./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1384897211
<...>
Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
execve("./syz-executor1384897211", ["./syz-executor1384897211"], 0x7ffe03414380 /* 10 vars */) = 0
brk(NULL) = 0x5555571ef000
brk(0x5555571efd00) = 0x5555571efd00
arch_prctl(ARCH_SET_FS, 0x5555571ef380) = 0
set_tid_address(0x5555571ef650) = 5049
set_robust_list(0x5555571ef660, 24) = 0
rseq(0x5555571efca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1384897211", 4096) = 28
getrandom("\xa5\x07\x25\xc2\x50\x46\xb8\x75", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555571efd00
brk(0x555557210d00) = 0x555557210d00
brk(0x555557211000) = 0x555557211000
mprotect(0x7f0ff5e3f000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/video0", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_CAPTURE, memory=V4L2_MEMORY_USERPTR, count=24357 => 32}) = 0
[ 72.690333][ T5049] ------------[ cut here ]------------
[ 72.696263][ T5049] get_vaddr_frames() cannot follow VM_IO mapping
[ 72.696643][ T5049] WARNING: CPU: 0 PID: 5049 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x206/0x210
[ 72.714527][ T5049] Modules linked in:
[ 72.718428][ T5049] CPU: 0 PID: 5049 Comm: syz-executor138 Not tainted 6.5.0-next-20230907-syzkaller #0
[ 72.728426][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 72.738682][ T5049] RIP: 0010:get_vaddr_frames+0x206/0x210
[ 72.744328][ T5049] Code: 8c fb fa e9 03 ff ff ff e8 07 8c fb fa e9 ca fe ff ff e8 1d c0 a5 fa 48 c7 c7 20 d6 62 8b c6 05 e0 fd d5 07 01 e8 da d5 6b fa <0f> 0b e9 50 ff ff ff 0f 1f 00 f3 0f 1e fa 41 57 41 56 41 55 41 54
[ 72.764069][ T5049] RSP: 0018:ffffc90003847828 EFLAGS: 00010286
[ 72.770183][ T5049] RAX: 0000000000000000 RBX: ffff888024f20000 RCX: 0000000000000000
[ 72.778191][ T5049] RDX: ffff88801fb81dc0 RSI: ffffffff814e0216 RDI: 0000000000000001
[ 72.786197][ T5049] RBP: ffff888024f20004 R08: 0000000000000001 R09: 0000000000000000
[ 72.794160][ T5049] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 72.802211][ T5049] R13: 0000000000000001 R14: 00000000fffffff2 R15: 00000000002a302c
[ 72.810244][ T5049] FS: 00005555571ef380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 72.819235][ T5049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 72.825858][ T5049] CR2: 00000000005fdeb8 CR3: 0000000027ab2000 CR4: 00000000003506f0
[ 72.833854][ T5049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 72.841867][ T5049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 72.849895][ T5049] Call Trace:
[ 72.853164][ T5049]
[ 72.856120][ T5049] ? show_regs+0x8f/0xa0
[ 72.860380][ T5049] ? __warn+0xe6/0x380
[ 72.864441][ T5049] ? __wake_up_klogd.part.0+0x99/0xf0
[ 72.869850][ T5049] ? get_vaddr_frames+0x206/0x210
[ 72.874922][ T5049] ? report_bug+0x3bc/0x580
[ 72.879423][ T5049] ? handle_bug+0x3c/0x70
[ 72.883740][ T5049] ? exc_invalid_op+0x17/0x40
[ 72.888430][ T5049] ? asm_exc_invalid_op+0x1a/0x20
[ 72.893472][ T5049] ? __warn_printk+0x1a6/0x350
[ 72.898272][ T5049] ? get_vaddr_frames+0x206/0x210
[ 72.903318][ T5049] ? get_vaddr_frames+0x206/0x210
[ 72.908360][ T5049] vb2_create_framevec+0x64/0xd0
[ 72.913328][ T5049] vb2_vmalloc_get_userptr+0x137/0x560
[ 72.918862][ T5049] ? stack_trace_save+0x96/0xd0
[ 72.923738][ T5049] ? vb2_vmalloc_dmabuf_ops_attach+0x420/0x420
[ 72.929934][ T5049] __prepare_userptr.constprop.0+0x6ec/0x15d0
[ 72.936088][ T5049] ? __prepare_dmabuf.constprop.0+0x1570/0x1570
[ 72.942332][ T5049] ? slab_free_freelist_hook+0x114/0x1e0
[ 72.948006][ T5049] ? trace_contention_end+0xd6/0x100
[ 72.953325][ T5049] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 72.959276][ T5049] __buf_prepare+0x620/0x800
[ 72.963868][ T5049] vb2_core_prepare_buf+0xe4/0x320
[ 72.969045][ T5049] vb2_prepare_buf+0xfe/0x180
[ 72.973757][ T5049] v4l2_m2m_prepare_buf+0xe8/0x1e0
[ 72.978939][ T5049] v4l_prepare_buf+0x94/0xc0
[ 72.983559][ T5049] __video_do_ioctl+0xaea/0xef0
[ 72.988451][ T5049] ? v4l_print_tuner+0x2d0/0x2d0
[ 72.993416][ T5049] video_usercopy+0x4c2/0x15c0
[ 72.998269][ T5049] ? v4l_print_tuner+0x2d0/0x2d0
[ 73.003241][ T5049] ? v4l_enumstd+0x60/0x60
[ 73.007728][ T5049] v4l2_ioctl+0x1bd/0x250
[ 73.012083][ T5049] ? v4l2_write+0x350/0x350
[ 73.016635][ T5049] __x64_sys_ioctl+0x18f/0x210
[ 73.021413][ T5049] do_syscall_64+0x38/0xb0
[ 73.025855][ T5049] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 73.031765][ T5049] RIP: 0033:0x7f0ff5dcc1e9
[ 73.036209][ T5049] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.055894][ T5049] RSP: 002b:00007ffe4be95528 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 73.064302][ T5049] RAX: ffffffffffffffda RBX: 00007ffe4be956f8 RCX: 00007f0ff5dcc1e9
[ 73.072297][ T5049] RDX: 00000000200002c0 RSI: 00000000c058565d RDI: 0000000000000003
[ 73.080312][ T5049] RBP: 00007f0ff5e3f610 R08: 00007ffe4be956f8 R09: 00007ffe4be956f8
[ 73.088327][ T5049] R10: 00236f656469762f R11: 0000000000000246 R12: 0000000000000001
[ 73.096335][ T5049] R13: 00007ffe4be956e8 R14: 0000000000000001 R15: 0000000000000001
[ 73.104319][ T5049]
[ 73.107359][ T5049] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 73.114639][ T5049] CPU: 0 PID: 5049 Comm: syz-executor138 Not tainted 6.5.0-next-20230907-syzkaller #0
[ 73.124170][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 73.134210][ T5049] Call Trace:
[ 73.137476][ T5049]
[ 73.140392][ T5049] dump_stack_lvl+0xd9/0x1b0
[ 73.144973][ T5049] panic+0x6dc/0x790
[ 73.148863][ T5049] ? panic_smp_self_stop+0xa0/0xa0
[ 73.153961][ T5049] ? show_trace_log_lvl+0x363/0x4f0
[ 73.159155][ T5049] ? get_vaddr_frames+0x206/0x210
[ 73.164166][ T5049] check_panic_on_warn+0xab/0xb0
[ 73.169095][ T5049] __warn+0xf2/0x380
[ 73.172977][ T5049] ? __wake_up_klogd.part.0+0x99/0xf0
[ 73.178338][ T5049] ? get_vaddr_frames+0x206/0x210
[ 73.183347][ T5049] report_bug+0x3bc/0x580
[ 73.187673][ T5049] handle_bug+0x3c/0x70
[ 73.191814][ T5049] exc_invalid_op+0x17/0x40
[ 73.196311][ T5049] asm_exc_invalid_op+0x1a/0x20
[ 73.201169][ T5049] RIP: 0010:get_vaddr_frames+0x206/0x210
[ 73.206823][ T5049] Code: 8c fb fa e9 03 ff ff ff e8 07 8c fb fa e9 ca fe ff ff e8 1d c0 a5 fa 48 c7 c7 20 d6 62 8b c6 05 e0 fd d5 07 01 e8 da d5 6b fa <0f> 0b e9 50 ff ff ff 0f 1f 00 f3 0f 1e fa 41 57 41 56 41 55 41 54
[ 73.226455][ T5049] RSP: 0018:ffffc90003847828 EFLAGS: 00010286
[ 73.232535][ T5049] RAX: 0000000000000000 RBX: ffff888024f20000 RCX: 0000000000000000
[ 73.240510][ T5049] RDX: ffff88801fb81dc0 RSI: ffffffff814e0216 RDI: 0000000000000001
[ 73.248496][ T5049] RBP: ffff888024f20004 R08: 0000000000000001 R09: 0000000000000000
[ 73.256471][ T5049] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 73.264444][ T5049] R13: 0000000000000001 R14: 00000000fffffff2 R15: 00000000002a302c
[ 73.272425][ T5049] ? __warn_printk+0x1a6/0x350
[ 73.277209][ T5049] ? get_vaddr_frames+0x206/0x210
[ 73.282242][ T5049] vb2_create_framevec+0x64/0xd0
[ 73.287194][ T5049] vb2_vmalloc_get_userptr+0x137/0x560
[ 73.292667][ T5049] ? stack_trace_save+0x96/0xd0
[ 73.297538][ T5049] ? vb2_vmalloc_dmabuf_ops_attach+0x420/0x420
[ 73.303708][ T5049] __prepare_userptr.constprop.0+0x6ec/0x15d0
[ 73.309823][ T5049] ? __prepare_dmabuf.constprop.0+0x1570/0x1570
[ 73.316089][ T5049] ? slab_free_freelist_hook+0x114/0x1e0
[ 73.321762][ T5049] ? trace_contention_end+0xd6/0x100
[ 73.327055][ T5049] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 73.332976][ T5049] __buf_prepare+0x620/0x800
[ 73.337596][ T5049] vb2_core_prepare_buf+0xe4/0x320
[ 73.342733][ T5049] vb2_prepare_buf+0xfe/0x180
[ 73.347424][ T5049] v4l2_m2m_prepare_buf+0xe8/0x1e0
[ 73.352545][ T5049] v4l_prepare_buf+0x94/0xc0
[ 73.357155][ T5049] __video_do_ioctl+0xaea/0xef0
[ 73.362042][ T5049] ? v4l_print_tuner+0x2d0/0x2d0
[ 73.367008][ T5049] video_usercopy+0x4c2/0x15c0
[ 73.371795][ T5049] ? v4l_print_tuner+0x2d0/0x2d0
[ 73.376754][ T5049] ? v4l_enumstd+0x60/0x60
[ 73.381198][ T5049] v4l2_ioctl+0x1bd/0x250
[ 73.385543][ T5049] ? v4l2_write+0x350/0x350
[ 73.390143][ T5049] __x64_sys_ioctl+0x18f/0x210
[ 73.394952][ T5049] do_syscall_64+0x38/0xb0
[ 73.399387][ T5049] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 73.405288][ T5049] RIP: 0033:0x7f0ff5dcc1e9
[ 73.409708][ T5049] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.429321][ T5049] RSP: 002b:00007ffe4be95528 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 73.437739][ T5049] RAX: ffffffffffffffda RBX: 00007ffe4be956f8 RCX: 00007f0ff5dcc1e9
[ 73.445723][ T5049] RDX: 00000000200002c0 RSI: 00000000c058565d RDI: 0000000000000003
[ 73.453695][ T5049] RBP: 00007f0ff5e3f610 R08: 00007ffe4be956f8 R09: 00007ffe4be956f8
[ 73.461671][ T5049] R10: 00236f656469762f R11: 0000000000000246 R12: 0000000000000001
[ 73.469663][ T5049] R13: 00007ffe4be956e8 R14: 0000000000000001 R15: 0000000000000001
[ 73.477667][ T5049]
[ 73.480906][ T5049] Kernel Offset: disabled
[ 73.485219][ T5049] Rebooting in 86400 seconds..