./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor991379082 <...> Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. execve("./syz-executor991379082", ["./syz-executor991379082"], 0x7ffd4bc47a60 /* 10 vars */) = 0 brk(NULL) = 0x555557202000 brk(0x555557202d00) = 0x555557202d00 arch_prctl(ARCH_SET_FS, 0x555557202380) = 0 set_tid_address(0x555557202650) = 5020 set_robust_list(0x555557202660, 24) = 0 rseq(0x555557202ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor991379082", 4096) = 27 getrandom("\x1b\x89\x6f\xe1\xcd\x2b\x05\x5a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557202d00 brk(0x555557223d00) = 0x555557223d00 brk(0x555557224000) = 0x555557224000 mprotect(0x7fb1dc030000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/video0", O_RDWR) = 3 ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_CAPTURE, memory=V4L2_MEMORY_USERPTR, count=24357 => 32}) = 0 [ 45.825252][ T5020] ------------[ cut here ]------------ [ 45.830874][ T5020] get_vaddr_frames() cannot follow VM_IO mapping [ 45.831185][ T5020] WARNING: CPU: 0 PID: 5020 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x206/0x210 [ 45.849455][ T5020] Modules linked in: [ 45.853330][ T5020] CPU: 0 PID: 5020 Comm: syz-executor991 Not tainted 6.5.0-rc4-syzkaller #0 [ 45.862177][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 45.872464][ T5020] RIP: 0010:get_vaddr_frames+0x206/0x210 [ 45.878369][ T5020] Code: ab 01 fb e9 03 ff ff ff e8 d7 ab 01 fb e9 ca fe ff ff e8 fd a4 ad fa 48 c7 c7 00 52 41 8b c6 05 3d 58 bd 07 01 e8 2a 67 74 fa <0f> 0b e9 50 ff ff ff 0f 1f 00 f3 0f 1e fa 41 57 41 56 41 55 41 54 [ 45.898044][ T5020] RSP: 0018:ffffc90003a0f828 EFLAGS: 00010286 [ 45.904137][ T5020] RAX: 0000000000000000 RBX: ffff88807d4b8000 RCX: 0000000000000000 [ 45.912169][ T5020] RDX: ffff888028553b80 RSI: ffffffff814ccc06 RDI: 0000000000000001 [ 45.920171][ T5020] RBP: ffff88807d4b8004 R08: 0000000000000001 R09: 0000000000000000 [ 45.928165][ T5020] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 45.936158][ T5020] R13: 0000000000000001 R14: 00000000fffffff2 R15: 00000000002a302c [ 45.944200][ T5020] FS: 0000555557202380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 45.953149][ T5020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.959760][ T5020] CR2: 00000000005fdeb8 CR3: 0000000073ea7000 CR4: 0000000000350ef0 [ 45.967769][ T5020] Call Trace: [ 45.971055][ T5020] [ 45.973966][ T5020] ? __warn+0xe6/0x380 [ 45.978067][ T5020] ? __wake_up_klogd.part.0+0x99/0xf0 [ 45.983457][ T5020] ? get_vaddr_frames+0x206/0x210 [ 45.988506][ T5020] ? report_bug+0x3bc/0x580 [ 45.993019][ T5020] ? handle_bug+0x3c/0x70 [ 45.997368][ T5020] ? exc_invalid_op+0x17/0x40 [ 46.002068][ T5020] ? asm_exc_invalid_op+0x1a/0x20 [ 46.007129][ T5020] ? __warn_printk+0x1a6/0x350 [ 46.011919][ T5020] ? get_vaddr_frames+0x206/0x210 [ 46.016976][ T5020] ? get_vaddr_frames+0x206/0x210 [ 46.022041][ T5020] vb2_create_framevec+0x64/0xd0 [ 46.027026][ T5020] vb2_vmalloc_get_userptr+0x137/0x560 [ 46.032513][ T5020] ? vb2_vmalloc_dmabuf_ops_attach+0x420/0x420 [ 46.038738][ T5020] __prepare_userptr.constprop.0+0x6ec/0x15d0 [ 46.044847][ T5020] ? __prepare_dmabuf.constprop.0+0x1570/0x1570 [ 46.051136][ T5020] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 46.057184][ T5020] ? trace_contention_end+0xd6/0x100 [ 46.062452][ T5020] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 46.068377][ T5020] __buf_prepare+0x620/0x800 [ 46.073004][ T5020] vb2_core_prepare_buf+0xe4/0x320 [ 46.078142][ T5020] vb2_prepare_buf+0xfe/0x180 [ 46.082854][ T5020] v4l2_m2m_prepare_buf+0xe8/0x1e0 [ 46.088008][ T5020] v4l_prepare_buf+0x94/0xc0 [ 46.092623][ T5020] __video_do_ioctl+0xaea/0xef0 [ 46.097517][ T5020] ? v4l_print_tuner+0x2d0/0x2d0 [ 46.102481][ T5020] video_usercopy+0x4c2/0x15c0 [ 46.107273][ T5020] ? v4l_print_tuner+0x2d0/0x2d0 [ 46.112241][ T5020] ? v4l_enumstd+0x60/0x60 [ 46.116697][ T5020] v4l2_ioctl+0x1bd/0x250 [ 46.121062][ T5020] ? v4l2_write+0x350/0x350 [ 46.125607][ T5020] __x64_sys_ioctl+0x18f/0x210 [ 46.130404][ T5020] do_syscall_64+0x38/0xb0 [ 46.134802][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 46.140730][ T5020] RIP: 0033:0x7fb1dbfbd1e9 [ 46.145152][ T5020] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.164791][ T5020] RSP: 002b:00007fffb4177f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.173254][ T5020] RAX: ffffffffffffffda RBX: 00007fffb4178148 RCX: 00007fb1dbfbd1e9 [ 46.181267][ T5020] RDX: 00000000200002c0 RSI: 00000000c058565d RDI: 0000000000000003 [ 46.189331][ T5020] RBP: 00007fb1dc030610 R08: 00007fffb4178148 R09: 00007fffb4178148 [ 46.197401][ T5020] R10: 00236f656469762f R11: 0000000000000246 R12: 0000000000000001 [ 46.205371][ T5020] R13: 00007fffb4178138 R14: 0000000000000001 R15: 0000000000000001 [ 46.213393][ T5020] [ 46.216466][ T5020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 46.223726][ T5020] CPU: 0 PID: 5020 Comm: syz-executor991 Not tainted 6.5.0-rc4-syzkaller #0 [ 46.232378][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 46.242432][ T5020] Call Trace: [ 46.245693][ T5020] [ 46.248617][ T5020] dump_stack_lvl+0xd9/0x1b0 [ 46.253198][ T5020] panic+0x6a4/0x750 [ 46.257088][ T5020] ? panic_smp_self_stop+0xa0/0xa0 [ 46.262178][ T5020] ? show_trace_log_lvl+0x29d/0x3c0 [ 46.267368][ T5020] ? get_vaddr_frames+0x206/0x210 [ 46.272393][ T5020] check_panic_on_warn+0xab/0xb0 [ 46.277318][ T5020] __warn+0xf2/0x380 [ 46.281199][ T5020] ? __wake_up_klogd.part.0+0x99/0xf0 [ 46.286556][ T5020] ? get_vaddr_frames+0x206/0x210 [ 46.291567][ T5020] report_bug+0x3bc/0x580 [ 46.295882][ T5020] handle_bug+0x3c/0x70 [ 46.300019][ T5020] exc_invalid_op+0x17/0x40 [ 46.304505][ T5020] asm_exc_invalid_op+0x1a/0x20 [ 46.309339][ T5020] RIP: 0010:get_vaddr_frames+0x206/0x210 [ 46.314964][ T5020] Code: ab 01 fb e9 03 ff ff ff e8 d7 ab 01 fb e9 ca fe ff ff e8 fd a4 ad fa 48 c7 c7 00 52 41 8b c6 05 3d 58 bd 07 01 e8 2a 67 74 fa <0f> 0b e9 50 ff ff ff 0f 1f 00 f3 0f 1e fa 41 57 41 56 41 55 41 54 [ 46.334557][ T5020] RSP: 0018:ffffc90003a0f828 EFLAGS: 00010286 [ 46.340615][ T5020] RAX: 0000000000000000 RBX: ffff88807d4b8000 RCX: 0000000000000000 [ 46.348577][ T5020] RDX: ffff888028553b80 RSI: ffffffff814ccc06 RDI: 0000000000000001 [ 46.356533][ T5020] RBP: ffff88807d4b8004 R08: 0000000000000001 R09: 0000000000000000 [ 46.364490][ T5020] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 46.372446][ T5020] R13: 0000000000000001 R14: 00000000fffffff2 R15: 00000000002a302c [ 46.380412][ T5020] ? __warn_printk+0x1a6/0x350 [ 46.385173][ T5020] ? get_vaddr_frames+0x206/0x210 [ 46.390202][ T5020] vb2_create_framevec+0x64/0xd0 [ 46.395129][ T5020] vb2_vmalloc_get_userptr+0x137/0x560 [ 46.400580][ T5020] ? vb2_vmalloc_dmabuf_ops_attach+0x420/0x420 [ 46.406724][ T5020] __prepare_userptr.constprop.0+0x6ec/0x15d0 [ 46.412792][ T5020] ? __prepare_dmabuf.constprop.0+0x1570/0x1570 [ 46.419027][ T5020] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 46.425038][ T5020] ? trace_contention_end+0xd6/0x100 [ 46.430315][ T5020] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 46.436215][ T5020] __buf_prepare+0x620/0x800 [ 46.440801][ T5020] vb2_core_prepare_buf+0xe4/0x320 [ 46.445910][ T5020] vb2_prepare_buf+0xfe/0x180 [ 46.450576][ T5020] v4l2_m2m_prepare_buf+0xe8/0x1e0 [ 46.455686][ T5020] v4l_prepare_buf+0x94/0xc0 [ 46.460275][ T5020] __video_do_ioctl+0xaea/0xef0 [ 46.465125][ T5020] ? v4l_print_tuner+0x2d0/0x2d0 [ 46.470062][ T5020] video_usercopy+0x4c2/0x15c0 [ 46.474821][ T5020] ? v4l_print_tuner+0x2d0/0x2d0 [ 46.479756][ T5020] ? v4l_enumstd+0x60/0x60 [ 46.484179][ T5020] v4l2_ioctl+0x1bd/0x250 [ 46.488499][ T5020] ? v4l2_write+0x350/0x350 [ 46.492992][ T5020] __x64_sys_ioctl+0x18f/0x210 [ 46.497754][ T5020] do_syscall_64+0x38/0xb0 [ 46.502189][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 46.508111][ T5020] RIP: 0033:0x7fb1dbfbd1e9 [ 46.512519][ T5020] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.532121][ T5020] RSP: 002b:00007fffb4177f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.540523][ T5020] RAX: ffffffffffffffda RBX: 00007fffb4178148 RCX: 00007fb1dbfbd1e9 [ 46.548505][ T5020] RDX: 00000000200002c0 RSI: 00000000c058565d RDI: 0000000000000003 [ 46.556463][ T5020] RBP: 00007fb1dc030610 R08: 00007fffb4178148 R09: 00007fffb4178148 [ 46.564426][ T5020] R10: 00236f656469762f R11: 0000000000000246 R12: 0000000000000001 [ 46.572384][ T5020] R13: 00007fffb4178138 R14: 0000000000000001 R15: 0000000000000001 [ 46.580353][ T5020] [ 46.584137][ T5020] Kernel Offset: disabled [ 46.588529][ T5020] Rebooting in 86400 seconds..