./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3615485739
<...>
forked to background, child pid 4644
no interfaces have a carrier
[ 27.878699][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.890256][ T4645] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts.
execve("./syz-executor3615485739", ["./syz-executor3615485739"], 0x7ffca7b35520 /* 10 vars */) = 0
brk(NULL) = 0x5555564c0000
brk(0x5555564c0c40) = 0x5555564c0c40
arch_prctl(ARCH_SET_FS, 0x5555564c0300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3615485739", 4096) = 28
brk(0x5555564e1c40) = 0x5555564e1c40
brk(0x5555564e2000) = 0x5555564e2000
mprotect(0x7f9890024000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
syzkaller login: [ 52.164641][ T5065] ------------[ cut here ]------------
[ 52.170409][ T5065] get_vaddr_frames() cannot follow VM_IO mapping
[ 52.170755][ T5065] WARNING: CPU: 0 PID: 5065 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x217/0x220
[ 52.189115][ T5065] Modules linked in:
[ 52.193061][ T5065] CPU: 1 PID: 5065 Comm: syz-executor361 Not tainted 6.2.0-rc1-syzkaller #0
[ 52.201823][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 52.211983][ T5065] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 52.217981][ T5065] Code: cb 3c fb e9 06 ff ff ff e8 f6 ca 3c fb e9 cd fe ff ff e8 fc c2 ee fa 48 c7 c7 e0 ce 1c 8b c6 05 90 1f cb 07 01 e8 a9 a2 2c 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 52.237729][ T5065] RSP: 0018:ffffc90003bdf810 EFLAGS: 00010286
[ 52.243801][ T5065] RAX: 0000000000000000 RBX: ffff888146e85000 RCX: 0000000000000000
[ 52.251842][ T5065] RDX: ffff888023a23a80 RSI: ffffffff8166721c RDI: fffff5200077bef4
[ 52.259934][ T5065] RBP: ffff888146e85004 R08: 0000000000000005 R09: 0000000000000000
[ 52.268031][ T5065] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 52.276103][ T5065] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888025b9d800
[ 52.284121][ T5065] FS: 00005555564c0300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 52.293132][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 52.299823][ T5065] CR2: 00000000005fdeb8 CR3: 000000002121a000 CR4: 0000000000350ee0
[ 52.307874][ T5065] Call Trace:
[ 52.311164][ T5065]
[ 52.314085][ T5065] vb2_create_framevec+0x62/0xd0
[ 52.319110][ T5065] vb2_vmalloc_get_userptr+0x13b/0x530
[ 52.324603][ T5065] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 52.331110][ T5065] __prepare_userptr+0x31e/0x1580
[ 52.336228][ T5065] ? vb2_queue_error+0x60/0x60
[ 52.341002][ T5065] ? ____kasan_slab_free+0x160/0x1c0
[ 52.346451][ T5065] ? slab_free_freelist_hook+0x8b/0x1c0
[ 52.352029][ T5065] ? __kmem_cache_free+0xaf/0x3b0
[ 52.357142][ T5065] ? tomoyo_path_number_perm+0x438/0x570
[ 52.362804][ T5065] ? security_file_ioctl+0x54/0xb0
[ 52.368003][ T5065] ? lock_release+0x810/0x810
[ 52.372719][ T5065] ? rcu_read_lock_sched_held+0x3e/0x70
[ 52.378365][ T5065] ? trace_contention_end+0x153/0x1e0
[ 52.383778][ T5065] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 52.389785][ T5065] __buf_prepare+0x5e4/0x780
[ 52.394415][ T5065] vb2_core_prepare_buf+0xe4/0x2c0
[ 52.399647][ T5065] vb2_prepare_buf+0x103/0x170
[ 52.404456][ T5065] v4l2_m2m_prepare_buf+0xe8/0x210
[ 52.409678][ T5065] v4l_prepare_buf+0x96/0xc0
[ 52.414301][ T5065] __video_do_ioctl+0xb9d/0xe20
[ 52.419261][ T5065] ? v4l_print_control+0x60/0x60
[ 52.424238][ T5065] video_usercopy+0x3b8/0x17f0
[ 52.429079][ T5065] ? v4l_print_control+0x60/0x60
[ 52.434048][ T5065] ? v4l_enumstd+0x70/0x70
[ 52.438578][ T5065] ? lock_downgrade+0x6e0/0x6e0
[ 52.443467][ T5065] v4l2_ioctl+0x1b7/0x250
[ 52.447882][ T5065] ? v4l2_write+0x2b0/0x2b0
[ 52.452441][ T5065] __x64_sys_ioctl+0x197/0x210
[ 52.457319][ T5065] do_syscall_64+0x39/0xb0
[ 52.461768][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.467738][ T5065] RIP: 0033:0x7f988ffb7c49
[ 52.472175][ T5065] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.491893][ T5065] RSP: 002b:00007fff9c10b878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 52.500399][ T5065] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f988ffb7c49
[ 52.508490][ T5065] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 52.516596][ T5065] RBP: 00007f988ff7bdf0 R08: 0000000000000000 R09: 0000000000000000
[ 52.524561][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f988ff7be80
[ 52.532650][ T5065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 52.540722][ T5065]
[ 52.543760][ T5065] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 52.551046][ T5065] CPU: 1 PID: 5065 Comm: syz-executor361 Not tainted 6.2.0-rc1-syzkaller #0
[ 52.559719][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 52.569779][ T5065] Call Trace:
[ 52.573053][ T5065]
[ 52.575975][ T5065] dump_stack_lvl+0xd1/0x138
[ 52.580563][ T5065] panic+0x2cc/0x626
[ 52.584454][ T5065] ? panic_print_sys_info.part.0+0x110/0x110
[ 52.590441][ T5065] ? get_vaddr_frames+0x217/0x220
[ 52.595494][ T5065] check_panic_on_warn.cold+0x19/0x35
[ 52.600879][ T5065] __warn+0xf2/0x1a0
[ 52.604798][ T5065] ? __wake_up_klogd.part.0+0x99/0xf0
[ 52.610180][ T5065] ? get_vaddr_frames+0x217/0x220
[ 52.615204][ T5065] report_bug+0x1c0/0x210
[ 52.619533][ T5065] handle_bug+0x3c/0x70
[ 52.623702][ T5065] exc_invalid_op+0x18/0x50
[ 52.628205][ T5065] asm_exc_invalid_op+0x1a/0x20
[ 52.633081][ T5065] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 52.638719][ T5065] Code: cb 3c fb e9 06 ff ff ff e8 f6 ca 3c fb e9 cd fe ff ff e8 fc c2 ee fa 48 c7 c7 e0 ce 1c 8b c6 05 90 1f cb 07 01 e8 a9 a2 2c 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 52.658348][ T5065] RSP: 0018:ffffc90003bdf810 EFLAGS: 00010286
[ 52.664426][ T5065] RAX: 0000000000000000 RBX: ffff888146e85000 RCX: 0000000000000000
[ 52.672406][ T5065] RDX: ffff888023a23a80 RSI: ffffffff8166721c RDI: fffff5200077bef4
[ 52.680373][ T5065] RBP: ffff888146e85004 R08: 0000000000000005 R09: 0000000000000000
[ 52.688334][ T5065] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 52.696295][ T5065] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888025b9d800
[ 52.704268][ T5065] ? vprintk+0x8c/0xa0
[ 52.708341][ T5065] vb2_create_framevec+0x62/0xd0
[ 52.713275][ T5065] vb2_vmalloc_get_userptr+0x13b/0x530
[ 52.718738][ T5065] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 52.724897][ T5065] __prepare_userptr+0x31e/0x1580
[ 52.729950][ T5065] ? vb2_queue_error+0x60/0x60
[ 52.734713][ T5065] ? ____kasan_slab_free+0x160/0x1c0
[ 52.739992][ T5065] ? slab_free_freelist_hook+0x8b/0x1c0
[ 52.745539][ T5065] ? __kmem_cache_free+0xaf/0x3b0
[ 52.750550][ T5065] ? tomoyo_path_number_perm+0x438/0x570
[ 52.756178][ T5065] ? security_file_ioctl+0x54/0xb0
[ 52.761292][ T5065] ? lock_release+0x810/0x810
[ 52.765967][ T5065] ? rcu_read_lock_sched_held+0x3e/0x70
[ 52.771511][ T5065] ? trace_contention_end+0x153/0x1e0
[ 52.776883][ T5065] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 52.782782][ T5065] __buf_prepare+0x5e4/0x780
[ 52.787377][ T5065] vb2_core_prepare_buf+0xe4/0x2c0
[ 52.792486][ T5065] vb2_prepare_buf+0x103/0x170
[ 52.797243][ T5065] v4l2_m2m_prepare_buf+0xe8/0x210
[ 52.802344][ T5065] v4l_prepare_buf+0x96/0xc0
[ 52.806933][ T5065] __video_do_ioctl+0xb9d/0xe20
[ 52.811786][ T5065] ? v4l_print_control+0x60/0x60
[ 52.816729][ T5065] video_usercopy+0x3b8/0x17f0
[ 52.821494][ T5065] ? v4l_print_control+0x60/0x60
[ 52.826430][ T5065] ? v4l_enumstd+0x70/0x70
[ 52.830852][ T5065] ? lock_downgrade+0x6e0/0x6e0
[ 52.835699][ T5065] v4l2_ioctl+0x1b7/0x250
[ 52.840022][ T5065] ? v4l2_write+0x2b0/0x2b0
[ 52.844519][ T5065] __x64_sys_ioctl+0x197/0x210
[ 52.849300][ T5065] do_syscall_64+0x39/0xb0
[ 52.853743][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.859645][ T5065] RIP: 0033:0x7f988ffb7c49
[ 52.864059][ T5065] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.883937][ T5065] RSP: 002b:00007fff9c10b878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 52.892357][ T5065] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f988ffb7c49
[ 52.900334][ T5065] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 52.908302][ T5065] RBP: 00007f988ff7bdf0 R08: 0000000000000000 R09: 0000000000000000
[ 52.916270][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f988ff7be80
[ 52.924239][ T5065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 52.932225][ T5065]
[ 52.936265][ T5065] Kernel Offset: disabled
[ 52.940699][ T5065] Rebooting in 86400 seconds..