./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1629045604
<...>
Warning: Permanently added '10.128.0.254' (ECDSA) to the list of known hosts.
execve("./syz-executor1629045604", ["./syz-executor1629045604"], 0x7ffe7d72e090 /* 10 vars */) = 0
brk(NULL) = 0x555556c2a000
brk(0x555556c2ac40) = 0x555556c2ac40
arch_prctl(ARCH_SET_FS, 0x555556c2a300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1629045604", 4096) = 28
brk(0x555556c4bc40) = 0x555556c4bc40
brk(0x555556c4c000) = 0x555556c4c000
mprotect(0x7f8bf9cda000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3
memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4
pwrite64(4, "\xa0", 1, 23395) = 1
fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0
dup(3) = 5
ioctl(5, UDMABUF_CREATE, 0x20000080) = 6
syzkaller login: [ 47.902119][ T3610] ------------[ cut here ]------------
[ 47.902129][ T3610] WARNING: CPU: 0 PID: 3610 at kernel/dma/mapping.c:188 dma_map_sgtable+0x203/0x260
[ 47.917657][ T3610] Modules linked in:
[ 47.921575][ T3610] CPU: 0 PID: 3610 Comm: syz-executor162 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 47.931885][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 47.942184][ T3610] RIP: 0010:dma_map_sgtable+0x203/0x260
[ 47.947850][ T3610] Code: 75 15 e8 50 5f 14 00 eb cb e8 49 5f 14 00 eb c4 e8 42 5f 14 00 eb bd e8 3b 5f 14 00 0f 0b bd fb ff ff ff eb af e8 2d 5f 14 00 <0f> 0b 31 ed 48 bb 00 00 00 00 00 fc ff df e9 7b ff ff ff 89 e9 80
[ 47.967652][ T3610] RSP: 0018:ffffc9000305fd40 EFLAGS: 00010293
[ 47.973918][ T3610] RAX: ffffffff81723873 RBX: dffffc0000000000 RCX: ffff88801fbb8000
[ 47.981979][ T3610] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 47.990097][ T3610] RBP: ffff8881487e5408 R08: ffffffff81723743 R09: ffffed1003592c9e
[ 47.998224][ T3610] R10: ffffed1003592c9e R11: 1ffff11003592c9c R12: ffff8881487e5000
[ 48.006316][ T3610] R13: ffff88801ac964e0 R14: 0000000000000000 R15: 0000000000000001
[ 48.014345][ T3610] FS: 0000555556c2a300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 48.023387][ T3610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.030061][ T3610] CR2: 00000000005d84c8 CR3: 000000001f1ef000 CR4: 00000000003506f0
[ 48.038101][ T3610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 48.046126][ T3610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 48.054156][ T3610] Call Trace:
[ 48.057437][ T3610]
[ 48.060362][ T3610] get_sg_table+0xf9/0x150
[ 48.064877][ T3610] begin_cpu_udmabuf+0xf5/0x160
[ 48.069734][ T3610] dma_buf_begin_cpu_access+0xd8/0x170
[ 48.075281][ T3610] dma_buf_ioctl+0x2a0/0x2f0
[ 48.079897][ T3610] ? dma_buf_poll+0x680/0x680
[ 48.084657][ T3610] ? vtime_user_exit+0x2b2/0x3e0
[ 48.089601][ T3610] ? bpf_lsm_file_ioctl+0x5/0x10
[ 48.094611][ T3610] ? security_file_ioctl+0x9d/0xb0
[ 48.099742][ T3610] ? dma_buf_poll+0x680/0x680
[ 48.104525][ T3610] __se_sys_ioctl+0xfb/0x170
[ 48.109139][ T3610] do_syscall_64+0x2b/0x70
[ 48.113633][ T3610] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 48.119533][ T3610] RIP: 0033:0x7f8bf9c6dc19
[ 48.124054][ T3610] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 48.143772][ T3610] RSP: 002b:00007ffd7cfae1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 48.152361][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8bf9c6dc19
[ 48.160344][ T3610] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 48.168404][ T3610] RBP: 00007f8bf9c31dc0 R08: 0000000000000000 R09: 0000000000000000
[ 48.176483][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8bf9c31e50
[ 48.184540][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 48.192614][ T3610]
[ 48.195641][ T3610] Kernel panic - not syncing: panic_on_warn set ...
[ 48.202212][ T3610] CPU: 0 PID: 3610 Comm: syz-executor162 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 48.212364][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 48.222757][ T3610] Call Trace:
[ 48.226028][ T3610]
[ 48.228948][ T3610] dump_stack_lvl+0x1e3/0x2cb
[ 48.233617][ T3610] ? bfq_pos_tree_add_move+0x436/0x436
[ 48.239082][ T3610] ? panic+0x76e/0x76e
[ 48.243245][ T3610] ? vscnprintf+0x59/0x80
[ 48.247737][ T3610] ? dma_map_sgtable+0x190/0x260
[ 48.252802][ T3610] panic+0x312/0x76e
[ 48.256814][ T3610] ? __warn+0x136/0x230
[ 48.260978][ T3610] ? fb_is_primary_device+0xcc/0xcc
[ 48.266198][ T3610] ? dma_map_sgtable+0x203/0x260
[ 48.271138][ T3610] __warn+0x203/0x230
[ 48.275119][ T3610] ? dma_map_sgtable+0x203/0x260
[ 48.280053][ T3610] report_bug+0x1b3/0x2d0
[ 48.284386][ T3610] handle_bug+0x3d/0x70
[ 48.288536][ T3610] exc_invalid_op+0x16/0x40
[ 48.293038][ T3610] asm_exc_invalid_op+0x1b/0x20
[ 48.297885][ T3610] RIP: 0010:dma_map_sgtable+0x203/0x260
[ 48.303424][ T3610] Code: 75 15 e8 50 5f 14 00 eb cb e8 49 5f 14 00 eb c4 e8 42 5f 14 00 eb bd e8 3b 5f 14 00 0f 0b bd fb ff ff ff eb af e8 2d 5f 14 00 <0f> 0b 31 ed 48 bb 00 00 00 00 00 fc ff df e9 7b ff ff ff 89 e9 80
[ 48.323022][ T3610] RSP: 0018:ffffc9000305fd40 EFLAGS: 00010293
[ 48.329083][ T3610] RAX: ffffffff81723873 RBX: dffffc0000000000 RCX: ffff88801fbb8000
[ 48.337052][ T3610] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 48.345017][ T3610] RBP: ffff8881487e5408 R08: ffffffff81723743 R09: ffffed1003592c9e
[ 48.352988][ T3610] R10: ffffed1003592c9e R11: 1ffff11003592c9c R12: ffff8881487e5000
[ 48.360953][ T3610] R13: ffff88801ac964e0 R14: 0000000000000000 R15: 0000000000000001
[ 48.368931][ T3610] ? dma_map_sgtable+0xd3/0x260
[ 48.373777][ T3610] ? dma_map_sgtable+0x203/0x260
[ 48.378752][ T3610] get_sg_table+0xf9/0x150
[ 48.383165][ T3610] begin_cpu_udmabuf+0xf5/0x160
[ 48.388009][ T3610] dma_buf_begin_cpu_access+0xd8/0x170
[ 48.393464][ T3610] dma_buf_ioctl+0x2a0/0x2f0
[ 48.398053][ T3610] ? dma_buf_poll+0x680/0x680
[ 48.402723][ T3610] ? vtime_user_exit+0x2b2/0x3e0
[ 48.407655][ T3610] ? bpf_lsm_file_ioctl+0x5/0x10
[ 48.412585][ T3610] ? security_file_ioctl+0x9d/0xb0
[ 48.417690][ T3610] ? dma_buf_poll+0x680/0x680
[ 48.422357][ T3610] __se_sys_ioctl+0xfb/0x170
[ 48.426971][ T3610] do_syscall_64+0x2b/0x70
[ 48.431387][ T3610] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 48.437291][ T3610] RIP: 0033:0x7f8bf9c6dc19
[ 48.441702][ T3610] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 48.461314][ T3610] RSP: 002b:00007ffd7cfae1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 48.469725][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8bf9c6dc19
[ 48.477689][ T3610] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 48.485653][ T3610] RBP: 00007f8bf9c31dc0 R08: 0000000000000000 R09: 0000000000000000
[ 48.493621][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8bf9c31e50
[ 48.501584][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 48.509563][ T3610]
[ 48.512859][ T3610] Kernel Offset: disabled
[ 48.517215][ T3610] Rebooting in 86400 seconds..