./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor5123540
<...>
Warning: Permanently added '10.128.1.183' (ECDSA) to the list of known hosts.
execve("./syz-executor5123540", ["./syz-executor5123540"], 0x7ffd62009b70 /* 10 vars */) = 0
brk(NULL) = 0x55555683d000
brk(0x55555683dc40) = 0x55555683dc40
arch_prctl(ARCH_SET_FS, 0x55555683d300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor5123540", 4096) = 25
brk(0x55555685ec40) = 0x55555685ec40
brk(0x55555685f000) = 0x55555685f000
mprotect(0x7fa99fbe7000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=65539 => 27}) = 0
[ 54.717709][ T26] audit: type=1400 audit(1670081873.082:75): avc: denied { execmem } for pid=3630 comm="syz-executor512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 54.721115][ T3630] ------------[ cut here ]------------
[ 54.738078][ T26] audit: type=1400 audit(1670081873.082:76): avc: denied { read write } for pid=3630 comm="syz-executor512" name="video3" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 54.742838][ T3630] get_vaddr_frames() cannot follow VM_IO mapping
[ 54.743286][ T3630] WARNING: CPU: 0 PID: 3630 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1f2/0x200
[ 54.767304][ T26] audit: type=1400 audit(1670081873.082:77): avc: denied { open } for pid=3630 comm="syz-executor512" path="/dev/video3" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 54.773930][ T3630] Modules linked in:
[ 54.785175][ T26] audit: type=1400 audit(1670081873.082:78): avc: denied { ioctl } for pid=3630 comm="syz-executor512" path="/dev/video3" dev="devtmpfs" ino=850 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 54.809222][ T3630]
[ 54.841617][ T3630] CPU: 0 PID: 3630 Comm: syz-executor512 Not tainted 6.1.0-rc7-syzkaller-00159-ga1e9185d20b5 #0
[ 54.852143][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 54.862264][ T3630] RIP: 0010:get_vaddr_frames+0x1f2/0x200
[ 54.867954][ T3630] Code: 4d 4c fb e9 0b ff ff ff e8 7b 4d 4c fb e9 d2 fe ff ff e8 71 35 00 fb 48 c7 c7 60 43 1b 8b c6 05 78 bc bc 07 01 e8 7b 98 27 03 <0f> 0b e9 56 ff ff ff 0f 1f 80 00 00 00 00 41 57 41 56 41 55 41 54
[ 54.887616][ T3630] RSP: 0018:ffffc90003437760 EFLAGS: 00010282
[ 54.893665][ T3630] RAX: 0000000000000000 RBX: ffff8880782dd000 RCX: 0000000000000000
[ 54.901656][ T3630] RDX: ffff88807e0ea240 RSI: ffffffff8164964c RDI: fffff52000686ede
[ 54.909682][ T3630] RBP: ffff8880782dd004 R08: 0000000000000005 R09: 0000000000000000
[ 54.917698][ T3630] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 54.925711][ T3630] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807bbe4800
[ 54.934570][ T3630] FS: 000055555683d300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 54.943513][ T3630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.950267][ T3630] CR2: 00000000005d84c8 CR3: 000000007e276000 CR4: 00000000003506f0
[ 54.958282][ T3630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.966289][ T3630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.974297][ T3630] Call Trace:
[ 54.977582][ T3630]
[ 54.980518][ T3630] vb2_create_framevec+0x59/0xd0
[ 54.985527][ T3630] vb2_vmalloc_get_userptr+0x128/0x520
[ 54.991010][ T3630] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 54.997230][ T3630] __prepare_userptr+0x31e/0x1580
[ 55.002270][ T3630] ? vb2_queue_error+0x60/0x60
[ 55.007075][ T3630] ? __lock_acquire+0x166e/0x56d0
[ 55.012120][ T3630] ? __stack_depot_save+0x3e/0x560
[ 55.017257][ T3630] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 55.023249][ T3630] ? tomoyo_path_number_perm+0x41b/0x550
[ 55.028947][ T3630] ? lock_release+0x810/0x810
[ 55.033636][ T3630] __buf_prepare+0x5e4/0x780
[ 55.038250][ T3630] ? vb2_queue_or_prepare_buf+0x686/0x25e0
[ 55.044070][ T3630] vb2_core_qbuf+0xab6/0x14b0
[ 55.048800][ T3630] vb2_qbuf+0x139/0x1a0
[ 55.052971][ T3630] ? vb2_ioctl_prepare_buf+0x140/0x140
[ 55.058457][ T3630] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 55.064018][ T3630] ? tomoyo_path_number_perm+0x234/0x550
[ 55.069699][ T3630] v4l2_m2m_qbuf+0x18e/0x900
[ 55.074335][ T3630] ? check_fmt+0x4f4/0x900
[ 55.078738][ T3630] v4l_qbuf+0x96/0xc0
[ 55.082701][ T3630] __video_do_ioctl+0xb9d/0xe20
[ 55.087592][ T3630] ? v4l_print_control+0x60/0x60
[ 55.092552][ T3630] video_usercopy+0x3b8/0x17f0
[ 55.097350][ T3630] ? v4l_print_control+0x60/0x60
[ 55.102314][ T3630] ? v4l_enumstd+0x70/0x70
[ 55.106881][ T3630] ? lock_downgrade+0x6e0/0x6e0
[ 55.111749][ T3630] v4l2_ioctl+0x1b7/0x250
[ 55.116122][ T3630] ? v4l2_write+0x2b0/0x2b0
[ 55.120637][ T3630] __x64_sys_ioctl+0x197/0x210
[ 55.125501][ T3630] do_syscall_64+0x39/0xb0
[ 55.129921][ T3630] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.135864][ T3630] RIP: 0033:0x7fa99fb7ac49
[ 55.140289][ T3630] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.160026][ T3630] RSP: 002b:00007ffe853717c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.168482][ T3630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa99fb7ac49
[ 55.176490][ T3630] RDX: 0000000020000300 RSI: 00000000c058560f RDI: 0000000000000003
[ 55.184515][ T3630] RBP: 00007fa99fb3edf0 R08: 0000000000000000 R09: 0000000000000000
[ 55.192483][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa99fb3ee80
[ 55.200488][ T3630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.208502][ T3630]
[ 55.211516][ T3630] Kernel panic - not syncing: panic_on_warn set ...
[ 55.218084][ T3630] CPU: 0 PID: 3630 Comm: syz-executor512 Not tainted 6.1.0-rc7-syzkaller-00159-ga1e9185d20b5 #0
[ 55.228475][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 55.238512][ T3630] Call Trace:
[ 55.241773][ T3630]
[ 55.244688][ T3630] dump_stack_lvl+0xd1/0x138
[ 55.249275][ T3630] panic+0x2cc/0x626
[ 55.253150][ T3630] ? panic_print_sys_info.part.0+0x110/0x110
[ 55.259115][ T3630] ? __warn.cold+0x24b/0x350
[ 55.263684][ T3630] ? get_vaddr_frames+0x1f2/0x200
[ 55.268698][ T3630] __warn.cold+0x25c/0x350
[ 55.273111][ T3630] ? __wake_up_klogd.part.0+0x99/0xf0
[ 55.278492][ T3630] ? get_vaddr_frames+0x1f2/0x200
[ 55.283514][ T3630] report_bug+0x1c0/0x210
[ 55.287843][ T3630] handle_bug+0x3c/0x70
[ 55.291992][ T3630] exc_invalid_op+0x18/0x50
[ 55.296490][ T3630] asm_exc_invalid_op+0x1a/0x20
[ 55.301341][ T3630] RIP: 0010:get_vaddr_frames+0x1f2/0x200
[ 55.306974][ T3630] Code: 4d 4c fb e9 0b ff ff ff e8 7b 4d 4c fb e9 d2 fe ff ff e8 71 35 00 fb 48 c7 c7 60 43 1b 8b c6 05 78 bc bc 07 01 e8 7b 98 27 03 <0f> 0b e9 56 ff ff ff 0f 1f 80 00 00 00 00 41 57 41 56 41 55 41 54
[ 55.326581][ T3630] RSP: 0018:ffffc90003437760 EFLAGS: 00010282
[ 55.332640][ T3630] RAX: 0000000000000000 RBX: ffff8880782dd000 RCX: 0000000000000000
[ 55.340606][ T3630] RDX: ffff88807e0ea240 RSI: ffffffff8164964c RDI: fffff52000686ede
[ 55.348582][ T3630] RBP: ffff8880782dd004 R08: 0000000000000005 R09: 0000000000000000
[ 55.356553][ T3630] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 55.364516][ T3630] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807bbe4800
[ 55.372511][ T3630] ? vprintk+0x8c/0xa0
[ 55.376611][ T3630] vb2_create_framevec+0x59/0xd0
[ 55.381567][ T3630] vb2_vmalloc_get_userptr+0x128/0x520
[ 55.387039][ T3630] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 55.393211][ T3630] __prepare_userptr+0x31e/0x1580
[ 55.398235][ T3630] ? vb2_queue_error+0x60/0x60
[ 55.402996][ T3630] ? __lock_acquire+0x166e/0x56d0
[ 55.408022][ T3630] ? __stack_depot_save+0x3e/0x560
[ 55.413133][ T3630] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 55.419114][ T3630] ? tomoyo_path_number_perm+0x41b/0x550
[ 55.424746][ T3630] ? lock_release+0x810/0x810
[ 55.429435][ T3630] __buf_prepare+0x5e4/0x780
[ 55.434022][ T3630] ? vb2_queue_or_prepare_buf+0x686/0x25e0
[ 55.439863][ T3630] vb2_core_qbuf+0xab6/0x14b0
[ 55.444571][ T3630] vb2_qbuf+0x139/0x1a0
[ 55.448740][ T3630] ? vb2_ioctl_prepare_buf+0x140/0x140
[ 55.454213][ T3630] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 55.459782][ T3630] ? tomoyo_path_number_perm+0x234/0x550
[ 55.465425][ T3630] v4l2_m2m_qbuf+0x18e/0x900
[ 55.470033][ T3630] ? check_fmt+0x4f4/0x900
[ 55.474463][ T3630] v4l_qbuf+0x96/0xc0
[ 55.478453][ T3630] __video_do_ioctl+0xb9d/0xe20
[ 55.483308][ T3630] ? v4l_print_control+0x60/0x60
[ 55.488245][ T3630] video_usercopy+0x3b8/0x17f0
[ 55.493009][ T3630] ? v4l_print_control+0x60/0x60
[ 55.497945][ T3630] ? v4l_enumstd+0x70/0x70
[ 55.502371][ T3630] ? lock_downgrade+0x6e0/0x6e0
[ 55.507227][ T3630] v4l2_ioctl+0x1b7/0x250
[ 55.511550][ T3630] ? v4l2_write+0x2b0/0x2b0
[ 55.516049][ T3630] __x64_sys_ioctl+0x197/0x210
[ 55.520816][ T3630] do_syscall_64+0x39/0xb0
[ 55.525228][ T3630] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.531127][ T3630] RIP: 0033:0x7fa99fb7ac49
[ 55.535533][ T3630] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.555311][ T3630] RSP: 002b:00007ffe853717c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.563722][ T3630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa99fb7ac49
[ 55.571685][ T3630] RDX: 0000000020000300 RSI: 00000000c058560f RDI: 0000000000000003
[ 55.579653][ T3630] RBP: 00007fa99fb3edf0 R08: 0000000000000000 R09: 0000000000000000
[ 55.587619][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa99fb3ee80
[ 55.595601][ T3630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.603583][ T3630]
[ 55.606736][ T3630] Kernel Offset: disabled
[ 55.611104][ T3630] Rebooting in 86400 seconds..