./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1425484475
<...>
Warning: Permanently added '10.128.0.236' (ECDSA) to the list of known hosts.
execve("./syz-executor1425484475", ["./syz-executor1425484475"], 0x7ffcfc4ea3e0 /* 10 vars */) = 0
brk(NULL) = 0x55555654a000
brk(0x55555654ac40) = 0x55555654ac40
arch_prctl(ARCH_SET_FS, 0x55555654a300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1425484475", 4096) = 28
brk(0x55555656bc40) = 0x55555656bc40
brk(0x55555656c000) = 0x55555656c000
mprotect(0x7f9ea502e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
[ 60.816020][ T5081] ------------[ cut here ]------------
[ 60.821707][ T5081] get_vaddr_frames() cannot follow VM_IO mapping
[ 60.822046][ T5081] WARNING: CPU: 0 PID: 5081 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x217/0x220
[ 60.840549][ T5081] Modules linked in:
[ 60.844463][ T5081] CPU: 1 PID: 5081 Comm: syz-executor142 Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
[ 60.855041][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 60.865375][ T5081] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 60.871265][ T5081] Code: 9d 3b fb e9 06 ff ff ff e8 56 9d 3b fb e9 cd fe ff ff e8 1c c7 ed fa 48 c7 c7 a0 4b 1d 8b c6 05 4d a5 ca 07 01 e8 af b2 29 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 60.891424][ T5081] RSP: 0018:ffffc90003d5f810 EFLAGS: 00010286
[ 60.898025][ T5081] RAX: 0000000000000000 RBX: ffff888027834000 RCX: 0000000000000000
[ 60.906015][ T5081] RDX: ffff88807abe57c0 RSI: ffffffff8166e45c RDI: fffff520007abef4
[ 60.914270][ T5081] RBP: ffff888027834004 R08: 0000000000000005 R09: 0000000000000000
[ 60.922436][ T5081] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 60.930594][ T5081] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880295b7800
[ 60.938759][ T5081] FS: 000055555654a300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 60.947971][ T5081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.954552][ T5081] CR2: 00007ffd318e9bb0 CR3: 00000000230ad000 CR4: 00000000003506e0
[ 60.962789][ T5081] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.970949][ T5081] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.979106][ T5081] Call Trace:
[ 60.982382][ T5081]
[ 60.985305][ T5081] vb2_create_framevec+0x62/0xd0
[ 60.990553][ T5081] vb2_vmalloc_get_userptr+0x13b/0x530
[ 60.996014][ T5081] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 61.002391][ T5081] __prepare_userptr+0x31e/0x1580
[ 61.007852][ T5081] ? vb2_queue_error+0x60/0x60
[ 61.012625][ T5081] ? ____kasan_slab_free+0x160/0x1c0
[ 61.018408][ T5081] ? slab_free_freelist_hook+0x8b/0x1c0
[ 61.023956][ T5081] ? __kmem_cache_free+0xaf/0x2d0
[ 61.029372][ T5081] ? tomoyo_path_number_perm+0x43b/0x570
[ 61.035006][ T5081] ? security_file_ioctl+0x54/0xb0
[ 61.040345][ T5081] ? __x64_sys_ioctl+0xb7/0x210
[ 61.045198][ T5081] ? lock_chain_count+0x20/0x20
[ 61.050297][ T5081] ? lock_sync+0x190/0x190
[ 61.054712][ T5081] ? __video_do_ioctl+0x554/0xe20
[ 61.059997][ T5081] ? rcu_read_lock_sched_held+0x3e/0x70
[ 61.065539][ T5081] ? trace_contention_end+0x173/0x1e0
[ 61.071159][ T5081] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 61.077324][ T5081] __buf_prepare+0x5e4/0x780
[ 61.081942][ T5081] vb2_core_prepare_buf+0xe4/0x2c0
[ 61.087362][ T5081] vb2_prepare_buf+0x103/0x170
[ 61.092156][ T5081] v4l2_m2m_prepare_buf+0xe8/0x210
[ 61.097510][ T5081] v4l_prepare_buf+0x96/0xc0
[ 61.102102][ T5081] __video_do_ioctl+0xb9d/0xe20
[ 61.107189][ T5081] ? v4l_print_control+0x60/0x60
[ 61.112137][ T5081] ? lock_acquire+0x32/0xc0
[ 61.116630][ T5081] ? __might_fault+0xa9/0x180
[ 61.121769][ T5081] video_usercopy+0x336/0x1920
[ 61.126543][ T5081] ? v4l_print_control+0x60/0x60
[ 61.131912][ T5081] ? v4l_enumstd+0x70/0x70
[ 61.136350][ T5081] v4l2_ioctl+0x1b7/0x250
[ 61.141184][ T5081] ? v4l2_read+0x2b0/0x2b0
[ 61.145607][ T5081] __x64_sys_ioctl+0x197/0x210
[ 61.150637][ T5081] do_syscall_64+0x39/0xb0
[ 61.155067][ T5081] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.161215][ T5081] RIP: 0033:0x7f9ea4fc1c49
[ 61.165629][ T5081] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 61.185516][ T5081] RSP: 002b:00007ffef313b498 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 61.194128][ T5081] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9ea4fc1c49
[ 61.202304][ T5081] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 61.210464][ T5081] RBP: 00007f9ea4f85df0 R08: 0000000000000000 R09: 0000000000000000
[ 61.218600][ T5081] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9ea4f85e80
[ 61.226566][ T5081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 61.234794][ T5081]
[ 61.237973][ T5081] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 61.245236][ T5081] CPU: 1 PID: 5081 Comm: syz-executor142 Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
[ 61.255111][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 61.265154][ T5081] Call Trace:
[ 61.268419][ T5081]
[ 61.271340][ T5081] dump_stack_lvl+0xd1/0x138
[ 61.275928][ T5081] panic+0x2cc/0x626
[ 61.279816][ T5081] ? panic_print_sys_info.part.0+0x110/0x110
[ 61.285798][ T5081] ? get_vaddr_frames+0x217/0x220
[ 61.290815][ T5081] check_panic_on_warn.cold+0x19/0x35
[ 61.296180][ T5081] __warn+0xf2/0x1a0
[ 61.300072][ T5081] ? __wake_up_klogd.part.0+0x99/0xf0
[ 61.305437][ T5081] ? get_vaddr_frames+0x217/0x220
[ 61.310455][ T5081] report_bug+0x1c0/0x210
[ 61.314782][ T5081] handle_bug+0x3c/0x70
[ 61.318942][ T5081] exc_invalid_op+0x18/0x50
[ 61.323434][ T5081] asm_exc_invalid_op+0x1a/0x20
[ 61.328278][ T5081] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 61.333903][ T5081] Code: 9d 3b fb e9 06 ff ff ff e8 56 9d 3b fb e9 cd fe ff ff e8 1c c7 ed fa 48 c7 c7 a0 4b 1d 8b c6 05 4d a5 ca 07 01 e8 af b2 29 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 61.353495][ T5081] RSP: 0018:ffffc90003d5f810 EFLAGS: 00010286
[ 61.359550][ T5081] RAX: 0000000000000000 RBX: ffff888027834000 RCX: 0000000000000000
[ 61.367507][ T5081] RDX: ffff88807abe57c0 RSI: ffffffff8166e45c RDI: fffff520007abef4
[ 61.375466][ T5081] RBP: ffff888027834004 R08: 0000000000000005 R09: 0000000000000000
[ 61.383421][ T5081] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 61.391382][ T5081] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880295b7800
[ 61.399347][ T5081] ? vprintk+0x8c/0xa0
[ 61.403414][ T5081] vb2_create_framevec+0x62/0xd0
[ 61.408350][ T5081] vb2_vmalloc_get_userptr+0x13b/0x530
[ 61.413798][ T5081] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 61.419940][ T5081] __prepare_userptr+0x31e/0x1580
[ 61.424961][ T5081] ? vb2_queue_error+0x60/0x60
[ 61.429718][ T5081] ? ____kasan_slab_free+0x160/0x1c0
[ 61.434993][ T5081] ? slab_free_freelist_hook+0x8b/0x1c0
[ 61.440525][ T5081] ? __kmem_cache_free+0xaf/0x2d0
[ 61.445537][ T5081] ? tomoyo_path_number_perm+0x43b/0x570
[ 61.451162][ T5081] ? security_file_ioctl+0x54/0xb0
[ 61.456258][ T5081] ? __x64_sys_ioctl+0xb7/0x210
[ 61.461097][ T5081] ? lock_chain_count+0x20/0x20
[ 61.465949][ T5081] ? lock_sync+0x190/0x190
[ 61.470355][ T5081] ? __video_do_ioctl+0x554/0xe20
[ 61.475379][ T5081] ? rcu_read_lock_sched_held+0x3e/0x70
[ 61.480912][ T5081] ? trace_contention_end+0x173/0x1e0
[ 61.486276][ T5081] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 61.492168][ T5081] __buf_prepare+0x5e4/0x780
[ 61.496764][ T5081] vb2_core_prepare_buf+0xe4/0x2c0
[ 61.501903][ T5081] vb2_prepare_buf+0x103/0x170
[ 61.506656][ T5081] v4l2_m2m_prepare_buf+0xe8/0x210
[ 61.511766][ T5081] v4l_prepare_buf+0x96/0xc0
[ 61.516350][ T5081] __video_do_ioctl+0xb9d/0xe20
[ 61.521197][ T5081] ? v4l_print_control+0x60/0x60
[ 61.526130][ T5081] ? lock_acquire+0x32/0xc0
[ 61.530622][ T5081] ? __might_fault+0xa9/0x180
[ 61.535299][ T5081] video_usercopy+0x336/0x1920
[ 61.540056][ T5081] ? v4l_print_control+0x60/0x60
[ 61.545073][ T5081] ? v4l_enumstd+0x70/0x70
[ 61.549496][ T5081] v4l2_ioctl+0x1b7/0x250
[ 61.553828][ T5081] ? v4l2_read+0x2b0/0x2b0
[ 61.558234][ T5081] __x64_sys_ioctl+0x197/0x210
[ 61.562991][ T5081] do_syscall_64+0x39/0xb0
[ 61.567406][ T5081] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.573292][ T5081] RIP: 0033:0x7f9ea4fc1c49
[ 61.577695][ T5081] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 61.597286][ T5081] RSP: 002b:00007ffef313b498 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 61.605708][ T5081] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9ea4fc1c49
[ 61.613667][ T5081] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 61.621627][ T5081] RBP: 00007f9ea4f85df0 R08: 0000000000000000 R09: 0000000000000000
[ 61.629586][ T5081] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9ea4f85e80
[ 61.637544][ T5081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 61.645514][ T5081]
[ 61.648738][ T5081] Kernel Offset: disabled
[ 61.653132][ T5081] Rebooting in 86400 seconds..