./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3599910968
<...>
forked to background, child pid 4640
no interfaces have a carrier
[ 28.215781][ T4641] 8021q: adding VLAN 0 to HW filter on device bond0
[ 28.225603][ T4641] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts.
execve("./syz-executor3599910968", ["./syz-executor3599910968"], 0x7ffc2b899530 /* 10 vars */) = 0
brk(NULL) = 0x5555569de000
brk(0x5555569dec40) = 0x5555569dec40
arch_prctl(ARCH_SET_FS, 0x5555569de300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3599910968", 4096) = 28
brk(0x5555569ffc40) = 0x5555569ffc40
brk(0x555556a00000) = 0x555556a00000
mprotect(0x7f250ff50000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/vim2m", O_RDWR) = 3
ioctl(3, VIDIOC_REQBUFS, {type=V4L2_BUF_TYPE_VIDEO_OUTPUT, memory=V4L2_MEMORY_USERPTR, count=4294967264 => 27}) = 0
syzkaller login: [ 48.894063][ T5062] ------------[ cut here ]------------
[ 48.899829][ T5062] get_vaddr_frames() cannot follow VM_IO mapping
[ 48.900170][ T5062] WARNING: CPU: 1 PID: 5062 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x217/0x220
[ 48.918130][ T5062] Modules linked in:
[ 48.922028][ T5062] CPU: 1 PID: 5062 Comm: syz-executor359 Not tainted 6.2.0-rc1-syzkaller #0
[ 48.930764][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 48.941094][ T5062] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 48.946773][ T5062] Code: cb 3c fb e9 06 ff ff ff e8 f6 ca 3c fb e9 cd fe ff ff e8 fc c2 ee fa 48 c7 c7 e0 ce 1c 8b c6 05 90 1f cb 07 01 e8 a9 a2 2c 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 48.966441][ T5062] RSP: 0018:ffffc90003c4f810 EFLAGS: 00010286
[ 48.972495][ T5062] RAX: 0000000000000000 RBX: ffff88801fb7d000 RCX: 0000000000000000
[ 48.980610][ T5062] RDX: ffff88802393d7c0 RSI: ffffffff8166721c RDI: fffff52000789ef4
[ 48.988671][ T5062] RBP: ffff88801fb7d004 R08: 0000000000000005 R09: 0000000000000000
[ 48.996705][ T5062] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 49.004696][ T5062] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888076c28000
[ 49.012733][ T5062] FS: 00005555569de300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 49.021707][ T5062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.028334][ T5062] CR2: 00007ffee166c890 CR3: 0000000028602000 CR4: 0000000000350ee0
[ 49.036341][ T5062] Call Trace:
[ 49.039605][ T5062]
[ 49.042521][ T5062] vb2_create_framevec+0x62/0xd0
[ 49.047558][ T5062] vb2_vmalloc_get_userptr+0x13b/0x530
[ 49.053042][ T5062] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 49.059501][ T5062] __prepare_userptr+0x31e/0x1580
[ 49.064531][ T5062] ? vb2_queue_error+0x60/0x60
[ 49.069360][ T5062] ? ____kasan_slab_free+0x160/0x1c0
[ 49.074667][ T5062] ? slab_free_freelist_hook+0x8b/0x1c0
[ 49.080415][ T5062] ? __kmem_cache_free+0xaf/0x3b0
[ 49.085473][ T5062] ? tomoyo_path_number_perm+0x438/0x570
[ 49.091161][ T5062] ? security_file_ioctl+0x54/0xb0
[ 49.096316][ T5062] ? lock_release+0x810/0x810
[ 49.100984][ T5062] ? rcu_read_lock_sched_held+0x3e/0x70
[ 49.106601][ T5062] ? trace_contention_end+0x153/0x1e0
[ 49.112008][ T5062] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 49.117971][ T5062] __buf_prepare+0x5e4/0x780
[ 49.122601][ T5062] vb2_core_prepare_buf+0xe4/0x2c0
[ 49.127795][ T5062] vb2_prepare_buf+0x103/0x170
[ 49.132576][ T5062] v4l2_m2m_prepare_buf+0xe8/0x210
[ 49.137770][ T5062] v4l_prepare_buf+0x96/0xc0
[ 49.142386][ T5062] __video_do_ioctl+0xb9d/0xe20
[ 49.147326][ T5062] ? v4l_print_control+0x60/0x60
[ 49.152296][ T5062] video_usercopy+0x3b8/0x17f0
[ 49.157166][ T5062] ? v4l_print_control+0x60/0x60
[ 49.162129][ T5062] ? v4l_enumstd+0x70/0x70
[ 49.166637][ T5062] ? lock_downgrade+0x6e0/0x6e0
[ 49.171517][ T5062] v4l2_ioctl+0x1b7/0x250
[ 49.175847][ T5062] ? v4l2_write+0x2b0/0x2b0
[ 49.180401][ T5062] __x64_sys_ioctl+0x197/0x210
[ 49.185178][ T5062] do_syscall_64+0x39/0xb0
[ 49.189633][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.195543][ T5062] RIP: 0033:0x7f250fee3c49
[ 49.200163][ T5062] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.219812][ T5062] RSP: 002b:00007ffee166d948 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.228311][ T5062] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f250fee3c49
[ 49.236318][ T5062] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 49.244274][ T5062] RBP: 00007f250fea7df0 R08: 0000000000000000 R09: 0000000000000000
[ 49.252307][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f250fea7e80
[ 49.260334][ T5062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.268379][ T5062]
[ 49.271407][ T5062] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 49.278682][ T5062] CPU: 1 PID: 5062 Comm: syz-executor359 Not tainted 6.2.0-rc1-syzkaller #0
[ 49.287425][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 49.297463][ T5062] Call Trace:
[ 49.300725][ T5062]
[ 49.303784][ T5062] dump_stack_lvl+0xd1/0x138
[ 49.308371][ T5062] panic+0x2cc/0x626
[ 49.312271][ T5062] ? panic_print_sys_info.part.0+0x110/0x110
[ 49.318246][ T5062] ? get_vaddr_frames+0x217/0x220
[ 49.323624][ T5062] check_panic_on_warn.cold+0x19/0x35
[ 49.328987][ T5062] __warn+0xf2/0x1a0
[ 49.332869][ T5062] ? __wake_up_klogd.part.0+0x99/0xf0
[ 49.338226][ T5062] ? get_vaddr_frames+0x217/0x220
[ 49.343256][ T5062] report_bug+0x1c0/0x210
[ 49.347665][ T5062] handle_bug+0x3c/0x70
[ 49.351813][ T5062] exc_invalid_op+0x18/0x50
[ 49.356307][ T5062] asm_exc_invalid_op+0x1a/0x20
[ 49.361143][ T5062] RIP: 0010:get_vaddr_frames+0x217/0x220
[ 49.366768][ T5062] Code: cb 3c fb e9 06 ff ff ff e8 f6 ca 3c fb e9 cd fe ff ff e8 fc c2 ee fa 48 c7 c7 e0 ce 1c 8b c6 05 90 1f cb 07 01 e8 a9 a2 2c 03 <0f> 0b e9 53 ff ff ff 66 90 41 57 41 56 41 55 41 54 49 89 fc 55 4d
[ 49.386368][ T5062] RSP: 0018:ffffc90003c4f810 EFLAGS: 00010286
[ 49.392430][ T5062] RAX: 0000000000000000 RBX: ffff88801fb7d000 RCX: 0000000000000000
[ 49.400392][ T5062] RDX: ffff88802393d7c0 RSI: ffffffff8166721c RDI: fffff52000789ef4
[ 49.408354][ T5062] RBP: ffff88801fb7d004 R08: 0000000000000005 R09: 0000000000000000
[ 49.416317][ T5062] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000fffffff2
[ 49.424276][ T5062] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888076c28000
[ 49.432264][ T5062] ? vprintk+0x8c/0xa0
[ 49.436337][ T5062] vb2_create_framevec+0x62/0xd0
[ 49.441271][ T5062] vb2_vmalloc_get_userptr+0x13b/0x530
[ 49.446728][ T5062] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430
[ 49.452877][ T5062] __prepare_userptr+0x31e/0x1580
[ 49.457903][ T5062] ? vb2_queue_error+0x60/0x60
[ 49.462666][ T5062] ? ____kasan_slab_free+0x160/0x1c0
[ 49.467941][ T5062] ? slab_free_freelist_hook+0x8b/0x1c0
[ 49.473508][ T5062] ? __kmem_cache_free+0xaf/0x3b0
[ 49.478525][ T5062] ? tomoyo_path_number_perm+0x438/0x570
[ 49.484156][ T5062] ? security_file_ioctl+0x54/0xb0
[ 49.489268][ T5062] ? lock_release+0x810/0x810
[ 49.493962][ T5062] ? rcu_read_lock_sched_held+0x3e/0x70
[ 49.499510][ T5062] ? trace_contention_end+0x153/0x1e0
[ 49.504881][ T5062] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 49.510778][ T5062] __buf_prepare+0x5e4/0x780
[ 49.515375][ T5062] vb2_core_prepare_buf+0xe4/0x2c0
[ 49.520484][ T5062] vb2_prepare_buf+0x103/0x170
[ 49.525242][ T5062] v4l2_m2m_prepare_buf+0xe8/0x210
[ 49.530352][ T5062] v4l_prepare_buf+0x96/0xc0
[ 49.534942][ T5062] __video_do_ioctl+0xb9d/0xe20
[ 49.539795][ T5062] ? v4l_print_control+0x60/0x60
[ 49.544740][ T5062] video_usercopy+0x3b8/0x17f0
[ 49.549506][ T5062] ? v4l_print_control+0x60/0x60
[ 49.554443][ T5062] ? v4l_enumstd+0x70/0x70
[ 49.558862][ T5062] ? lock_downgrade+0x6e0/0x6e0
[ 49.563712][ T5062] v4l2_ioctl+0x1b7/0x250
[ 49.568044][ T5062] ? v4l2_write+0x2b0/0x2b0
[ 49.572540][ T5062] __x64_sys_ioctl+0x197/0x210
[ 49.577318][ T5062] do_syscall_64+0x39/0xb0
[ 49.581992][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.587885][ T5062] RIP: 0033:0x7f250fee3c49
[ 49.592289][ T5062] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.611888][ T5062] RSP: 002b:00007ffee166d948 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.620296][ T5062] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f250fee3c49
[ 49.628261][ T5062] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003
[ 49.636222][ T5062] RBP: 00007f250fea7df0 R08: 0000000000000000 R09: 0000000000000000
[ 49.644205][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f250fea7e80
[ 49.652167][ T5062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.660140][ T5062]
[ 49.663890][ T5062] Kernel Offset: disabled
[ 49.668275][ T5062] Rebooting in 86400 seconds..