./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3256253331
<...>
Warning: Permanently added '10.128.1.50' (ECDSA) to the list of known hosts.
execve("./syz-executor3256253331", ["./syz-executor3256253331"], 0x7ffe21ec7fc0 /* 10 vars */) = 0
brk(NULL) = 0x555556771000
brk(0x555556771c40) = 0x555556771c40
arch_prctl(ARCH_SET_FS, 0x555556771300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3256253331", 4096) = 28
brk(0x555556792c40) = 0x555556792c40
brk(0x555556793000) = 0x555556793000
mprotect(0x7fcd5ec1c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
syzkaller login: [ 54.002412][ T3635] ------------[ cut here ]------------
[ 54.007981][ T3635] get_vaddr_frames() cannot follow VM_IO mapping
[ 54.008366][ T3635] WARNING: CPU: 0 PID: 3635 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1f2/0x200
[ 54.026434][ T3635] Modules linked in:
[ 54.030318][ T3635] CPU: 0 PID: 3635 Comm: syz-executor325 Not tainted 6.1.0-rc8-syzkaller #0
[ 54.039159][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 54.049334][ T3635] RIP: 0010:get_vaddr_frames+0x1f2/0x200
[ 54.055048][ T3635] Code: af 4d fb e9 0b ff ff ff e8 fb ae 4d fb e9 d2 fe ff ff e8 81 d4 00 fb 48 c7 c7 e0 4f 1b 8b c6 05 ee 27 bd 07 01 e8 bd bf 27 03 <0f> 0b e9 56 ff ff ff 0f 1f 80 00 00 00 00 41 57 41 56 41 55 41 54
[ 54.074815][ T3635] RSP: 0018:ffffc90003d0f820 EFLAGS: 00010286
[ 54.081087][ T3635] RAX: 0000000000000000 RBX: ffff88801fd0b000 RCX: 0000000000000000
[ 54.089094][ T3635] RDX: ffff8880735dba80 RSI: ffffffff8165749c RDI: fffff520007a1ef6
[ 54.097187][ T3635] RBP: ffff88801fd0b004 R08: 0000000000000005 R09: 0000000000000000
[ 54.105216][ T3635] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 54.113260][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807cfc9000
[ 54.121276][ T3635] FS: 0000555556771300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 54.130202][ T3635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.136850][ T3635] CR2: 000000000061ba0c CR3: 00000000766e1000 CR4: 00000000003506f0
[ 54.144863][ T3635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.152908][ T3635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.160926][ T3635] Call Trace:
[ 54.164197][ T3635] <TASK>
[ 54.167119][ T3635] vb2_create_framevec+0x59/0xd0
[ 54.172124][ T3635] vb2_vmalloc_get_userptr+0x128/0x520
[ 54.177614][ T3635] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 54.183836][ T3635] __prepare_userptr+0x31e/0x1580
[ 54.188878][ T3635] ? vb2_queue_error+0x60/0x60
[ 54.193707][ T3635] ? ____kasan_slab_free+0x160/0x1c0
[ 54.199012][ T3635] ? slab_free_freelist_hook+0x8b/0x1c0
[ 54.204626][ T3635] ? __kmem_cache_free+0xaf/0x3b0
[ 54.209677][ T3635] ? tomoyo_path_number_perm+0x41b/0x550
[ 54.215523][ T3635] ? security_file_ioctl+0x54/0xb0
[ 54.220932][ T3635] ? lock_release+0x810/0x810
[ 54.225632][ T3635] ? rcu_read_lock_sched_held+0x3e/0x70
[ 54.231247][ T3635] ? trace_contention_end+0x153/0x1e0
[ 54.236653][ T3635] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 54.242597][ T3635] __buf_prepare+0x5e4/0x780
[ 54.247209][ T3635] vb2_core_prepare_buf+0xe4/0x2c0
[ 54.252488][ T3635] vb2_prepare_buf+0x103/0x170
[ 54.257279][ T3635] v4l2_m2m_prepare_buf+0xe8/0x210
[ 54.262448][ T3635] v4l_prepare_buf+0x96/0xc0
[ 54.267055][ T3635] __video_do_ioctl+0xb9d/0xe20
[ 54.271997][ T3635] ? v4l_print_control+0x60/0x60
[ 54.276955][ T3635] video_usercopy+0x3b8/0x17f0
[ 54.281765][ T3635] ? v4l_print_control+0x60/0x60
[ 54.286719][ T3635] ? v4l_enumstd+0x70/0x70
[ 54.291223][ T3635] ? lock_downgrade+0x6e0/0x6e0
[ 54.296108][ T3635] v4l2_ioctl+0x1b7/0x250
[ 54.300492][ T3635] ? v4l2_write+0x2b0/0x2b0
[ 54.305038][ T3635] __x64_sys_ioctl+0x197/0x210
[ 54.309827][ T3635] do_syscall_64+0x39/0xb0
[ 54.314338][ T3635] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.320280][ T3635] RIP: 0033:0x7fcd5ebafc49
[ 54.324742][ T3635] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.344470][ T3635] RSP: 002b:00007ffd11fde5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 54.352959][ T3635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd5ebafc49
[ 54.361018][ T3635] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 54.369000][ T3635] RBP: 00007fcd5eb73df0 R08: 0000000000000000 R09: 0000000000000000
[ 54.377013][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd5eb73e80
[ 54.385055][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 54.393086][ T3635] </TASK>
[ 54.396112][ T3635] Kernel panic - not syncing: panic_on_warn set ...
[ 54.402679][ T3635] CPU: 0 PID: 3635 Comm: syz-executor325 Not tainted 6.1.0-rc8-syzkaller #0
[ 54.411344][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 54.421390][ T3635] Call Trace:
[ 54.424658][ T3635] <TASK>
[ 54.427581][ T3635] dump_stack_lvl+0xd1/0x138
[ 54.432168][ T3635] panic+0x2cc/0x626
[ 54.436058][ T3635] ? panic_print_sys_info.part.0+0x110/0x110
[ 54.442044][ T3635] ? __warn.cold+0x24b/0x350
[ 54.446633][ T3635] ? get_vaddr_frames+0x1f2/0x200
[ 54.451648][ T3635] __warn.cold+0x25c/0x350
[ 54.456057][ T3635] ? __wake_up_klogd.part.0+0x99/0xf0
[ 54.461426][ T3635] ? get_vaddr_frames+0x1f2/0x200
[ 54.466439][ T3635] report_bug+0x1c0/0x210
[ 54.470776][ T3635] handle_bug+0x3c/0x70
[ 54.474972][ T3635] exc_invalid_op+0x18/0x50
[ 54.479512][ T3635] asm_exc_invalid_op+0x1a/0x20
[ 54.484385][ T3635] RIP: 0010:get_vaddr_frames+0x1f2/0x200
[ 54.490042][ T3635] Code: af 4d fb e9 0b ff ff ff e8 fb ae 4d fb e9 d2 fe ff ff e8 81 d4 00 fb 48 c7 c7 e0 4f 1b 8b c6 05 ee 27 bd 07 01 e8 bd bf 27 03 <0f> 0b e9 56 ff ff ff 0f 1f 80 00 00 00 00 41 57 41 56 41 55 41 54
[ 54.510187][ T3635] RSP: 0018:ffffc90003d0f820 EFLAGS: 00010286
[ 54.516279][ T3635] RAX: 0000000000000000 RBX: ffff88801fd0b000 RCX: 0000000000000000
[ 54.524270][ T3635] RDX: ffff8880735dba80 RSI: ffffffff8165749c RDI: fffff520007a1ef6
[ 54.532256][ T3635] RBP: ffff88801fd0b004 R08: 0000000000000005 R09: 0000000000000000
[ 54.540237][ T3635] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 54.548215][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807cfc9000
[ 54.556206][ T3635] ? vprintk+0x8c/0xa0
[ 54.560319][ T3635] vb2_create_framevec+0x59/0xd0
[ 54.565303][ T3635] vb2_vmalloc_get_userptr+0x128/0x520
[ 54.570799][ T3635] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 54.576993][ T3635] __prepare_userptr+0x31e/0x1580
[ 54.582039][ T3635] ? vb2_queue_error+0x60/0x60
[ 54.586822][ T3635] ? ____kasan_slab_free+0x160/0x1c0
[ 54.592129][ T3635] ? slab_free_freelist_hook+0x8b/0x1c0
[ 54.597690][ T3635] ? __kmem_cache_free+0xaf/0x3b0
[ 54.602730][ T3635] ? tomoyo_path_number_perm+0x41b/0x550
[ 54.608386][ T3635] ? security_file_ioctl+0x54/0xb0
[ 54.613530][ T3635] ? lock_release+0x810/0x810
[ 54.618247][ T3635] ? rcu_read_lock_sched_held+0x3e/0x70
[ 54.623817][ T3635] ? trace_contention_end+0x153/0x1e0
[ 54.629220][ T3635] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 54.635138][ T3635] __buf_prepare+0x5e4/0x780
[ 54.639744][ T3635] vb2_core_prepare_buf+0xe4/0x2c0
[ 54.644872][ T3635] vb2_prepare_buf+0x103/0x170
[ 54.649658][ T3635] v4l2_m2m_prepare_buf+0xe8/0x210
[ 54.654790][ T3635] v4l_prepare_buf+0x96/0xc0
[ 54.659402][ T3635] __video_do_ioctl+0xb9d/0xe20
[ 54.664271][ T3635] ? v4l_print_control+0x60/0x60
[ 54.669234][ T3635] video_usercopy+0x3b8/0x17f0
[ 54.674015][ T3635] ? v4l_print_control+0x60/0x60
[ 54.678967][ T3635] ? v4l_enumstd+0x70/0x70
[ 54.683429][ T3635] ? lock_downgrade+0x6e0/0x6e0
[ 54.688326][ T3635] v4l2_ioctl+0x1b7/0x250
[ 54.692689][ T3635] ? v4l2_write+0x2b0/0x2b0
[ 54.697216][ T3635] __x64_sys_ioctl+0x197/0x210
[ 54.701999][ T3635] do_syscall_64+0x39/0xb0
[ 54.706439][ T3635] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.712350][ T3635] RIP: 0033:0x7fcd5ebafc49
[ 54.716772][ T3635] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.736386][ T3635] RSP: 002b:00007ffd11fde5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 54.744808][ T3635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd5ebafc49
[ 54.752790][ T3635] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 54.760766][ T3635] RBP: 00007fcd5eb73df0 R08: 0000000000000000 R09: 0000000000000000
[ 54.768742][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd5eb73e80
[ 54.776717][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 54.784711][ T3635] </TASK>
[ 54.787930][ T3635] Kernel Offset: disabled
[ 54.792323][ T3635] Rebooting in 86400 seconds..