./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4262960386 <...> Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. execve("./syz-executor4262960386", ["./syz-executor4262960386"], 0x7ffc62223c70 /* 10 vars */) = 0 brk(NULL) = 0x5555572d1000 brk(0x5555572d1c40) = 0x5555572d1c40 arch_prctl(ARCH_SET_FS, 0x5555572d1300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4262960386", 4096) = 28 brk(0x5555572f2c40) = 0x5555572f2c40 brk(0x5555572f3000) = 0x5555572f3000 mprotect(0x7f679c35b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3 memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4 pwrite64(4, "\xa0", 1, 23395) = 1 fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0 dup(3) = 5 ioctl(5, UDMABUF_CREATE, 0x20000080) = 6 [ 36.070816][ T3606] ------------[ cut here ]------------ [ 36.076299][ T3606] WARNING: CPU: 0 PID: 3606 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0 [ 36.086018][ T3606] Modules linked in: [ 36.090264][ T3606] CPU: 0 PID: 3606 Comm: syz-executor426 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 36.101025][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 36.111118][ T3606] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 36.116915][ T3606] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00 [ 36.136635][ T3606] RSP: 0018:ffffc900032ffd68 EFLAGS: 00010293 [ 36.142772][ T3606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 36.150810][ T3606] RDX: ffff8880774c8000 RSI: ffffffff8166bf31 RDI: ffff88801e66e378 [ 36.158802][ T3606] RBP: ffff88801e66e000 R08: 0000000000000005 R09: 0000000000000002 [ 36.166836][ T3606] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 36.174951][ T3606] R13: ffff88807f16b400 R14: 0000000000000002 R15: 0000000000000000 [ 36.183043][ T3606] FS: 00005555572d1300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 36.192018][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.198616][ T3606] CR2: 00000000005d84c8 CR3: 000000001fd2f000 CR4: 0000000000350ef0 [ 36.206649][ T3606] Call Trace: [ 36.209969][ T3606] [ 36.212899][ T3606] dma_map_sgtable+0x70/0xf0 [ 36.217501][ T3606] get_sg_table.isra.0+0xe0/0x160 [ 36.223097][ T3606] begin_cpu_udmabuf+0x130/0x1d0 [ 36.228055][ T3606] ? map_udmabuf+0xa0/0xa0 [ 36.232564][ T3606] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 36.238038][ T3606] dma_buf_ioctl+0x259/0x2b0 [ 36.242806][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 36.248538][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 36.253784][ T3606] ? bpf_lsm_file_ioctl+0x5/0x10 [ 36.258739][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 36.264522][ T3606] __x64_sys_ioctl+0x193/0x200 [ 36.269293][ T3606] do_syscall_64+0x35/0xb0 [ 36.273764][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 36.279672][ T3606] RIP: 0033:0x7f679c2eec19 [ 36.284155][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 36.303919][ T3606] RSP: 002b:00007ffee27e91a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.312379][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f679c2eec19 [ 36.320370][ T3606] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 36.328323][ T3606] RBP: 00007f679c2b2dc0 R08: 0000000000000000 R09: 0000000000000000 [ 36.336318][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f679c2b2e50 [ 36.344313][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 36.352435][ T3606] [ 36.355626][ T3606] Kernel panic - not syncing: panic_on_warn set ... [ 36.362214][ T3606] CPU: 0 PID: 3606 Comm: syz-executor426 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 36.372866][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 36.382991][ T3606] Call Trace: [ 36.386271][ T3606] [ 36.389183][ T3606] dump_stack_lvl+0xcd/0x134 [ 36.393850][ T3606] panic+0x2d7/0x636 [ 36.397730][ T3606] ? panic_print_sys_info.part.0+0x10b/0x10b [ 36.403702][ T3606] ? __warn.cold+0x1d1/0x2c5 [ 36.408274][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0 [ 36.413465][ T3606] __warn.cold+0x1e2/0x2c5 [ 36.417876][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0 [ 36.423158][ T3606] report_bug+0x1bc/0x210 [ 36.427584][ T3606] handle_bug+0x3c/0x60 [ 36.431742][ T3606] exc_invalid_op+0x14/0x40 [ 36.436244][ T3606] asm_exc_invalid_op+0x1b/0x20 [ 36.441092][ T3606] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 36.446898][ T3606] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d a0 84 c2 0d e9 db fe ff ff e8 66 a7 13 00 0f 0b e8 5f a7 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 50 a7 13 00 49 8d 7f 50 48 b8 00 [ 36.466513][ T3606] RSP: 0018:ffffc900032ffd68 EFLAGS: 00010293 [ 36.472581][ T3606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 36.480566][ T3606] RDX: ffff8880774c8000 RSI: ffffffff8166bf31 RDI: ffff88801e66e378 [ 36.488538][ T3606] RBP: ffff88801e66e000 R08: 0000000000000005 R09: 0000000000000002 [ 36.496508][ T3606] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 36.504562][ T3606] R13: ffff88807f16b400 R14: 0000000000000002 R15: 0000000000000000 [ 36.512715][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0 [ 36.517922][ T3606] ? __dma_map_sg_attrs+0x181/0x1f0 [ 36.523118][ T3606] dma_map_sgtable+0x70/0xf0 [ 36.527712][ T3606] get_sg_table.isra.0+0xe0/0x160 [ 36.532739][ T3606] begin_cpu_udmabuf+0x130/0x1d0 [ 36.537675][ T3606] ? map_udmabuf+0xa0/0xa0 [ 36.542092][ T3606] dma_buf_begin_cpu_access+0xfd/0x1e0 [ 36.547554][ T3606] dma_buf_ioctl+0x259/0x2b0 [ 36.552227][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 36.557939][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 36.563144][ T3606] ? bpf_lsm_file_ioctl+0x5/0x10 [ 36.568092][ T3606] ? dma_buf_begin_cpu_access+0x1e0/0x1e0 [ 36.573813][ T3606] __x64_sys_ioctl+0x193/0x200 [ 36.578583][ T3606] do_syscall_64+0x35/0xb0 [ 36.583005][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 36.588904][ T3606] RIP: 0033:0x7f679c2eec19 [ 36.593320][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 36.613283][ T3606] RSP: 002b:00007ffee27e91a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.621702][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f679c2eec19 [ 36.629692][ T3606] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 36.637663][ T3606] RBP: 00007f679c2b2dc0 R08: 0000000000000000 R09: 0000000000000000 [ 36.645635][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f679c2b2e50 [ 36.653608][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 36.661603][ T3606] [ 36.665247][ T3606] Kernel Offset: disabled [ 36.669631][ T3606] Rebooting in 86400 seconds..