649][ T3603] RSP: 0018:ffffc90002effd68 EFLAGS: 00010293 [ 56.614711][ T3603] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.622739][ T3603] RDX: ffff8880236f5880 RSI: ffffffff81665c81 RDI: ffff88801ca89408 [ 56.630818][ T3603] RBP: ffff88801ca89000 R08: 0000000000000002 R09: ffff88801f07dd4f [ 56.638849][ T3603] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001 [ 56.646835][ T3603] R13: ffff88801ea0e100 R14: 0000000000000002 R15: 0000000000000000 [ 56.654891][ T3603] FS: 0000555557506300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 56.663992][ T3603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.670766][ T3603] CR2: 00000000005d84c8 CR3: 0000000071da1000 CR4: 00000000003506e0 [ 56.678836][ T3603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.686815][ T3603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.694933][ T3603] Call Trace: [ 56.698322][ T3603] [ 56.701271][ T3603] dma_map_sgtable+0x70/0xf0 [ 56.705875][ T3603] get_sg_table.isra.0+0xe0/0x160 [ 56.710994][ T3603] begin_cpu_udmabuf+0x130/0x1d0 [ 56.715965][ T3603] ? map_udmabuf+0xa0/0xa0 [ 56.720483][ T3603] dma_buf_begin_cpu_access+0xfd/0x1d0 [ 56.726045][ T3603] dma_buf_ioctl+0x259/0x2b0 [ 56.730767][ T3603] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 56.736511][ T3603] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.742809][ T3603] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 56.748638][ T3603] __x64_sys_ioctl+0x193/0x200 [ 56.753400][ T3603] do_syscall_64+0x35/0xb0 [ 56.757891][ T3603] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 56.763799][ T3603] RIP: 0033:0x7f0c7cfafc19 [ 56.768293][ T3603] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.787999][ T3603] RSP: 002b:00007fffdaf93778 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.796423][ T3603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c7cfafc19 [ 56.804445][ T3603] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 56.812495][ T3603] RBP: 00007f0c7cf73dc0 R08: 0000000000000000 R09: 0000000000000000 [ 56.820522][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c7cf73e50 [ 56.828607][ T3603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.837457][ T3603] [ 56.840531][ T3603] Kernel panic - not syncing: panic_on_warn set ... [ 56.847116][ T3603] CPU: 1 PID: 3603 Comm: syz-executor291 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 56.857272][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.867354][ T3603] Call Trace: [ 56.870646][ T3603] [ 56.873592][ T3603] dump_stack_lvl+0xcd/0x134 [ 56.878203][ T3603] panic+0x2d7/0x636 [ 56.882115][ T3603] ? panic_print_sys_info.part.0+0x10b/0x10b [ 56.888124][ T3603] ? __warn.cold+0x1d9/0x2cd [ 56.892732][ T3603] ? __dma_map_sg_attrs+0x181/0x1f0 [ 56.897943][ T3603] __warn.cold+0x1ea/0x2cd [ 56.902372][ T3603] ? __dma_map_sg_attrs+0x181/0x1f0 [ 56.907585][ T3603] report_bug+0x1bc/0x210 [ 56.911935][ T3603] handle_bug+0x3c/0x60 [ 56.916111][ T3603] exc_invalid_op+0x14/0x40 [ 56.920629][ T3603] asm_exc_invalid_op+0x1b/0x20 [ 56.925490][ T3603] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 56.931317][ T3603] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00 [ 56.950936][ T3603] RSP: 0018:ffffc90002effd68 EFLAGS: 00010293 [ 56.957013][ T3603] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.965002][ T3603] RDX: ffff8880236f5880 RSI: ffffffff81665c81 RDI: ffff88801ca89408 [ 56.972993][ T3603] RBP: ffff88801ca89000 R08: 0000000000000002 R09: ffff88801f07dd4f [ 56.980972][ T3603] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001 [ 56.988952][ T3603] R13: ffff88801ea0e100 R14: 0000000000000002 R15: 0000000000000000 [ 56.996950][ T3603] ? __dma_map_sg_attrs+0x62/0x1f0 [ 57.002090][ T3603] ? __dma_map_sg_attrs+0x181/0x1f0 [ 57.007310][ T3603] ? __dma_map_sg_attrs+0x181/0x1f0 [ 57.012541][ T3603] dma_map_sgtable+0x70/0xf0 [ 57.017235][ T3603] get_sg_table.isra.0+0xe0/0x160 [ 57.022374][ T3603] begin_cpu_udmabuf+0x130/0x1d0 [ 57.027340][ T3603] ? map_udmabuf+0xa0/0xa0 [ 57.031788][ T3603] dma_buf_begin_cpu_access+0xfd/0x1d0 [ 57.037275][ T3603] dma_buf_ioctl+0x259/0x2b0 [ 57.041895][ T3603] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 57.047632][ T3603] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.053887][ T3603] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 57.059621][ T3603] __x64_sys_ioctl+0x193/0x200 [ 57.064400][ T3603] do_syscall_64+0x35/0xb0 [ 57.068831][ T3603] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 57.074737][ T3603] RIP: 0033:0x7f0c7cfafc19 [ 57.079160][ T3603] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.098784][ T3603] RSP: 002b:00007fffdaf93778 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.107219][ T3603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c7cfafc19 [ 57.115204][ T3603] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 57.123182][ T3603] RBP: 00007f0c7cf73dc0 R08: 0000000000000000 R09: 0000000000000000 [ 57.131163][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c7cf73e50 [ 57.139149][ T3603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.147145][ T3603] [ 57.150353][ T3603] Kernel Offset: disabled [ 57.154708][ T3603] Rebooting in 86400 seconds..