Warning: Permanently added '10.128.0.254' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 50.624499][ T3583] ------------[ cut here ]------------ [ 50.630152][ T3583] get_vaddr_frames() cannot follow VM_IO mapping [ 50.630623][ T3583] WARNING: CPU: 0 PID: 3583 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1db/0x220 [ 50.648656][ T3583] Modules linked in: [ 50.652548][ T3583] CPU: 0 PID: 3583 Comm: syz-executor174 Not tainted 5.15.98-syzkaller #0 [ 50.661121][ T3583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 50.671308][ T3583] RIP: 0010:get_vaddr_frames+0x1db/0x220 [ 50.677080][ T3583] Code: 8c 1a ff ff ff 4c 89 e7 e8 e2 bc 03 fb e9 0d ff ff ff e8 08 89 ba fa c6 05 ad 77 0a 07 01 48 c7 c7 e0 21 40 8b e8 b5 36 86 fa <0f> 0b e9 4a ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 1e ff [ 50.696745][ T3583] RSP: 0018:ffffc9000208f5a8 EFLAGS: 00010246 [ 50.702823][ T3583] RAX: 5257df3f7d421d00 RBX: 1ffff92000656200 RCX: ffff88801f860000 [ 50.710876][ T3583] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 50.718892][ T3583] RBP: 00000000000ff000 R08: ffffffff81668cfc R09: ffffed1017344f24 [ 50.726925][ T3583] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900032b1004 [ 50.734946][ T3583] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffff2 [ 50.742917][ T3583] FS: 0000555556333300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 50.752023][ T3583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.758684][ T3583] CR2: 00005642f3d32d20 CR3: 0000000079218000 CR4: 00000000003506f0 [ 50.766704][ T3583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.774693][ T3583] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.782712][ T3583] Call Trace: [ 50.786032][ T3583] [ 50.788977][ T3583] vb2_create_framevec+0x4a/0xb0 [ 50.793938][ T3583] vb2_vmalloc_get_userptr+0xe7/0x400 [ 50.799390][ T3583] ? __fill_vb2_buffer+0x451/0x4b0 [ 50.804521][ T3583] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 50.810122][ T3583] __buf_prepare+0xc22/0x4490 [ 50.814912][ T3583] ? vb2_core_prepare_buf+0x300/0x300 [ 50.820305][ T3583] ? arch_stack_walk+0xf3/0x140 [ 50.825420][ T3583] ? mark_lock+0x98/0x340 [ 50.829889][ T3583] ? __lock_acquire+0x1295/0x1ff0 [ 50.835101][ T3583] ? read_lock_is_recursive+0x10/0x10 [ 50.840539][ T3583] ? vb2_queue_or_prepare_buf+0x5be/0xe20 [ 50.846318][ T3583] vb2_core_prepare_buf+0xe2/0x300 [ 50.851464][ T3583] v4l2_m2m_ioctl_prepare_buf+0x137/0x3a0 [ 50.857242][ T3583] ? v4l_prepare_buf+0x68/0xc0 [ 50.862034][ T3583] __video_do_ioctl+0xa44/0xe40 [ 50.866961][ T3583] ? video_ioctl2+0x30/0x30 [ 50.871501][ T3583] ? __might_fault+0xb4/0x110 [ 50.876240][ T3583] video_usercopy+0xa87/0x1120 [ 50.881029][ T3583] ? video_ioctl2+0x30/0x30 [ 50.885577][ T3583] ? v4l_printk_ioctl+0x130/0x130 [ 50.890629][ T3583] ? print_irqtrace_events+0x210/0x210 [ 50.896140][ T3583] ? vtime_user_exit+0x2d1/0x400 [ 50.901099][ T3583] v4l2_ioctl+0x181/0x1d0 [ 50.905471][ T3583] ? v4l2_poll+0x2a0/0x2a0 [ 50.909923][ T3583] __se_sys_ioctl+0xf1/0x160 [ 50.914516][ T3583] do_syscall_64+0x3d/0xb0 [ 50.919013][ T3583] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.924967][ T3583] RIP: 0033:0x7f02f6f58119 [ 50.925012][ T3583] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.925032][ T3583] RSP: 002b:00007ffe5e176298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.957651][ T3583] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f02f6f58119 [ 50.965682][ T3583] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 50.973679][ T3583] RBP: 00007f02f6f1c100 R08: 0000000000000000 R09: 0000000000000000 [ 50.981710][ T3583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02f6f1c190 [ 50.989723][ T3583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.997750][ T3583] [ 51.000780][ T3583] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.008048][ T3583] CPU: 0 PID: 3583 Comm: syz-executor174 Not tainted 5.15.98-syzkaller #0 [ 51.016537][ T3583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 51.026582][ T3583] Call Trace: [ 51.029853][ T3583] [ 51.032776][ T3583] dump_stack_lvl+0x1e3/0x2cb [ 51.037466][ T3583] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 51.043095][ T3583] ? panic+0x84d/0x84d [ 51.047160][ T3583] ? get_vaddr_frames+0x140/0x220 [ 51.052180][ T3583] ? get_vaddr_frames+0x140/0x220 [ 51.057196][ T3583] panic+0x318/0x84d [ 51.061084][ T3583] ? __warn+0x16a/0x300 [ 51.065338][ T3583] ? fb_is_primary_device+0xcc/0xcc [ 51.070543][ T3583] ? get_vaddr_frames+0x1db/0x220 [ 51.075675][ T3583] __warn+0x2b2/0x300 [ 51.079653][ T3583] ? get_vaddr_frames+0x1db/0x220 [ 51.084666][ T3583] report_bug+0x1b7/0x2e0 [ 51.088995][ T3583] handle_bug+0x3d/0x70 [ 51.093159][ T3583] exc_invalid_op+0x16/0x40 [ 51.097655][ T3583] asm_exc_invalid_op+0x16/0x20 [ 51.102498][ T3583] RIP: 0010:get_vaddr_frames+0x1db/0x220 [ 51.108123][ T3583] Code: 8c 1a ff ff ff 4c 89 e7 e8 e2 bc 03 fb e9 0d ff ff ff e8 08 89 ba fa c6 05 ad 77 0a 07 01 48 c7 c7 e0 21 40 8b e8 b5 36 86 fa <0f> 0b e9 4a ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 1e ff [ 51.127808][ T3583] RSP: 0018:ffffc9000208f5a8 EFLAGS: 00010246 [ 51.133887][ T3583] RAX: 5257df3f7d421d00 RBX: 1ffff92000656200 RCX: ffff88801f860000 [ 51.141853][ T3583] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 51.149815][ T3583] RBP: 00000000000ff000 R08: ffffffff81668cfc R09: ffffed1017344f24 [ 51.157778][ T3583] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900032b1004 [ 51.165747][ T3583] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffff2 [ 51.173734][ T3583] ? __wake_up_klogd+0xcc/0x100 [ 51.178601][ T3583] ? get_vaddr_frames+0x1db/0x220 [ 51.183627][ T3583] vb2_create_framevec+0x4a/0xb0 [ 51.188572][ T3583] vb2_vmalloc_get_userptr+0xe7/0x400 [ 51.193973][ T3583] ? __fill_vb2_buffer+0x451/0x4b0 [ 51.199085][ T3583] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 51.204631][ T3583] __buf_prepare+0xc22/0x4490 [ 51.209321][ T3583] ? vb2_core_prepare_buf+0x300/0x300 [ 51.214685][ T3583] ? arch_stack_walk+0xf3/0x140 [ 51.219552][ T3583] ? mark_lock+0x98/0x340 [ 51.224083][ T3583] ? __lock_acquire+0x1295/0x1ff0 [ 51.229128][ T3583] ? read_lock_is_recursive+0x10/0x10 [ 51.234541][ T3583] ? vb2_queue_or_prepare_buf+0x5be/0xe20 [ 51.240262][ T3583] vb2_core_prepare_buf+0xe2/0x300 [ 51.245377][ T3583] v4l2_m2m_ioctl_prepare_buf+0x137/0x3a0 [ 51.251108][ T3583] ? v4l_prepare_buf+0x68/0xc0 [ 51.255891][ T3583] __video_do_ioctl+0xa44/0xe40 [ 51.261039][ T3583] ? video_ioctl2+0x30/0x30 [ 51.265546][ T3583] ? __might_fault+0xb4/0x110 [ 51.270239][ T3583] video_usercopy+0xa87/0x1120 [ 51.275132][ T3583] ? video_ioctl2+0x30/0x30 [ 51.279630][ T3583] ? v4l_printk_ioctl+0x130/0x130 [ 51.284660][ T3583] ? print_irqtrace_events+0x210/0x210 [ 51.290119][ T3583] ? vtime_user_exit+0x2d1/0x400 [ 51.295071][ T3583] v4l2_ioctl+0x181/0x1d0 [ 51.299393][ T3583] ? v4l2_poll+0x2a0/0x2a0 [ 51.303802][ T3583] __se_sys_ioctl+0xf1/0x160 [ 51.308392][ T3583] do_syscall_64+0x3d/0xb0 [ 51.312830][ T3583] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.318715][ T3583] RIP: 0033:0x7f02f6f58119 [ 51.323124][ T3583] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.342817][ T3583] RSP: 002b:00007ffe5e176298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.351240][ T3583] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f02f6f58119 [ 51.359208][ T3583] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 51.367174][ T3583] RBP: 00007f02f6f1c100 R08: 0000000000000000 R09: 0000000000000000 [ 51.375140][ T3583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02f6f1c190 [ 51.383104][ T3583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.391172][ T3583] [ 51.394540][ T3583] Kernel Offset: disabled [ 51.398942][ T3583] Rebooting in 86400 seconds..