./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1907721594 <...> Warning: Permanently added '10.128.0.152' (ECDSA) to the list of known hosts. execve("./syz-executor1907721594", ["./syz-executor1907721594"], 0x7ffe04411e00 /* 10 vars */) = 0 brk(NULL) = 0x555555aa3000 brk(0x555555aa3c40) = 0x555555aa3c40 arch_prctl(ARCH_SET_FS, 0x555555aa3300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1907721594", 4096) = 28 brk(0x555555ac4c40) = 0x555555ac4c40 brk(0x555555ac5000) = 0x555555ac5000 mprotect(0x7f0c42ca4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3 ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0 [ 59.990508][ T4992] ------------[ cut here ]------------ [ 59.996220][ T4992] get_vaddr_frames() cannot follow VM_IO mapping [ 59.996765][ T4992] WARNING: CPU: 1 PID: 4992 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x1fb/0x240 [ 60.014953][ T4992] Modules linked in: [ 60.018895][ T4992] CPU: 1 PID: 4992 Comm: syz-executor190 Not tainted 6.4.0-rc1-syzkaller-00026-g80e62bc8487b #0 [ 60.029542][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 60.039818][ T4992] RIP: 0010:get_vaddr_frames+0x1fb/0x240 [ 60.045495][ T4992] Code: 8c 11 ff ff ff 4c 89 ef e8 32 6d b9 fa e9 04 ff ff ff e8 c8 9e 61 fa c6 05 69 a3 17 07 01 48 c7 c7 e0 c6 9e 8b e8 85 26 29 fa <0f> 0b e9 4b ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1f ff [ 60.065166][ T4992] RSP: 0018:ffffc9000399f5c8 EFLAGS: 00010246 [ 60.071305][ T4992] RAX: b28a245f7d0ab000 RBX: 1ffff1100512a600 RCX: ffff8880222ebb80 [ 60.079368][ T4992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.087383][ T4992] RBP: dffffc0000000000 R08: ffffffff8152f1a2 R09: ffffed1017325163 [ 60.095549][ T4992] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000fffffff2 [ 60.103572][ T4992] R13: ffff888028953004 R14: 0000000000000000 R15: 0000000000000000 [ 60.111697][ T4992] FS: 0000555555aa3300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 60.120734][ T4992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.128020][ T4992] CR2: 00000000005fdeb8 CR3: 0000000072d28000 CR4: 00000000003506e0 [ 60.136152][ T4992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.144212][ T4992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.152302][ T4992] Call Trace: [ 60.155596][ T4992] [ 60.158581][ T4992] vb2_create_framevec+0x55/0xc0 [ 60.163633][ T4992] vb2_vmalloc_get_userptr+0x100/0x410 [ 60.169176][ T4992] ? __fill_vb2_buffer+0x455/0x4b0 [ 60.174308][ T4992] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 60.180173][ T4992] __buf_prepare+0xc26/0x4460 [ 60.184879][ T4992] ? is_bpf_text_address+0x253/0x270 [ 60.190266][ T4992] ? vb2_core_prepare_buf+0x310/0x310 [ 60.195724][ T4992] ? mark_lock+0x9a/0x340 [ 60.200319][ T4992] ? validate_chain+0x119/0x58e0 [ 60.207453][ T4992] ? __lock_acquire+0x1295/0x2000 [ 60.212752][ T4992] ? read_lock_is_recursive+0x20/0x20 [ 60.218225][ T4992] ? vb2_queue_or_prepare_buf+0x5be/0xe20 [ 60.224456][ T4992] vb2_core_prepare_buf+0xe6/0x310 [ 60.230194][ T4992] v4l2_m2m_ioctl_prepare_buf+0x19b/0x470 [ 60.236519][ T4992] ? v4l_prepare_buf+0x6c/0xc0 [ 60.241365][ T4992] __video_do_ioctl+0xa3e/0xe40 [ 60.246242][ T4992] ? video_ioctl2+0x30/0x30 [ 60.250807][ T4992] ? smack_log+0x123/0x540 [ 60.255383][ T4992] ? __might_fault+0xba/0x120 [ 60.260135][ T4992] video_usercopy+0x894/0x1170 [ 60.264978][ T4992] ? video_ioctl2+0x30/0x30 [ 60.269630][ T4992] ? v4l_printk_ioctl+0x160/0x160 [ 60.274717][ T4992] ? smack_file_ioctl+0x2ee/0x390 [ 60.280319][ T4992] ? do_notify_parent+0xf50/0xf50 [ 60.285450][ T4992] ? print_irqtrace_events+0x220/0x220 [ 60.291218][ T4992] v4l2_ioctl+0x185/0x1d0 [ 60.295668][ T4992] ? v4l2_poll+0x2b0/0x2b0 [ 60.300149][ T4992] __se_sys_ioctl+0xf1/0x160 [ 60.304786][ T4992] do_syscall_64+0x41/0xc0 [ 60.309475][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.315423][ T4992] RIP: 0033:0x7f0c42c37c49 [ 60.319901][ T4992] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.340116][ T4992] RSP: 002b:00007fff68b11548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.348793][ T4992] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c42c37c49 [ 60.356897][ T4992] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 60.365035][ T4992] RBP: 00007f0c42bfbdf0 R08: 0000000000000000 R09: 0000000000000000 [ 60.373109][ T4992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c42bfbe80 [ 60.381437][ T4992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.389650][ T4992] [ 60.392782][ T4992] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 60.400049][ T4992] CPU: 1 PID: 4992 Comm: syz-executor190 Not tainted 6.4.0-rc1-syzkaller-00026-g80e62bc8487b #0 [ 60.410634][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 60.420790][ T4992] Call Trace: [ 60.424209][ T4992] [ 60.427346][ T4992] dump_stack_lvl+0x1e7/0x2d0 [ 60.432039][ T4992] ? nf_tcp_handle_invalid+0x650/0x650 [ 60.437527][ T4992] ? panic+0x770/0x770 [ 60.441598][ T4992] ? vscnprintf+0x5d/0x80 [ 60.446056][ T4992] panic+0x30f/0x770 [ 60.449962][ T4992] ? __warn+0x171/0x4a0 [ 60.454543][ T4992] ? __memcpy_flushcache+0x2b0/0x2b0 [ 60.459842][ T4992] __warn+0x314/0x4a0 [ 60.463909][ T4992] ? get_vaddr_frames+0x1fb/0x240 [ 60.468931][ T4992] report_bug+0x2b3/0x500 [ 60.473512][ T4992] ? get_vaddr_frames+0x1fb/0x240 [ 60.478653][ T4992] handle_bug+0x3d/0x70 [ 60.482892][ T4992] exc_invalid_op+0x1a/0x50 [ 60.487423][ T4992] asm_exc_invalid_op+0x1a/0x20 [ 60.492266][ T4992] RIP: 0010:get_vaddr_frames+0x1fb/0x240 [ 60.498064][ T4992] Code: 8c 11 ff ff ff 4c 89 ef e8 32 6d b9 fa e9 04 ff ff ff e8 c8 9e 61 fa c6 05 69 a3 17 07 01 48 c7 c7 e0 c6 9e 8b e8 85 26 29 fa <0f> 0b e9 4b ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1f ff [ 60.517762][ T4992] RSP: 0018:ffffc9000399f5c8 EFLAGS: 00010246 [ 60.524133][ T4992] RAX: b28a245f7d0ab000 RBX: 1ffff1100512a600 RCX: ffff8880222ebb80 [ 60.532186][ T4992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.540160][ T4992] RBP: dffffc0000000000 R08: ffffffff8152f1a2 R09: ffffed1017325163 [ 60.548212][ T4992] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000fffffff2 [ 60.556176][ T4992] R13: ffff888028953004 R14: 0000000000000000 R15: 0000000000000000 [ 60.564574][ T4992] ? __warn_printk+0x292/0x360 [ 60.569361][ T4992] ? get_vaddr_frames+0x1fb/0x240 [ 60.574414][ T4992] vb2_create_framevec+0x55/0xc0 [ 60.579345][ T4992] vb2_vmalloc_get_userptr+0x100/0x410 [ 60.584905][ T4992] ? __fill_vb2_buffer+0x455/0x4b0 [ 60.590015][ T4992] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 60.595566][ T4992] __buf_prepare+0xc26/0x4460 [ 60.600423][ T4992] ? is_bpf_text_address+0x253/0x270 [ 60.605974][ T4992] ? vb2_core_prepare_buf+0x310/0x310 [ 60.611698][ T4992] ? mark_lock+0x9a/0x340 [ 60.616480][ T4992] ? validate_chain+0x119/0x58e0 [ 60.621514][ T4992] ? __lock_acquire+0x1295/0x2000 [ 60.626725][ T4992] ? read_lock_is_recursive+0x20/0x20 [ 60.632339][ T4992] ? vb2_queue_or_prepare_buf+0x5be/0xe20 [ 60.638054][ T4992] vb2_core_prepare_buf+0xe6/0x310 [ 60.643181][ T4992] v4l2_m2m_ioctl_prepare_buf+0x19b/0x470 [ 60.648910][ T4992] ? v4l_prepare_buf+0x6c/0xc0 [ 60.653710][ T4992] __video_do_ioctl+0xa3e/0xe40 [ 60.658569][ T4992] ? video_ioctl2+0x30/0x30 [ 60.663151][ T4992] ? smack_log+0x123/0x540 [ 60.667650][ T4992] ? __might_fault+0xba/0x120 [ 60.672328][ T4992] video_usercopy+0x894/0x1170 [ 60.677119][ T4992] ? video_ioctl2+0x30/0x30 [ 60.681615][ T4992] ? v4l_printk_ioctl+0x160/0x160 [ 60.686722][ T4992] ? smack_file_ioctl+0x2ee/0x390 [ 60.691924][ T4992] ? do_notify_parent+0xf50/0xf50 [ 60.697140][ T4992] ? print_irqtrace_events+0x220/0x220 [ 60.702599][ T4992] v4l2_ioctl+0x185/0x1d0 [ 60.706928][ T4992] ? v4l2_poll+0x2b0/0x2b0 [ 60.711463][ T4992] __se_sys_ioctl+0xf1/0x160 [ 60.716063][ T4992] do_syscall_64+0x41/0xc0 [ 60.720484][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.726372][ T4992] RIP: 0033:0x7f0c42c37c49 [ 60.730798][ T4992] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.750489][ T4992] RSP: 002b:00007fff68b11548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.758898][ T4992] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c42c37c49 [ 60.766947][ T4992] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 60.775088][ T4992] RBP: 00007f0c42bfbdf0 R08: 0000000000000000 R09: 0000000000000000 [ 60.783313][ T4992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c42bfbe80 [ 60.791631][ T4992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.799622][ T4992] [ 60.802804][ T4992] Kernel Offset: disabled [ 60.807503][ T4992] Rebooting in 86400 seconds..