./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2483301024
<...>
Warning: Permanently added '10.128.0.153' (ECDSA) to the list of known hosts.
execve("./syz-executor2483301024", ["./syz-executor2483301024"], 0x7ffed8e496e0 /* 10 vars */) = 0
brk(NULL) = 0x555556e79000
brk(0x555556e79c40) = 0x555556e79c40
arch_prctl(ARCH_SET_FS, 0x555556e79300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2483301024", 4096) = 28
brk(0x555556e9ac40) = 0x555556e9ac40
brk(0x555556e9b000) = 0x555556e9b000
mprotect(0x7f4abf729000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
syzkaller login: [ 54.910382][ T3635] ------------[ cut here ]------------
[ 54.916809][ T3635] get_vaddr_frames() cannot follow VM_IO mapping
[ 54.917217][ T3635] WARNING: CPU: 0 PID: 3635 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1f2/0x200
[ 54.935470][ T3635] Modules linked in:
[ 54.939380][ T3635] CPU: 0 PID: 3635 Comm: syz-executor248 Not tainted 6.1.0-rc7-syzkaller-00190-g97ee9d1c1696 #0
[ 54.949945][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 54.960071][ T3635] RIP: 0010:get_vaddr_frames+0x1f2/0x200
[ 54.965753][ T3635] Code: ae 4d fb e9 0b ff ff ff e8 bb ae 4d fb e9 d2 fe ff ff e8 c1 d5 00 fb 48 c7 c7 60 52 1b 8b c6 05 ee 29 bd 07 01 e8 fd c0 27 03 <0f> 0b e9 56 ff ff ff 0f 1f 80 00 00 00 00 41 57 41 56 41 55 41 54
[ 54.985421][ T3635] RSP: 0018:ffffc90003c1f820 EFLAGS: 00010286
[ 54.991481][ T3635] RAX: 0000000000000000 RBX: ffff88801ff1f000 RCX: 0000000000000000
[ 54.999493][ T3635] RDX: ffff8880177f3a80 RSI: ffffffff8165749c RDI: fffff52000783ef6
[ 55.007517][ T3635] RBP: ffff88801ff1f004 R08: 0000000000000005 R09: 0000000000000000
[ 55.015536][ T3635] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 55.023564][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888073a41000
[ 55.031526][ T3635] FS: 0000555556e79300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 55.040492][ T3635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.047127][ T3635] CR2: 00000000005d84c8 CR3: 000000002789f000 CR4: 00000000003506f0
[ 55.055165][ T3635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.063221][ T3635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.071210][ T3635] Call Trace:
[ 55.074879][ T3635]
[ 55.077818][ T3635] vb2_create_framevec+0x59/0xd0
[ 55.082854][ T3635] vb2_vmalloc_get_userptr+0x128/0x520
[ 55.088341][ T3635] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 55.094619][ T3635] __prepare_userptr+0x31e/0x1580
[ 55.099666][ T3635] ? vb2_queue_error+0x60/0x60
[ 55.104668][ T3635] ? ____kasan_slab_free+0x160/0x1c0
[ 55.109974][ T3635] ? slab_free_freelist_hook+0x8b/0x1c0
[ 55.115567][ T3635] ? __kmem_cache_free+0xaf/0x3b0
[ 55.120611][ T3635] ? tomoyo_path_number_perm+0x41b/0x550
[ 55.126541][ T3635] ? security_file_ioctl+0x54/0xb0
[ 55.131674][ T3635] ? lock_release+0x810/0x810
[ 55.136432][ T3635] ? rcu_read_lock_sched_held+0x3e/0x70
[ 55.142004][ T3635] ? trace_contention_end+0x153/0x1e0
[ 55.147453][ T3635] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 55.153425][ T3635] __buf_prepare+0x5e4/0x780
[ 55.158022][ T3635] vb2_core_prepare_buf+0xe4/0x2c0
[ 55.163196][ T3635] vb2_prepare_buf+0x103/0x170
[ 55.167981][ T3635] v4l2_m2m_prepare_buf+0xe8/0x210
[ 55.173140][ T3635] v4l_prepare_buf+0x96/0xc0
[ 55.177748][ T3635] __video_do_ioctl+0xb9d/0xe20
[ 55.182690][ T3635] ? v4l_print_control+0x60/0x60
[ 55.187672][ T3635] video_usercopy+0x3b8/0x17f0
[ 55.192537][ T3635] ? v4l_print_control+0x60/0x60
[ 55.197495][ T3635] ? v4l_enumstd+0x70/0x70
[ 55.201912][ T3635] ? lock_downgrade+0x6e0/0x6e0
[ 55.206865][ T3635] v4l2_ioctl+0x1b7/0x250
[ 55.211220][ T3635] ? v4l2_write+0x2b0/0x2b0
[ 55.215781][ T3635] __x64_sys_ioctl+0x197/0x210
[ 55.220571][ T3635] do_syscall_64+0x39/0xb0
[ 55.225060][ T3635] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.230973][ T3635] RIP: 0033:0x7f4abf6bcc49
[ 55.235427][ T3635] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.255130][ T3635] RSP: 002b:00007fffe26bf128 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.263589][ T3635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4abf6bcc49
[ 55.271570][ T3635] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 55.279614][ T3635] RBP: 00007f4abf680df0 R08: 0000000000000000 R09: 0000000000000000
[ 55.287630][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4abf680e80
[ 55.295668][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.303688][ T3635]
[ 55.306698][ T3635] Kernel panic - not syncing: panic_on_warn set ...
[ 55.313272][ T3635] CPU: 0 PID: 3635 Comm: syz-executor248 Not tainted 6.1.0-rc7-syzkaller-00190-g97ee9d1c1696 #0
[ 55.323690][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 55.333749][ T3635] Call Trace:
[ 55.337029][ T3635]
[ 55.339964][ T3635] dump_stack_lvl+0xd1/0x138
[ 55.344575][ T3635] panic+0x2cc/0x626
[ 55.348493][ T3635] ? panic_print_sys_info.part.0+0x110/0x110
[ 55.354507][ T3635] ? __warn.cold+0x24b/0x350
[ 55.359125][ T3635] ? get_vaddr_frames+0x1f2/0x200
[ 55.364164][ T3635] __warn.cold+0x25c/0x350
[ 55.368603][ T3635] ? __wake_up_klogd.part.0+0x99/0xf0
[ 55.374002][ T3635] ? get_vaddr_frames+0x1f2/0x200
[ 55.379038][ T3635] report_bug+0x1c0/0x210
[ 55.383388][ T3635] handle_bug+0x3c/0x70
[ 55.387570][ T3635] exc_invalid_op+0x18/0x50
[ 55.392441][ T3635] asm_exc_invalid_op+0x1a/0x20
[ 55.397309][ T3635] RIP: 0010:get_vaddr_frames+0x1f2/0x200
[ 55.402954][ T3635] Code: ae 4d fb e9 0b ff ff ff e8 bb ae 4d fb e9 d2 fe ff ff e8 c1 d5 00 fb 48 c7 c7 60 52 1b 8b c6 05 ee 29 bd 07 01 e8 fd c0 27 03 <0f> 0b e9 56 ff ff ff 0f 1f 80 00 00 00 00 41 57 41 56 41 55 41 54
[ 55.422570][ T3635] RSP: 0018:ffffc90003c1f820 EFLAGS: 00010286
[ 55.428642][ T3635] RAX: 0000000000000000 RBX: ffff88801ff1f000 RCX: 0000000000000000
[ 55.436617][ T3635] RDX: ffff8880177f3a80 RSI: ffffffff8165749c RDI: fffff52000783ef6
[ 55.444597][ T3635] RBP: ffff88801ff1f004 R08: 0000000000000005 R09: 0000000000000000
[ 55.452571][ T3635] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 55.460546][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888073a41000
[ 55.468535][ T3635] ? vprintk+0x8c/0xa0
[ 55.472622][ T3635] vb2_create_framevec+0x59/0xd0
[ 55.477579][ T3635] vb2_vmalloc_get_userptr+0x128/0x520
[ 55.483063][ T3635] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 55.489240][ T3635] __prepare_userptr+0x31e/0x1580
[ 55.494278][ T3635] ? vb2_queue_error+0x60/0x60
[ 55.499055][ T3635] ? ____kasan_slab_free+0x160/0x1c0
[ 55.504355][ T3635] ? slab_free_freelist_hook+0x8b/0x1c0
[ 55.509912][ T3635] ? __kmem_cache_free+0xaf/0x3b0
[ 55.514950][ T3635] ? tomoyo_path_number_perm+0x41b/0x550
[ 55.520597][ T3635] ? security_file_ioctl+0x54/0xb0
[ 55.525736][ T3635] ? lock_release+0x810/0x810
[ 55.530455][ T3635] ? rcu_read_lock_sched_held+0x3e/0x70
[ 55.536020][ T3635] ? trace_contention_end+0x153/0x1e0
[ 55.541412][ T3635] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 55.547329][ T3635] __buf_prepare+0x5e4/0x780
[ 55.551936][ T3635] vb2_core_prepare_buf+0xe4/0x2c0
[ 55.557059][ T3635] vb2_prepare_buf+0x103/0x170
[ 55.561842][ T3635] v4l2_m2m_prepare_buf+0xe8/0x210
[ 55.566976][ T3635] v4l_prepare_buf+0x96/0xc0
[ 55.571583][ T3635] __video_do_ioctl+0xb9d/0xe20
[ 55.576455][ T3635] ? v4l_print_control+0x60/0x60
[ 55.581414][ T3635] video_usercopy+0x3b8/0x17f0
[ 55.586190][ T3635] ? v4l_print_control+0x60/0x60
[ 55.591139][ T3635] ? v4l_enumstd+0x70/0x70
[ 55.595573][ T3635] ? lock_downgrade+0x6e0/0x6e0
[ 55.600460][ T3635] v4l2_ioctl+0x1b7/0x250
[ 55.604915][ T3635] ? v4l2_write+0x2b0/0x2b0
[ 55.609459][ T3635] __x64_sys_ioctl+0x197/0x210
[ 55.614260][ T3635] do_syscall_64+0x39/0xb0
[ 55.618707][ T3635] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.624624][ T3635] RIP: 0033:0x7f4abf6bcc49
[ 55.629052][ T3635] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.648670][ T3635] RSP: 002b:00007fffe26bf128 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.657092][ T3635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4abf6bcc49
[ 55.665067][ T3635] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 55.673053][ T3635] RBP: 00007f4abf680df0 R08: 0000000000000000 R09: 0000000000000000
[ 55.681035][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4abf680e80
[ 55.689010][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.697002][ T3635]
[ 55.700198][ T3635] Kernel Offset: disabled
[ 55.704581][ T3635] Rebooting in 86400 seconds..