./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor941053423
<...>
Warning: Permanently added '10.128.1.92' (ECDSA) to the list of known hosts.
execve("./syz-executor941053423", ["./syz-executor941053423"], 0x7ffd8d948d00 /* 10 vars */) = 0
brk(NULL) = 0x555556443000
brk(0x555556443c40) = 0x555556443c40
arch_prctl(ARCH_SET_FS, 0x555556443300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor941053423", 4096) = 27
brk(0x555556464c40) = 0x555556464c40
brk(0x555556465000) = 0x555556465000
mprotect(0x7f2b3c136000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=65539 => 27}) = 0
[ 85.640424][ T5077] ------------[ cut here ]------------
[ 85.646797][ T5077] get_vaddr_frames() cannot follow VM_IO mapping
[ 85.647446][ T5077] WARNING: CPU: 0 PID: 5077 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x217/0x220
[ 85.666267][ T5077] Modules linked in:
[ 85.670239][ T5077] CPU: 1 PID: 5077 Comm: syz-executor941 Not tainted 6.2.0-rc4-next-20230120-syzkaller #0
[ 85.680912][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 85.691277][ T5077] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 85.697352][ T5077] Code: 2f 3c fb e9 06 ff ff ff e8 06 2f 3c fb e9 cd fe ff ff e8 4c 6c ee fa 48 c7 c7 20 3e 1d 8b c6 05 8d 30 cb 07 01 e8 ba 9b 29 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 85.717231][ T5077] RSP: 0018:ffffc90003baf750 EFLAGS: 00010286
[ 85.723380][ T5077] RAX: 0000000000000000 RBX: ffff888017be0000 RCX: 0000000000000000
[ 85.731496][ T5077] RDX: ffff88807a5aba80 RSI: ffffffff8166e6dc RDI: fffff52000775edc
[ 85.739657][ T5077] RBP: ffff888017be0004 R08: 0000000000000005 R09: 0000000000000000
[ 85.748273][ T5077] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 85.756353][ T5077] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801f8e1000
[ 85.764375][ T5077] FS: 0000555556443300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 85.773543][ T5077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.780257][ T5077] CR2: 000000000064392c CR3: 000000007a0fa000 CR4: 00000000003506e0
[ 85.788339][ T5077] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 85.796766][ T5077] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 85.804767][ T5077] Call Trace:
[ 85.808120][ T5077]
[ 85.811287][ T5077] vb2_create_framevec+0x62/0xd0
[ 85.816392][ T5077] vb2_vmalloc_get_userptr+0x13b/0x530
[ 85.821907][ T5077] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 85.828182][ T5077] __prepare_userptr+0x31e/0x1580
[ 85.833279][ T5077] ? vb2_queue_error+0x60/0x60
[ 85.838286][ T5077] ? __lock_acquire+0x16c8/0x5780
[ 85.843374][ T5077] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 85.849622][ T5077] ? ____kasan_slab_free+0x160/0x1c0
[ 85.854969][ T5077] ? slab_free_freelist_hook+0x8b/0x1c0
[ 85.861215][ T5077] ? __kmem_cache_free+0xaf/0x2d0
[ 85.866375][ T5077] ? tomoyo_path_number_perm+0x43b/0x570
[ 85.872101][ T5077] ? security_file_ioctl+0x54/0xb0
[ 85.877347][ T5077] ? __x64_sys_ioctl+0xb7/0x210
[ 85.882319][ T5077] ? lock_chain_count+0x20/0x20
[ 85.887323][ T5077] ? lock_sync+0x190/0x190
[ 85.891814][ T5077] __buf_prepare+0x5e4/0x780
[ 85.896555][ T5077] ? vb2_queue_or_prepare_buf+0x686/0x25e0
[ 85.902554][ T5077] vb2_core_qbuf+0xab6/0x14d0
[ 85.907574][ T5077] vb2_qbuf+0x139/0x1a0
[ 85.911812][ T5077] ? vb2_ioctl_prepare_buf+0x140/0x140
[ 85.917752][ T5077] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 85.923401][ T5077] ? tomoyo_path_number_perm+0x245/0x570
[ 85.929188][ T5077] v4l2_m2m_qbuf+0x18e/0x900
[ 85.933864][ T5077] ? check_fmt+0x4f4/0x900
[ 85.938549][ T5077] v4l_qbuf+0x96/0xc0
[ 85.942703][ T5077] __video_do_ioctl+0xb9d/0xe20
[ 85.947724][ T5077] ? v4l_print_control+0x60/0x60
[ 85.952726][ T5077] ? lock_acquire+0x32/0xc0
[ 85.957445][ T5077] ? __might_fault+0xa9/0x180
[ 85.962216][ T5077] video_usercopy+0x3b8/0x1830
[ 85.967114][ T5077] ? v4l_print_control+0x60/0x60
[ 85.972771][ T5077] ? v4l_enumstd+0x70/0x70
[ 85.977339][ T5077] v4l2_ioctl+0x1b7/0x250
[ 85.981724][ T5077] ? v4l2_read+0x2b0/0x2b0
[ 85.986360][ T5077] __x64_sys_ioctl+0x197/0x210
[ 85.991209][ T5077] do_syscall_64+0x39/0xb0
[ 85.995773][ T5077] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 86.001730][ T5077] RIP: 0033:0x7f2b3c0c9c49
[ 86.006272][ T5077] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 86.026408][ T5077] RSP: 002b:00007ffe42caa788 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 86.034950][ T5077] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b3c0c9c49
[ 86.043024][ T5077] RDX: 0000000020000300 RSI: 00000000c058560f RDI: 0000000000000003
[ 86.051727][ T5077] RBP: 00007f2b3c08ddf0 R08: 0000000000000000 R09: 0000000000000000
[ 86.059826][ T5077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b3c08de80
[ 86.068082][ T5077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 86.076284][ T5077]
[ 86.079346][ T5077] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.087088][ T5077] CPU: 1 PID: 5077 Comm: syz-executor941 Not tainted 6.2.0-rc4-next-20230120-syzkaller #0
[ 86.097028][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 86.107136][ T5077] Call Trace:
[ 86.110518][ T5077]
[ 86.113464][ T5077] dump_stack_lvl+0xd1/0x138
[ 86.118085][ T5077] panic+0x2cc/0x626
[ 86.122045][ T5077] ? panic_print_sys_info.part.0+0x110/0x110
[ 86.128080][ T5077] ? get_vaddr_frames+0x217/0x220
[ 86.133179][ T5077] check_panic_on_warn.cold+0x19/0x35
[ 86.138888][ T5077] __warn+0xf2/0x1a0
[ 86.142826][ T5077] ? __wake_up_klogd.part.0+0x99/0xf0
[ 86.148236][ T5077] ? get_vaddr_frames+0x217/0x220
[ 86.153391][ T5077] report_bug+0x1c0/0x210
[ 86.157781][ T5077] handle_bug+0x3c/0x70
[ 86.162002][ T5077] exc_invalid_op+0x18/0x50
[ 86.166566][ T5077] asm_exc_invalid_op+0x1a/0x20
[ 86.171460][ T5077] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 86.177141][ T5077] Code: 2f 3c fb e9 06 ff ff ff e8 06 2f 3c fb e9 cd fe ff ff e8 4c 6c ee fa 48 c7 c7 20 3e 1d 8b c6 05 8d 30 cb 07 01 e8 ba 9b 29 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 86.196791][ T5077] RSP: 0018:ffffc90003baf750 EFLAGS: 00010286
[ 86.202891][ T5077] RAX: 0000000000000000 RBX: ffff888017be0000 RCX: 0000000000000000
[ 86.210976][ T5077] RDX: ffff88807a5aba80 RSI: ffffffff8166e6dc RDI: fffff52000775edc
[ 86.218971][ T5077] RBP: ffff888017be0004 R08: 0000000000000005 R09: 0000000000000000
[ 86.227143][ T5077] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 86.235140][ T5077] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801f8e1000
[ 86.243166][ T5077] ? vprintk+0x8c/0xa0
[ 86.247288][ T5077] vb2_create_framevec+0x62/0xd0
[ 86.252280][ T5077] vb2_vmalloc_get_userptr+0x13b/0x530
[ 86.257788][ T5077] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 86.263978][ T5077] __prepare_userptr+0x31e/0x1580
[ 86.269046][ T5077] ? vb2_queue_error+0x60/0x60
[ 86.273850][ T5077] ? __lock_acquire+0x16c8/0x5780
[ 86.280402][ T5077] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 86.286510][ T5077] ? ____kasan_slab_free+0x160/0x1c0
[ 86.292003][ T5077] ? slab_free_freelist_hook+0x8b/0x1c0
[ 86.297580][ T5077] ? __kmem_cache_free+0xaf/0x2d0
[ 86.302663][ T5077] ? tomoyo_path_number_perm+0x43b/0x570
[ 86.308338][ T5077] ? security_file_ioctl+0x54/0xb0
[ 86.313481][ T5077] ? __x64_sys_ioctl+0xb7/0x210
[ 86.318382][ T5077] ? lock_chain_count+0x20/0x20
[ 86.323890][ T5077] ? lock_sync+0x190/0x190
[ 86.328343][ T5077] __buf_prepare+0x5e4/0x780
[ 86.333492][ T5077] ? vb2_queue_or_prepare_buf+0x686/0x25e0
[ 86.339367][ T5077] vb2_core_qbuf+0xab6/0x14d0
[ 86.344193][ T5077] vb2_qbuf+0x139/0x1a0
[ 86.348399][ T5077] ? vb2_ioctl_prepare_buf+0x140/0x140
[ 86.353910][ T5077] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 86.359509][ T5077] ? tomoyo_path_number_perm+0x245/0x570
[ 86.365187][ T5077] v4l2_m2m_qbuf+0x18e/0x900
[ 86.369827][ T5077] ? check_fmt+0x4f4/0x900
[ 86.374279][ T5077] v4l_qbuf+0x96/0xc0
[ 86.378301][ T5077] __video_do_ioctl+0xb9d/0xe20
[ 86.383200][ T5077] ? v4l_print_control+0x60/0x60
[ 86.388294][ T5077] ? lock_acquire+0x32/0xc0
[ 86.392826][ T5077] ? __might_fault+0xa9/0x180
[ 86.397569][ T5077] video_usercopy+0x3b8/0x1830
[ 86.402474][ T5077] ? v4l_print_control+0x60/0x60
[ 86.407461][ T5077] ? v4l_enumstd+0x70/0x70
[ 86.411971][ T5077] v4l2_ioctl+0x1b7/0x250
[ 86.416377][ T5077] ? v4l2_read+0x2b0/0x2b0
[ 86.420882][ T5077] __x64_sys_ioctl+0x197/0x210
[ 86.425695][ T5077] do_syscall_64+0x39/0xb0
[ 86.430156][ T5077] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 86.436372][ T5077] RIP: 0033:0x7f2b3c0c9c49
[ 86.440836][ T5077] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 86.460498][ T5077] RSP: 002b:00007ffe42caa788 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 86.469064][ T5077] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b3c0c9c49
[ 86.477071][ T5077] RDX: 0000000020000300 RSI: 00000000c058560f RDI: 0000000000000003
[ 86.485087][ T5077] RBP: 00007f2b3c08ddf0 R08: 0000000000000000 R09: 0000000000000000
[ 86.493093][ T5077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b3c08de80
[ 86.501225][ T5077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 86.509248][ T5077]
[ 86.512505][ T5077] Kernel Offset: disabled
[ 86.517030][ T5077] Rebooting in 86400 seconds..