./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1218647453 <...> Warning: Permanently added '10.128.1.26' (ECDSA) to the list of known hosts. execve("./syz-executor1218647453", ["./syz-executor1218647453"], 0x7ffe94370eb0 /* 10 vars */) = 0 brk(NULL) = 0x555556d33000 brk(0x555556d33c40) = 0x555556d33c40 arch_prctl(ARCH_SET_FS, 0x555556d33300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1218647453", 4096) = 28 brk(0x555556d54c40) = 0x555556d54c40 brk(0x555556d55000) = 0x555556d55000 mprotect(0x7f5cb34d3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3 memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4 pwrite64(4, "\xa0", 1, 23395) = 1 fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0 dup(3) = 5 ioctl(5, UDMABUF_CREATE, 0x20000080) = 6 syzkaller login: [ 43.485506][ T3602] ------------[ cut here ]------------ [ 43.485516][ T3602] WARNING: CPU: 0 PID: 3602 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0 [ 43.501101][ T3602] Modules linked in: [ 43.505003][ T3602] CPU: 0 PID: 3602 Comm: syz-executor121 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 43.515543][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.525711][ T3602] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 43.531725][ T3602] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00 [ 43.551526][ T3602] RSP: 0018:ffffc90002e9fd68 EFLAGS: 00010293 [ 43.557725][ T3602] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 43.565698][ T3602] RDX: ffff88801ed2bb00 RSI: ffffffff81665c81 RDI: ffff88801c00d408 [ 43.573775][ T3602] RBP: ffff88801c00d000 R08: 0000000000000002 R09: ffff88801cfc184f [ 43.581837][ T3602] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001 [ 43.590006][ T3602] R13: ffff88807a101e80 R14: 0000000000000002 R15: 0000000000000000 [ 43.598073][ T3602] FS: 0000555556d33300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 43.607264][ T3602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.613848][ T3602] CR2: 00000000005d84c8 CR3: 0000000071cc4000 CR4: 00000000003506f0 [ 43.621903][ T3602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.629953][ T3602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.638084][ T3602] Call Trace: [ 43.641370][ T3602] [ 43.644292][ T3602] dma_map_sgtable+0x70/0xf0 [ 43.649008][ T3602] get_sg_table.isra.0+0xe0/0x160 [ 43.654079][ T3602] begin_cpu_udmabuf+0x130/0x1d0 [ 43.659120][ T3602] ? map_udmabuf+0xa0/0xa0 [ 43.663562][ T3602] dma_buf_begin_cpu_access+0xfd/0x1d0 [ 43.669127][ T3602] dma_buf_ioctl+0x259/0x2b0 [ 43.673729][ T3602] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 43.679550][ T3602] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 43.685818][ T3602] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 43.691655][ T3602] __x64_sys_ioctl+0x193/0x200 [ 43.696509][ T3602] do_syscall_64+0x35/0xb0 [ 43.700938][ T3602] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 43.706926][ T3602] RIP: 0033:0x7f5cb3466c19 [ 43.711358][ T3602] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.731601][ T3602] RSP: 002b:00007ffedb415db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.740101][ T3602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5cb3466c19 [ 43.748184][ T3602] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 43.756216][ T3602] RBP: 00007f5cb342adc0 R08: 0000000000000000 R09: 0000000000000000 [ 43.764193][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5cb342ae50 [ 43.772405][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.780488][ T3602] [ 43.783524][ T3602] Kernel panic - not syncing: panic_on_warn set ... [ 43.790112][ T3602] CPU: 0 PID: 3602 Comm: syz-executor121 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 43.800268][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.810346][ T3602] Call Trace: [ 43.813723][ T3602] [ 43.816658][ T3602] dump_stack_lvl+0xcd/0x134 [ 43.821272][ T3602] panic+0x2d7/0x636 [ 43.825188][ T3602] ? panic_print_sys_info.part.0+0x10b/0x10b [ 43.831193][ T3602] ? __warn.cold+0x1d9/0x2cd [ 43.835794][ T3602] ? __dma_map_sg_attrs+0x181/0x1f0 [ 43.841006][ T3602] __warn.cold+0x1ea/0x2cd [ 43.845433][ T3602] ? __dma_map_sg_attrs+0x181/0x1f0 [ 43.850649][ T3602] report_bug+0x1bc/0x210 [ 43.854992][ T3602] handle_bug+0x3c/0x60 [ 43.859159][ T3602] exc_invalid_op+0x14/0x40 [ 43.863672][ T3602] asm_exc_invalid_op+0x1b/0x20 [ 43.868624][ T3602] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 43.874446][ T3602] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00 [ 43.894060][ T3602] RSP: 0018:ffffc90002e9fd68 EFLAGS: 00010293 [ 43.900138][ T3602] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 43.908112][ T3602] RDX: ffff88801ed2bb00 RSI: ffffffff81665c81 RDI: ffff88801c00d408 [ 43.916090][ T3602] RBP: ffff88801c00d000 R08: 0000000000000002 R09: ffff88801cfc184f [ 43.924072][ T3602] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001 [ 43.932058][ T3602] R13: ffff88807a101e80 R14: 0000000000000002 R15: 0000000000000000 [ 43.940127][ T3602] ? __dma_map_sg_attrs+0x62/0x1f0 [ 43.945257][ T3602] ? __dma_map_sg_attrs+0x181/0x1f0 [ 43.950473][ T3602] ? __dma_map_sg_attrs+0x181/0x1f0 [ 43.955685][ T3602] dma_map_sgtable+0x70/0xf0 [ 43.960301][ T3602] get_sg_table.isra.0+0xe0/0x160 [ 43.965352][ T3602] begin_cpu_udmabuf+0x130/0x1d0 [ 43.970308][ T3602] ? map_udmabuf+0xa0/0xa0 [ 43.974746][ T3602] dma_buf_begin_cpu_access+0xfd/0x1d0 [ 43.980224][ T3602] dma_buf_ioctl+0x259/0x2b0 [ 43.984824][ T3602] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 43.990557][ T3602] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 43.996809][ T3602] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 44.002543][ T3602] __x64_sys_ioctl+0x193/0x200 [ 44.007327][ T3602] do_syscall_64+0x35/0xb0 [ 44.011757][ T3602] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 44.017662][ T3602] RIP: 0033:0x7f5cb3466c19 [ 44.022085][ T3602] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.041699][ T3602] RSP: 002b:00007ffedb415db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.050119][ T3602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5cb3466c19 [ 44.058096][ T3602] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 44.066072][ T3602] RBP: 00007f5cb342adc0 R08: 0000000000000000 R09: 0000000000000000 [ 44.074049][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5cb342ae50 [ 44.082027][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.090015][ T3602] [ 44.093325][ T3602] Kernel Offset: disabled [ 44.097677][ T3602] Rebooting in 86400 seconds..