DUID 00:04:70:54:fc:d0:2a:32:b7:62:cf:21:72:23:c9:95:e9:3f forked to background, child pid 3168 [ 32.254460][ T3169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.271452][ T3169] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 50.096768][ T3583] ------------[ cut here ]------------ [ 50.102409][ T3583] get_vaddr_frames() cannot follow VM_IO mapping [ 50.102868][ T3583] WARNING: CPU: 1 PID: 3583 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1db/0x220 [ 50.120839][ T3583] Modules linked in: [ 50.124733][ T3583] CPU: 1 PID: 3583 Comm: syz-executor123 Not tainted 5.15.102-syzkaller #0 [ 50.133497][ T3583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 50.143750][ T3583] RIP: 0010:get_vaddr_frames+0x1db/0x220 [ 50.149433][ T3583] Code: 8c 1a ff ff ff 4c 89 e7 e8 c2 d6 ff fa e9 0d ff ff ff e8 18 4d b6 fa c6 05 ff 17 06 07 01 48 c7 c7 c0 3f 40 8b e8 75 e1 81 fa <0f> 0b e9 4a ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 1e ff [ 50.169105][ T3583] RSP: 0018:ffffc90002fcf5a8 EFLAGS: 00010246 [ 50.175178][ T3583] RAX: aa38e150a1477100 RBX: 1ffff9200060e200 RCX: ffff8880212f1d00 [ 50.183199][ T3583] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 50.191230][ T3583] RBP: 00000000000ff000 R08: ffffffff8166a76c R09: ffffed1017364f24 [ 50.199258][ T3583] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003071004 [ 50.207266][ T3583] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffff2 [ 50.215353][ T3583] FS: 000055555672b300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 50.224366][ T3583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.231052][ T3583] CR2: 0000000020000140 CR3: 000000007d053000 CR4: 00000000003506e0 [ 50.239069][ T3583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.247079][ T3583] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.255049][ T3583] Call Trace: [ 50.258362][ T3583] [ 50.261475][ T3583] vb2_create_framevec+0x4a/0xb0 [ 50.266597][ T3583] vb2_vmalloc_get_userptr+0xe7/0x400 [ 50.271990][ T3583] ? __fill_vb2_buffer+0x451/0x4b0 [ 50.277222][ T3583] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 50.282783][ T3583] __buf_prepare+0xc22/0x4490 [ 50.287543][ T3583] ? vb2_core_prepare_buf+0x300/0x300 [ 50.292931][ T3583] ? arch_stack_walk+0xf3/0x140 [ 50.297848][ T3583] ? mark_lock+0x98/0x340 [ 50.302200][ T3583] ? __lock_acquire+0x1295/0x1ff0 [ 50.307325][ T3583] ? read_lock_is_recursive+0x10/0x10 [ 50.312764][ T3583] ? vb2_queue_or_prepare_buf+0x5be/0xe20 [ 50.318563][ T3583] vb2_core_prepare_buf+0xe2/0x300 [ 50.323778][ T3583] v4l2_m2m_ioctl_prepare_buf+0x137/0x3a0 [ 50.329552][ T3583] ? v4l_prepare_buf+0x68/0xc0 [ 50.334343][ T3583] __video_do_ioctl+0xa44/0xe40 [ 50.339261][ T3583] ? video_ioctl2+0x30/0x30 [ 50.343781][ T3583] ? __might_fault+0xb4/0x110 [ 50.348531][ T3583] video_usercopy+0xa87/0x1120 [ 50.353455][ T3583] ? video_ioctl2+0x30/0x30 [ 50.358095][ T3583] ? v4l_printk_ioctl+0x130/0x130 [ 50.363160][ T3583] ? print_irqtrace_events+0x210/0x210 [ 50.368690][ T3583] ? vtime_user_exit+0x2d1/0x400 [ 50.373649][ T3583] v4l2_ioctl+0x181/0x1d0 [ 50.378044][ T3583] ? v4l2_poll+0x2a0/0x2a0 [ 50.382565][ T3583] __se_sys_ioctl+0xf1/0x160 [ 50.387214][ T3583] do_syscall_64+0x3d/0xb0 [ 50.391767][ T3583] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.397724][ T3583] RIP: 0033:0x7f542faa2119 [ 50.402155][ T3583] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.421828][ T3583] RSP: 002b:00007ffd1cb7e888 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.430370][ T3583] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f542faa2119 [ 50.438396][ T3583] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 50.446426][ T3583] RBP: 00007f542fa66100 R08: 0000000000000000 R09: 0000000000000000 [ 50.454419][ T3583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f542fa66190 [ 50.462439][ T3583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.470490][ T3583] [ 50.473528][ T3583] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.480816][ T3583] CPU: 1 PID: 3583 Comm: syz-executor123 Not tainted 5.15.102-syzkaller #0 [ 50.489425][ T3583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 50.499483][ T3583] Call Trace: [ 50.502762][ T3583] [ 50.505701][ T3583] dump_stack_lvl+0x1e3/0x2cb [ 50.510393][ T3583] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 50.516023][ T3583] ? panic+0x84d/0x84d [ 50.520089][ T3583] ? get_vaddr_frames+0x160/0x220 [ 50.525106][ T3583] ? get_vaddr_frames+0x160/0x220 [ 50.530122][ T3583] panic+0x318/0x84d [ 50.534012][ T3583] ? __warn+0x16a/0x300 [ 50.538159][ T3583] ? fb_is_primary_device+0xcc/0xcc [ 50.543360][ T3583] ? get_vaddr_frames+0x1db/0x220 [ 50.548378][ T3583] __warn+0x2b2/0x300 [ 50.552354][ T3583] ? get_vaddr_frames+0x1db/0x220 [ 50.557376][ T3583] report_bug+0x1b7/0x2e0 [ 50.561723][ T3583] handle_bug+0x3d/0x70 [ 50.565877][ T3583] exc_invalid_op+0x16/0x40 [ 50.570374][ T3583] asm_exc_invalid_op+0x16/0x20 [ 50.575237][ T3583] RIP: 0010:get_vaddr_frames+0x1db/0x220 [ 50.580873][ T3583] Code: 8c 1a ff ff ff 4c 89 e7 e8 c2 d6 ff fa e9 0d ff ff ff e8 18 4d b6 fa c6 05 ff 17 06 07 01 48 c7 c7 c0 3f 40 8b e8 75 e1 81 fa <0f> 0b e9 4a ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 1e ff [ 50.600600][ T3583] RSP: 0018:ffffc90002fcf5a8 EFLAGS: 00010246 [ 50.606671][ T3583] RAX: aa38e150a1477100 RBX: 1ffff9200060e200 RCX: ffff8880212f1d00 [ 50.614635][ T3583] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 50.622595][ T3583] RBP: 00000000000ff000 R08: ffffffff8166a76c R09: ffffed1017364f24 [ 50.630562][ T3583] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003071004 [ 50.638542][ T3583] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffff2 [ 50.646516][ T3583] ? __wake_up_klogd+0xcc/0x100 [ 50.651370][ T3583] ? get_vaddr_frames+0x1db/0x220 [ 50.656390][ T3583] vb2_create_framevec+0x4a/0xb0 [ 50.661327][ T3583] vb2_vmalloc_get_userptr+0xe7/0x400 [ 50.666713][ T3583] ? __fill_vb2_buffer+0x451/0x4b0 [ 50.671831][ T3583] ? vb2_vmalloc_get_dmabuf+0x250/0x250 [ 50.677388][ T3583] __buf_prepare+0xc22/0x4490 [ 50.682072][ T3583] ? vb2_core_prepare_buf+0x300/0x300 [ 50.687465][ T3583] ? arch_stack_walk+0xf3/0x140 [ 50.692312][ T3583] ? mark_lock+0x98/0x340 [ 50.696638][ T3583] ? __lock_acquire+0x1295/0x1ff0 [ 50.701779][ T3583] ? read_lock_is_recursive+0x10/0x10 [ 50.707194][ T3583] ? vb2_queue_or_prepare_buf+0x5be/0xe20 [ 50.712914][ T3583] vb2_core_prepare_buf+0xe2/0x300 [ 50.718021][ T3583] v4l2_m2m_ioctl_prepare_buf+0x137/0x3a0 [ 50.723736][ T3583] ? v4l_prepare_buf+0x68/0xc0 [ 50.728495][ T3583] __video_do_ioctl+0xa44/0xe40 [ 50.733368][ T3583] ? video_ioctl2+0x30/0x30 [ 50.737871][ T3583] ? __might_fault+0xb4/0x110 [ 50.742545][ T3583] video_usercopy+0xa87/0x1120 [ 50.747312][ T3583] ? video_ioctl2+0x30/0x30 [ 50.751807][ T3583] ? v4l_printk_ioctl+0x130/0x130 [ 50.756837][ T3583] ? print_irqtrace_events+0x210/0x210 [ 50.762294][ T3583] ? vtime_user_exit+0x2d1/0x400 [ 50.767234][ T3583] v4l2_ioctl+0x181/0x1d0 [ 50.771562][ T3583] ? v4l2_poll+0x2a0/0x2a0 [ 50.775983][ T3583] __se_sys_ioctl+0xf1/0x160 [ 50.780565][ T3583] do_syscall_64+0x3d/0xb0 [ 50.784977][ T3583] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.790862][ T3583] RIP: 0033:0x7f542faa2119 [ 50.795279][ T3583] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.814884][ T3583] RSP: 002b:00007ffd1cb7e888 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.823291][ T3583] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f542faa2119 [ 50.831257][ T3583] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 50.839218][ T3583] RBP: 00007f542fa66100 R08: 0000000000000000 R09: 0000000000000000 [ 50.847293][ T3583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f542fa66190 [ 50.855294][ T3583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.863279][ T3583] [ 50.866627][ T3583] Kernel Offset: disabled [ 50.871025][ T3583] Rebooting in 86400 seconds..