./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2722237096
<...>
Warning: Permanently added '10.128.1.144' (ECDSA) to the list of known hosts.
execve("./syz-executor2722237096", ["./syz-executor2722237096"], 0x7ffc65ed7c60 /* 10 vars */) = 0
brk(NULL) = 0x5555561af000
brk(0x5555561afc40) = 0x5555561afc40
arch_prctl(ARCH_SET_FS, 0x5555561af300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2722237096", 4096) = 28
brk(0x5555561d0c40) = 0x5555561d0c40
brk(0x5555561d1000) = 0x5555561d1000
mprotect(0x7efc9a572000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
syzkaller login: [ 75.769715][ T5084] ------------[ cut here ]------------
[ 75.775388][ T5084] get_vaddr_frames() cannot follow VM_IO mapping
[ 75.776050][ T5084] WARNING: CPU: 1 PID: 5084 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x217/0x220
[ 75.794158][ T5084] Modules linked in:
[ 75.798161][ T5084] CPU: 1 PID: 5084 Comm: syz-executor272 Not tainted 6.3.0-rc2-syzkaller-00006-gfc89d7fb499b #0
[ 75.808766][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 75.818896][ T5084] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 75.824680][ T5084] Code: 62 11 fb e9 06 ff ff ff e8 26 62 11 fb e9 cd fe ff ff e8 7c 1b c0 fa 48 c7 c7 00 02 1e 8b c6 05 e9 11 9f 07 01 e8 f9 37 88 fa <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 75.844492][ T5084] RSP: 0018:ffffc90003cbf818 EFLAGS: 00010282
[ 75.850668][ T5084] RAX: 0000000000000000 RBX: ffffc9000c200000 RCX: 0000000000000000
[ 75.858945][ T5084] RDX: ffff888076851d40 RSI: ffffffff814bf3a7 RDI: 0000000000000001
[ 75.866979][ T5084] RBP: ffffc9000c200004 R08: 0000000000000001 R09: 0000000000000000
[ 75.875068][ T5084] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 75.883136][ T5084] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801fd09000
[ 75.891213][ T5084] FS: 00005555561af300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 75.900241][ T5084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 75.906844][ T5084] CR2: 00000000005fdeb8 CR3: 0000000021aa7000 CR4: 00000000003506e0
[ 75.914937][ T5084] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 75.922986][ T5084] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 75.931063][ T5084] Call Trace:
[ 75.934364][ T5084]
[ 75.937317][ T5084] vb2_create_framevec+0x62/0xd0
[ 75.942364][ T5084] vb2_vmalloc_get_userptr+0x13b/0x530
[ 75.947876][ T5084] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 75.954155][ T5084] __prepare_userptr+0x6a6/0x1630
[ 75.959328][ T5084] ? vb2_queue_error+0x60/0x60
[ 75.964129][ T5084] ? __kmem_cache_free+0xaf/0x2d0
[ 75.969283][ T5084] ? slab_free_freelist_hook+0x8b/0x1c0
[ 75.974899][ T5084] ? __kmem_cache_free+0xaf/0x2d0
[ 75.980062][ T5084] ? tomoyo_path_number_perm+0x438/0x570
[ 75.985750][ T5084] ? security_file_ioctl+0x54/0xb0
[ 75.991004][ T5084] ? __x64_sys_ioctl+0xb7/0x210
[ 75.995940][ T5084] ? do_syscall_64+0x39/0xb0
[ 76.000681][ T5084] ? lock_release+0x700/0x700
[ 76.005460][ T5084] ? rcu_read_lock_sched_held+0x3e/0x70
[ 76.011188][ T5084] ? trace_contention_end+0x10a/0x160
[ 76.016616][ T5084] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 76.022663][ T5084] __buf_prepare+0x602/0x7d0
[ 76.027348][ T5084] vb2_core_prepare_buf+0xe4/0x330
[ 76.032599][ T5084] vb2_prepare_buf+0x103/0x190
[ 76.037411][ T5084] v4l2_m2m_prepare_buf+0xe8/0x210
[ 76.042657][ T5084] v4l_prepare_buf+0x96/0xc0
[ 76.047311][ T5084] __video_do_ioctl+0xba6/0xf20
[ 76.052265][ T5084] ? v4l_reqbufs+0xd0/0xd0
[ 76.056772][ T5084] video_usercopy+0x331/0x17c0
[ 76.061683][ T5084] ? v4l_reqbufs+0xd0/0xd0
[ 76.066162][ T5084] ? v4l_enumstd+0x70/0x70
[ 76.070706][ T5084] ? lock_downgrade+0x690/0x690
[ 76.075621][ T5084] v4l2_ioctl+0x1b7/0x250
[ 76.080059][ T5084] ? v4l2_write+0x350/0x350
[ 76.084617][ T5084] __x64_sys_ioctl+0x197/0x210
[ 76.089513][ T5084] do_syscall_64+0x39/0xb0
[ 76.094017][ T5084] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 76.100053][ T5084] RIP: 0033:0x7efc9a505c49
[ 76.104511][ T5084] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 76.124250][ T5084] RSP: 002b:00007fffdf030618 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.132758][ T5084] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efc9a505c49
[ 76.140914][ T5084] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 76.149079][ T5084] RBP: 00007efc9a4c9df0 R08: 0000000000000000 R09: 0000000000000000
[ 76.157093][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc9a4c9e80
[ 76.165188][ T5084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 76.173248][ T5084]
[ 76.176283][ T5084] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 76.183568][ T5084] CPU: 1 PID: 5084 Comm: syz-executor272 Not tainted 6.3.0-rc2-syzkaller-00006-gfc89d7fb499b #0
[ 76.193993][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 76.204060][ T5084] Call Trace:
[ 76.207347][ T5084]
[ 76.210285][ T5084] dump_stack_lvl+0xd9/0x150
[ 76.214904][ T5084] panic+0x688/0x730
[ 76.218839][ T5084] ? panic_smp_self_stop+0x90/0x90
[ 76.223973][ T5084] ? show_trace_log_lvl+0x285/0x390
[ 76.229214][ T5084] ? get_vaddr_frames+0x217/0x220
[ 76.234352][ T5084] check_panic_on_warn+0xb1/0xc0
[ 76.239313][ T5084] __warn+0xf2/0x460
[ 76.243231][ T5084] ? __wake_up_klogd.part.0+0x99/0xf0
[ 76.248619][ T5084] ? get_vaddr_frames+0x217/0x220
[ 76.253669][ T5084] report_bug+0x2da/0x500
[ 76.258036][ T5084] handle_bug+0x3c/0x70
[ 76.262232][ T5084] exc_invalid_op+0x18/0x50
[ 76.266763][ T5084] asm_exc_invalid_op+0x1a/0x20
[ 76.271639][ T5084] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 76.277297][ T5084] Code: 62 11 fb e9 06 ff ff ff e8 26 62 11 fb e9 cd fe ff ff e8 7c 1b c0 fa 48 c7 c7 00 02 1e 8b c6 05 e9 11 9f 07 01 e8 f9 37 88 fa <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 76.297482][ T5084] RSP: 0018:ffffc90003cbf818 EFLAGS: 00010282
[ 76.303580][ T5084] RAX: 0000000000000000 RBX: ffffc9000c200000 RCX: 0000000000000000
[ 76.311578][ T5084] RDX: ffff888076851d40 RSI: ffffffff814bf3a7 RDI: 0000000000000001
[ 76.319656][ T5084] RBP: ffffc9000c200004 R08: 0000000000000001 R09: 0000000000000000
[ 76.327655][ T5084] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 76.335691][ T5084] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801fd09000
[ 76.343808][ T5084] ? __warn_printk+0x187/0x310
[ 76.349147][ T5084] ? get_vaddr_frames+0x217/0x220
[ 76.354226][ T5084] vb2_create_framevec+0x62/0xd0
[ 76.359198][ T5084] vb2_vmalloc_get_userptr+0x13b/0x530
[ 76.364789][ T5084] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 76.370978][ T5084] __prepare_userptr+0x6a6/0x1630
[ 76.376065][ T5084] ? vb2_queue_error+0x60/0x60
[ 76.380877][ T5084] ? __kmem_cache_free+0xaf/0x2d0
[ 76.385964][ T5084] ? slab_free_freelist_hook+0x8b/0x1c0
[ 76.391562][ T5084] ? __kmem_cache_free+0xaf/0x2d0
[ 76.396621][ T5084] ? tomoyo_path_number_perm+0x438/0x570
[ 76.402277][ T5084] ? security_file_ioctl+0x54/0xb0
[ 76.407441][ T5084] ? __x64_sys_ioctl+0xb7/0x210
[ 76.412338][ T5084] ? do_syscall_64+0x39/0xb0
[ 76.416981][ T5084] ? lock_release+0x700/0x700
[ 76.421712][ T5084] ? rcu_read_lock_sched_held+0x3e/0x70
[ 76.427291][ T5084] ? trace_contention_end+0x10a/0x160
[ 76.432707][ T5084] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 76.438681][ T5084] __buf_prepare+0x602/0x7d0
[ 76.443342][ T5084] vb2_core_prepare_buf+0xe4/0x330
[ 76.448527][ T5084] vb2_prepare_buf+0x103/0x190
[ 76.453323][ T5084] v4l2_m2m_prepare_buf+0xe8/0x210
[ 76.458569][ T5084] v4l_prepare_buf+0x96/0xc0
[ 76.463200][ T5084] __video_do_ioctl+0xba6/0xf20
[ 76.468101][ T5084] ? v4l_reqbufs+0xd0/0xd0
[ 76.472570][ T5084] video_usercopy+0x331/0x17c0
[ 76.477393][ T5084] ? v4l_reqbufs+0xd0/0xd0
[ 76.481856][ T5084] ? v4l_enumstd+0x70/0x70
[ 76.486321][ T5084] ? lock_downgrade+0x690/0x690
[ 76.491220][ T5084] v4l2_ioctl+0x1b7/0x250
[ 76.495574][ T5084] ? v4l2_write+0x350/0x350
[ 76.500118][ T5084] __x64_sys_ioctl+0x197/0x210
[ 76.504928][ T5084] do_syscall_64+0x39/0xb0
[ 76.509374][ T5084] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 76.515304][ T5084] RIP: 0033:0x7efc9a505c49
[ 76.519740][ T5084] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 76.539397][ T5084] RSP: 002b:00007fffdf030618 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.547839][ T5084] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efc9a505c49
[ 76.555834][ T5084] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 76.563833][ T5084] RBP: 00007efc9a4c9df0 R08: 0000000000000000 R09: 0000000000000000
[ 76.571840][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc9a4c9e80
[ 76.579849][ T5084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 76.587876][ T5084]
[ 76.590985][ T5084] Kernel Offset: disabled
[ 76.595494][ T5084] Rebooting in 86400 seconds..