./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1306429321
<...>
DUID 00:04:2f:bc:f2:2f:e4:1d:55:f7:99:3b:0f:15:66:5c:e9:07
forked to background, child pid 4658
[ 37.953119][ T4659] 8021q: adding VLAN 0 to HW filter on device bond0
[ 37.962863][ T4659] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.78' (ECDSA) to the list of known hosts.
execve("./syz-executor1306429321", ["./syz-executor1306429321"], 0x7fff586f42a0 /* 10 vars */) = 0
brk(NULL) = 0x5555561c9000
brk(0x5555561c9c40) = 0x5555561c9c40
arch_prctl(ARCH_SET_FS, 0x5555561c9300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1306429321", 4096) = 28
brk(0x5555561eac40) = 0x5555561eac40
brk(0x5555561eb000) = 0x5555561eb000
mprotect(0x7fe402422000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=65539 => 27}) = 0
syzkaller login: [ 78.496328][ T4993] ------------[ cut here ]------------
[ 78.502021][ T4993] get_vaddr_frames() cannot follow VM_IO mapping
[ 78.502511][ T4993] WARNING: CPU: 0 PID: 4993 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x1fb/0x240
[ 78.520659][ T4993] Modules linked in:
[ 78.524624][ T4993] CPU: 0 PID: 4993 Comm: syz-executor130 Not tainted 6.3.0-syzkaller-13466-gfc4354c6e5c2 #0
[ 78.534741][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 78.544978][ T4993] RIP: 0010:get_vaddr_frames+0x1fb/0x240
[ 78.550699][ T4993] Code: 8c 11 ff ff ff 4c 89 ef e8 62 7f b9 fa e9 04 ff ff ff e8 f8 b0 61 fa c6 05 59 b6 17 07 01 48 c7 c7 c0 c3 9e 8b e8 b5 38 29 fa <0f> 0b e9 4b ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1f ff
[ 78.570473][ T4993] RSP: 0018:ffffc90003c5f4a8 EFLAGS: 00010246
[ 78.576643][ T4993] RAX: e60949491d484c00 RBX: 1ffff1100fb21a00 RCX: ffff88801eea9dc0
[ 78.584694][ T4993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 78.592689][ T4993] RBP: dffffc0000000000 R08: ffffffff8152f1a2 R09: ffffed1017305163
[ 78.600733][ T4993] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000fffffff2
[ 78.608754][ T4993] R13: ffff88807d90d004 R14: 0000000000000000 R15: 0000000000000000
[ 78.616806][ T4993] FS: 00005555561c9300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 78.625788][ T4993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.632393][ T4993] CR2: 00000000005fdeb8 CR3: 000000002a21b000 CR4: 00000000003506f0
[ 78.640422][ T4993] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 78.648437][ T4993] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 78.656462][ T4993] Call Trace:
[ 78.659763][ T4993]
[ 78.662697][ T4993] vb2_create_framevec+0x55/0xc0
[ 78.667706][ T4993] vb2_vmalloc_get_userptr+0x100/0x410
[ 78.673203][ T4993] ? __fill_vb2_buffer+0x455/0x4b0
[ 78.678376][ T4993] ? vb2_vmalloc_get_dmabuf+0x250/0x250
[ 78.683997][ T4993] __buf_prepare+0xc26/0x4460
[ 78.688699][ T4993] ? vb2_core_prepare_buf+0x310/0x310
[ 78.694134][ T4993] ? unwind_next_frame+0x1a2f/0x2200
[ 78.699485][ T4993] ? preempt_count_add+0x93/0x180
[ 78.704581][ T4993] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.710705][ T4993] ? stack_trace_save+0x1c0/0x1c0
[ 78.715829][ T4993] ? is_bpf_text_address+0x253/0x270
[ 78.721141][ T4993] ? is_module_text_address+0x110/0x180
[ 78.726759][ T4993] ? stack_trace_save+0x1c0/0x1c0
[ 78.731815][ T4993] ? kernel_text_address+0xa3/0xe0
[ 78.736987][ T4993] ? mark_lock+0x9a/0x340
[ 78.741344][ T4993] ? validate_chain+0x119/0x58e0
[ 78.746352][ T4993] ? __lock_acquire+0x1295/0x2000
[ 78.751440][ T4993] ? rcu_is_watching+0x15/0xb0
[ 78.756277][ T4993] vb2_core_qbuf+0x2b8/0x1360
[ 78.760994][ T4993] vb2_qbuf+0x188/0x240
[ 78.765207][ T4993] ? __video_do_ioctl+0x509/0xe40
[ 78.770258][ T4993] ? vb2_create_bufs+0x1180/0x1180
[ 78.775446][ T4993] v4l2_m2m_qbuf+0x25a/0x8e0
[ 78.780074][ T4993] ? v4l_qbuf+0x6c/0xc0
[ 78.784318][ T4993] __video_do_ioctl+0xa3e/0xe40
[ 78.789211][ T4993] ? video_ioctl2+0x30/0x30
[ 78.793721][ T4993] ? smack_log+0x123/0x540
[ 78.798210][ T4993] ? __might_fault+0xba/0x120
[ 78.802930][ T4993] video_usercopy+0x894/0x1170
[ 78.807772][ T4993] ? video_ioctl2+0x30/0x30
[ 78.812302][ T4993] ? v4l_printk_ioctl+0x160/0x160
[ 78.817388][ T4993] ? smack_file_ioctl+0x2ee/0x390
[ 78.822451][ T4993] ? do_notify_parent+0xf50/0xf50
[ 78.827540][ T4993] ? print_irqtrace_events+0x220/0x220
[ 78.833031][ T4993] v4l2_ioctl+0x185/0x1d0
[ 78.837440][ T4993] ? v4l2_poll+0x2b0/0x2b0
[ 78.841897][ T4993] __se_sys_ioctl+0xf1/0x160
[ 78.846579][ T4993] do_syscall_64+0x41/0xc0
[ 78.851036][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.857014][ T4993] RIP: 0033:0x7fe4023b5c49
[ 78.861455][ T4993] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 78.881122][ T4993] RSP: 002b:00007ffe96dc86b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 78.889609][ T4993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe4023b5c49
[ 78.897656][ T4993] RDX: 0000000020000300 RSI: 00000000c058560f RDI: 0000000000000003
[ 78.905691][ T4993] RBP: 00007fe402379df0 R08: 0000000000000000 R09: 0000000000000000
[ 78.913668][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe402379e80
[ 78.921702][ T4993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 78.929745][ T4993]
[ 78.932769][ T4993] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 78.940045][ T4993] CPU: 0 PID: 4993 Comm: syz-executor130 Not tainted 6.3.0-syzkaller-13466-gfc4354c6e5c2 #0
[ 78.950109][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 78.960176][ T4993] Call Trace:
[ 78.963455][ T4993]
[ 78.966387][ T4993] dump_stack_lvl+0x1e7/0x2d0
[ 78.971091][ T4993] ? nf_tcp_handle_invalid+0x650/0x650
[ 78.976569][ T4993] ? panic+0x770/0x770
[ 78.980643][ T4993] ? vscnprintf+0x5d/0x80
[ 78.984988][ T4993] panic+0x30f/0x770
[ 78.988898][ T4993] ? __warn+0x171/0x4a0
[ 78.993071][ T4993] ? __memcpy_flushcache+0x2b0/0x2b0
[ 78.998383][ T4993] __warn+0x314/0x4a0
[ 79.002380][ T4993] ? get_vaddr_frames+0x1fb/0x240
[ 79.007423][ T4993] report_bug+0x2b3/0x500
[ 79.011759][ T4993] ? get_vaddr_frames+0x1fb/0x240
[ 79.016809][ T4993] handle_bug+0x3d/0x70
[ 79.020982][ T4993] exc_invalid_op+0x1a/0x50
[ 79.025503][ T4993] asm_exc_invalid_op+0x1a/0x20
[ 79.030369][ T4993] RIP: 0010:get_vaddr_frames+0x1fb/0x240
[ 79.036030][ T4993] Code: 8c 11 ff ff ff 4c 89 ef e8 62 7f b9 fa e9 04 ff ff ff e8 f8 b0 61 fa c6 05 59 b6 17 07 01 48 c7 c7 c0 c3 9e 8b e8 b5 38 29 fa <0f> 0b e9 4b ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1f ff
[ 79.055647][ T4993] RSP: 0018:ffffc90003c5f4a8 EFLAGS: 00010246
[ 79.061728][ T4993] RAX: e60949491d484c00 RBX: 1ffff1100fb21a00 RCX: ffff88801eea9dc0
[ 79.069706][ T4993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 79.077685][ T4993] RBP: dffffc0000000000 R08: ffffffff8152f1a2 R09: ffffed1017305163
[ 79.085671][ T4993] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000fffffff2
[ 79.093656][ T4993] R13: ffff88807d90d004 R14: 0000000000000000 R15: 0000000000000000
[ 79.101644][ T4993] ? __warn_printk+0x292/0x360
[ 79.106442][ T4993] ? get_vaddr_frames+0x1fb/0x240
[ 79.111487][ T4993] vb2_create_framevec+0x55/0xc0
[ 79.116438][ T4993] vb2_vmalloc_get_userptr+0x100/0x410
[ 79.121917][ T4993] ? __fill_vb2_buffer+0x455/0x4b0
[ 79.127128][ T4993] ? vb2_vmalloc_get_dmabuf+0x250/0x250
[ 79.132687][ T4993] __buf_prepare+0xc26/0x4460
[ 79.137396][ T4993] ? vb2_core_prepare_buf+0x310/0x310
[ 79.142787][ T4993] ? unwind_next_frame+0x1a2f/0x2200
[ 79.148087][ T4993] ? preempt_count_add+0x93/0x180
[ 79.153119][ T4993] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.159200][ T4993] ? stack_trace_save+0x1c0/0x1c0
[ 79.164240][ T4993] ? is_bpf_text_address+0x253/0x270
[ 79.169538][ T4993] ? is_module_text_address+0x110/0x180
[ 79.175102][ T4993] ? stack_trace_save+0x1c0/0x1c0
[ 79.180144][ T4993] ? kernel_text_address+0xa3/0xe0
[ 79.185266][ T4993] ? mark_lock+0x9a/0x340
[ 79.189612][ T4993] ? validate_chain+0x119/0x58e0
[ 79.194576][ T4993] ? __lock_acquire+0x1295/0x2000
[ 79.199655][ T4993] ? rcu_is_watching+0x15/0xb0
[ 79.204430][ T4993] vb2_core_qbuf+0x2b8/0x1360
[ 79.209135][ T4993] vb2_qbuf+0x188/0x240
[ 79.213297][ T4993] ? __video_do_ioctl+0x509/0xe40
[ 79.218332][ T4993] ? vb2_create_bufs+0x1180/0x1180
[ 79.223457][ T4993] v4l2_m2m_qbuf+0x25a/0x8e0
[ 79.228073][ T4993] ? v4l_qbuf+0x6c/0xc0
[ 79.232242][ T4993] __video_do_ioctl+0xa3e/0xe40
[ 79.237118][ T4993] ? video_ioctl2+0x30/0x30
[ 79.241644][ T4993] ? smack_log+0x123/0x540
[ 79.246080][ T4993] ? __might_fault+0xba/0x120
[ 79.250777][ T4993] video_usercopy+0x894/0x1170
[ 79.255560][ T4993] ? video_ioctl2+0x30/0x30
[ 79.260073][ T4993] ? v4l_printk_ioctl+0x160/0x160
[ 79.265109][ T4993] ? smack_file_ioctl+0x2ee/0x390
[ 79.270157][ T4993] ? do_notify_parent+0xf50/0xf50
[ 79.275196][ T4993] ? print_irqtrace_events+0x220/0x220
[ 79.280675][ T4993] v4l2_ioctl+0x185/0x1d0
[ 79.285014][ T4993] ? v4l2_poll+0x2b0/0x2b0
[ 79.289449][ T4993] __se_sys_ioctl+0xf1/0x160
[ 79.294062][ T4993] do_syscall_64+0x41/0xc0
[ 79.298494][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.304396][ T4993] RIP: 0033:0x7fe4023b5c49
[ 79.308823][ T4993] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 79.328454][ T4993] RSP: 002b:00007ffe96dc86b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 79.336908][ T4993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe4023b5c49
[ 79.344913][ T4993] RDX: 0000000020000300 RSI: 00000000c058560f RDI: 0000000000000003
[ 79.352912][ T4993] RBP: 00007fe402379df0 R08: 0000000000000000 R09: 0000000000000000
[ 79.360906][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe402379e80
[ 79.368900][ T4993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 79.376901][ T4993]
[ 79.380160][ T4993] Kernel Offset: disabled
[ 79.384587][ T4993] Rebooting in 86400 seconds..