./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2785045707
<...>
forked to background, child pid 4656
no interfaces have a carrier
[ 52.104557][ T4657] 8021q: adding VLAN 0 to HW filter on device bond0
[ 52.115510][ T4657] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.202' (ECDSA) to the list of known hosts.
execve("./syz-executor2785045707", ["./syz-executor2785045707"], 0x7ffe9cc01fa0 /* 10 vars */) = 0
brk(NULL) = 0x5555562f0000
brk(0x5555562f0c40) = 0x5555562f0c40
arch_prctl(ARCH_SET_FS, 0x5555562f0300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2785045707", 4096) = 28
brk(0x555556311c40) = 0x555556311c40
brk(0x555556312000) = 0x555556312000
mprotect(0x7f93253e9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
syzkaller login: [ 76.845347][ T5080] ------------[ cut here ]------------
[ 76.851027][ T5080] get_vaddr_frames() cannot follow VM_IO mapping
[ 76.851685][ T5080] WARNING: CPU: 0 PID: 5080 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x217/0x220
[ 76.869693][ T5080] Modules linked in:
[ 76.873622][ T5080] CPU: 0 PID: 5080 Comm: syz-executor278 Not tainted 6.3.0-rc2-syzkaller-00006-gfc89d7fb499b #0
[ 76.884111][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 76.894256][ T5080] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 76.899983][ T5080] Code: 62 11 fb e9 06 ff ff ff e8 26 62 11 fb e9 cd fe ff ff e8 7c 1b c0 fa 48 c7 c7 00 02 1e 8b c6 05 e9 11 9f 07 01 e8 f9 37 88 fa <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 76.919687][ T5080] RSP: 0018:ffffc90003c0f758 EFLAGS: 00010282
[ 76.925774][ T5080] RAX: 0000000000000000 RBX: ffffc9000b200000 RCX: 0000000000000000
[ 76.933846][ T5080] RDX: ffff88801d8b3a80 RSI: ffffffff814bf3a7 RDI: 0000000000000001
[ 76.941937][ T5080] RBP: ffffc9000b200004 R08: 0000000000000001 R09: 0000000000000000
[ 76.949987][ T5080] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 76.958004][ T5080] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807af54000
[ 76.966070][ T5080] FS: 00005555562f0300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 76.975121][ T5080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 76.981782][ T5080] CR2: 00000000005fdeb8 CR3: 000000007b9c0000 CR4: 00000000003506f0
[ 76.989830][ T5080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 76.997814][ T5080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 77.005856][ T5080] Call Trace:
[ 77.009260][ T5080]
[ 77.012214][ T5080] vb2_create_framevec+0x62/0xd0
[ 77.017182][ T5080] vb2_vmalloc_get_userptr+0x13b/0x530
[ 77.022725][ T5080] ? is_bpf_text_address+0x9d/0x1b0
[ 77.027980][ T5080] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 77.034232][ T5080] __prepare_userptr+0x6a6/0x1630
[ 77.039348][ T5080] ? vb2_queue_error+0x60/0x60
[ 77.044147][ T5080] ? __lock_acquire+0x18bc/0x5d40
[ 77.049289][ T5080] ? __kmem_cache_free+0xaf/0x2d0
[ 77.054371][ T5080] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.060438][ T5080] ? slab_free_freelist_hook+0x8b/0x1c0
[ 77.066035][ T5080] ? __kmem_cache_free+0xaf/0x2d0
[ 77.071176][ T5080] ? tomoyo_path_number_perm+0x438/0x570
[ 77.076856][ T5080] ? security_file_ioctl+0x54/0xb0
[ 77.082100][ T5080] ? __x64_sys_ioctl+0xb7/0x210
[ 77.087028][ T5080] ? do_syscall_64+0x39/0xb0
[ 77.091724][ T5080] ? lock_release+0x700/0x700
[ 77.096448][ T5080] __buf_prepare+0x602/0x7d0
[ 77.101121][ T5080] ? vb2_queue_or_prepare_buf+0x5b0/0x2cb0
[ 77.107001][ T5080] vb2_core_qbuf+0xc79/0x15d0
[ 77.111779][ T5080] ? __mutex_lock+0x231/0x1350
[ 77.116605][ T5080] vb2_qbuf+0x13d/0x1d0
[ 77.120852][ T5080] ? vb2_ioctl_prepare_buf+0x140/0x140
[ 77.126354][ T5080] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 77.132007][ T5080] v4l2_m2m_qbuf+0x18e/0x920
[ 77.136665][ T5080] ? check_fmt+0x4f4/0x900
[ 77.141172][ T5080] v4l_qbuf+0x96/0xc0
[ 77.145228][ T5080] __video_do_ioctl+0xba6/0xf20
[ 77.150202][ T5080] ? v4l_reqbufs+0xd0/0xd0
[ 77.154686][ T5080] video_usercopy+0x331/0x17c0
[ 77.159563][ T5080] ? v4l_reqbufs+0xd0/0xd0
[ 77.164040][ T5080] ? v4l_enumstd+0x70/0x70
[ 77.168510][ T5080] ? lock_downgrade+0x690/0x690
[ 77.173471][ T5080] v4l2_ioctl+0x1b7/0x250
[ 77.177843][ T5080] ? v4l2_write+0x350/0x350
[ 77.182425][ T5080] __x64_sys_ioctl+0x197/0x210
[ 77.187248][ T5080] do_syscall_64+0x39/0xb0
[ 77.191744][ T5080] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.197697][ T5080] RIP: 0033:0x7f932537cc49
[ 77.202213][ T5080] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 77.221925][ T5080] RSP: 002b:00007fffd428f388 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.230511][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f932537cc49
[ 77.238519][ T5080] RDX: 0000000020000180 RSI: 00000000c058560f RDI: 0000000000000003
[ 77.246573][ T5080] RBP: 00007f9325340df0 R08: 0000000000000000 R09: 0000000000000000
[ 77.254648][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9325340e80
[ 77.262697][ T5080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 77.270770][ T5080]
[ 77.273803][ T5080] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.281096][ T5080] CPU: 0 PID: 5080 Comm: syz-executor278 Not tainted 6.3.0-rc2-syzkaller-00006-gfc89d7fb499b #0
[ 77.291518][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 77.301583][ T5080] Call Trace:
[ 77.304882][ T5080]
[ 77.307998][ T5080] dump_stack_lvl+0xd9/0x150
[ 77.312617][ T5080] panic+0x688/0x730
[ 77.316534][ T5080] ? panic_smp_self_stop+0x90/0x90
[ 77.321667][ T5080] ? show_trace_log_lvl+0x285/0x390
[ 77.326906][ T5080] ? get_vaddr_frames+0x217/0x220
[ 77.331982][ T5080] check_panic_on_warn+0xb1/0xc0
[ 77.336964][ T5080] __warn+0xf2/0x460
[ 77.340891][ T5080] ? __wake_up_klogd.part.0+0x99/0xf0
[ 77.346280][ T5080] ? get_vaddr_frames+0x217/0x220
[ 77.351348][ T5080] report_bug+0x2da/0x500
[ 77.355710][ T5080] handle_bug+0x3c/0x70
[ 77.359903][ T5080] exc_invalid_op+0x18/0x50
[ 77.364440][ T5080] asm_exc_invalid_op+0x1a/0x20
[ 77.369322][ T5080] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 77.374993][ T5080] Code: 62 11 fb e9 06 ff ff ff e8 26 62 11 fb e9 cd fe ff ff e8 7c 1b c0 fa 48 c7 c7 00 02 1e 8b c6 05 e9 11 9f 07 01 e8 f9 37 88 fa <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 77.394627][ T5080] RSP: 0018:ffffc90003c0f758 EFLAGS: 00010282
[ 77.400736][ T5080] RAX: 0000000000000000 RBX: ffffc9000b200000 RCX: 0000000000000000
[ 77.408738][ T5080] RDX: ffff88801d8b3a80 RSI: ffffffff814bf3a7 RDI: 0000000000000001
[ 77.416817][ T5080] RBP: ffffc9000b200004 R08: 0000000000000001 R09: 0000000000000000
[ 77.424808][ T5080] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 77.432816][ T5080] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807af54000
[ 77.440845][ T5080] ? __warn_printk+0x187/0x310
[ 77.445654][ T5080] ? get_vaddr_frames+0x217/0x220
[ 77.450744][ T5080] vb2_create_framevec+0x62/0xd0
[ 77.455730][ T5080] vb2_vmalloc_get_userptr+0x13b/0x530
[ 77.461220][ T5080] ? is_bpf_text_address+0x9d/0x1b0
[ 77.466471][ T5080] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 77.472662][ T5080] __prepare_userptr+0x6a6/0x1630
[ 77.477719][ T5080] ? vb2_queue_error+0x60/0x60
[ 77.482526][ T5080] ? __lock_acquire+0x18bc/0x5d40
[ 77.487585][ T5080] ? __kmem_cache_free+0xaf/0x2d0
[ 77.492665][ T5080] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.498695][ T5080] ? slab_free_freelist_hook+0x8b/0x1c0
[ 77.504296][ T5080] ? __kmem_cache_free+0xaf/0x2d0
[ 77.509363][ T5080] ? tomoyo_path_number_perm+0x438/0x570
[ 77.515033][ T5080] ? security_file_ioctl+0x54/0xb0
[ 77.520187][ T5080] ? __x64_sys_ioctl+0xb7/0x210
[ 77.525081][ T5080] ? do_syscall_64+0x39/0xb0
[ 77.529724][ T5080] ? lock_release+0x700/0x700
[ 77.534436][ T5080] __buf_prepare+0x602/0x7d0
[ 77.539065][ T5080] ? vb2_queue_or_prepare_buf+0x5b0/0x2cb0
[ 77.544908][ T5080] vb2_core_qbuf+0xc79/0x15d0
[ 77.549629][ T5080] ? __mutex_lock+0x231/0x1350
[ 77.554432][ T5080] vb2_qbuf+0x13d/0x1d0
[ 77.558613][ T5080] ? vb2_ioctl_prepare_buf+0x140/0x140
[ 77.564101][ T5080] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 77.569692][ T5080] v4l2_m2m_qbuf+0x18e/0x920
[ 77.574322][ T5080] ? check_fmt+0x4f4/0x900
[ 77.578774][ T5080] v4l_qbuf+0x96/0xc0
[ 77.582793][ T5080] __video_do_ioctl+0xba6/0xf20
[ 77.587710][ T5080] ? v4l_reqbufs+0xd0/0xd0
[ 77.592216][ T5080] video_usercopy+0x331/0x17c0
[ 77.597050][ T5080] ? v4l_reqbufs+0xd0/0xd0
[ 77.601513][ T5080] ? v4l_enumstd+0x70/0x70
[ 77.605982][ T5080] ? lock_downgrade+0x690/0x690
[ 77.610876][ T5080] v4l2_ioctl+0x1b7/0x250
[ 77.615239][ T5080] ? v4l2_write+0x350/0x350
[ 77.619777][ T5080] __x64_sys_ioctl+0x197/0x210
[ 77.624592][ T5080] do_syscall_64+0x39/0xb0
[ 77.629040][ T5080] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.634978][ T5080] RIP: 0033:0x7f932537cc49
[ 77.639417][ T5080] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 77.659052][ T5080] RSP: 002b:00007fffd428f388 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.667493][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f932537cc49
[ 77.675482][ T5080] RDX: 0000000020000180 RSI: 00000000c058560f RDI: 0000000000000003
[ 77.683475][ T5080] RBP: 00007f9325340df0 R08: 0000000000000000 R09: 0000000000000000
[ 77.691474][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9325340e80
[ 77.699470][ T5080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 77.707486][ T5080]
[ 77.710813][ T5080] Kernel Offset: disabled
[ 77.715256][ T5080] Rebooting in 86400 seconds..