./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor206216098
<...>
DUID 00:04:a4:32:67:f0:55:bb:60:fb:9b:a6:3e:57:83:d8:2c:c8
forked to background, child pid 4665
[ 20.789246][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0
[ 20.800017][ T4666] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.67' (ECDSA) to the list of known hosts.
execve("./syz-executor206216098", ["./syz-executor206216098"], 0x7ffc32a932a0 /* 10 vars */) = 0
brk(NULL) = 0x555555e16000
brk(0x555555e16c40) = 0x555555e16c40
arch_prctl(ARCH_SET_FS, 0x555555e16300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor206216098", 4096) = 27
brk(0x555555e37c40) = 0x555555e37c40
brk(0x555555e38000) = 0x555555e38000
mprotect(0x7f7aaf286000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
syzkaller login: [ 41.692371][ T4996] ------------[ cut here ]------------
[ 41.698012][ T4996] get_vaddr_frames() cannot follow VM_IO mapping
[ 41.698353][ T4996] WARNING: CPU: 0 PID: 4996 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x220/0x230
[ 41.716279][ T4996] Modules linked in:
[ 41.720187][ T4996] CPU: 0 PID: 4996 Comm: syz-executor206 Not tainted 6.4.0-rc4-syzkaller #0
[ 41.728923][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 41.739023][ T4996] RIP: 0010:get_vaddr_frames+0x220/0x230
[ 41.744647][ T4996] Code: 2f 14 fb e9 06 ff ff ff e8 2d 2f 14 fb e9 cd fe ff ff e8 e3 64 c1 fa 48 c7 c7 40 e5 1e 8b c6 05 6b e1 a1 07 01 e8 10 1f 89 fa <0f> 0b e9 53 ff ff ff 66 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55
[ 41.764359][ T4996] RSP: 0018:ffffc90003a4f818 EFLAGS: 00010282
[ 41.770445][ T4996] RAX: 0000000000000000 RBX: ffffc9000b400000 RCX: 0000000000000000
[ 41.778451][ T4996] RDX: ffff8880281c1dc0 RSI: ffffffff814c03e7 RDI: 0000000000000001
[ 41.786443][ T4996] RBP: ffffc9000b400004 R08: 0000000000000001 R09: 0000000000000000
[ 41.794405][ T4996] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000fffffff2
[ 41.802401][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807e132800
[ 41.810417][ T4996] FS: 0000555555e16300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 41.819633][ T4996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.826230][ T4996] CR2: 0000000020000140 CR3: 000000007d9e2000 CR4: 0000000000350ef0
[ 41.834183][ T4996] Call Trace:
[ 41.837497][ T4996]
[ 41.840436][ T4996] ? __warn+0xe6/0x390
[ 41.844498][ T4996] ? get_vaddr_frames+0x220/0x230
[ 41.849584][ T4996] ? get_vaddr_frames+0x220/0x230
[ 41.854629][ T4996] ? report_bug+0x2da/0x500
[ 41.859203][ T4996] ? handle_bug+0x3c/0x70
[ 41.863532][ T4996] ? exc_invalid_op+0x18/0x50
[ 41.868224][ T4996] ? asm_exc_invalid_op+0x1a/0x20
[ 41.873263][ T4996] ? __warn_printk+0x187/0x310
[ 41.878054][ T4996] ? get_vaddr_frames+0x220/0x230
[ 41.883090][ T4996] ? get_vaddr_frames+0x220/0x230
[ 41.888136][ T4996] vb2_create_framevec+0x62/0xd0
[ 41.893076][ T4996] vb2_vmalloc_get_userptr+0x13b/0x530
[ 41.898568][ T4996] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 41.904726][ T4996] __prepare_userptr+0x6a6/0x1630
[ 41.909788][ T4996] ? vb2_queue_error+0x60/0x60
[ 41.914568][ T4996] ? slab_free_freelist_hook+0x8b/0x1c0
[ 41.920143][ T4996] ? __kmem_cache_free+0xaf/0x2d0
[ 41.925205][ T4996] ? tomoyo_path_number_perm+0x43b/0x570
[ 41.930829][ T4996] ? print_usage_bug.part.0+0x660/0x660
[ 41.936397][ T4996] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.942549][ T4996] ? lock_sync+0x190/0x190
[ 41.947002][ T4996] ? rcu_is_watching+0x12/0xb0
[ 41.951781][ T4996] ? trace_contention_end+0xd8/0x100
[ 41.957093][ T4996] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 41.962994][ T4996] __buf_prepare+0x602/0x7d0
[ 41.967608][ T4996] vb2_core_prepare_buf+0xe4/0x330
[ 41.972731][ T4996] vb2_prepare_buf+0x103/0x190
[ 41.977543][ T4996] v4l2_m2m_prepare_buf+0xe8/0x210
[ 41.982680][ T4996] v4l_prepare_buf+0x96/0xc0
[ 41.987326][ T4996] __video_do_ioctl+0xba6/0xf20
[ 41.992204][ T4996] ? v4l_reqbufs+0xd0/0xd0
[ 41.996656][ T4996] ? should_fail_ex+0x6c/0x5b0
[ 42.001432][ T4996] video_usercopy+0x4bf/0x14c0
[ 42.006252][ T4996] ? v4l_reqbufs+0xd0/0xd0
[ 42.010673][ T4996] ? v4l_enumstd+0x70/0x70
[ 42.015220][ T4996] ? lock_downgrade+0x690/0x690
[ 42.020082][ T4996] v4l2_ioctl+0x1b7/0x250
[ 42.024390][ T4996] ? v4l2_write+0x350/0x350
[ 42.028908][ T4996] __x64_sys_ioctl+0x197/0x210
[ 42.033696][ T4996] do_syscall_64+0x39/0xb0
[ 42.038148][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 42.044063][ T4996] RIP: 0033:0x7f7aaf219c49
[ 42.048493][ T4996] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.068128][ T4996] RSP: 002b:00007ffc38608d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 42.076590][ T4996] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7aaf219c49
[ 42.084560][ T4996] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 42.092568][ T4996] RBP: 00007f7aaf1dddf0 R08: 0000000000000000 R09: 0000000000000000
[ 42.100554][ T4996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aaf1dde80
[ 42.108570][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.116579][ T4996]
[ 42.119601][ T4996] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 42.126862][ T4996] CPU: 0 PID: 4996 Comm: syz-executor206 Not tainted 6.4.0-rc4-syzkaller #0
[ 42.135537][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 42.145577][ T4996] Call Trace:
[ 42.148857][ T4996]
[ 42.151780][ T4996] dump_stack_lvl+0xd9/0x150
[ 42.156371][ T4996] panic+0x686/0x730
[ 42.160260][ T4996] ? panic_smp_self_stop+0xa0/0xa0
[ 42.165366][ T4996] ? show_trace_log_lvl+0x284/0x390
[ 42.170580][ T4996] ? get_vaddr_frames+0x220/0x230
[ 42.175604][ T4996] check_panic_on_warn+0xb1/0xc0
[ 42.180539][ T4996] __warn+0xf2/0x390
[ 42.184427][ T4996] ? get_vaddr_frames+0x220/0x230
[ 42.189447][ T4996] ? get_vaddr_frames+0x220/0x230
[ 42.194468][ T4996] report_bug+0x2da/0x500
[ 42.198793][ T4996] handle_bug+0x3c/0x70
[ 42.203020][ T4996] exc_invalid_op+0x18/0x50
[ 42.207511][ T4996] asm_exc_invalid_op+0x1a/0x20
[ 42.212358][ T4996] RIP: 0010:get_vaddr_frames+0x220/0x230
[ 42.217993][ T4996] Code: 2f 14 fb e9 06 ff ff ff e8 2d 2f 14 fb e9 cd fe ff ff e8 e3 64 c1 fa 48 c7 c7 40 e5 1e 8b c6 05 6b e1 a1 07 01 e8 10 1f 89 fa <0f> 0b e9 53 ff ff ff 66 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55
[ 42.237593][ T4996] RSP: 0018:ffffc90003a4f818 EFLAGS: 00010282
[ 42.243646][ T4996] RAX: 0000000000000000 RBX: ffffc9000b400000 RCX: 0000000000000000
[ 42.251600][ T4996] RDX: ffff8880281c1dc0 RSI: ffffffff814c03e7 RDI: 0000000000000001
[ 42.259558][ T4996] RBP: ffffc9000b400004 R08: 0000000000000001 R09: 0000000000000000
[ 42.267515][ T4996] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000fffffff2
[ 42.275476][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807e132800
[ 42.283442][ T4996] ? __warn_printk+0x187/0x310
[ 42.288207][ T4996] ? get_vaddr_frames+0x220/0x230
[ 42.293229][ T4996] vb2_create_framevec+0x62/0xd0
[ 42.298176][ T4996] vb2_vmalloc_get_userptr+0x13b/0x530
[ 42.303624][ T4996] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 42.309790][ T4996] __prepare_userptr+0x6a6/0x1630
[ 42.314900][ T4996] ? vb2_queue_error+0x60/0x60
[ 42.319660][ T4996] ? slab_free_freelist_hook+0x8b/0x1c0
[ 42.325200][ T4996] ? __kmem_cache_free+0xaf/0x2d0
[ 42.330219][ T4996] ? tomoyo_path_number_perm+0x43b/0x570
[ 42.335848][ T4996] ? print_usage_bug.part.0+0x660/0x660
[ 42.341384][ T4996] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 42.347475][ T4996] ? lock_sync+0x190/0x190
[ 42.351892][ T4996] ? rcu_is_watching+0x12/0xb0
[ 42.356654][ T4996] ? trace_contention_end+0xd8/0x100
[ 42.361925][ T4996] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 42.367813][ T4996] __buf_prepare+0x602/0x7d0
[ 42.372406][ T4996] vb2_core_prepare_buf+0xe4/0x330
[ 42.377513][ T4996] vb2_prepare_buf+0x103/0x190
[ 42.382264][ T4996] v4l2_m2m_prepare_buf+0xe8/0x210
[ 42.387372][ T4996] v4l_prepare_buf+0x96/0xc0
[ 42.391958][ T4996] __video_do_ioctl+0xba6/0xf20
[ 42.396810][ T4996] ? v4l_reqbufs+0xd0/0xd0
[ 42.401214][ T4996] ? should_fail_ex+0x6c/0x5b0
[ 42.405978][ T4996] video_usercopy+0x4bf/0x14c0
[ 42.410757][ T4996] ? v4l_reqbufs+0xd0/0xd0
[ 42.415167][ T4996] ? v4l_enumstd+0x70/0x70
[ 42.419584][ T4996] ? lock_downgrade+0x690/0x690
[ 42.424434][ T4996] v4l2_ioctl+0x1b7/0x250
[ 42.428758][ T4996] ? v4l2_write+0x350/0x350
[ 42.433250][ T4996] __x64_sys_ioctl+0x197/0x210
[ 42.438010][ T4996] do_syscall_64+0x39/0xb0
[ 42.442424][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 42.448330][ T4996] RIP: 0033:0x7f7aaf219c49
[ 42.452729][ T4996] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.472329][ T4996] RSP: 002b:00007ffc38608d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 42.480754][ T4996] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7aaf219c49
[ 42.488720][ T4996] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 42.496686][ T4996] RBP: 00007f7aaf1dddf0 R08: 0000000000000000 R09: 0000000000000000
[ 42.504651][ T4996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aaf1dde80
[ 42.512624][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.520592][ T4996]
[ 42.524353][ T4996] Kernel Offset: disabled
[ 42.528725][ T4996] Rebooting in 86400 seconds..