./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3085792584
<...>
Warning: Permanently added '10.128.1.170' (ECDSA) to the list of known hosts.
execve("./syz-executor3085792584", ["./syz-executor3085792584"], 0x7fff73b007f0 /* 10 vars */) = 0
brk(NULL) = 0x555557430000
brk(0x555557430c40) = 0x555557430c40
arch_prctl(ARCH_SET_FS, 0x555557430300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3085792584", 4096) = 28
brk(0x555557451c40) = 0x555557451c40
brk(0x555557452000) = 0x555557452000
mprotect(0x7f04f0a5b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
io_uring_setup(1453, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=2048, cq_entries=4096, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=65856}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
mmap(0x20000000, 74048, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
mmap(0x20000000, 131008, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20000000
openat(AT_FDCWD, 0x20000140, O_RDWR) = 4
ioctl(4, VIDIOC_REQBUFS, 0x200000c0) = 0
syzkaller login: [ 51.017507][ T3629] ------------[ cut here ]------------
[ 51.023039][ T3629] get_vaddr_frames() cannot follow VM_IO mapping
[ 51.023415][ T3629] WARNING: CPU: 0 PID: 3629 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1f2/0x200
[ 51.041365][ T3629] Modules linked in:
[ 51.045286][ T3629] CPU: 0 PID: 3629 Comm: syz-executor308 Not tainted 6.1.0-rc7-syzkaller-00140-gbdaa78c6aa86 #0
[ 51.055741][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 51.065905][ T3629] RIP: 0010:get_vaddr_frames+0x1f2/0x200
[ 51.071549][ T3629] Code: b6 4d fb e9 0b ff ff ff e8 fb b5 4d fb e9 d2 fe ff ff e8 01 dd 00 fb 48 c7 c7 60 52 1b 8b c6 05 2e 31 bd 07 01 e8 3d c8 27 03 <0f> 0b e9 56 ff ff ff 0f 1f 80 00 00 00 00 41 57 41 56 41 55 41 54
[ 51.091200][ T3629] RSP: 0018:ffffc90003e3f820 EFLAGS: 00010286
[ 51.097303][ T3629] RAX: 0000000000000000 RBX: ffff888018487000 RCX: 0000000000000000
[ 51.105670][ T3629] RDX: ffff88801e003a80 RSI: ffffffff8165749c RDI: fffff520007c7ef6
[ 51.113677][ T3629] RBP: ffff888018487004 R08: 0000000000000005 R09: 0000000000000000
[ 51.122083][ T3629] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 51.130216][ T3629] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888024b1f800
[ 51.138254][ T3629] FS: 0000555557430300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 51.147230][ T3629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.153805][ T3629] CR2: 00007fff73afee58 CR3: 0000000020d29000 CR4: 0000000000350ef0
[ 51.161807][ T3629] Call Trace:
[ 51.165110][ T3629]
[ 51.168041][ T3629] vb2_create_framevec+0x59/0xd0
[ 51.172966][ T3629] vb2_vmalloc_get_userptr+0x128/0x520
[ 51.178471][ T3629] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 51.184760][ T3629] __prepare_userptr+0x31e/0x1580
[ 51.189773][ T3629] ? vb2_queue_error+0x60/0x60
[ 51.194678][ T3629] ? ____kasan_slab_free+0x160/0x1c0
[ 51.199995][ T3629] ? slab_free_freelist_hook+0x8b/0x1c0
[ 51.205573][ T3629] ? __kmem_cache_free+0xaf/0x3b0
[ 51.210608][ T3629] ? tomoyo_path_number_perm+0x41b/0x550
[ 51.216290][ T3629] ? security_file_ioctl+0x54/0xb0
[ 51.221421][ T3629] ? lock_release+0x810/0x810
[ 51.226337][ T3629] ? rcu_read_lock_sched_held+0x3e/0x70
[ 51.231913][ T3629] ? trace_contention_end+0x153/0x1e0
[ 51.237803][ T3629] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 51.243718][ T3629] __buf_prepare+0x5e4/0x780
[ 51.248344][ T3629] vb2_core_prepare_buf+0xe4/0x2c0
[ 51.253463][ T3629] vb2_prepare_buf+0x103/0x170
[ 51.258267][ T3629] v4l2_m2m_prepare_buf+0xe8/0x210
[ 51.263399][ T3629] v4l_prepare_buf+0x96/0xc0
[ 51.268023][ T3629] __video_do_ioctl+0xb9d/0xe20
[ 51.272977][ T3629] ? v4l_print_control+0x60/0x60
[ 51.278010][ T3629] video_usercopy+0x3b8/0x17f0
[ 51.282793][ T3629] ? v4l_print_control+0x60/0x60
[ 51.287758][ T3629] ? v4l_enumstd+0x70/0x70
[ 51.292181][ T3629] ? lock_downgrade+0x6e0/0x6e0
[ 51.297075][ T3629] v4l2_ioctl+0x1b7/0x250
[ 51.301426][ T3629] ? v4l2_write+0x2b0/0x2b0
[ 51.305963][ T3629] __x64_sys_ioctl+0x197/0x210
[ 51.310745][ T3629] do_syscall_64+0x39/0xb0
[ 51.315197][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 51.321106][ T3629] RIP: 0033:0x7f04f09eed19
[ 51.325543][ T3629] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 51.345298][ T3629] RSP: 002b:00007ffca1ef24b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 51.353721][ T3629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f04f09eed19
[ 51.361913][ T3629] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000004
[ 51.369921][ T3629] RBP: 00007f04f09b2ec0 R08: 0000000000000000 R09: 0000000000000000
[ 51.377933][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04f09b2f50
[ 51.386016][ T3629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 51.394040][ T3629]
[ 51.397061][ T3629] Kernel panic - not syncing: panic_on_warn set ...
[ 51.403619][ T3629] CPU: 0 PID: 3629 Comm: syz-executor308 Not tainted 6.1.0-rc7-syzkaller-00140-gbdaa78c6aa86 #0
[ 51.414007][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 51.424146][ T3629] Call Trace:
[ 51.427421][ T3629]
[ 51.430338][ T3629] dump_stack_lvl+0xd1/0x138
[ 51.435001][ T3629] panic+0x2cc/0x626
[ 51.438885][ T3629] ? panic_print_sys_info.part.0+0x110/0x110
[ 51.444856][ T3629] ? __warn.cold+0x24b/0x350
[ 51.449437][ T3629] ? get_vaddr_frames+0x1f2/0x200
[ 51.454449][ T3629] __warn.cold+0x25c/0x350
[ 51.458870][ T3629] ? __wake_up_klogd.part.0+0x99/0xf0
[ 51.464239][ T3629] ? get_vaddr_frames+0x1f2/0x200
[ 51.469242][ T3629] report_bug+0x1c0/0x210
[ 51.473557][ T3629] handle_bug+0x3c/0x70
[ 51.477702][ T3629] exc_invalid_op+0x18/0x50
[ 51.482197][ T3629] asm_exc_invalid_op+0x1a/0x20
[ 51.487038][ T3629] RIP: 0010:get_vaddr_frames+0x1f2/0x200
[ 51.492743][ T3629] Code: b6 4d fb e9 0b ff ff ff e8 fb b5 4d fb e9 d2 fe ff ff e8 01 dd 00 fb 48 c7 c7 60 52 1b 8b c6 05 2e 31 bd 07 01 e8 3d c8 27 03 <0f> 0b e9 56 ff ff ff 0f 1f 80 00 00 00 00 41 57 41 56 41 55 41 54
[ 51.512621][ T3629] RSP: 0018:ffffc90003e3f820 EFLAGS: 00010286
[ 51.518681][ T3629] RAX: 0000000000000000 RBX: ffff888018487000 RCX: 0000000000000000
[ 51.526728][ T3629] RDX: ffff88801e003a80 RSI: ffffffff8165749c RDI: fffff520007c7ef6
[ 51.534687][ T3629] RBP: ffff888018487004 R08: 0000000000000005 R09: 0000000000000000
[ 51.542645][ T3629] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 51.550608][ T3629] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888024b1f800
[ 51.558583][ T3629] ? vprintk+0x8c/0xa0
[ 51.562651][ T3629] vb2_create_framevec+0x59/0xd0
[ 51.567584][ T3629] vb2_vmalloc_get_userptr+0x128/0x520
[ 51.573040][ T3629] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 51.579190][ T3629] __prepare_userptr+0x31e/0x1580
[ 51.584233][ T3629] ? vb2_queue_error+0x60/0x60
[ 51.588989][ T3629] ? ____kasan_slab_free+0x160/0x1c0
[ 51.594266][ T3629] ? slab_free_freelist_hook+0x8b/0x1c0
[ 51.599799][ T3629] ? __kmem_cache_free+0xaf/0x3b0
[ 51.604812][ T3629] ? tomoyo_path_number_perm+0x41b/0x550
[ 51.610444][ T3629] ? security_file_ioctl+0x54/0xb0
[ 51.615559][ T3629] ? lock_release+0x810/0x810
[ 51.620240][ T3629] ? rcu_read_lock_sched_held+0x3e/0x70
[ 51.625780][ T3629] ? trace_contention_end+0x153/0x1e0
[ 51.631145][ T3629] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 51.637038][ T3629] __buf_prepare+0x5e4/0x780
[ 51.641619][ T3629] vb2_core_prepare_buf+0xe4/0x2c0
[ 51.646741][ T3629] vb2_prepare_buf+0x103/0x170
[ 51.651500][ T3629] v4l2_m2m_prepare_buf+0xe8/0x210
[ 51.656608][ T3629] v4l_prepare_buf+0x96/0xc0
[ 51.661189][ T3629] __video_do_ioctl+0xb9d/0xe20
[ 51.666033][ T3629] ? v4l_print_control+0x60/0x60
[ 51.670967][ T3629] video_usercopy+0x3b8/0x17f0
[ 51.675728][ T3629] ? v4l_print_control+0x60/0x60
[ 51.680671][ T3629] ? v4l_enumstd+0x70/0x70
[ 51.685692][ T3629] ? lock_downgrade+0x6e0/0x6e0
[ 51.690544][ T3629] v4l2_ioctl+0x1b7/0x250
[ 51.694867][ T3629] ? v4l2_write+0x2b0/0x2b0
[ 51.699366][ T3629] __x64_sys_ioctl+0x197/0x210
[ 51.704122][ T3629] do_syscall_64+0x39/0xb0
[ 51.708534][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 51.714418][ T3629] RIP: 0033:0x7f04f09eed19
[ 51.718825][ T3629] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 51.738594][ T3629] RSP: 002b:00007ffca1ef24b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 51.747170][ T3629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f04f09eed19
[ 51.755217][ T3629] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000004
[ 51.763199][ T3629] RBP: 00007f04f09b2ec0 R08: 0000000000000000 R09: 0000000000000000
[ 51.771177][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04f09b2f50
[ 51.779136][ T3629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 51.787108][ T3629]
[ 51.790869][ T3629] Kernel Offset: disabled
[ 51.795257][ T3629] Rebooting in 86400 seconds..