Warning: Permanently added '10.128.1.163' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 52.273485][ T3584] ------------[ cut here ]------------ [ 52.279067][ T3584] get_vaddr_frames() cannot follow VM_IO mapping [ 52.279522][ T3584] WARNING: CPU: 0 PID: 3584 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1db/0x220 [ 52.297633][ T3584] Modules linked in: [ 52.301526][ T3584] CPU: 0 PID: 3584 Comm: syz-executor261 Not tainted 5.15.102-syzkaller #0 [ 52.310159][ T3584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 52.320263][ T3584] RIP: 0010:get_vaddr_frames+0x1db/0x220 [ 52.325945][ T3584] Code: 8c 1a ff ff ff 4c 89 e7 e8 c2 d6 ff fa e9 0d ff ff ff e8 18 4d b6 fa c6 05 ff 17 06 07 01 48 c7 c7 c0 3f 40 8b e8 75 e1 81 fa <0f> 0b e9 4a ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 1e ff [ 52.345714][ T3584] RSP: 0018:ffffc90002c8f488 EFLAGS: 00010246 [ 52.351804][ T3584] RAX: 27339e373207cd00 RBX: 1ffff9200062a200 RCX: ffff888077ae1d00 [ 52.359953][ T3584] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 52.367974][ T3584] RBP: 0000000000080000 R08: ffffffff8166a76c R09: ffffed1017344f24 [ 52.376000][ T3584] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003151004 [ 52.384189][ T3584] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffff2 [ 52.392158][ T3584] FS: 0000555556c14300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 52.401133][ T3584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.407770][ T3584] CR2: 000055cba2733220 CR3: 000000001edf9000 CR4: 00000000003506f0 [ 52.415793][ T3584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.423805][ T3584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.431774][ T3584] Call Trace: [ 52.435113][ T3584] [ 52.438058][ T3584] vb2_create_framevec+0x4a/0xb0 [ 52.443256][ T3584] vb2_vmalloc_get_userptr+0xe7/0x400 [ 52.448671][ T3584] ? __fill_vb2_buffer+0x451/0x4b0 [ 52.453846][ T3584] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 52.459419][ T3584] __buf_prepare+0xc22/0x4490 [ 52.464180][ T3584] ? vb2_core_prepare_buf+0x300/0x300 [ 52.469575][ T3584] ? unwind_next_frame+0x1437/0x1fa0 [ 52.475174][ T3584] ? deref_stack_reg+0xbe/0x110 [ 52.480227][ T3584] ? stack_trace_save+0x1c0/0x1c0 [ 52.486017][ T3584] ? is_bpf_text_address+0x24f/0x260 [ 52.491338][ T3584] ? stack_trace_save+0x1c0/0x1c0 [ 52.496425][ T3584] ? __kernel_text_address+0x94/0x100 [ 52.501821][ T3584] ? unwind_get_return_address+0x49/0x80 [ 52.507679][ T3584] ? arch_stack_walk+0xf3/0x140 [ 52.512549][ T3584] ? mark_lock+0x98/0x340 [ 52.516937][ T3584] ? __lock_acquire+0x1295/0x1ff0 [ 52.522018][ T3584] ? set_buffer_cache_hints+0x107/0x420 [ 52.527642][ T3584] vb2_core_qbuf+0x2b4/0x1360 [ 52.532344][ T3584] vb2_qbuf+0x184/0x240 [ 52.536548][ T3584] ? __video_do_ioctl+0x505/0xe40 [ 52.541595][ T3584] ? vb2_create_bufs+0x1080/0x1080 [ 52.546758][ T3584] ? rcu_read_lock_sched_held+0x89/0x130 [ 52.552424][ T3584] v4l2_m2m_qbuf+0x1e0/0x7a0 [ 52.557199][ T3584] ? v4l_qbuf+0x68/0xc0 [ 52.561380][ T3584] __video_do_ioctl+0xa44/0xe40 [ 52.566293][ T3584] ? video_ioctl2+0x30/0x30 [ 52.570992][ T3584] ? __might_fault+0xb4/0x110 [ 52.575724][ T3584] video_usercopy+0xa87/0x1120 [ 52.580522][ T3584] ? video_ioctl2+0x30/0x30 [ 52.585100][ T3584] ? v4l_printk_ioctl+0x130/0x130 [ 52.590251][ T3584] ? print_irqtrace_events+0x210/0x210 [ 52.595792][ T3584] ? vtime_user_exit+0x2d1/0x400 [ 52.600761][ T3584] v4l2_ioctl+0x181/0x1d0 [ 52.605589][ T3584] ? v4l2_poll+0x2a0/0x2a0 [ 52.610030][ T3584] __se_sys_ioctl+0xf1/0x160 [ 52.614679][ T3584] do_syscall_64+0x3d/0xb0 [ 52.619120][ T3584] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.625172][ T3584] RIP: 0033:0x7f1521550119 [ 52.629613][ T3584] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.649377][ T3584] RSP: 002b:00007ffe9215e6f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.657865][ T3584] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1521550119 [ 52.665885][ T3584] RDX: 0000000020000180 RSI: 00000000c058560f RDI: 0000000000000003 [ 52.673915][ T3584] RBP: 00007f1521514100 R08: 0000000000000000 R09: 0000000000000000 [ 52.681884][ T3584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1521514190 [ 52.689898][ T3584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.697925][ T3584] [ 52.701031][ T3584] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 52.708311][ T3584] CPU: 0 PID: 3584 Comm: syz-executor261 Not tainted 5.15.102-syzkaller #0 [ 52.716984][ T3584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 52.727132][ T3584] Call Trace: [ 52.730434][ T3584] [ 52.733363][ T3584] dump_stack_lvl+0x1e3/0x2cb [ 52.738064][ T3584] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 52.743701][ T3584] ? panic+0x84d/0x84d [ 52.747786][ T3584] ? get_vaddr_frames+0x160/0x220 [ 52.752805][ T3584] ? get_vaddr_frames+0x160/0x220 [ 52.757824][ T3584] panic+0x318/0x84d [ 52.761720][ T3584] ? __warn+0x16a/0x300 [ 52.765890][ T3584] ? fb_is_primary_device+0xcc/0xcc [ 52.771106][ T3584] ? get_vaddr_frames+0x1db/0x220 [ 52.776123][ T3584] __warn+0x2b2/0x300 [ 52.780131][ T3584] ? get_vaddr_frames+0x1db/0x220 [ 52.785168][ T3584] report_bug+0x1b7/0x2e0 [ 52.789509][ T3584] handle_bug+0x3d/0x70 [ 52.793699][ T3584] exc_invalid_op+0x16/0x40 [ 52.798196][ T3584] asm_exc_invalid_op+0x16/0x20 [ 52.803037][ T3584] RIP: 0010:get_vaddr_frames+0x1db/0x220 [ 52.808677][ T3584] Code: 8c 1a ff ff ff 4c 89 e7 e8 c2 d6 ff fa e9 0d ff ff ff e8 18 4d b6 fa c6 05 ff 17 06 07 01 48 c7 c7 c0 3f 40 8b e8 75 e1 81 fa <0f> 0b e9 4a ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 1e ff [ 52.828272][ T3584] RSP: 0018:ffffc90002c8f488 EFLAGS: 00010246 [ 52.834332][ T3584] RAX: 27339e373207cd00 RBX: 1ffff9200062a200 RCX: ffff888077ae1d00 [ 52.842297][ T3584] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 52.850267][ T3584] RBP: 0000000000080000 R08: ffffffff8166a76c R09: ffffed1017344f24 [ 52.858319][ T3584] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003151004 [ 52.866304][ T3584] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffff2 [ 52.874274][ T3584] ? __wake_up_klogd+0xcc/0x100 [ 52.879124][ T3584] ? get_vaddr_frames+0x1db/0x220 [ 52.884145][ T3584] vb2_create_framevec+0x4a/0xb0 [ 52.889077][ T3584] vb2_vmalloc_get_userptr+0xe7/0x400 [ 52.894441][ T3584] ? __fill_vb2_buffer+0x451/0x4b0 [ 52.899568][ T3584] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 52.905107][ T3584] __buf_prepare+0xc22/0x4490 [ 52.909796][ T3584] ? vb2_core_prepare_buf+0x300/0x300 [ 52.915160][ T3584] ? unwind_next_frame+0x1437/0x1fa0 [ 52.920440][ T3584] ? deref_stack_reg+0xbe/0x110 [ 52.925286][ T3584] ? stack_trace_save+0x1c0/0x1c0 [ 52.930303][ T3584] ? is_bpf_text_address+0x24f/0x260 [ 52.935581][ T3584] ? stack_trace_save+0x1c0/0x1c0 [ 52.940598][ T3584] ? __kernel_text_address+0x94/0x100 [ 52.945963][ T3584] ? unwind_get_return_address+0x49/0x80 [ 52.951591][ T3584] ? arch_stack_walk+0xf3/0x140 [ 52.956434][ T3584] ? mark_lock+0x98/0x340 [ 52.960781][ T3584] ? __lock_acquire+0x1295/0x1ff0 [ 52.965922][ T3584] ? set_buffer_cache_hints+0x107/0x420 [ 52.971465][ T3584] vb2_core_qbuf+0x2b4/0x1360 [ 52.976142][ T3584] vb2_qbuf+0x184/0x240 [ 52.980288][ T3584] ? __video_do_ioctl+0x505/0xe40 [ 52.985306][ T3584] ? vb2_create_bufs+0x1080/0x1080 [ 52.990496][ T3584] ? rcu_read_lock_sched_held+0x89/0x130 [ 52.996134][ T3584] v4l2_m2m_qbuf+0x1e0/0x7a0 [ 53.000723][ T3584] ? v4l_qbuf+0x68/0xc0 [ 53.004883][ T3584] __video_do_ioctl+0xa44/0xe40 [ 53.009737][ T3584] ? video_ioctl2+0x30/0x30 [ 53.014238][ T3584] ? __might_fault+0xb4/0x110 [ 53.019010][ T3584] video_usercopy+0xa87/0x1120 [ 53.023779][ T3584] ? video_ioctl2+0x30/0x30 [ 53.028275][ T3584] ? v4l_printk_ioctl+0x130/0x130 [ 53.033303][ T3584] ? print_irqtrace_events+0x210/0x210 [ 53.038754][ T3584] ? vtime_user_exit+0x2d1/0x400 [ 53.043690][ T3584] v4l2_ioctl+0x181/0x1d0 [ 53.048006][ T3584] ? v4l2_poll+0x2a0/0x2a0 [ 53.052414][ T3584] __se_sys_ioctl+0xf1/0x160 [ 53.056999][ T3584] do_syscall_64+0x3d/0xb0 [ 53.061416][ T3584] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.067299][ T3584] RIP: 0033:0x7f1521550119 [ 53.071703][ T3584] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.091293][ T3584] RSP: 002b:00007ffe9215e6f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.099700][ T3584] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1521550119 [ 53.107680][ T3584] RDX: 0000000020000180 RSI: 00000000c058560f RDI: 0000000000000003 [ 53.115644][ T3584] RBP: 00007f1521514100 R08: 0000000000000000 R09: 0000000000000000 [ 53.123605][ T3584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1521514190 [ 53.131585][ T3584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.139562][ T3584] [ 53.143038][ T3584] Kernel Offset: disabled [ 53.147438][ T3584] Rebooting in 86400 seconds..