./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor662023721
<...>
Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts.
execve("./syz-executor662023721", ["./syz-executor662023721"], 0x7ffcaae1bc40 /* 10 vars */) = 0
brk(NULL) = 0x555555bfd000
brk(0x555555bfdd00) = 0x555555bfdd00
arch_prctl(ARCH_SET_FS, 0x555555bfd380) = 0
set_tid_address(0x555555bfd650) = 5014
set_robust_list(0x555555bfd660, 24) = 0
rseq(0x555555bfdca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor662023721", 4096) = 27
getrandom("\xbb\x7c\xa8\x84\x8c\x87\x4c\xed", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555bfdd00
brk(0x555555c1ed00) = 0x555555c1ed00
brk(0x555555c1f000) = 0x555555c1f000
mprotect(0x7fb6e85ba000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
[ 53.131082][ T5014] ------------[ cut here ]------------
[ 53.137727][ T5014] get_vaddr_frames() cannot follow VM_IO mapping
[ 53.138299][ T5014] WARNING: CPU: 0 PID: 5014 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x1fb/0x240
[ 53.156871][ T5014] Modules linked in:
[ 53.161549][ T5014] CPU: 0 PID: 5014 Comm: syz-executor662 Not tainted 6.5.0-rc7-syzkaller-00013-g53663f4103ff #0
[ 53.172197][ T5014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 53.182313][ T5014] RIP: 0010:get_vaddr_frames+0x1fb/0x240
[ 53.188434][ T5014] Code: 8c 11 ff ff ff 4c 89 ef e8 e2 43 b1 fa e9 04 ff ff ff e8 68 71 58 fa c6 05 8a 53 50 07 01 48 c7 c7 60 4c c0 8b e8 d5 8a 1f fa <0f> 0b e9 4b ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1f ff
[ 53.208308][ T5014] RSP: 0018:ffffc90003a6f5c8 EFLAGS: 00010246
[ 53.214445][ T5014] RAX: 9c4328ca038f9900 RBX: 1ffff920017c0000 RCX: ffff888022a85940
[ 53.222441][ T5014] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 53.230528][ T5014] RBP: dffffc0000000000 R08: ffffffff8152d442 R09: 1ffff11017325162
[ 53.238548][ T5014] R10: dffffc0000000000 R11: ffffed1017325163 R12: 00000000fffffff2
[ 53.246733][ T5014] R13: ffffc9000be00004 R14: 0000000000000000 R15: 0000000000000000
[ 53.254822][ T5014] FS: 0000555555bfd380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 53.263754][ T5014] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.270422][ T5014] CR2: 000000000061cca0 CR3: 00000000724e3000 CR4: 00000000003506f0
[ 53.278457][ T5014] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.286526][ T5014] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.294545][ T5014] Call Trace:
[ 53.297818][ T5014]
[ 53.300738][ T5014] ? __warn+0x162/0x4a0
[ 53.304957][ T5014] ? get_vaddr_frames+0x1fb/0x240
[ 53.310004][ T5014] ? report_bug+0x2b3/0x500
[ 53.314593][ T5014] ? get_vaddr_frames+0x1fb/0x240
[ 53.319636][ T5014] ? handle_bug+0x3d/0x70
[ 53.323966][ T5014] ? exc_invalid_op+0x1a/0x50
[ 53.328703][ T5014] ? asm_exc_invalid_op+0x1a/0x20
[ 53.333837][ T5014] ? __warn_printk+0x292/0x360
[ 53.338686][ T5014] ? get_vaddr_frames+0x1fb/0x240
[ 53.343737][ T5014] ? get_vaddr_frames+0x1fb/0x240
[ 53.348975][ T5014] vb2_create_framevec+0x55/0xc0
[ 53.354060][ T5014] vb2_vmalloc_get_userptr+0x100/0x410
[ 53.359641][ T5014] ? __fill_vb2_buffer+0x455/0x4b0
[ 53.364837][ T5014] ? vb2_vmalloc_get_dmabuf+0x250/0x250
[ 53.370473][ T5014] __buf_prepare+0xc26/0x4460
[ 53.375201][ T5014] ? is_bpf_text_address+0x253/0x270
[ 53.380541][ T5014] ? vb2_core_prepare_buf+0x310/0x310
[ 53.386012][ T5014] ? __kernel_text_address+0xd/0x40
[ 53.391235][ T5014] ? unwind_get_return_address+0x4d/0x90
[ 53.396921][ T5014] ? arch_stack_walk+0xf7/0x140
[ 53.401864][ T5014] ? mark_lock+0x9a/0x340
[ 53.406305][ T5014] ? __lock_acquire+0x1345/0x7f70
[ 53.411423][ T5014] ? vb2_queue_or_prepare_buf+0x5be/0xe20
[ 53.417219][ T5014] vb2_core_prepare_buf+0xe6/0x310
[ 53.422348][ T5014] v4l2_m2m_ioctl_prepare_buf+0x19b/0x470
[ 53.428148][ T5014] ? v4l_prepare_buf+0x6c/0xc0
[ 53.432928][ T5014] __video_do_ioctl+0xa3e/0xe40
[ 53.437845][ T5014] ? video_ioctl2+0x30/0x30
[ 53.442366][ T5014] ? smack_log+0x123/0x540
[ 53.446862][ T5014] ? __might_fault+0xba/0x120
[ 53.451562][ T5014] video_usercopy+0x894/0x1170
[ 53.456416][ T5014] ? video_ioctl2+0x30/0x30
[ 53.460944][ T5014] ? v4l_printk_ioctl+0x160/0x160
[ 53.466086][ T5014] ? smack_file_ioctl+0x2fa/0x3a0
[ 53.471239][ T5014] ? do_notify_parent+0xf50/0xf50
[ 53.476332][ T5014] ? print_irqtrace_events+0x220/0x220
[ 53.481813][ T5014] v4l2_ioctl+0x188/0x1d0
[ 53.486261][ T5014] ? v4l2_poll+0x2b0/0x2b0
[ 53.490772][ T5014] __se_sys_ioctl+0xf8/0x170
[ 53.495436][ T5014] do_syscall_64+0x41/0xc0
[ 53.499870][ T5014] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.505836][ T5014] RIP: 0033:0x7fb6e85473e9
[ 53.510262][ T5014] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 53.530047][ T5014] RSP: 002b:00007fffbf76d108 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 53.538538][ T5014] RAX: ffffffffffffffda RBX: 00007fffbf76d2d8 RCX: 00007fb6e85473e9
[ 53.546588][ T5014] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 53.554623][ T5014] RBP: 00007fb6e85ba610 R08: 00007fffbf76d2d8 R09: 00007fffbf76d2d8
[ 53.562625][ T5014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 53.570790][ T5014] R13: 00007fffbf76d2c8 R14: 0000000000000001 R15: 0000000000000001
[ 53.578819][ T5014]
[ 53.581832][ T5014] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 53.589099][ T5014] CPU: 0 PID: 5014 Comm: syz-executor662 Not tainted 6.5.0-rc7-syzkaller-00013-g53663f4103ff #0
[ 53.599594][ T5014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 53.609643][ T5014] Call Trace:
[ 53.612925][ T5014]
[ 53.615847][ T5014] dump_stack_lvl+0x1e7/0x2d0
[ 53.620606][ T5014] ? nf_tcp_handle_invalid+0x650/0x650
[ 53.626108][ T5014] ? panic+0x770/0x770
[ 53.630170][ T5014] ? vscnprintf+0x5d/0x80
[ 53.634523][ T5014] panic+0x30f/0x770
[ 53.638438][ T5014] ? __warn+0x171/0x4a0
[ 53.642580][ T5014] ? __memcpy_flushcache+0x2b0/0x2b0
[ 53.647863][ T5014] __warn+0x314/0x4a0
[ 53.651938][ T5014] ? get_vaddr_frames+0x1fb/0x240
[ 53.656963][ T5014] report_bug+0x2b3/0x500
[ 53.661282][ T5014] ? get_vaddr_frames+0x1fb/0x240
[ 53.666316][ T5014] handle_bug+0x3d/0x70
[ 53.670579][ T5014] exc_invalid_op+0x1a/0x50
[ 53.675070][ T5014] asm_exc_invalid_op+0x1a/0x20
[ 53.679932][ T5014] RIP: 0010:get_vaddr_frames+0x1fb/0x240
[ 53.685580][ T5014] Code: 8c 11 ff ff ff 4c 89 ef e8 e2 43 b1 fa e9 04 ff ff ff e8 68 71 58 fa c6 05 8a 53 50 07 01 48 c7 c7 60 4c c0 8b e8 d5 8a 1f fa <0f> 0b e9 4b ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1f ff
[ 53.705203][ T5014] RSP: 0018:ffffc90003a6f5c8 EFLAGS: 00010246
[ 53.711297][ T5014] RAX: 9c4328ca038f9900 RBX: 1ffff920017c0000 RCX: ffff888022a85940
[ 53.719270][ T5014] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 53.727237][ T5014] RBP: dffffc0000000000 R08: ffffffff8152d442 R09: 1ffff11017325162
[ 53.735205][ T5014] R10: dffffc0000000000 R11: ffffed1017325163 R12: 00000000fffffff2
[ 53.743171][ T5014] R13: ffffc9000be00004 R14: 0000000000000000 R15: 0000000000000000
[ 53.751144][ T5014] ? __warn_printk+0x292/0x360
[ 53.755916][ T5014] ? get_vaddr_frames+0x1fb/0x240
[ 53.760940][ T5014] vb2_create_framevec+0x55/0xc0
[ 53.765873][ T5014] vb2_vmalloc_get_userptr+0x100/0x410
[ 53.771336][ T5014] ? __fill_vb2_buffer+0x455/0x4b0
[ 53.776446][ T5014] ? vb2_vmalloc_get_dmabuf+0x250/0x250
[ 53.781996][ T5014] __buf_prepare+0xc26/0x4460
[ 53.786674][ T5014] ? is_bpf_text_address+0x253/0x270
[ 53.791963][ T5014] ? vb2_core_prepare_buf+0x310/0x310
[ 53.797328][ T5014] ? __kernel_text_address+0xd/0x40
[ 53.802536][ T5014] ? unwind_get_return_address+0x4d/0x90
[ 53.808426][ T5014] ? arch_stack_walk+0xf7/0x140
[ 53.813272][ T5014] ? mark_lock+0x9a/0x340
[ 53.817602][ T5014] ? __lock_acquire+0x1345/0x7f70
[ 53.823222][ T5014] ? vb2_queue_or_prepare_buf+0x5be/0xe20
[ 53.828957][ T5014] vb2_core_prepare_buf+0xe6/0x310
[ 53.834156][ T5014] v4l2_m2m_ioctl_prepare_buf+0x19b/0x470
[ 53.839873][ T5014] ? v4l_prepare_buf+0x6c/0xc0
[ 53.844630][ T5014] __video_do_ioctl+0xa3e/0xe40
[ 53.849488][ T5014] ? video_ioctl2+0x30/0x30
[ 53.853986][ T5014] ? smack_log+0x123/0x540
[ 53.858413][ T5014] ? __might_fault+0xba/0x120
[ 53.863113][ T5014] video_usercopy+0x894/0x1170
[ 53.867900][ T5014] ? video_ioctl2+0x30/0x30
[ 53.872519][ T5014] ? v4l_printk_ioctl+0x160/0x160
[ 53.877571][ T5014] ? smack_file_ioctl+0x2fa/0x3a0
[ 53.882735][ T5014] ? do_notify_parent+0xf50/0xf50
[ 53.887809][ T5014] ? print_irqtrace_events+0x220/0x220
[ 53.893402][ T5014] v4l2_ioctl+0x188/0x1d0
[ 53.897762][ T5014] ? v4l2_poll+0x2b0/0x2b0
[ 53.902562][ T5014] __se_sys_ioctl+0xf8/0x170
[ 53.907193][ T5014] do_syscall_64+0x41/0xc0
[ 53.911667][ T5014] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.917585][ T5014] RIP: 0033:0x7fb6e85473e9
[ 53.922053][ T5014] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 53.941866][ T5014] RSP: 002b:00007fffbf76d108 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 53.955163][ T5014] RAX: ffffffffffffffda RBX: 00007fffbf76d2d8 RCX: 00007fb6e85473e9
[ 53.963220][ T5014] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 53.971298][ T5014] RBP: 00007fb6e85ba610 R08: 00007fffbf76d2d8 R09: 00007fffbf76d2d8
[ 53.979447][ T5014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 53.987500][ T5014] R13: 00007fffbf76d2c8 R14: 0000000000000001 R15: 0000000000000001
[ 53.995580][ T5014]
[ 53.998802][ T5014] Kernel Offset: disabled
[ 54.003222][ T5014] Rebooting in 86400 seconds..