DUID 00:04:ef:eb:16:6a:bb:4b:eb:e8:98:52:3b:5c:58:f5:72:fb forked to background, child pid 3211 [ 41.254200][ T3212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.275565][ T3212] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.145' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 67.618874][ T3629] ------------[ cut here ]------------ [ 67.624746][ T3629] get_vaddr_frames() cannot follow VM_IO mapping [ 67.625208][ T3629] WARNING: CPU: 1 PID: 3629 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1db/0x220 [ 67.643156][ T3629] Modules linked in: [ 67.647080][ T3629] CPU: 1 PID: 3629 Comm: syz-executor366 Not tainted 6.1.20-syzkaller #0 [ 67.655544][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 67.666027][ T3629] RIP: 0010:get_vaddr_frames+0x1db/0x220 [ 67.671680][ T3629] Code: 8c 1a ff ff ff 4c 89 e7 e8 e2 a6 cd fa e9 0d ff ff ff e8 e8 41 77 fa c6 05 0a e1 2b 07 01 48 c7 c7 20 df a7 8b e8 55 8a 3f fa <0f> 0b e9 4a ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 1e ff [ 67.691371][ T3629] RSP: 0018:ffffc90003c6f5c8 EFLAGS: 00010246 [ 67.697607][ T3629] RAX: b14ddbeaa8cede00 RBX: 1ffff920016c0000 RCX: ffff888020780000 [ 67.705721][ T3629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.713746][ T3629] RBP: 00000000000ff000 R08: ffffffff8152ac2e R09: ffffed1017324f1c [ 67.721725][ T3629] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000b600004 [ 67.729759][ T3629] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffff2 [ 67.737800][ T3629] FS: 0000555557426300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 67.746812][ T3629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.753418][ T3629] CR2: 0000000020000140 CR3: 0000000079957000 CR4: 00000000003506e0 [ 67.761442][ T3629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.769546][ T3629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.777642][ T3629] Call Trace: [ 67.780949][ T3629] [ 67.783956][ T3629] vb2_create_framevec+0x4a/0xb0 [ 67.788954][ T3629] vb2_vmalloc_get_userptr+0xe7/0x400 [ 67.795369][ T3629] ? __fill_vb2_buffer+0x451/0x4b0 [ 67.800512][ T3629] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 67.806187][ T3629] __buf_prepare+0xc22/0x4460 [ 67.810924][ T3629] ? is_bpf_text_address+0x24f/0x260 [ 67.816280][ T3629] ? vb2_core_prepare_buf+0x300/0x300 [ 67.821697][ T3629] ? __kernel_text_address+0x9/0x40 [ 67.826983][ T3629] ? mark_lock+0x9a/0x340 [ 67.831341][ T3629] ? __lock_acquire+0x125b/0x1f80 [ 67.836551][ T3629] ? vb2_queue_or_prepare_buf+0x5be/0xe20 [ 67.842325][ T3629] vb2_core_prepare_buf+0xe2/0x300 [ 67.847542][ T3629] v4l2_m2m_ioctl_prepare_buf+0x137/0x3a0 [ 67.853297][ T3629] ? v4l_prepare_buf+0x68/0xc0 [ 67.858117][ T3629] __video_do_ioctl+0xa3a/0xe30 [ 67.863008][ T3629] ? video_ioctl2+0x30/0x30 [ 67.867580][ T3629] ? __might_fault+0xb2/0x110 [ 67.872385][ T3629] video_usercopy+0xa79/0x10c0 [ 67.877216][ T3629] ? video_ioctl2+0x30/0x30 [ 67.881776][ T3629] ? v4l_printk_ioctl+0x130/0x130 [ 67.886876][ T3629] ? print_irqtrace_events+0x210/0x210 [ 67.892373][ T3629] ? print_irqtrace_events+0x210/0x210 [ 67.897929][ T3629] v4l2_ioctl+0x181/0x1d0 [ 67.902289][ T3629] ? v4l2_poll+0x2a0/0x2a0 [ 67.906791][ T3629] __se_sys_ioctl+0xf1/0x160 [ 67.911429][ T3629] do_syscall_64+0x3d/0xb0 [ 67.915961][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.921896][ T3629] RIP: 0033:0x7f2a8e045119 [ 67.926382][ T3629] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.946051][ T3629] RSP: 002b:00007ffe17d67f08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.954517][ T3629] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2a8e045119 [ 67.962517][ T3629] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 67.970581][ T3629] RBP: 00007f2a8e009100 R08: 0000000000000000 R09: 0000000000000000 [ 67.978608][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a8e009190 [ 67.986638][ T3629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.994668][ T3629] [ 67.997687][ T3629] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.004960][ T3629] CPU: 1 PID: 3629 Comm: syz-executor366 Not tainted 6.1.20-syzkaller #0 [ 68.013369][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 68.023432][ T3629] Call Trace: [ 68.026718][ T3629] [ 68.029655][ T3629] dump_stack_lvl+0x1e3/0x2cb [ 68.034358][ T3629] ? nf_tcp_handle_invalid+0x642/0x642 [ 68.039828][ T3629] ? panic+0x75d/0x75d [ 68.043915][ T3629] ? vscnprintf+0x59/0x80 [ 68.048262][ T3629] panic+0x318/0x75d [ 68.052172][ T3629] ? __warn+0x168/0x600 [ 68.056341][ T3629] ? memcpy_page_flushcache+0xfc/0xfc [ 68.061745][ T3629] __warn+0x430/0x600 [ 68.065742][ T3629] ? get_vaddr_frames+0x1db/0x220 [ 68.070782][ T3629] report_bug+0x2af/0x500 [ 68.075138][ T3629] ? get_vaddr_frames+0x1db/0x220 [ 68.080180][ T3629] handle_bug+0x3d/0x70 [ 68.084347][ T3629] exc_invalid_op+0x16/0x40 [ 68.088871][ T3629] asm_exc_invalid_op+0x16/0x20 [ 68.093728][ T3629] RIP: 0010:get_vaddr_frames+0x1db/0x220 [ 68.099374][ T3629] Code: 8c 1a ff ff ff 4c 89 e7 e8 e2 a6 cd fa e9 0d ff ff ff e8 e8 41 77 fa c6 05 0a e1 2b 07 01 48 c7 c7 20 df a7 8b e8 55 8a 3f fa <0f> 0b e9 4a ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 1e ff [ 68.119003][ T3629] RSP: 0018:ffffc90003c6f5c8 EFLAGS: 00010246 [ 68.125080][ T3629] RAX: b14ddbeaa8cede00 RBX: 1ffff920016c0000 RCX: ffff888020780000 [ 68.133324][ T3629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.141399][ T3629] RBP: 00000000000ff000 R08: ffffffff8152ac2e R09: ffffed1017324f1c [ 68.149380][ T3629] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000b600004 [ 68.157360][ T3629] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffff2 [ 68.165434][ T3629] ? __warn_printk+0x28e/0x350 [ 68.170223][ T3629] ? get_vaddr_frames+0x1db/0x220 [ 68.175265][ T3629] vb2_create_framevec+0x4a/0xb0 [ 68.180220][ T3629] vb2_vmalloc_get_userptr+0xe7/0x400 [ 68.185604][ T3629] ? __fill_vb2_buffer+0x451/0x4b0 [ 68.190743][ T3629] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 68.196299][ T3629] __buf_prepare+0xc22/0x4460 [ 68.201004][ T3629] ? is_bpf_text_address+0x24f/0x260 [ 68.206313][ T3629] ? vb2_core_prepare_buf+0x300/0x300 [ 68.211705][ T3629] ? __kernel_text_address+0x9/0x40 [ 68.216917][ T3629] ? mark_lock+0x9a/0x340 [ 68.221431][ T3629] ? __lock_acquire+0x125b/0x1f80 [ 68.226553][ T3629] ? vb2_queue_or_prepare_buf+0x5be/0xe20 [ 68.232309][ T3629] vb2_core_prepare_buf+0xe2/0x300 [ 68.237448][ T3629] v4l2_m2m_ioctl_prepare_buf+0x137/0x3a0 [ 68.243186][ T3629] ? v4l_prepare_buf+0x68/0xc0 [ 68.247964][ T3629] __video_do_ioctl+0xa3a/0xe30 [ 68.252833][ T3629] ? video_ioctl2+0x30/0x30 [ 68.257345][ T3629] ? __might_fault+0xb2/0x110 [ 68.262033][ T3629] video_usercopy+0xa79/0x10c0 [ 68.266812][ T3629] ? video_ioctl2+0x30/0x30 [ 68.271321][ T3629] ? v4l_printk_ioctl+0x130/0x130 [ 68.276381][ T3629] ? print_irqtrace_events+0x210/0x210 [ 68.281858][ T3629] ? print_irqtrace_events+0x210/0x210 [ 68.287340][ T3629] v4l2_ioctl+0x181/0x1d0 [ 68.291937][ T3629] ? v4l2_poll+0x2a0/0x2a0 [ 68.296370][ T3629] __se_sys_ioctl+0xf1/0x160 [ 68.300977][ T3629] do_syscall_64+0x3d/0xb0 [ 68.305407][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.311327][ T3629] RIP: 0033:0x7f2a8e045119 [ 68.315761][ T3629] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.335374][ T3629] RSP: 002b:00007ffe17d67f08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.343805][ T3629] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2a8e045119 [ 68.351783][ T3629] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 68.359770][ T3629] RBP: 00007f2a8e009100 R08: 0000000000000000 R09: 0000000000000000 [ 68.367758][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a8e009190 [ 68.375738][ T3629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.383730][ T3629] [ 68.386849][ T3629] Kernel Offset: disabled [ 68.391271][ T3629] Rebooting in 86400 seconds..