./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor612104580
<...>
Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts.
execve("./syz-executor612104580", ["./syz-executor612104580"], 0x7ffcbc4bce20 /* 10 vars */) = 0
brk(NULL) = 0x555555b2f000
brk(0x555555b2fc40) = 0x555555b2fc40
arch_prctl(ARCH_SET_FS, 0x555555b2f300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor612104580", 4096) = 27
brk(0x555555b50c40) = 0x555555b50c40
brk(0x555555b51000) = 0x555555b51000
mprotect(0x7f8685571000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
[ 63.748395][ T5078] ------------[ cut here ]------------
[ 63.753990][ T5078] get_vaddr_frames() cannot follow VM_IO mapping
[ 63.755090][ T5078] WARNING: CPU: 0 PID: 5078 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x217/0x220
[ 63.773372][ T5078] Modules linked in:
[ 63.777650][ T5078] CPU: 0 PID: 5078 Comm: syz-executor612 Not tainted 6.2.0-rc4-next-20230120-syzkaller #0
[ 63.788720][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 63.801049][ T5078] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 63.806880][ T5078] Code: 2f 3c fb e9 06 ff ff ff e8 06 2f 3c fb e9 cd fe ff ff e8 4c 6c ee fa 48 c7 c7 20 3e 1d 8b c6 05 8d 30 cb 07 01 e8 ba 9b 29 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 63.827149][ T5078] RSP: 0018:ffffc90003bbf810 EFLAGS: 00010286
[ 63.833218][ T5078] RAX: 0000000000000000 RBX: ffff888017e06000 RCX: 0000000000000000
[ 63.841421][ T5078] RDX: ffff8880241fba80 RSI: ffffffff8166e6dc RDI: fffff52000777ef4
[ 63.849546][ T5078] RBP: ffff888017e06004 R08: 0000000000000005 R09: 0000000000000000
[ 63.857622][ T5078] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 63.865654][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807a59e800
[ 63.873641][ T5078] FS: 0000555555b2f300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 63.882671][ T5078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 63.889415][ T5078] CR2: 000000000064392c CR3: 0000000029145000 CR4: 00000000003506e0
[ 63.897438][ T5078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 63.905463][ T5078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 63.913430][ T5078] Call Trace:
[ 63.916761][ T5078]
[ 63.919709][ T5078] vb2_create_framevec+0x62/0xd0
[ 63.924712][ T5078] vb2_vmalloc_get_userptr+0x13b/0x530
[ 63.930195][ T5078] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 63.936415][ T5078] __prepare_userptr+0x31e/0x1580
[ 63.941553][ T5078] ? vb2_queue_error+0x60/0x60
[ 63.946393][ T5078] ? ____kasan_slab_free+0x160/0x1c0
[ 63.951696][ T5078] ? slab_free_freelist_hook+0x8b/0x1c0
[ 63.957293][ T5078] ? __kmem_cache_free+0xaf/0x2d0
[ 63.962336][ T5078] ? tomoyo_path_number_perm+0x43b/0x570
[ 63.968234][ T5078] ? security_file_ioctl+0x54/0xb0
[ 63.973408][ T5078] ? __x64_sys_ioctl+0xb7/0x210
[ 63.978380][ T5078] ? lock_chain_count+0x20/0x20
[ 63.983262][ T5078] ? lock_sync+0x190/0x190
[ 63.987738][ T5078] ? __video_do_ioctl+0x554/0xe20
[ 63.992882][ T5078] ? rcu_read_lock_sched_held+0x3e/0x70
[ 63.998492][ T5078] ? trace_contention_end+0x173/0x1e0
[ 64.003898][ T5078] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 64.014481][ T5078] __buf_prepare+0x5e4/0x780
[ 64.019892][ T5078] vb2_core_prepare_buf+0xe4/0x2c0
[ 64.025183][ T5078] vb2_prepare_buf+0x103/0x170
[ 64.030081][ T5078] v4l2_m2m_prepare_buf+0xe8/0x210
[ 64.036701][ T5078] v4l_prepare_buf+0x96/0xc0
[ 64.041439][ T5078] __video_do_ioctl+0xb9d/0xe20
[ 64.046365][ T5078] ? v4l_print_control+0x60/0x60
[ 64.051325][ T5078] ? lock_acquire+0x32/0xc0
[ 64.055901][ T5078] ? __might_fault+0xa9/0x180
[ 64.060614][ T5078] video_usercopy+0x3b8/0x1830
[ 64.065448][ T5078] ? v4l_print_control+0x60/0x60
[ 64.070411][ T5078] ? v4l_enumstd+0x70/0x70
[ 64.074923][ T5078] v4l2_ioctl+0x1b7/0x250
[ 64.079274][ T5078] ? v4l2_read+0x2b0/0x2b0
[ 64.083799][ T5078] __x64_sys_ioctl+0x197/0x210
[ 64.088831][ T5078] do_syscall_64+0x39/0xb0
[ 64.093296][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 64.099359][ T5078] RIP: 0033:0x7f8685504c49
[ 64.103807][ T5078] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 64.123608][ T5078] RSP: 002b:00007ffda4aa2f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 64.132143][ T5078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8685504c49
[ 64.140177][ T5078] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 64.148243][ T5078] RBP: 00007f86854c8df0 R08: 0000000000000000 R09: 0000000000000000
[ 64.156335][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86854c8e80
[ 64.164359][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 64.172355][ T5078]
[ 64.175547][ T5078] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 64.183096][ T5078] CPU: 1 PID: 5078 Comm: syz-executor612 Not tainted 6.2.0-rc4-next-20230120-syzkaller #0
[ 64.193039][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 64.203097][ T5078] Call Trace:
[ 64.206380][ T5078]
[ 64.209306][ T5078] dump_stack_lvl+0xd1/0x138
[ 64.214002][ T5078] panic+0x2cc/0x626
[ 64.217894][ T5078] ? panic_print_sys_info.part.0+0x110/0x110
[ 64.223989][ T5078] ? get_vaddr_frames+0x217/0x220
[ 64.229022][ T5078] check_panic_on_warn.cold+0x19/0x35
[ 64.234405][ T5078] __warn+0xf2/0x1a0
[ 64.238323][ T5078] ? __wake_up_klogd.part.0+0x99/0xf0
[ 64.243714][ T5078] ? get_vaddr_frames+0x217/0x220
[ 64.248758][ T5078] report_bug+0x1c0/0x210
[ 64.253106][ T5078] handle_bug+0x3c/0x70
[ 64.257285][ T5078] exc_invalid_op+0x18/0x50
[ 64.261823][ T5078] asm_exc_invalid_op+0x1a/0x20
[ 64.266695][ T5078] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 64.272348][ T5078] Code: 2f 3c fb e9 06 ff ff ff e8 06 2f 3c fb e9 cd fe ff ff e8 4c 6c ee fa 48 c7 c7 20 3e 1d 8b c6 05 8d 30 cb 07 01 e8 ba 9b 29 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 64.291966][ T5078] RSP: 0018:ffffc90003bbf810 EFLAGS: 00010286
[ 64.298044][ T5078] RAX: 0000000000000000 RBX: ffff888017e06000 RCX: 0000000000000000
[ 64.306029][ T5078] RDX: ffff8880241fba80 RSI: ffffffff8166e6dc RDI: fffff52000777ef4
[ 64.314009][ T5078] RBP: ffff888017e06004 R08: 0000000000000005 R09: 0000000000000000
[ 64.321985][ T5078] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 64.329968][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807a59e800
[ 64.337961][ T5078] ? vprintk+0x8c/0xa0
[ 64.342067][ T5078] vb2_create_framevec+0x62/0xd0
[ 64.347031][ T5078] vb2_vmalloc_get_userptr+0x13b/0x530
[ 64.352508][ T5078] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 64.358674][ T5078] __prepare_userptr+0x31e/0x1580
[ 64.363725][ T5078] ? vb2_queue_error+0x60/0x60
[ 64.368516][ T5078] ? ____kasan_slab_free+0x160/0x1c0
[ 64.373829][ T5078] ? slab_free_freelist_hook+0x8b/0x1c0
[ 64.379395][ T5078] ? __kmem_cache_free+0xaf/0x2d0
[ 64.384433][ T5078] ? tomoyo_path_number_perm+0x43b/0x570
[ 64.390091][ T5078] ? security_file_ioctl+0x54/0xb0
[ 64.395239][ T5078] ? __x64_sys_ioctl+0xb7/0x210
[ 64.400366][ T5078] ? lock_chain_count+0x20/0x20
[ 64.405244][ T5078] ? lock_sync+0x190/0x190
[ 64.409674][ T5078] ? __video_do_ioctl+0x554/0xe20
[ 64.414728][ T5078] ? rcu_read_lock_sched_held+0x3e/0x70
[ 64.420286][ T5078] ? trace_contention_end+0x173/0x1e0
[ 64.425683][ T5078] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 64.431629][ T5078] __buf_prepare+0x5e4/0x780
[ 64.436246][ T5078] vb2_core_prepare_buf+0xe4/0x2c0
[ 64.441382][ T5078] vb2_prepare_buf+0x103/0x170
[ 64.446184][ T5078] v4l2_m2m_prepare_buf+0xe8/0x210
[ 64.451503][ T5078] v4l_prepare_buf+0x96/0xc0
[ 64.456121][ T5078] __video_do_ioctl+0xb9d/0xe20
[ 64.461018][ T5078] ? v4l_print_control+0x60/0x60
[ 64.465972][ T5078] ? lock_acquire+0x32/0xc0
[ 64.470492][ T5078] ? __might_fault+0xa9/0x180
[ 64.475290][ T5078] video_usercopy+0x3b8/0x1830
[ 64.480077][ T5078] ? v4l_print_control+0x60/0x60
[ 64.485048][ T5078] ? v4l_enumstd+0x70/0x70
[ 64.489593][ T5078] v4l2_ioctl+0x1b7/0x250
[ 64.494226][ T5078] ? v4l2_read+0x2b0/0x2b0
[ 64.498657][ T5078] __x64_sys_ioctl+0x197/0x210
[ 64.503442][ T5078] do_syscall_64+0x39/0xb0
[ 64.507883][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 64.513791][ T5078] RIP: 0033:0x7f8685504c49
[ 64.518223][ T5078] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 64.538192][ T5078] RSP: 002b:00007ffda4aa2f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 64.546625][ T5078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8685504c49
[ 64.554602][ T5078] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 64.562581][ T5078] RBP: 00007f86854c8df0 R08: 0000000000000000 R09: 0000000000000000
[ 64.570558][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86854c8e80
[ 64.578888][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 64.586972][ T5078]
[ 64.590240][ T5078] Kernel Offset: disabled
[ 64.594668][ T5078] Rebooting in 86400 seconds..