./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2343946957
<...>
[ 19.674260][ T4670] dhcpcd-run-hook (4670) used greatest stack depth: 22288 bytes left
forked to background, child pid 4666
[ 20.683368][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0
[ 20.693920][ T4667] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts.
execve("./syz-executor2343946957", ["./syz-executor2343946957"], 0x7fffc2b35ed0 /* 10 vars */) = 0
brk(NULL) = 0x55555603d000
brk(0x55555603dc40) = 0x55555603dc40
arch_prctl(ARCH_SET_FS, 0x55555603d300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2343946957", 4096) = 28
brk(0x55555605ec40) = 0x55555605ec40
brk(0x55555605f000) = 0x55555605f000
mprotect(0x7f07d9144000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
syzkaller login: [ 40.648340][ T4997] ------------[ cut here ]------------
[ 40.653856][ T4997] get_vaddr_frames() cannot follow VM_IO mapping
[ 40.654146][ T4997] WARNING: CPU: 1 PID: 4997 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x220/0x230
[ 40.672146][ T4997] Modules linked in:
[ 40.676022][ T4997] CPU: 1 PID: 4997 Comm: syz-executor234 Not tainted 6.4.0-rc4-syzkaller #0
[ 40.684720][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 40.694795][ T4997] RIP: 0010:get_vaddr_frames+0x220/0x230
[ 40.700476][ T4997] Code: 2f 14 fb e9 06 ff ff ff e8 2d 2f 14 fb e9 cd fe ff ff e8 e3 64 c1 fa 48 c7 c7 40 e5 1e 8b c6 05 6b e1 a1 07 01 e8 10 1f 89 fa <0f> 0b e9 53 ff ff ff 66 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55
[ 40.720145][ T4997] RSP: 0018:ffffc90003aff758 EFLAGS: 00010282
[ 40.726341][ T4997] RAX: 0000000000000000 RBX: ffffc9000b400000 RCX: 0000000000000000
[ 40.734311][ T4997] RDX: ffff888021c05940 RSI: ffffffff814c03e7 RDI: 0000000000000001
[ 40.742339][ T4997] RBP: ffffc9000b400004 R08: 0000000000000001 R09: 0000000000000000
[ 40.750329][ T4997] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000fffffff2
[ 40.758418][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807d89b800
[ 40.766522][ T4997] FS: 000055555603d300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 40.775463][ T4997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.782085][ T4997] CR2: 0000000020000140 CR3: 000000007569f000 CR4: 0000000000350ee0
[ 40.790094][ T4997] Call Trace:
[ 40.793379][ T4997]
[ 40.796374][ T4997] ? __warn+0xe6/0x390
[ 40.800472][ T4997] ? __wake_up_klogd.part.0+0x99/0xf0
[ 40.805915][ T4997] ? get_vaddr_frames+0x220/0x230
[ 40.810970][ T4997] ? report_bug+0x2da/0x500
[ 40.815488][ T4997] ? handle_bug+0x3c/0x70
[ 40.819852][ T4997] ? exc_invalid_op+0x18/0x50
[ 40.824530][ T4997] ? asm_exc_invalid_op+0x1a/0x20
[ 40.829587][ T4997] ? __warn_printk+0x187/0x310
[ 40.834362][ T4997] ? get_vaddr_frames+0x220/0x230
[ 40.839427][ T4997] ? get_vaddr_frames+0x220/0x230
[ 40.844460][ T4997] vb2_create_framevec+0x62/0xd0
[ 40.849599][ T4997] vb2_vmalloc_get_userptr+0x13b/0x530
[ 40.855063][ T4997] ? is_bpf_text_address+0x9d/0x1b0
[ 40.860308][ T4997] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 40.866490][ T4997] __prepare_userptr+0x6a6/0x1630
[ 40.871502][ T4997] ? vb2_queue_error+0x60/0x60
[ 40.876322][ T4997] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 40.882347][ T4997] ? kasan_save_free_info+0x2e/0x40
[ 40.887562][ T4997] ? ____kasan_slab_free+0x160/0x1c0
[ 40.892857][ T4997] ? slab_free_freelist_hook+0x8b/0x1c0
[ 40.898440][ T4997] ? __kmem_cache_free+0xaf/0x2d0
[ 40.903474][ T4997] ? tomoyo_path_number_perm+0x43b/0x570
[ 40.909149][ T4997] ? print_usage_bug.part.0+0x660/0x660
[ 40.914720][ T4997] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.920873][ T4997] ? lock_sync+0x190/0x190
[ 40.925389][ T4997] __buf_prepare+0x602/0x7d0
[ 40.930008][ T4997] ? vb2_queue_or_prepare_buf+0x620/0x2cb0
[ 40.935823][ T4997] vb2_core_qbuf+0xc79/0x14e0
[ 40.940539][ T4997] ? __mutex_lock+0x231/0x1350
[ 40.945312][ T4997] vb2_qbuf+0x13d/0x1d0
[ 40.949488][ T4997] ? vb2_ioctl_prepare_buf+0x140/0x140
[ 40.954951][ T4997] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 40.960542][ T4997] v4l2_m2m_qbuf+0x18e/0x920
[ 40.965253][ T4997] ? check_fmt+0x4f4/0x900
[ 40.969692][ T4997] v4l_qbuf+0x96/0xc0
[ 40.973688][ T4997] __video_do_ioctl+0xba6/0xf20
[ 40.978620][ T4997] ? v4l_reqbufs+0xd0/0xd0
[ 40.983137][ T4997] video_usercopy+0x4bf/0x14c0
[ 40.987937][ T4997] ? v4l_reqbufs+0xd0/0xd0
[ 40.992366][ T4997] ? v4l_enumstd+0x70/0x70
[ 40.996821][ T4997] ? lock_downgrade+0x690/0x690
[ 41.001685][ T4997] v4l2_ioctl+0x1b7/0x250
[ 41.005995][ T4997] ? v4l2_write+0x350/0x350
[ 41.010516][ T4997] __x64_sys_ioctl+0x197/0x210
[ 41.015292][ T4997] do_syscall_64+0x39/0xb0
[ 41.019743][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.025649][ T4997] RIP: 0033:0x7f07d90d7c49
[ 41.030084][ T4997] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.049802][ T4997] RSP: 002b:00007ffedac45638 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 41.058392][ T4997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07d90d7c49
[ 41.066426][ T4997] RDX: 0000000020000180 RSI: 00000000c058560f RDI: 0000000000000003
[ 41.074480][ T4997] RBP: 00007f07d909bdf0 R08: 0000000000000000 R09: 0000000000000000
[ 41.082509][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07d909be80
[ 41.090524][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.098622][ T4997]
[ 41.101636][ T4997] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 41.109064][ T4997] CPU: 1 PID: 4997 Comm: syz-executor234 Not tainted 6.4.0-rc4-syzkaller #0
[ 41.117803][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 41.127838][ T4997] Call Trace:
[ 41.131111][ T4997]
[ 41.134022][ T4997] dump_stack_lvl+0xd9/0x150
[ 41.138611][ T4997] panic+0x686/0x730
[ 41.142507][ T4997] ? panic_smp_self_stop+0xa0/0xa0
[ 41.147599][ T4997] ? show_trace_log_lvl+0x284/0x390
[ 41.152783][ T4997] ? get_vaddr_frames+0x220/0x230
[ 41.157791][ T4997] check_panic_on_warn+0xb1/0xc0
[ 41.162795][ T4997] __warn+0xf2/0x390
[ 41.166668][ T4997] ? __wake_up_klogd.part.0+0x99/0xf0
[ 41.172017][ T4997] ? get_vaddr_frames+0x220/0x230
[ 41.177022][ T4997] report_bug+0x2da/0x500
[ 41.181336][ T4997] handle_bug+0x3c/0x70
[ 41.185482][ T4997] exc_invalid_op+0x18/0x50
[ 41.189963][ T4997] asm_exc_invalid_op+0x1a/0x20
[ 41.194794][ T4997] RIP: 0010:get_vaddr_frames+0x220/0x230
[ 41.200411][ T4997] Code: 2f 14 fb e9 06 ff ff ff e8 2d 2f 14 fb e9 cd fe ff ff e8 e3 64 c1 fa 48 c7 c7 40 e5 1e 8b c6 05 6b e1 a1 07 01 e8 10 1f 89 fa <0f> 0b e9 53 ff ff ff 66 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55
[ 41.220098][ T4997] RSP: 0018:ffffc90003aff758 EFLAGS: 00010282
[ 41.226159][ T4997] RAX: 0000000000000000 RBX: ffffc9000b400000 RCX: 0000000000000000
[ 41.234143][ T4997] RDX: ffff888021c05940 RSI: ffffffff814c03e7 RDI: 0000000000000001
[ 41.242129][ T4997] RBP: ffffc9000b400004 R08: 0000000000000001 R09: 0000000000000000
[ 41.250118][ T4997] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000fffffff2
[ 41.258081][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807d89b800
[ 41.266045][ T4997] ? __warn_printk+0x187/0x310
[ 41.270811][ T4997] ? get_vaddr_frames+0x220/0x230
[ 41.275863][ T4997] vb2_create_framevec+0x62/0xd0
[ 41.280789][ T4997] vb2_vmalloc_get_userptr+0x13b/0x530
[ 41.286325][ T4997] ? is_bpf_text_address+0x9d/0x1b0
[ 41.291520][ T4997] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 41.297664][ T4997] __prepare_userptr+0x6a6/0x1630
[ 41.302687][ T4997] ? vb2_queue_error+0x60/0x60
[ 41.307464][ T4997] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 41.313436][ T4997] ? kasan_save_free_info+0x2e/0x40
[ 41.318626][ T4997] ? ____kasan_slab_free+0x160/0x1c0
[ 41.323906][ T4997] ? slab_free_freelist_hook+0x8b/0x1c0
[ 41.329441][ T4997] ? __kmem_cache_free+0xaf/0x2d0
[ 41.334456][ T4997] ? tomoyo_path_number_perm+0x43b/0x570
[ 41.340079][ T4997] ? print_usage_bug.part.0+0x660/0x660
[ 41.345618][ T4997] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.351688][ T4997] ? lock_sync+0x190/0x190
[ 41.356119][ T4997] __buf_prepare+0x602/0x7d0
[ 41.360727][ T4997] ? vb2_queue_or_prepare_buf+0x620/0x2cb0
[ 41.366528][ T4997] vb2_core_qbuf+0xc79/0x14e0
[ 41.371198][ T4997] ? __mutex_lock+0x231/0x1350
[ 41.375952][ T4997] vb2_qbuf+0x13d/0x1d0
[ 41.380096][ T4997] ? vb2_ioctl_prepare_buf+0x140/0x140
[ 41.385542][ T4997] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 41.391084][ T4997] v4l2_m2m_qbuf+0x18e/0x920
[ 41.395675][ T4997] ? check_fmt+0x4f4/0x900
[ 41.400084][ T4997] v4l_qbuf+0x96/0xc0
[ 41.404060][ T4997] __video_do_ioctl+0xba6/0xf20
[ 41.408911][ T4997] ? v4l_reqbufs+0xd0/0xd0
[ 41.413325][ T4997] video_usercopy+0x4bf/0x14c0
[ 41.418085][ T4997] ? v4l_reqbufs+0xd0/0xd0
[ 41.422582][ T4997] ? v4l_enumstd+0x70/0x70
[ 41.427002][ T4997] ? lock_downgrade+0x690/0x690
[ 41.431857][ T4997] v4l2_ioctl+0x1b7/0x250
[ 41.436171][ T4997] ? v4l2_write+0x350/0x350
[ 41.440667][ T4997] __x64_sys_ioctl+0x197/0x210
[ 41.445511][ T4997] do_syscall_64+0x39/0xb0
[ 41.449924][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.455812][ T4997] RIP: 0033:0x7f07d90d7c49
[ 41.460219][ T4997] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.479814][ T4997] RSP: 002b:00007ffedac45638 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 41.488317][ T4997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07d90d7c49
[ 41.496279][ T4997] RDX: 0000000020000180 RSI: 00000000c058560f RDI: 0000000000000003
[ 41.504236][ T4997] RBP: 00007f07d909bdf0 R08: 0000000000000000 R09: 0000000000000000
[ 41.512194][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07d909be80
[ 41.520151][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.528134][ T4997]
[ 41.532115][ T4997] Kernel Offset: disabled
[ 41.536482][ T4997] Rebooting in 86400 seconds..